last executing test programs: 52.014626561s ago: executing program 0 (id=265): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x401}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x5c, 0x0, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 51.800785345s ago: executing program 0 (id=266): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 51.765976205s ago: executing program 0 (id=267): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000ca920000000000000018010000202064"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6.417543014s ago: executing program 0 (id=279): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000400), 0x1, 0x5a2, &(0x7f0000000cc0)="$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") r0 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x60, 0x1403, 0x1, 0x70bd27, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macsec0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20002845) 6.412957224s ago: executing program 0 (id=284): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) poll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0xff16) socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000200), &(0x7f00000003c0)=r4}, 0x20) 3.819504463s ago: executing program 0 (id=296): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) poll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0xff16) socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r9, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 3.372914099s ago: executing program 3 (id=298): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) poll(0x0, 0x0, 0xff16) socket$packet(0x11, 0x3, 0x300) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000800000000000004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="a6", 0x1, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 2.820408188s ago: executing program 1 (id=305): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="427e7a2c9ca11b22f13c95b68ee4fbd3907e41281c3025c1b095183a36437895b10e33124bcb7874", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES32=0x0, @ANYRES64, @ANYRESOCT], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000000000f9ffffff000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000ffffffff00"/28], 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x9, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0xfbe0a00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000067194e63b50000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48) 2.760644789s ago: executing program 1 (id=306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 2.744998539s ago: executing program 1 (id=307): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) poll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0xff16) socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000000000f9ffffff000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000ffffffff00"/28], 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x9, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0xfbe0a00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000067194e63b50000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48) 1.677636405s ago: executing program 2 (id=318): unshare(0x2040400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101682, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1.629034546s ago: executing program 1 (id=319): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 1.585069527s ago: executing program 2 (id=321): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x104) 1.584206656s ago: executing program 1 (id=322): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) poll(0x0, 0x0, 0xff16) socket$packet(0x11, 0x3, 0x300) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000180)="e502", 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000800000000000004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) add_key(&(0x7f00000001c0)='id_resolver\x00', &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="a6", 0x1, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.524693867s ago: executing program 2 (id=323): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffdb, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x416, 0xc168, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xd60}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd8, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x1, 0x80}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x2, 0x4, 0x74, 0x20, 0x8}, 0x95, &(0x7f00000001c0)={0x5, 0xf, 0x95, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "01978d9087ac3e55ace3ed45ac88be75"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf8, 0xc, 0x9}, @generic={0x6b, 0x10, 0x0, "60327e05056bfb3fe4e79860b91c06f2596fec7d4930948021af8edbb8ed9300acf9f9cb271b5f6a6a4b9c4478b7b8e2f470ce7ed835fec6b4e0168a3ab1f7c4df693c0dfe919588ee60d9e9fdad20dbf4b8b790b240d786f28d3ab0b41d1bc117809fce89d5027f"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x5, 0xfff9}]}, 0x5, [{0xde, &(0x7f0000000280)=@string={0xde, 0x3, "b08ca7522110d48cca7d45e63b5c0068925df5132bcf370ba112af3db18282b2c2bffb674f9e1c37aa592864348b74c68969727a0730b2692c2cba20d7c5a4df28891e2df82425b3e288290d815e3d832aec0dd78aea1980fa8841474ad4dc6a8dd96c7087bb26c61c096e100ba762a0c9fc3597658d24c97b8a961455553b93a665a7687698334c491424816d21a949486b03afbb5e5b2d209a7c1d64abb5cd770a02a39d974b9c3c0f345a457fd396da4632fed26d90bc13eefe59c528a30d7e6728b92a3d44fa4796aba5493f6e9d80111f6798d35d47f6ac0f3f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3001}}, {0xc8, &(0x7f00000003c0)=@string={0xc8, 0x3, "9908d1050c1f2a30ea3628e2c21d1a847732ea4d61a8b8b43edd7ffe9569ed035251d1dab59dbbcd142e7e77ce72b441604ef6349d081d8dc30e6575aded5d05faaa6b8915c5424eee6f4f3a688d2ee819a2fd75754819e0de99c28dc1a41ebde11cea8a5dbaeb60b9fa2082cef567b72850abe05e6fd7908c45e133f939d1d760d9bf43d44696f3f1dc1cf3e06b7967dc3c37c2986a9aef76529fe0e708b7e58f5588988061786643425effb741f8497a38e1e898f2d0929532f962bfdf9521b8b9bb7383c2"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x820}}]}) 1.069178864s ago: executing program 3 (id=326): socket$key(0xf, 0x3, 0x2) r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) poll(&(0x7f0000000000)=[{r0, 0x4000}], 0x1, 0xff16) socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) syz_clone(0x44208400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x94b6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000001000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 445.221034ms ago: executing program 4 (id=331): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="427e7a2c9ca11b22f13c95b68ee4fbd3907e41281c3025c1b095183a36437895b10e33124bcb7874", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES32=0x0, @ANYRES64, @ANYRESOCT], 0x0, 0x80000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="2000000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="00000000000000000000f9ffffff000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="01000000ffffffff00"/28], 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x9, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0xfbe0a00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b0000000500000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="0000000000000067194e63b50000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a'], 0x48) 400.222674ms ago: executing program 4 (id=332): unshare(0x2040400) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101682, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 312.764176ms ago: executing program 4 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) dup3(r1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x401}, 0x18) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x5c, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 158.314248ms ago: executing program 4 (id=334): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 130.285068ms ago: executing program 4 (id=335): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB="0067f2bc46"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sigaltstack(&(0x7f0000000d00)={&(0x7f0000000c00)=""/197, 0x6, 0xc5}, &(0x7f0000000d80)={&(0x7f0000000d40)=""/10, 0x0, 0xa}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r1}, &(0x7f0000000940), &(0x7f0000000ac0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r0}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000f20000000000000005000000b7080000000000057b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000680)='GPL\x00', 0x5, 0x1a, &(0x7f00000003c0)=""/26, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000300)={{0x1, 0x1, 0x18, r3, {0xee01, 0x0}}, './bus\x00'}) setregid(r6, r7) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@lazytime}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r8, &(0x7f0000000000)={0xffffffffffffff2a, 0x4d, 0x1}, 0xffffffd7) r9 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x61) sendfile(r9, r9, 0x0, 0x800000009) 119.334188ms ago: executing program 2 (id=336): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) dup3(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x401}, 0x18) sendfile(r1, r0, 0x0, 0x7ffff000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x5c, 0x0, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 0s ago: executing program 4 (id=337): arch_prctl$ARCH_ENABLE_TAGGED_ADDR(0x4002, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x1}, 0x8) syz_open_procfs(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffdb, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x416, 0xc168, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xd60}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xd8, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x1, 0x80}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x310, 0x2, 0x4, 0x74, 0x20, 0x8}, 0x95, &(0x7f00000001c0)={0x5, 0xf, 0x95, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "01978d9087ac3e55ace3ed45ac88be75"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0xf8, 0xc, 0x9}, @generic={0x6b, 0x10, 0x0, "60327e05056bfb3fe4e79860b91c06f2596fec7d4930948021af8edbb8ed9300acf9f9cb271b5f6a6a4b9c4478b7b8e2f470ce7ed835fec6b4e0168a3ab1f7c4df693c0dfe919588ee60d9e9fdad20dbf4b8b790b240d786f28d3ab0b41d1bc117809fce89d5027f"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x5, 0xfff9}]}, 0x5, [{0xde, &(0x7f0000000280)=@string={0xde, 0x3, "b08ca7522110d48cca7d45e63b5c0068925df5132bcf370ba112af3db18282b2c2bffb674f9e1c37aa592864348b74c68969727a0730b2692c2cba20d7c5a4df28891e2df82425b3e288290d815e3d832aec0dd78aea1980fa8841474ad4dc6a8dd96c7087bb26c61c096e100ba762a0c9fc3597658d24c97b8a961455553b93a665a7687698334c491424816d21a949486b03afbb5e5b2d209a7c1d64abb5cd770a02a39d974b9c3c0f345a457fd396da4632fed26d90bc13eefe59c528a30d7e6728b92a3d44fa4796aba5493f6e9d80111f6798d35d47f6ac0f3f"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x3001}}, {0xc8, &(0x7f00000003c0)=@string={0xc8, 0x3, "9908d1050c1f2a30ea3628e2c21d1a847732ea4d61a8b8b43edd7ffe9569ed035251d1dab59dbbcd142e7e77ce72b441604ef6349d081d8dc30e6575aded5d05faaa6b8915c5424eee6f4f3a688d2ee819a2fd75754819e0de99c28dc1a41ebde11cea8a5dbaeb60b9fa2082cef567b72850abe05e6fd7908c45e133f939d1d760d9bf43d44696f3f1dc1cf3e06b7967dc3c37c2986a9aef76529fe0e708b7e58f5588988061786643425effb741f8497a38e1e898f2d0929532f962bfdf9521b8b9bb7383c2"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x820}}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 25.273773][ T29] audit: type=1400 audit(1752362812.688:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.274634][ T3295] cgroup: Unknown subsys name 'net' [ 25.296569][ T29] audit: type=1400 audit(1752362812.688:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.323910][ T29] audit: type=1400 audit(1752362812.728:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.480089][ T3295] cgroup: Unknown subsys name 'cpuset' [ 25.486116][ T3295] cgroup: Unknown subsys name 'rlimit' [ 25.624900][ T29] audit: type=1400 audit(1752362813.038:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.648278][ T29] audit: type=1400 audit(1752362813.038:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.668746][ T29] audit: type=1400 audit(1752362813.038:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.675177][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.689090][ T29] audit: type=1400 audit(1752362813.038:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.689110][ T29] audit: type=1400 audit(1752362813.048:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.706523][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.718001][ T29] audit: type=1400 audit(1752362813.048:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.774947][ T29] audit: type=1400 audit(1752362813.118:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.581837][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.645430][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.654257][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.672615][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 27.726001][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.733164][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.740388][ T3305] bridge_slave_0: entered allmulticast mode [ 27.746627][ T3305] bridge_slave_0: entered promiscuous mode [ 27.761184][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.768244][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.775438][ T3305] bridge_slave_1: entered allmulticast mode [ 27.781785][ T3305] bridge_slave_1: entered promiscuous mode [ 27.813182][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.826686][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.833801][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.840961][ T3309] bridge_slave_0: entered allmulticast mode [ 27.847261][ T3309] bridge_slave_0: entered promiscuous mode [ 27.869981][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.877108][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.884273][ T3314] bridge_slave_0: entered allmulticast mode [ 27.890607][ T3314] bridge_slave_0: entered promiscuous mode [ 27.896895][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.903989][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.911067][ T3309] bridge_slave_1: entered allmulticast mode [ 27.917359][ T3309] bridge_slave_1: entered promiscuous mode [ 27.924605][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.940385][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.947539][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.954684][ T3306] bridge_slave_0: entered allmulticast mode [ 27.961264][ T3306] bridge_slave_0: entered promiscuous mode [ 27.967639][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.974787][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.982045][ T3314] bridge_slave_1: entered allmulticast mode [ 27.988312][ T3314] bridge_slave_1: entered promiscuous mode [ 27.995184][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.012811][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.019891][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.026986][ T3306] bridge_slave_1: entered allmulticast mode [ 28.033436][ T3306] bridge_slave_1: entered promiscuous mode [ 28.053531][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.080294][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.092846][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.102781][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.112355][ T3305] team0: Port device team_slave_0 added [ 28.127475][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.137543][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.151967][ T3305] team0: Port device team_slave_1 added [ 28.185237][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.192291][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.218224][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.229529][ T3309] team0: Port device team_slave_0 added [ 28.235454][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.242640][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.249958][ T3311] bridge_slave_0: entered allmulticast mode [ 28.256225][ T3311] bridge_slave_0: entered promiscuous mode [ 28.267963][ T3306] team0: Port device team_slave_0 added [ 28.274799][ T3306] team0: Port device team_slave_1 added [ 28.280828][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.287789][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.313780][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.325139][ T3309] team0: Port device team_slave_1 added [ 28.330987][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.338029][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.345253][ T3311] bridge_slave_1: entered allmulticast mode [ 28.351511][ T3311] bridge_slave_1: entered promiscuous mode [ 28.358425][ T3314] team0: Port device team_slave_0 added [ 28.365091][ T3314] team0: Port device team_slave_1 added [ 28.403990][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.411014][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.437031][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.448550][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.455557][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.482046][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.493034][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.500075][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.525988][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.543204][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.552549][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.559461][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.585475][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.596412][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.603379][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.629587][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.641871][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.648789][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.674708][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.690375][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.722372][ T3305] hsr_slave_0: entered promiscuous mode [ 28.728235][ T3305] hsr_slave_1: entered promiscuous mode [ 28.762592][ T3309] hsr_slave_0: entered promiscuous mode [ 28.768625][ T3309] hsr_slave_1: entered promiscuous mode [ 28.774631][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.782357][ T3309] Cannot create hsr debugfs directory [ 28.788618][ T3311] team0: Port device team_slave_0 added [ 28.808956][ T3311] team0: Port device team_slave_1 added [ 28.816324][ T3314] hsr_slave_0: entered promiscuous mode [ 28.822320][ T3314] hsr_slave_1: entered promiscuous mode [ 28.828029][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.835625][ T3314] Cannot create hsr debugfs directory [ 28.861868][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.868853][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.894906][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.908040][ T3306] hsr_slave_0: entered promiscuous mode [ 28.913989][ T3306] hsr_slave_1: entered promiscuous mode [ 28.920098][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.927644][ T3306] Cannot create hsr debugfs directory [ 28.940227][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.947231][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.973182][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.062417][ T3311] hsr_slave_0: entered promiscuous mode [ 29.068499][ T3311] hsr_slave_1: entered promiscuous mode [ 29.074412][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.081990][ T3311] Cannot create hsr debugfs directory [ 29.177357][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.188285][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.199299][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.220046][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.244809][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.253113][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.261894][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.270731][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.295152][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.304136][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.312717][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.321303][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.365336][ T3306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.377861][ T3306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.386566][ T3306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.403876][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.411887][ T3306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.435563][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.455185][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.471533][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.483264][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.492953][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.500078][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.508469][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.515529][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.532079][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.540386][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.556991][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.564115][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.571817][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.601363][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.608478][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.628244][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.656620][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.666966][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.679443][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.689832][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.711977][ T1858] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.719090][ T1858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.733063][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.742966][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.750044][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.761652][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.781795][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.792735][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.806731][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.813817][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.828078][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.835161][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.845978][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.853034][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.869113][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.880049][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.887098][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.928067][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.938535][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.962450][ T3306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.972923][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.019476][ T3305] veth0_vlan: entered promiscuous mode [ 30.060377][ T3305] veth1_vlan: entered promiscuous mode [ 30.067768][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.077625][ T3309] veth0_vlan: entered promiscuous mode [ 30.092658][ T3309] veth1_vlan: entered promiscuous mode [ 30.103098][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.118514][ T3309] veth0_macvtap: entered promiscuous mode [ 30.126510][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.149992][ T3309] veth1_macvtap: entered promiscuous mode [ 30.163148][ T3305] veth0_macvtap: entered promiscuous mode [ 30.186138][ T3305] veth1_macvtap: entered promiscuous mode [ 30.210963][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.221097][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.251229][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.260278][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.270742][ T3314] veth0_vlan: entered promiscuous mode [ 30.277988][ T3314] veth1_vlan: entered promiscuous mode [ 30.290997][ T3309] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.299826][ T3309] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.308531][ T3309] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.317370][ T3309] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.328506][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.337260][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.345985][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.354744][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.387438][ T3306] veth0_vlan: entered promiscuous mode [ 30.399155][ T3311] veth0_vlan: entered promiscuous mode [ 30.413418][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.413427][ T29] audit: type=1400 audit(1752362817.828:81): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.hrREdy/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.421833][ T3311] veth1_vlan: entered promiscuous mode [ 30.443581][ T29] audit: type=1400 audit(1752362817.828:82): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.456091][ T3314] veth0_macvtap: entered promiscuous mode [ 30.470856][ T29] audit: type=1400 audit(1752362817.828:83): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.hrREdy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.480174][ T3306] veth1_vlan: entered promiscuous mode [ 30.501784][ T29] audit: type=1400 audit(1752362817.828:84): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.521735][ T3314] veth1_macvtap: entered promiscuous mode [ 30.534823][ T29] audit: type=1400 audit(1752362817.868:85): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.hrREdy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.545267][ T3311] veth0_macvtap: entered promiscuous mode [ 30.561485][ T29] audit: type=1400 audit(1752362817.868:86): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.hrREdy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.575496][ T3311] veth1_macvtap: entered promiscuous mode [ 30.594338][ T29] audit: type=1400 audit(1752362817.868:87): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.620258][ T29] audit: type=1400 audit(1752362817.958:88): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.643034][ T29] audit: type=1400 audit(1752362817.958:89): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="gadgetfs" ino=3830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.666588][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.690328][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.692463][ T29] audit: type=1400 audit(1752362818.108:90): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.705619][ T3306] veth0_macvtap: entered promiscuous mode [ 30.743672][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.755515][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.763951][ T3306] veth1_macvtap: entered promiscuous mode [ 30.777099][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.795849][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.804678][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.813397][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.822109][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.832734][ T3478] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 30.843384][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.852201][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.860955][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.869643][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.886574][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.909413][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.940849][ T3306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.949603][ T3306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.958497][ T3306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.967269][ T3306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.013799][ T3487] loop3: detected capacity change from 0 to 512 [ 31.031800][ T3480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.044001][ T3480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.056700][ T3492] loop4: detected capacity change from 0 to 512 [ 31.094499][ T3480] loop0: detected capacity change from 0 to 8192 [ 31.125315][ T3489] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.141315][ T3487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.154474][ T3487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 31.159771][ T3492] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.185754][ T3492] EXT4-fs (loop4): 1 truncate cleaned up [ 31.192667][ T3487] EXT4-fs (loop3): 1 truncate cleaned up [ 31.198977][ T3487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.352963][ T3489] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.391198][ T3492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.652045][ T3501] syz.3.4 (3501) used greatest stack depth: 10696 bytes left [ 31.702560][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.718353][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.746382][ T3507] loop4: detected capacity change from 0 to 1024 [ 31.759314][ T3507] EXT4-fs: Ignoring removed orlov option [ 31.772676][ T3507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.148640][ T3522] loop0: detected capacity change from 0 to 2048 [ 32.198734][ T3522] EXT4-fs: quotafile must be on filesystem root [ 32.318492][ T3522] wg2: entered promiscuous mode [ 32.323405][ T3522] wg2: entered allmulticast mode [ 32.358767][ T3522] random: crng reseeded on system resumption [ 32.431737][ T3530] loop0: detected capacity change from 0 to 1024 [ 32.448638][ T3530] EXT4-fs: Ignoring removed orlov option [ 32.467150][ T3531] loop2: detected capacity change from 0 to 128 [ 32.476192][ T3530] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.506121][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.670109][ T3541] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 32.900709][ T3546] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.101606][ T3549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.200291][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.222785][ T3551] loop0: detected capacity change from 0 to 1024 [ 33.229678][ T3551] EXT4-fs: Ignoring removed orlov option [ 33.238211][ T3551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.463854][ T3555] loop4: detected capacity change from 0 to 512 [ 33.470834][ T3555] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.481474][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.493528][ T3555] EXT4-fs (loop4): 1 truncate cleaned up [ 33.500564][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.542125][ T3489] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.559254][ T3560] loop0: detected capacity change from 0 to 1024 [ 33.566893][ T3560] EXT4-fs: Ignoring removed orlov option [ 33.586269][ T3560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.622495][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.655808][ T3563] loop4: detected capacity change from 0 to 512 [ 33.664329][ T3563] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.675753][ T3563] EXT4-fs (loop4): 1 truncate cleaned up [ 33.682318][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.794833][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.795038][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.836342][ T3567] netlink: 277 bytes leftover after parsing attributes in process `syz.4.29'. [ 33.836963][ T3571] loop0: detected capacity change from 0 to 1024 [ 33.846168][ T3567] netlink: 92 bytes leftover after parsing attributes in process `syz.4.29'. [ 33.860429][ T3567] netem: unknown loss type 0 [ 33.864045][ T3571] EXT4-fs: Ignoring removed orlov option [ 33.865014][ T3567] netem: change failed [ 33.894412][ T3571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.907128][ T3574] loop4: detected capacity change from 0 to 1024 [ 33.917354][ T3574] EXT4-fs: Ignoring removed orlov option [ 33.931612][ T3574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.106245][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.131027][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.148936][ T3582] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 34.195335][ T3546] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.271785][ T3546] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.564403][ T3546] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.631255][ T3546] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.644510][ T3546] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.655822][ T3546] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.667116][ T3546] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.891712][ T3489] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.944316][ T3489] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.957088][ T3489] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.974368][ T3489] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.158382][ T3632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 35.319267][ T3489] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.333416][ T3549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.372330][ T3641] netlink: 277 bytes leftover after parsing attributes in process `syz.1.40'. [ 35.384534][ T3641] netlink: 92 bytes leftover after parsing attributes in process `syz.1.40'. [ 35.393375][ T3641] netem: unknown loss type 0 [ 35.398185][ T3641] netem: change failed [ 35.420307][ T3648] loop1: detected capacity change from 0 to 1024 [ 35.427102][ T3648] EXT4-fs: Ignoring removed orlov option [ 35.435530][ T3648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.450560][ T3549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.503804][ T3549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.565736][ T3549] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.577009][ T3549] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.588563][ T3549] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.601904][ T3549] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.604035][ T3646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.669885][ T3646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.717230][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.743872][ T3646] loop0: detected capacity change from 0 to 8192 [ 35.753696][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 35.753711][ T29] audit: type=1326 audit(1752362823.168:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.783118][ T29] audit: type=1326 audit(1752362823.168:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.817733][ T29] audit: type=1326 audit(1752362823.228:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.841134][ T29] audit: type=1326 audit(1752362823.228:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.864381][ T29] audit: type=1326 audit(1752362823.228:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.887515][ T29] audit: type=1326 audit(1752362823.228:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.910793][ T29] audit: type=1326 audit(1752362823.228:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.933957][ T29] audit: type=1326 audit(1752362823.228:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.957180][ T29] audit: type=1326 audit(1752362823.228:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 35.980322][ T29] audit: type=1326 audit(1752362823.228:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3645 comm="syz.0.41" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 36.029665][ T3658] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.110817][ T3658] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.161201][ T3658] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.210942][ T3658] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.273143][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.281847][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.313786][ T3665] loop4: detected capacity change from 0 to 8192 [ 36.532509][ T3667] openvswitch: netlink: Message has 6 unknown bytes. [ 36.576033][ T3669] loop0: detected capacity change from 0 to 1024 [ 36.582800][ T3669] EXT4-fs: Ignoring removed orlov option [ 36.591030][ T3669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.777197][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.856772][ T3682] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.884804][ T3684] loop0: detected capacity change from 0 to 1024 [ 36.893340][ T3684] EXT4-fs: Ignoring removed orlov option [ 36.910206][ T3688] loop1: detected capacity change from 0 to 1024 [ 36.915547][ T3684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.916851][ T3688] EXT4-fs: Ignoring removed orlov option [ 36.935746][ T3682] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.948717][ T3688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.980852][ T3682] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.999650][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.028208][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.028335][ T3690] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.061165][ T3682] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.120097][ T3690] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.261576][ T3690] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.292750][ T3724] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 37.484040][ T3690] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.635758][ T3690] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.704268][ T3737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.65'. [ 37.714055][ T3690] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.738862][ T3690] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.757253][ T3690] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.792530][ T3741] loop4: detected capacity change from 0 to 1024 [ 37.799947][ T3741] EXT4-fs: Ignoring removed orlov option [ 37.808102][ T3741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.861735][ T3745] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.917278][ T3745] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.959569][ T3745] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.020705][ T3745] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.039663][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.116953][ T3750] loop1: detected capacity change from 0 to 1024 [ 38.123924][ T3750] EXT4-fs: Ignoring removed orlov option [ 38.142477][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.175764][ T3745] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.186978][ T3745] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.199014][ T3745] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.210662][ T3745] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.377181][ T3754] netlink: 12 bytes leftover after parsing attributes in process `syz.4.69'. [ 38.702171][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.735201][ T3762] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 38.803939][ T3768] loop1: detected capacity change from 0 to 2048 [ 38.810923][ T3768] EXT4-fs: quotafile must be on filesystem root [ 38.825292][ T3768] wg2: entered promiscuous mode [ 38.830319][ T3768] wg2: entered allmulticast mode [ 38.837446][ T3768] random: crng reseeded on system resumption [ 38.918822][ T3777] loop1: detected capacity change from 0 to 1024 [ 38.925633][ T3777] EXT4-fs: Ignoring removed orlov option [ 38.934574][ T3777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.134031][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.148559][ T3793] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.201542][ T3793] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.236478][ T3815] loop1: detected capacity change from 0 to 128 [ 39.251471][ T3793] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.291322][ T3793] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.318812][ T3817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 39.541227][ T3819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.550016][ T3819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.579940][ T3821] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 39.590931][ T3819] loop1: detected capacity change from 0 to 8192 [ 39.637738][ T2996] udevd[2996]: worker [3298] terminated by signal 33 (Unknown signal 33) [ 39.646605][ T2996] udevd[2996]: worker [3298] failed while handling '/devices/virtual/block/loop0' [ 39.658703][ T3825] loop0: detected capacity change from 0 to 2048 [ 39.665570][ T3825] EXT4-fs: quotafile must be on filesystem root [ 39.679495][ T3825] wg2: left promiscuous mode [ 39.684262][ T3825] wg2: left allmulticast mode [ 39.692792][ T3825] wg2: entered promiscuous mode [ 39.697707][ T3825] wg2: entered allmulticast mode [ 39.705116][ T3825] random: crng reseeded on system resumption [ 39.710324][ T3658] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.722454][ T3658] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.737007][ T3658] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.756419][ T3658] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.861558][ T3844] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.874851][ T3848] loop0: detected capacity change from 0 to 1024 [ 39.886370][ T3848] EXT4-fs: Ignoring removed orlov option [ 39.894039][ T3848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.921416][ T3844] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.002315][ T3844] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.052156][ T3844] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.079950][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.172826][ T3874] loop0: detected capacity change from 0 to 128 [ 40.324666][ T3682] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.335728][ T3682] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.346174][ T3682] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.356767][ T3682] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.596146][ T3885] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.672143][ T3885] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.751831][ T3885] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.811150][ T3885] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.037565][ T3887] loop1: detected capacity change from 0 to 2048 [ 41.044414][ T3887] EXT4-fs: quotafile must be on filesystem root [ 41.052889][ T3887] wg2: left promiscuous mode [ 41.057599][ T3887] wg2: left allmulticast mode [ 41.071998][ T3887] wg2: entered promiscuous mode [ 41.077002][ T3887] wg2: entered allmulticast mode [ 41.083861][ T3887] random: crng reseeded on system resumption [ 41.121355][ T3889] Zero length message leads to an empty skb [ 41.161455][ T3895] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.200940][ T3895] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.250683][ T3895] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.311042][ T3895] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.904737][ T3793] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.915719][ T3793] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.927357][ T3793] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.938002][ T3793] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.967868][ T3898] netlink: 277 bytes leftover after parsing attributes in process `syz.4.103'. [ 41.977636][ T3898] netlink: 92 bytes leftover after parsing attributes in process `syz.4.103'. [ 41.986706][ T3898] netem: unknown loss type 0 [ 41.991404][ T3898] netem: change failed [ 42.026702][ T3905] netlink: 277 bytes leftover after parsing attributes in process `syz.4.105'. [ 42.036276][ T3905] netlink: 92 bytes leftover after parsing attributes in process `syz.4.105'. [ 42.045272][ T3905] netem: unknown loss type 0 [ 42.049906][ T3905] netem: change failed [ 42.334003][ T3895] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.344684][ T3895] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.355405][ T3895] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.366266][ T3895] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.406688][ T3949] loop0: detected capacity change from 0 to 2048 [ 42.413514][ T3949] EXT4-fs: quotafile must be on filesystem root [ 42.421277][ T3949] wg2: left promiscuous mode [ 42.425956][ T3949] wg2: left allmulticast mode [ 42.437994][ T3949] wg2: entered promiscuous mode [ 42.442917][ T3949] wg2: entered allmulticast mode [ 42.449273][ T3949] random: crng reseeded on system resumption [ 42.675895][ T3951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.684586][ T3951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.715209][ T3951] loop0: detected capacity change from 0 to 8192 [ 42.728760][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 42.728773][ T29] audit: type=1326 audit(1752362830.138:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.763408][ T29] audit: type=1326 audit(1752362830.138:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.786694][ T29] audit: type=1326 audit(1752362830.138:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.810138][ T29] audit: type=1326 audit(1752362830.138:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.833347][ T29] audit: type=1326 audit(1752362830.138:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.856568][ T29] audit: type=1326 audit(1752362830.138:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.879811][ T29] audit: type=1326 audit(1752362830.138:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.903409][ T29] audit: type=1326 audit(1752362830.138:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.926774][ T29] audit: type=1326 audit(1752362830.138:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 42.950061][ T29] audit: type=1326 audit(1752362830.138:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.0.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca1c4ce929 code=0x7ffc0000 [ 43.032450][ T3954] loop4: detected capacity change from 0 to 512 [ 43.049415][ T3954] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.062077][ T3954] EXT4-fs (loop4): 1 truncate cleaned up [ 43.068173][ T3954] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.153114][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.182029][ T3977] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.231653][ T3977] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.281705][ T3977] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.310907][ T3995] netlink: 277 bytes leftover after parsing attributes in process `syz.0.117'. [ 43.320428][ T3995] netlink: 92 bytes leftover after parsing attributes in process `syz.0.117'. [ 43.329280][ T3995] netem: unknown loss type 0 [ 43.334003][ T3995] netem: change failed [ 43.339144][ T3977] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.372841][ T4002] loop0: detected capacity change from 0 to 512 [ 43.379826][ T4002] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.390422][ T4002] EXT4-fs (loop0): 1 truncate cleaned up [ 43.396306][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.416821][ T3977] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.428298][ T3977] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.440622][ T3977] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.452110][ T3977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.499475][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.645036][ T3844] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.655627][ T3844] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.667692][ T3844] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.681066][ T3844] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.852589][ T4010] loop3: detected capacity change from 0 to 1024 [ 43.860927][ T4010] EXT4-fs: Ignoring removed orlov option [ 43.897846][ T4010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.042829][ T4013] loop1: detected capacity change from 0 to 1024 [ 44.067916][ T4013] EXT4-fs: Ignoring removed orlov option [ 44.084162][ T4013] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.118381][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.167239][ T4022] loop1: detected capacity change from 0 to 1024 [ 44.174305][ T4022] EXT4-fs: Ignoring removed orlov option [ 44.186530][ T4020] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.200303][ T4022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.229335][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.240450][ T4020] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.291656][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.302187][ T4020] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.328934][ T4027] loop3: detected capacity change from 0 to 2048 [ 44.335720][ T4027] EXT4-fs: quotafile must be on filesystem root [ 44.370815][ T4027] wg2: entered promiscuous mode [ 44.375715][ T4027] wg2: entered allmulticast mode [ 44.382900][ T4027] random: crng reseeded on system resumption [ 44.406404][ T4020] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.435122][ T4031] loop0: detected capacity change from 0 to 512 [ 44.442318][ T4031] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.453761][ T4031] EXT4-fs (loop0): 1 truncate cleaned up [ 44.459979][ T4031] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.544532][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.566636][ T4039] loop0: detected capacity change from 0 to 1024 [ 44.573583][ T4039] EXT4-fs: Ignoring removed orlov option [ 44.593947][ T4039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.631357][ T4041] loop3: detected capacity change from 0 to 128 [ 44.788465][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.827811][ T4050] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.891076][ T4050] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.914976][ T3885] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.926474][ T3885] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.936713][ T4055] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.949619][ T3885] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.958823][ T4050] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.971773][ T3885] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.981456][ T4055] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.001407][ T4057] loop2: detected capacity change from 0 to 2048 [ 45.008009][ T4057] EXT4-fs: quotafile must be on filesystem root [ 45.021585][ T4057] wg2: entered promiscuous mode [ 45.026465][ T4057] wg2: entered allmulticast mode [ 45.033499][ T4057] random: crng reseeded on system resumption [ 45.034287][ T4050] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.125641][ T4055] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.205530][ T4064] loop1: detected capacity change from 0 to 2048 [ 45.213269][ T4064] EXT4-fs: quotafile must be on filesystem root [ 45.259223][ T4055] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.279329][ T4064] wg2: left promiscuous mode [ 45.284042][ T4064] wg2: left allmulticast mode [ 45.392183][ T4068] random: crng reseeded on system resumption [ 45.412569][ T4066] wg2: entered promiscuous mode [ 45.417534][ T4066] wg2: entered allmulticast mode [ 46.172033][ T4076] loop2: detected capacity change from 0 to 512 [ 46.180307][ T4076] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.201464][ T4076] EXT4-fs (loop2): 1 truncate cleaned up [ 46.207796][ T4076] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.276439][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.325935][ T4083] netlink: 277 bytes leftover after parsing attributes in process `syz.2.146'. [ 46.335748][ T4083] netlink: 92 bytes leftover after parsing attributes in process `syz.2.146'. [ 46.344673][ T4083] netem: unknown loss type 0 [ 46.349270][ T4083] netem: change failed [ 46.387719][ T4088] loop2: detected capacity change from 0 to 1024 [ 46.394493][ T4088] EXT4-fs: Ignoring removed orlov option [ 46.403078][ T4088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.478682][ T4092] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.521134][ T4092] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.561856][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.581202][ T4092] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.587605][ T4096] loop2: detected capacity change from 0 to 2048 [ 46.598921][ T4096] EXT4-fs: quotafile must be on filesystem root [ 46.607627][ T4096] wg2: left promiscuous mode [ 46.612292][ T4096] wg2: left allmulticast mode [ 46.619135][ T4096] wg2: entered promiscuous mode [ 46.624080][ T4096] wg2: entered allmulticast mode [ 46.631032][ T4096] random: crng reseeded on system resumption [ 46.631736][ T4092] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.904579][ T4055] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.915220][ T4055] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.926194][ T4055] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.937359][ T4055] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.959220][ T4130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.152'. [ 47.035639][ T4133] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.081569][ T4133] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.121424][ T4133] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.170974][ T4133] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.205593][ T4020] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.216066][ T4020] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.227077][ T4020] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.238016][ T4020] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.326682][ T4139] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.385981][ T4143] netlink: 277 bytes leftover after parsing attributes in process `syz.4.158'. [ 47.395693][ T4143] netlink: 92 bytes leftover after parsing attributes in process `syz.4.158'. [ 47.404582][ T4143] netem: unknown loss type 0 [ 47.409164][ T4143] netem: change failed [ 47.892245][ T4155] loop2: detected capacity change from 0 to 2048 [ 47.900489][ T4155] EXT4-fs: quotafile must be on filesystem root [ 47.933928][ T4155] wg2: left promiscuous mode [ 47.938549][ T4155] wg2: left allmulticast mode [ 47.947062][ T4155] wg2: entered promiscuous mode [ 47.951954][ T4155] wg2: entered allmulticast mode [ 47.958252][ T4155] random: crng reseeded on system resumption [ 48.002116][ T4159] loop2: detected capacity change from 0 to 512 [ 48.009024][ T4159] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.022347][ T4159] EXT4-fs (loop2): 1 truncate cleaned up [ 48.028313][ T4159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.091387][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.112069][ T4163] loop2: detected capacity change from 0 to 512 [ 48.119278][ T4163] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.129936][ T4163] EXT4-fs (loop2): 1 truncate cleaned up [ 48.135866][ T4163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.165382][ T4092] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.177986][ T4092] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.189466][ T4092] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.202067][ T4092] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.240586][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.356333][ T4180] loop2: detected capacity change from 0 to 1024 [ 48.357314][ T4181] loop4: detected capacity change from 0 to 1024 [ 48.364458][ T4180] EXT4-fs: Ignoring removed orlov option [ 48.370412][ T4181] EXT4-fs: Ignoring removed orlov option [ 48.390121][ T4180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.402710][ T4181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.562588][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.624890][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.688339][ T4197] loop4: detected capacity change from 0 to 1024 [ 48.695116][ T4197] EXT4-fs: Ignoring removed orlov option [ 48.702815][ T4197] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.890650][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.961048][ T4205] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.011107][ T4205] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.081210][ T4205] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.105242][ T4050] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.116011][ T4050] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.127134][ T4050] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.137800][ T4050] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.151574][ T4205] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.218877][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 49.218891][ T29] audit: type=1400 audit(1752362836.628:268): avc: denied { read } for pid=4214 comm="syz.3.181" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.248107][ T29] audit: type=1400 audit(1752362836.628:269): avc: denied { open } for pid=4214 comm="syz.3.181" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 49.271425][ T29] audit: type=1400 audit(1752362836.648:270): avc: denied { allowed } for pid=4214 comm="syz.3.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 49.290703][ T29] audit: type=1400 audit(1752362836.648:271): avc: denied { create } for pid=4214 comm="syz.3.181" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.298930][ T4218] syz.3.181 uses obsolete (PF_INET,SOCK_PACKET) [ 49.311919][ T29] audit: type=1400 audit(1752362836.648:272): avc: denied { map } for pid=4214 comm="syz.3.181" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.342122][ T29] audit: type=1400 audit(1752362836.648:273): avc: denied { read write } for pid=4214 comm="syz.3.181" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 49.428045][ T4220] loop1: detected capacity change from 0 to 2048 [ 49.434730][ T4220] EXT4-fs: quotafile must be on filesystem root [ 49.442995][ T4220] wg2: left promiscuous mode [ 49.447680][ T4220] wg2: left allmulticast mode [ 49.459681][ T4220] wg2: entered promiscuous mode [ 49.464634][ T4220] wg2: entered allmulticast mode [ 49.471408][ T4220] random: crng reseeded on system resumption [ 49.514316][ T4224] loop1: detected capacity change from 0 to 512 [ 49.524911][ T4224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 49.536159][ T4224] EXT4-fs (loop1): 1 truncate cleaned up [ 49.543403][ T4224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.623272][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.695904][ T4238] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.743326][ T4238] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.790915][ T4238] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.853064][ T4238] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.394605][ T4243] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 50.453711][ T29] audit: type=1400 audit(1752362837.868:274): avc: denied { create } for pid=4246 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.474455][ T4248] loop3: detected capacity change from 0 to 1024 [ 50.481503][ T4248] EXT4-fs: Ignoring removed orlov option [ 50.488814][ T29] audit: type=1400 audit(1752362837.898:275): avc: denied { setopt } for pid=4246 comm="syz.2.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.512986][ T4248] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.595973][ T4254] loop2: detected capacity change from 0 to 2048 [ 50.605989][ T4254] EXT4-fs: quotafile must be on filesystem root [ 50.613965][ T4254] wg2: left promiscuous mode [ 50.618595][ T4254] wg2: left allmulticast mode [ 50.629915][ T4254] wg2: entered promiscuous mode [ 50.634848][ T4254] wg2: entered allmulticast mode [ 50.642331][ T4254] random: crng reseeded on system resumption [ 50.705187][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.735860][ T4260] FAULT_INJECTION: forcing a failure. [ 50.735860][ T4260] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 50.749018][ T4260] CPU: 0 UID: 0 PID: 4260 Comm: syz.3.198 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 50.749048][ T4260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.749060][ T4260] Call Trace: [ 50.749065][ T4260] [ 50.749071][ T4260] __dump_stack+0x1d/0x30 [ 50.749090][ T4260] dump_stack_lvl+0xe8/0x140 [ 50.749112][ T4260] dump_stack+0x15/0x1b [ 50.749186][ T4260] should_fail_ex+0x265/0x280 [ 50.749215][ T4260] should_fail+0xb/0x20 [ 50.749241][ T4260] should_fail_usercopy+0x1a/0x20 [ 50.749299][ T4260] _copy_to_user+0x20/0xa0 [ 50.749317][ T4260] simple_read_from_buffer+0xb5/0x130 [ 50.749346][ T4260] proc_fail_nth_read+0x100/0x140 [ 50.749377][ T4260] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 50.749446][ T4260] vfs_read+0x19d/0x6f0 [ 50.749548][ T4260] ? percpu_counter_add_batch+0xb6/0x130 [ 50.749574][ T4260] ? __rcu_read_unlock+0x4f/0x70 [ 50.749595][ T4260] ? __fget_files+0x184/0x1c0 [ 50.749700][ T4260] ksys_read+0xda/0x1a0 [ 50.749726][ T4260] __x64_sys_read+0x40/0x50 [ 50.749754][ T4260] x64_sys_call+0x2d77/0x2fb0 [ 50.749777][ T4260] do_syscall_64+0xd2/0x200 [ 50.749794][ T4260] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.749838][ T4260] ? clear_bhb_loop+0x40/0x90 [ 50.749932][ T4260] ? clear_bhb_loop+0x40/0x90 [ 50.749952][ T4260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.750035][ T4260] RIP: 0033:0x7ff6e01ed33c [ 50.750056][ T4260] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 50.750095][ T4260] RSP: 002b:00007ff6de857030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 50.750122][ T4260] RAX: ffffffffffffffda RBX: 00007ff6e0415fa0 RCX: 00007ff6e01ed33c [ 50.750135][ T4260] RDX: 000000000000000f RSI: 00007ff6de8570a0 RDI: 0000000000000004 [ 50.750190][ T4260] RBP: 00007ff6de857090 R08: 0000000000000000 R09: 0000000000000000 [ 50.750203][ T4260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.750216][ T4260] R13: 0000000000000000 R14: 00007ff6e0415fa0 R15: 00007ffc8724ff78 [ 50.750234][ T4260] [ 50.990890][ T4266] loop3: detected capacity change from 0 to 512 [ 51.000436][ T4266] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.011123][ T4266] EXT4-fs (loop3): 1 truncate cleaned up [ 51.017168][ T4266] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.098174][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.118186][ T4270] loop3: detected capacity change from 0 to 1024 [ 51.125092][ T4270] EXT4-fs: Ignoring removed orlov option [ 51.132442][ T4270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.214678][ T4133] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.232404][ T4133] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.243159][ T4133] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.255038][ T4133] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.322903][ T4275] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 51.366713][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.455132][ T4281] loop0: detected capacity change from 0 to 2048 [ 51.464438][ T4281] EXT4-fs: quotafile must be on filesystem root [ 51.490785][ T4281] wg2: left promiscuous mode [ 51.495403][ T4281] wg2: left allmulticast mode [ 51.508262][ T4281] wg2: entered promiscuous mode [ 51.513255][ T4281] wg2: entered allmulticast mode [ 51.521225][ T4281] random: crng reseeded on system resumption [ 51.570732][ T4205] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.614064][ T4205] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.625756][ T4205] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.639769][ T4205] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.655932][ T4287] loop0: detected capacity change from 0 to 1024 [ 51.671350][ T4287] EXT4-fs: Ignoring removed orlov option [ 51.673577][ T29] audit: type=1400 audit(1752362839.078:276): avc: denied { write } for pid=4288 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.696292][ T29] audit: type=1400 audit(1752362839.078:277): avc: denied { connect } for pid=4288 comm="syz.4.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.722306][ T4287] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.756895][ T4289] SELinux: ebitmap start bit (64767) is not a multiple of the map unit size (64) [ 51.767441][ T4289] SELinux: failed to load policy [ 51.792018][ T4289] syz.4.210 (4289) used greatest stack depth: 8880 bytes left [ 51.865812][ T4299] loop4: detected capacity change from 0 to 512 [ 51.876566][ T4299] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.888698][ T4299] EXT4-fs (loop4): 1 truncate cleaned up [ 51.899972][ T4299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.937850][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.995745][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.016484][ T4306] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.032933][ T4308] loop4: detected capacity change from 0 to 512 [ 52.041365][ T4308] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 52.052177][ T4308] EXT4-fs (loop4): 1 truncate cleaned up [ 52.058102][ T4308] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.058734][ T4306] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.088394][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.130846][ T4306] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.180216][ T4305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.188726][ T4305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.189676][ T4306] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.222887][ T4305] loop0: detected capacity change from 0 to 8192 [ 52.246979][ T4306] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.258075][ T4306] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.268879][ T4306] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.280061][ T4306] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.305663][ T4311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.314523][ T4311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.345005][ T4311] loop4: detected capacity change from 0 to 8192 [ 52.503845][ T4317] netlink: 277 bytes leftover after parsing attributes in process `syz.3.219'. [ 52.513592][ T4317] netlink: 92 bytes leftover after parsing attributes in process `syz.3.219'. [ 52.522470][ T4317] netem: unknown loss type 0 [ 52.527059][ T4317] netem: change failed [ 52.644987][ T4238] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.655933][ T4238] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.666398][ T4238] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.677144][ T4238] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.796575][ T4338] loop0: detected capacity change from 0 to 1024 [ 52.827073][ T4338] EXT4-fs: Ignoring removed orlov option [ 52.842166][ T4340] loop2: detected capacity change from 0 to 512 [ 52.849535][ T4338] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.878418][ T4340] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.961142][ T4340] EXT4-fs (loop2): 1 truncate cleaned up [ 52.967118][ T4340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.985532][ T4345] loop4: detected capacity change from 0 to 1024 [ 52.999956][ T4345] EXT4-fs: Ignoring removed orlov option [ 53.030202][ T4345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.145583][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.416167][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.592347][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.741445][ T4370] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.931822][ T4370] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.991989][ T4370] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.061982][ T4370] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.248861][ T4384] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.291318][ T4384] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.314487][ T4381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.325631][ T4381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.341206][ T4384] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.384543][ T4381] loop2: detected capacity change from 0 to 8192 [ 54.392352][ T4384] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.416018][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 54.416049][ T29] audit: type=1326 audit(1752362841.828:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.445369][ T29] audit: type=1326 audit(1752362841.828:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.468648][ T29] audit: type=1326 audit(1752362841.828:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.491918][ T29] audit: type=1326 audit(1752362841.828:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.515210][ T29] audit: type=1326 audit(1752362841.828:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.538727][ T29] audit: type=1326 audit(1752362841.828:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.562016][ T29] audit: type=1326 audit(1752362841.828:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.585275][ T29] audit: type=1326 audit(1752362841.828:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.608513][ T29] audit: type=1326 audit(1752362841.828:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.631714][ T29] audit: type=1326 audit(1752362841.828:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4380 comm="syz.2.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fa59dc7e929 code=0x7ffc0000 [ 54.697721][ T4388] loop4: detected capacity change from 0 to 1024 [ 54.704533][ T4388] EXT4-fs: Ignoring removed orlov option [ 54.717796][ T4386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.728117][ T4386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.766223][ T4386] loop3: detected capacity change from 0 to 8192 [ 54.886434][ T4393] loop4: detected capacity change from 0 to 512 [ 54.894343][ T4393] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.906237][ T4393] EXT4-fs (loop4): 1 truncate cleaned up [ 54.980551][ T4398] netlink: 277 bytes leftover after parsing attributes in process `syz.4.242'. [ 55.060266][ T4404] FAULT_INJECTION: forcing a failure. [ 55.060266][ T4404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.073443][ T4404] CPU: 0 UID: 0 PID: 4404 Comm: syz.2.245 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 55.073471][ T4404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.073483][ T4404] Call Trace: [ 55.073490][ T4404] [ 55.073497][ T4404] __dump_stack+0x1d/0x30 [ 55.073588][ T4404] dump_stack_lvl+0xe8/0x140 [ 55.073604][ T4404] dump_stack+0x15/0x1b [ 55.073697][ T4404] should_fail_ex+0x265/0x280 [ 55.073727][ T4404] should_fail+0xb/0x20 [ 55.073771][ T4404] should_fail_usercopy+0x1a/0x20 [ 55.073798][ T4404] _copy_from_user+0x1c/0xb0 [ 55.073814][ T4404] ___sys_sendmsg+0xc1/0x1d0 [ 55.073908][ T4404] __x64_sys_sendmsg+0xd4/0x160 [ 55.073937][ T4404] x64_sys_call+0x2999/0x2fb0 [ 55.074003][ T4404] do_syscall_64+0xd2/0x200 [ 55.074057][ T4404] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.074126][ T4404] ? clear_bhb_loop+0x40/0x90 [ 55.074144][ T4404] ? clear_bhb_loop+0x40/0x90 [ 55.074182][ T4404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.074204][ T4404] RIP: 0033:0x7fa59dc7e929 [ 55.074219][ T4404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.074238][ T4404] RSP: 002b:00007fa59c2e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.074257][ T4404] RAX: ffffffffffffffda RBX: 00007fa59dea5fa0 RCX: 00007fa59dc7e929 [ 55.074268][ T4404] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 55.074278][ T4404] RBP: 00007fa59c2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 55.074345][ T4404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.074358][ T4404] R13: 0000000000000000 R14: 00007fa59dea5fa0 R15: 00007ffcce88f128 [ 55.074375][ T4404] [ 55.988542][ T4427] loop4: detected capacity change from 0 to 1024 [ 55.996637][ T4427] EXT4-fs: Ignoring removed orlov option [ 56.224540][ T4384] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.241786][ T4384] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.268305][ T4384] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.285959][ T4433] loop2: detected capacity change from 0 to 512 [ 56.293641][ T4433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.305547][ T4384] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.309756][ T4433] EXT4-fs (loop2): 1 truncate cleaned up [ 56.371402][ T4438] netlink: 36 bytes leftover after parsing attributes in process `syz.4.254'. [ 56.382341][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.254'. [ 56.391353][ T4438] hsr_slave_0: left promiscuous mode [ 56.397052][ T4438] hsr_slave_1: left promiscuous mode [ 56.498127][ T4441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4441 comm=syz.4.254 [ 56.513118][ T4441] netlink: 141 bytes leftover after parsing attributes in process `syz.4.254'. [ 56.523362][ T4444] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 56.952957][ T4458] loop4: detected capacity change from 0 to 2048 [ 56.963701][ T4460] netlink: 277 bytes leftover after parsing attributes in process `syz.3.259'. [ 56.973497][ T4460] netlink: 92 bytes leftover after parsing attributes in process `syz.3.259'. [ 56.982350][ T4460] netem: unknown loss type 0 [ 56.987011][ T4460] netem: change failed [ 57.010540][ T4458] loop4: p1 < > p4 [ 57.021796][ T4458] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.036529][ T2996] loop4: p1 < > p4 [ 57.041024][ T2996] loop4: p4 size 8388608 extends beyond EOD, truncated [ 57.109007][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.109850][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.131276][ T4472] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.141133][ T3957] udevd[3957]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 57.142649][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 57.175489][ T4477] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.201167][ T4472] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.241401][ T4477] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.286151][ T4481] loop0: detected capacity change from 0 to 1024 [ 57.292909][ T4481] EXT4-fs: Ignoring removed orlov option [ 57.299484][ T4472] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.311288][ T4477] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.371069][ T4472] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.421980][ T4477] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.469857][ T4472] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.481296][ T4472] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.497286][ T4472] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.514313][ T4477] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.528783][ T4477] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.540966][ T4472] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.552656][ T4477] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.565109][ T4477] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.709046][ T4370] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.784699][ T4370] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.799296][ T4370] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.812857][ T4370] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.885689][ T4493] loop1: detected capacity change from 0 to 512 [ 57.895651][ T4493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 58.003854][ T4493] EXT4-fs (loop1): 1 truncate cleaned up [ 58.125471][ T4500] netlink: 277 bytes leftover after parsing attributes in process `syz.3.271'. [ 58.136443][ T4504] loop2: detected capacity change from 0 to 2048 [ 58.139411][ T4506] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.147517][ T4504] EXT4-fs: quotafile must be on filesystem root [ 58.169002][ T4500] netlink: 92 bytes leftover after parsing attributes in process `syz.3.271'. [ 58.177960][ T4500] netem: unknown loss type 0 [ 58.182575][ T4500] netem: change failed [ 58.191900][ T4504] wg2: left promiscuous mode [ 58.196547][ T4504] wg2: left allmulticast mode [ 58.224207][ T4504] wg2: entered promiscuous mode [ 58.229098][ T4504] wg2: entered allmulticast mode [ 58.237558][ T4504] random: crng reseeded on system resumption [ 58.249131][ T4508] loop3: detected capacity change from 0 to 1024 [ 58.257202][ T4508] EXT4-fs: Ignoring removed orlov option [ 58.326776][ T4519] loop1: detected capacity change from 0 to 1024 [ 58.334522][ T4519] EXT4-fs: Ignoring removed orlov option [ 58.352913][ T4517] sd 0:0:1:0: device reset [ 67.509302][ T4528] loop0: detected capacity change from 0 to 1024 [ 67.538542][ T4528] EXT4-fs mount: 16 callbacks suppressed [ 67.538557][ T4528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.562368][ T4528] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.279: reserved inode found cleared - inode=1 [ 67.562579][ T4542] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.578985][ T4528] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 67.585866][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 67.585880][ T29] audit: type=1400 audit(1752362854.998:448): avc: denied { remove_name } for pid=4527 comm="syz.0.279" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.621168][ T29] audit: type=1400 audit(1752362854.998:449): avc: denied { rename } for pid=4527 comm="syz.0.279" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.643353][ T29] audit: type=1400 audit(1752362854.998:450): avc: denied { unlink } for pid=4527 comm="syz.0.279" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.670351][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.720857][ T4542] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.771072][ T4542] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.830855][ T4542] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.895787][ T4542] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.906220][ T4542] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.917106][ T4542] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.928095][ T4542] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.924520][ T4560] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.939230][ T4562] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 103.091774][ T4560] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.106110][ T4552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.289876][ T4568] netlink: 8 bytes leftover after parsing attributes in process `syz.3.287'. [ 103.944023][ T4552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.998019][ T4552] loop1: detected capacity change from 0 to 8192 [ 104.202666][ T29] audit: type=1326 audit(1752362891.618:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 104.915681][ T4560] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.967979][ T29] audit: type=1326 audit(1752362892.378:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.084759][ T29] audit: type=1326 audit(1752362892.488:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.108034][ T29] audit: type=1326 audit(1752362892.488:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.128268][ T4560] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.131301][ T29] audit: type=1326 audit(1752362892.488:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.164286][ T29] audit: type=1326 audit(1752362892.488:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.187585][ T29] audit: type=1326 audit(1752362892.488:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.210895][ T29] audit: type=1326 audit(1752362892.488:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.234157][ T29] audit: type=1326 audit(1752362892.488:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.257700][ T29] audit: type=1326 audit(1752362892.488:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4550 comm="syz.1.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481023e929 code=0x7ffc0000 [ 105.341210][ T4588] netlink: 12 bytes leftover after parsing attributes in process `syz.4.294'. [ 105.353340][ T2996] udevd[2996]: worker [4559] terminated by signal 33 (Unknown signal 33) [ 105.414897][ T4560] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.425406][ T4560] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.436091][ T4560] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.446927][ T4560] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.673201][ T4597] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.692527][ T4591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.727507][ T4591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.764253][ T4597] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.827249][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.851758][ T4597] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.852425][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.877327][ T4591] loop4: detected capacity change from 0 to 8192 [ 105.921120][ T4597] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.932822][ T4603] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.990855][ T4603] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.041699][ T4603] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.091146][ T4603] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.156049][ T4603] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.170336][ T4603] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.182373][ T4603] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.193689][ T4603] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.231558][ T4605] loop2: detected capacity change from 0 to 1024 [ 106.238173][ T4605] EXT4-fs: Ignoring removed orlov option [ 106.245534][ T4605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.419937][ T4612] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.428438][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.473989][ T4617] loop2: detected capacity change from 0 to 512 [ 106.481553][ T4617] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.491996][ T4620] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.492553][ T4617] EXT4-fs (loop2): 1 truncate cleaned up [ 106.505641][ T4617] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.582414][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.604634][ T4630] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.641174][ T4630] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.711474][ T4630] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.740953][ T4636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.749377][ T4636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.782838][ T4630] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.922634][ T4630] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.961927][ T4630] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.997455][ T4630] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.057227][ T4630] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.424350][ T4645] loop1: detected capacity change from 0 to 1024 [ 107.431931][ T4645] EXT4-fs: Ignoring removed orlov option [ 107.439360][ T4645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.529256][ T4651] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.546634][ T4643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.562110][ T4643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.586014][ T4653] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.659119][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.668284][ T4643] loop3: detected capacity change from 0 to 8192 [ 107.683047][ T4657] loop4: detected capacity change from 0 to 512 [ 107.690959][ T4657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 107.708610][ T4657] EXT4-fs (loop4): 1 truncate cleaned up [ 107.715960][ T4657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.728976][ T4666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.737435][ T4666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.762063][ T4667] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.783841][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.811453][ T4667] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.861355][ T4667] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.900873][ T4667] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.295079][ T4678] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.380724][ T4678] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.581289][ T4678] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.642227][ T4678] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.794231][ T4685] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.846167][ T4689] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 108.937616][ T4693] loop4: detected capacity change from 0 to 1024 [ 108.944188][ T4693] EXT4-fs: Ignoring removed orlov option [ 108.951503][ T4693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.128801][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.167879][ T4699] loop4: detected capacity change from 0 to 512 [ 109.174994][ T4699] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 109.187042][ T4699] EXT4-fs (loop4): 1 truncate cleaned up [ 109.192902][ T4702] loop2: detected capacity change from 0 to 1024 [ 109.193400][ T4699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.199474][ T4702] EXT4-fs: Ignoring removed orlov option [ 109.218941][ T4702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.276037][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.300475][ T4705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.308950][ T4705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.354237][ T4706] ================================================================== [ 109.362324][ T4706] BUG: KCSAN: data-race in filemap_read / filemap_read [ 109.369166][ T4706] [ 109.371470][ T4706] write to 0xffff888119a9e768 of 8 bytes by task 4702 on cpu 0: [ 109.379076][ T4706] filemap_read+0x974/0xa00 [ 109.383563][ T4706] generic_file_read_iter+0x79/0x330 [ 109.388833][ T4706] ext4_file_read_iter+0x1cc/0x290 [ 109.393924][ T4706] copy_splice_read+0x3c1/0x5f0 [ 109.398756][ T4706] splice_direct_to_actor+0x290/0x680 [ 109.404111][ T4706] do_splice_direct+0xda/0x150 [ 109.408866][ T4706] do_sendfile+0x380/0x650 [ 109.413271][ T4706] __x64_sys_sendfile64+0x105/0x150 [ 109.418451][ T4706] x64_sys_call+0xb39/0x2fb0 [ 109.423023][ T4706] do_syscall_64+0xd2/0x200 [ 109.427506][ T4706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.433378][ T4706] [ 109.435711][ T4706] read to 0xffff888119a9e768 of 8 bytes by task 4706 on cpu 1: [ 109.443253][ T4706] filemap_read+0x6f/0xa00 [ 109.447653][ T4706] generic_file_read_iter+0x79/0x330 [ 109.452928][ T4706] ext4_file_read_iter+0x1cc/0x290 [ 109.458020][ T4706] copy_splice_read+0x3c1/0x5f0 [ 109.462865][ T4706] splice_direct_to_actor+0x290/0x680 [ 109.468221][ T4706] do_splice_direct+0xda/0x150 [ 109.472982][ T4706] do_sendfile+0x380/0x650 [ 109.477377][ T4706] __x64_sys_sendfile64+0x105/0x150 [ 109.482553][ T4706] x64_sys_call+0xb39/0x2fb0 [ 109.487124][ T4706] do_syscall_64+0xd2/0x200 [ 109.491605][ T4706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.497478][ T4706] [ 109.499781][ T4706] value changed: 0x0000000000000343 -> 0x0000000000000344 [ 109.506861][ T4706] [ 109.509163][ T4706] Reported by Kernel Concurrency Sanitizer on: [ 109.515296][ T4706] CPU: 1 UID: 0 PID: 4706 Comm: syz.2.336 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(voluntary) [ 109.527600][ T4706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.537636][ T4706] ================================================================== [ 109.557867][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.303729][ T4597] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.314640][ T4597] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.324964][ T4597] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.335346][ T4597] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.744250][ T4678] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.755098][ T4678] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.765681][ T4678] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.776324][ T4678] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.313664][ T4667] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.324444][ T4667] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.335147][ T4667] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.345940][ T4667] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0