last executing test programs: 5.460192953s ago: executing program 3 (id=3253): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) iopl(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0xfffffffffffffff7}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 3.493345773s ago: executing program 0 (id=3284): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5a322d11, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) futimesat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000440)={{0x77359400}}) 3.429094473s ago: executing program 0 (id=3286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) fcntl$setstatus(r0, 0x4, 0x2c00) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r0, &(0x7f0000005940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)="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", 0xdae}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004000) 3.410451283s ago: executing program 0 (id=3287): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) 3.379306153s ago: executing program 0 (id=3288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0x10000ff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0xfffffff7, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x520, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 3.171570664s ago: executing program 0 (id=3299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x51) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRESDEC=r6, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, 0x0, &(0x7f0000001c40)=r10}, 0x20) unshare(0x64000600) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r12, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000c0a100000000000007010000f6ffffffb702000008000000b703000084200000850000007200000095000000000000009479af871a355aa379d1b4e44892d64f76e694eb701ae6d7cb026f6205096b62f7a052351a18d5a10ecfea85a6c5aac85228c00974291b7f6a5413c74e60943a3d4cf40e305e1ba93827218856e7774752bb9a35c95e9be583d12115d8d6d84554447a1c9434a1971a4d20e41f87"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x5d}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d79"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000080)='./file0\x00') 2.894534476s ago: executing program 0 (id=3306): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_usb_connect(0x6, 0x24, &(0x7f0000000240)=ANY=[], 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x34) r3 = open(&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x24) fcntl$notify(r3, 0x402, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) fcntl$notify(r3, 0x402, 0x8000003d) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0x20) accept$unix(r2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket(0x10, 0x2, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x24, 0x1402, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x51}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 2.384423238s ago: executing program 1 (id=3314): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0xffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 2.335399888s ago: executing program 1 (id=3316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x51) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRESDEC=r6, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, 0x0, &(0x7f0000001c40)=r10}, 0x20) unshare(0x64000600) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r12, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000c0a100000000000007010000f6ffffffb702000008000000b703000084200000850000007200000095000000000000009479af871a355aa379d1b4e44892d64f76e694eb701ae6d7cb026f6205096b62f7a052351a18d5a10ecfea85a6c5aac85228c00974291b7f6a5413c74e60943a3d4cf40e305e1ba93827218856e7774752bb9a35c95e9be583d12115d8d6d84554447a1c9434a1971a4d20e41f87"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x5d}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d79"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000080)='./file0\x00') 2.138186149s ago: executing program 4 (id=3322): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}, {@msize={'msize', 0x3d, 0x9}}], [{@subj_user={'subj_user', 0x3d, 'kfree\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'kfree\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'kfree\x00'}}, {@obj_role={'obj_role', 0x3d, 'GPL\x00'}}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'GPL\x00'}}]}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x200000000}, 0x18) r4 = syz_io_uring_setup(0xbc3, &(0x7f0000000540)={0x0, 0x1568, 0x10000, 0x2, 0x3e8}, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) eventfd(0x579) syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) ioperm(0x0, 0x2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="07010000000000001800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r3}, 0x8) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_buf(r8, 0x0, 0x10, &(0x7f0000000380)=""/117, &(0x7f0000000400)=0x75) sendmsg$nl_xfrm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d4, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x80, "bed40c"}}]}, 0x140}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r11, &(0x7f0000000180)}, 0x20) io_uring_enter(r4, 0x29ab, 0xd480, 0x0, 0x0, 0x0) 1.9862949s ago: executing program 1 (id=3323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x20000000000002a5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeec, 0x8031, 0xffffffffffffffff, 0xd966a000) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000100)={r2}) 1.98580866s ago: executing program 4 (id=3324): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1.659490882s ago: executing program 3 (id=3325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.659271632s ago: executing program 3 (id=3326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) stat(&(0x7f0000001700)='./file0\x00', &(0x7f0000001740)) 1.639546312s ago: executing program 1 (id=3327): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100230100003402000002000000", @ANYRES32=r1], 0x1c}}, 0x0) 1.634488622s ago: executing program 3 (id=3328): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) 1.536088183s ago: executing program 1 (id=3329): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r0 = io_uring_setup(0x7d3, 0x0) close_range(r0, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.119938155s ago: executing program 4 (id=3333): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) 745.825577ms ago: executing program 3 (id=3339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 691.085837ms ago: executing program 1 (id=3340): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000100)=0xe37, 0x4) 584.647737ms ago: executing program 4 (id=3341): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) 519.905598ms ago: executing program 4 (id=3343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x51) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) writev(r8, &(0x7f0000000000)=[{&(0x7f0000000380)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff00000003", 0x47}], 0x1) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=0x0], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRESDEC=r6, @ANYRES16=r1], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f00000005c0)={0x0, 0x7}, &(0x7f0000000600)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, 0x0, &(0x7f0000001c40)=r10}, 0x20) unshare(0x64000600) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r12, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000640000000000000001000000180100002020642500000000002020207b1af8ff00000000c0a100000000000007010000f6ffffffb702000008000000b703000084200000850000007200000095000000000000009479af871a355aa379d1b4e44892d64f76e694eb701ae6d7cb026f6205096b62f7a052351a18d5a10ecfea85a6c5aac85228c00974291b7f6a5413c74e60943a3d4cf40e305e1ba93827218856e7774752bb9a35c95e9be583d12115d8d6d84554447a1c9434a1971a4d20e41f87"], &(0x7f0000000300)='GPL\x00', 0x6, 0x5, &(0x7f0000000340)=""/5, 0x0, 0x5d}, 0x94) open(0x0, 0x0, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf2509000200737b7a32000000000800410073697700140033006c6f0000000000000000000000000000dbb422c6f070cc81453ba110e019957e3c941e62cc44e4154194e90eeb78e3085c83c053640e139557f77e76a6610ace1f5b4850039c107febf5d5d01c09cdd688e26e5d79"], 0x38}, 0x1, 0x0, 0x0, 0x404c090}, 0x810) symlinkat(&(0x7f0000000000)='.\x00', r2, &(0x7f0000000080)='./file0\x00') 441.622308ms ago: executing program 2 (id=3346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 361.854668ms ago: executing program 2 (id=3347): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r1}, &(0x7f0000001c00), &(0x7f0000001c40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) recvfrom$l2tp(0xffffffffffffffff, &(0x7f0000000340)=""/169, 0xa9, 0x21, &(0x7f0000000140), 0x10) ftruncate(0xffffffffffffffff, 0xf4ff) 360.979988ms ago: executing program 3 (id=3348): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x8004) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r13], 0x4) 228.490699ms ago: executing program 2 (id=3349): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 210.733579ms ago: executing program 2 (id=3350): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0x10000ff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0xfffffff7, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x520, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r3, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x27, 0x0) 108.15128ms ago: executing program 4 (id=3351): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x2, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r3}, 0x10) iopl(0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x7ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x2, 0x9, 0xfffffffffffffff7}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 79.49974ms ago: executing program 2 (id=3352): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xffd, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0xa1, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400df7f08000a00", @ANYRES32=r3, @ANYBLOB], 0x3c}}, 0x0) 0s ago: executing program 2 (id=3353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x200, 0x7b}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) kernel console output (not intermixed with test programs): 9067][T10434] netlink_create+0x32a/0x460 [ 163.959092][T10434] ? __pfx_genl_unbind+0x10/0x10 [ 163.959178][T10434] ? __pfx_genl_bind+0x10/0x10 [ 163.959212][T10434] __sock_create+0x2ec/0x5b0 [ 163.959250][T10434] __sys_socket+0xb0/0x180 [ 163.959339][T10434] __x64_sys_socket+0x3f/0x50 [ 163.959375][T10434] x64_sys_call+0x1147/0x3000 [ 163.959406][T10434] do_syscall_64+0xd2/0x200 [ 163.959432][T10434] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.959470][T10434] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.959520][T10434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.959545][T10434] RIP: 0033:0x7f48b5f215e7 [ 163.959565][T10434] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.959601][T10434] RSP: 002b:00007f48b497dfa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 163.959620][T10434] RAX: ffffffffffffffda RBX: 00007f48b6175fa0 RCX: 00007f48b5f215e7 [ 163.959633][T10434] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 163.959648][T10434] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 163.959664][T10434] R10: 0000200000000040 R11: 0000000000000286 R12: 0000000000000001 [ 163.959676][T10434] R13: 00007f48b6176038 R14: 00007f48b6175fa0 R15: 00007fffd4a24ec8 [ 163.959695][T10434] [ 163.985179][T10439] SELinux: policydb magic number 0x2 does not match expected magic number 0xf97cff8c [ 164.190606][T10439] SELinux: failed to load policy [ 164.310972][T10444] bridge0: port 4(batadv2) entered blocking state [ 164.318467][T10444] bridge0: port 4(batadv2) entered disabled state [ 164.325243][T10444] batadv2: entered allmulticast mode [ 164.332254][T10444] batadv2: entered promiscuous mode [ 164.516630][T10451] FAULT_INJECTION: forcing a failure. [ 164.516630][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 164.530078][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.1.2418 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.530109][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.530125][T10451] Call Trace: [ 164.530133][T10451] [ 164.530144][T10451] __dump_stack+0x1d/0x30 [ 164.530167][T10451] dump_stack_lvl+0xe8/0x140 [ 164.530239][T10451] dump_stack+0x15/0x1b [ 164.530262][T10451] should_fail_ex+0x265/0x280 [ 164.530282][T10451] should_failslab+0x8c/0xb0 [ 164.530316][T10451] kmem_cache_alloc_noprof+0x50/0x480 [ 164.530378][T10451] ? alloc_empty_file+0x76/0x200 [ 164.530398][T10451] alloc_empty_file+0x76/0x200 [ 164.530482][T10451] alloc_file_pseudo+0xc6/0x160 [ 164.530510][T10451] sock_alloc_file+0x9c/0x1e0 [ 164.530550][T10451] do_accept+0x1e4/0x3a0 [ 164.530623][T10451] __sys_accept4+0xbf/0x140 [ 164.530663][T10451] __x64_sys_accept+0x42/0x50 [ 164.530696][T10451] x64_sys_call+0x212c/0x3000 [ 164.530733][T10451] do_syscall_64+0xd2/0x200 [ 164.530759][T10451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.530798][T10451] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.530861][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.530888][T10451] RIP: 0033:0x7fa1225cf6c9 [ 164.530904][T10451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.530924][T10451] RSP: 002b:00007fa121037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 164.530950][T10451] RAX: ffffffffffffffda RBX: 00007fa122825fa0 RCX: 00007fa1225cf6c9 [ 164.531001][T10451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 164.531034][T10451] RBP: 00007fa121037090 R08: 0000000000000000 R09: 0000000000000000 [ 164.531050][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.531064][T10451] R13: 00007fa122826038 R14: 00007fa122825fa0 R15: 00007fff5c05ae78 [ 164.531102][T10451] [ 164.774291][T10453] program syz.1.2419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.816325][ T57] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 164.825039][T10456] program syz.1.2419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.825842][ T57] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 164.844855][T10456] netlink: 'syz.1.2419': attribute type 1 has an invalid length. [ 165.114209][T10467] bridge0: port 5(batadv3) entered blocking state [ 165.121934][T10467] bridge0: port 5(batadv3) entered disabled state [ 165.129312][T10467] batadv3: entered allmulticast mode [ 165.132742][ T23] usb usb6-port1: unable to enumerate USB device [ 165.135346][T10467] batadv3: entered promiscuous mode [ 165.154024][T10282] vhci_hcd: invalid port number 96 [ 165.159234][T10282] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 165.325447][T10475] lo speed is unknown, defaulting to 1000 [ 165.331749][T10475] lo speed is unknown, defaulting to 1000 [ 165.337984][T10475] lo speed is unknown, defaulting to 1000 [ 165.344166][T10475] wg1 speed is unknown, defaulting to 1000 [ 165.519586][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 165.519601][ T29] audit: type=1326 audit(1762282936.105:17168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.615714][ T31] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled [ 165.625014][ T31] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled [ 165.732885][ T29] audit: type=1326 audit(1762282936.135:17169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.756694][ T29] audit: type=1326 audit(1762282936.135:17170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.780489][ T29] audit: type=1326 audit(1762282936.135:17171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.804119][ T29] audit: type=1326 audit(1762282936.135:17172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.828224][ T29] audit: type=1326 audit(1762282936.145:17173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.851917][ T29] audit: type=1326 audit(1762282936.145:17174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.875705][ T29] audit: type=1326 audit(1762282936.145:17175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.899411][ T29] audit: type=1326 audit(1762282936.155:17176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 165.923063][ T29] audit: type=1326 audit(1762282936.155:17177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10478 comm="syz.2.2428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 166.112612][T10485] loop0: detected capacity change from 0 to 128 [ 166.176323][T10485] msdos: Unknown parameter 'ÿ0x0000000000000000Ý$ÈË·OǼ' [ 166.301685][T10495] netlink: 'syz.0.2434': attribute type 4 has an invalid length. [ 166.398001][T10490] bridge0: port 4(batadv4) entered blocking state [ 166.404647][T10490] bridge0: port 4(batadv4) entered disabled state [ 166.436863][T10490] batadv4: entered allmulticast mode [ 166.448794][T10500] loop0: detected capacity change from 0 to 1024 [ 166.449115][T10490] batadv4: entered promiscuous mode [ 166.455677][T10500] EXT4-fs: Ignoring removed orlov option [ 166.469935][T10500] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.650089][T10500] EXT4-fs (loop0): shut down requested (0) [ 166.895725][ T57] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 166.905002][ T57] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 166.960753][T10520] lo speed is unknown, defaulting to 1000 [ 166.991557][T10520] lo speed is unknown, defaulting to 1000 [ 167.016955][T10520] lo speed is unknown, defaulting to 1000 [ 167.044734][T10520] wg1 speed is unknown, defaulting to 1000 [ 167.594222][T10534] __nla_validate_parse: 1 callbacks suppressed [ 167.594245][T10534] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2447'. [ 167.609860][T10534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2447'. [ 167.618850][T10534] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2447'. [ 167.630191][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2447'. [ 167.639664][T10534] hsr_slave_0: left promiscuous mode [ 167.646124][T10534] hsr_slave_1: left promiscuous mode [ 167.686248][T10539] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2447'. [ 167.745913][T10543] program syz.4.2450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.796969][T10546] program syz.4.2450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.826613][T10546] netlink: 'syz.4.2450': attribute type 1 has an invalid length. [ 167.951905][T10555] netlink: 5064 bytes leftover after parsing attributes in process `syz.3.2454'. [ 167.961273][T10555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 167.971285][T10555] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2454'. [ 167.980688][T10555] netlink: 189 bytes leftover after parsing attributes in process `syz.3.2454'. [ 167.990125][T10555] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2454'. [ 168.285323][T10574] bridge0: port 3(batadv1) entered blocking state [ 168.291909][T10574] bridge0: port 3(batadv1) entered disabled state [ 168.300082][T10574] batadv1: entered allmulticast mode [ 168.306796][T10574] batadv1: entered promiscuous mode [ 168.335901][ T2968] usb usb6-port1: attempt power cycle [ 168.520811][T10588] program syz.2.2467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.571913][T10593] program syz.2.2467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.581882][T10593] netlink: 'syz.2.2467': attribute type 1 has an invalid length. [ 168.877429][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 168.886795][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 168.962736][T10605] bridge0: port 6(batadv4) entered blocking state [ 168.969283][T10605] bridge0: port 6(batadv4) entered disabled state [ 168.975998][T10605] batadv4: entered allmulticast mode [ 168.982059][T10605] batadv4: entered promiscuous mode [ 169.118837][T10614] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 169.134132][T10614] 8021q: adding VLAN 0 to HW filter on device bond20 [ 169.150519][T10614] bond20 (unregistering): Released all slaves [ 169.185525][T10617] FAULT_INJECTION: forcing a failure. [ 169.185525][T10617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.198813][T10617] CPU: 1 UID: 0 PID: 10617 Comm: syz.1.2478 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.198849][T10617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 169.198863][T10617] Call Trace: [ 169.198877][T10617] [ 169.198886][T10617] __dump_stack+0x1d/0x30 [ 169.198915][T10617] dump_stack_lvl+0xe8/0x140 [ 169.198939][T10617] dump_stack+0x15/0x1b [ 169.198985][T10617] should_fail_ex+0x265/0x280 [ 169.199009][T10617] should_fail+0xb/0x20 [ 169.199031][T10617] should_fail_usercopy+0x1a/0x20 [ 169.199060][T10617] _copy_from_user+0x1c/0xb0 [ 169.199121][T10617] __se_sys_mount+0x10d/0x2e0 [ 169.199198][T10617] ? fput+0x8f/0xc0 [ 169.199300][T10617] ? ksys_write+0x192/0x1a0 [ 169.199334][T10617] __x64_sys_mount+0x67/0x80 [ 169.199366][T10617] x64_sys_call+0x2b51/0x3000 [ 169.199479][T10617] do_syscall_64+0xd2/0x200 [ 169.199499][T10617] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 169.199548][T10617] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 169.199591][T10617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.199620][T10617] RIP: 0033:0x7fa1225cf6c9 [ 169.199636][T10617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.199721][T10617] RSP: 002b:00007fa121037038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 169.199818][T10617] RAX: ffffffffffffffda RBX: 00007fa122825fa0 RCX: 00007fa1225cf6c9 [ 169.199836][T10617] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 169.199915][T10617] RBP: 00007fa121037090 R08: 0000200000000180 R09: 0000000000000000 [ 169.199931][T10617] R10: 0000000001004014 R11: 0000000000000246 R12: 0000000000000001 [ 169.199948][T10617] R13: 00007fa122826038 R14: 00007fa122825fa0 R15: 00007fff5c05ae78 [ 169.199974][T10617] [ 169.200699][ T3421] kernel write not supported for file bpf-prog (pid: 3421 comm: kworker/1:5) [ 169.423718][T10623] program syz.1.2481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.466394][ T31] batman_adv: batadv4: No IGMP Querier present - multicast optimizations disabled [ 169.475821][ T31] batman_adv: batadv4: No MLD Querier present - multicast optimizations disabled [ 169.479406][T10631] program syz.1.2481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.495473][T10631] netlink: 'syz.1.2481': attribute type 1 has an invalid length. [ 169.687673][ T5925] Process accounting resumed [ 169.787990][T10646] program syz.1.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.848982][T10648] program syz.1.2489 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.886876][T10648] netlink: 'syz.1.2489': attribute type 1 has an invalid length. [ 170.142560][T10655] xt_hashlimit: max too large, truncated to 1048576 [ 170.316014][ T2968] usb usb6-port1: unable to enumerate USB device [ 170.322897][T10499] vhci_hcd: invalid port number 96 [ 170.328084][T10499] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 170.338743][T10660] ip6t_srh: unknown srh match flags 4000 [ 170.359808][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.740805][T10684] loop0: detected capacity change from 0 to 128 [ 170.756095][T10684] msdos: Unknown parameter 'ÿ0x0000000000000000Ý$ÈË·OǼ' [ 170.894992][T10696] netlink: 'syz.0.2508': attribute type 1 has an invalid length. [ 170.921763][T10696] 8021q: adding VLAN 0 to HW filter on device bond12 [ 170.939551][T10696] bond12 (unregistering): Released all slaves [ 171.004379][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 171.004394][ T29] audit: type=1326 audit(1762282941.585:17523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.040960][ T29] audit: type=1326 audit(1762282941.625:17524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.064754][ T29] audit: type=1326 audit(1762282941.625:17525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.088395][ T29] audit: type=1326 audit(1762282941.625:17526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.112038][ T29] audit: type=1326 audit(1762282941.625:17527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.135878][ T29] audit: type=1326 audit(1762282941.625:17528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.159494][ T29] audit: type=1326 audit(1762282941.625:17529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.183279][ T29] audit: type=1326 audit(1762282941.625:17530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.183321][ T29] audit: type=1326 audit(1762282941.625:17531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.183360][ T29] audit: type=1326 audit(1762282941.625:17532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10702 comm="syz.3.2510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 171.335898][T10708] FAULT_INJECTION: forcing a failure. [ 171.335898][T10708] name failslab, interval 1, probability 0, space 0, times 0 [ 171.348819][T10708] CPU: 0 UID: 0 PID: 10708 Comm: syz.4.2512 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.348847][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 171.348926][T10708] Call Trace: [ 171.348934][T10708] [ 171.348943][T10708] __dump_stack+0x1d/0x30 [ 171.348969][T10708] dump_stack_lvl+0xe8/0x140 [ 171.348994][T10708] dump_stack+0x15/0x1b [ 171.349017][T10708] should_fail_ex+0x265/0x280 [ 171.349043][T10708] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 171.349117][T10708] should_failslab+0x8c/0xb0 [ 171.349155][T10708] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 171.349195][T10708] ? shmem_alloc_inode+0x34/0x50 [ 171.349271][T10708] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 171.349343][T10708] shmem_alloc_inode+0x34/0x50 [ 171.349378][T10708] alloc_inode+0x40/0x170 [ 171.349443][T10708] new_inode+0x1d/0xe0 [ 171.349480][T10708] shmem_get_inode+0x244/0x750 [ 171.349513][T10708] __shmem_file_setup+0x113/0x210 [ 171.349546][T10708] shmem_file_setup+0x3b/0x50 [ 171.349572][T10708] __se_sys_memfd_create+0x2c3/0x590 [ 171.349601][T10708] __x64_sys_memfd_create+0x31/0x40 [ 171.349629][T10708] x64_sys_call+0x2ac2/0x3000 [ 171.349670][T10708] do_syscall_64+0xd2/0x200 [ 171.349690][T10708] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 171.349721][T10708] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 171.349756][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.349857][T10708] RIP: 0033:0x7f432c1af6c9 [ 171.349874][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.349922][T10708] RSP: 002b:00007f432ac0ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 171.349952][T10708] RAX: ffffffffffffffda RBX: 00000000000004fc RCX: 00007f432c1af6c9 [ 171.349966][T10708] RDX: 00007f432ac0eef0 RSI: 0000000000000000 RDI: 00007f432c232960 [ 171.349979][T10708] RBP: 0000200000001500 R08: 00007f432ac0ebb7 R09: 00007f432ac0ee40 [ 171.349992][T10708] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 171.350007][T10708] R13: 00007f432ac0eef0 R14: 00007f432ac0eeb0 R15: 0000200000000100 [ 171.350086][T10708] [ 171.602076][T10716] 9pnet_fd: Insufficient options for proto=fd [ 171.655402][T10723] vlan2: entered allmulticast mode [ 171.676398][T10721] bridge0: port 5(batadv5) entered blocking state [ 171.682911][T10721] bridge0: port 5(batadv5) entered disabled state [ 171.690666][T10721] batadv5: entered allmulticast mode [ 171.696995][T10721] batadv5: entered promiscuous mode [ 171.774016][T10726] netlink: 'syz.3.2521': attribute type 4 has an invalid length. [ 171.786979][ T5926] lo speed is unknown, defaulting to 1000 [ 171.792746][ T5926] s{z2: Port: 1 Link DOWN [ 172.035920][T10755] syz.0.2533 (10755): /proc/10755/oom_adj is deprecated, please use /proc/10755/oom_score_adj instead. [ 172.069360][T10752] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 172.100035][T10758] 9pnet_fd: Insufficient options for proto=fd [ 172.164543][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.172716][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.180174][ T31] batman_adv: batadv5: No IGMP Querier present - multicast optimizations disabled [ 172.180156][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.180237][ T31] batman_adv: batadv5: No MLD Querier present - multicast optimizations disabled [ 172.189444][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.214121][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.221571][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.229681][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.237171][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.244580][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.252021][ T5926] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 172.260779][ T5926] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 172.280006][T10769] SELinux: policydb string SE Linu does not match my string SE Linux [ 172.289086][T10769] SELinux: failed to load policy [ 172.316350][T10771] bridge0: port 6(batadv6) entered blocking state [ 172.323011][T10771] bridge0: port 6(batadv6) entered disabled state [ 172.329889][T10771] batadv6: entered allmulticast mode [ 172.335943][T10771] batadv6: entered promiscuous mode [ 172.755996][ T5925] usb usb6-port1: attempt power cycle [ 172.772707][T10789] netlink: 'syz.3.2544': attribute type 1 has an invalid length. [ 172.790797][T10789] 8021q: adding VLAN 0 to HW filter on device bond20 [ 172.801370][T10789] __nla_validate_parse: 11 callbacks suppressed [ 172.801386][T10789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2544'. [ 172.816708][ T31] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 172.826057][ T31] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 172.837408][T10789] bond20 (unregistering): Released all slaves [ 172.907266][T10801] SELinux: policydb string SE Linu does not match my string SE Linux [ 172.923401][T10803] lo speed is unknown, defaulting to 1000 [ 172.930597][T10803] lo speed is unknown, defaulting to 1000 [ 172.937100][T10803] lo speed is unknown, defaulting to 1000 [ 172.943302][T10803] wg1 speed is unknown, defaulting to 1000 [ 172.951930][T10801] SELinux: failed to load policy [ 173.075675][T10814] netlink: 'syz.3.2552': attribute type 1 has an invalid length. [ 173.097925][T10814] 8021q: adding VLAN 0 to HW filter on device bond20 [ 173.112284][T10814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2552'. [ 173.114637][T10817] bridge0: port 8(batadv7) entered blocking state [ 173.128002][T10817] bridge0: port 8(batadv7) entered disabled state [ 173.134810][T10817] batadv7: entered allmulticast mode [ 173.141102][T10817] batadv7: entered promiscuous mode [ 173.148490][T10814] bond20 (unregistering): Released all slaves [ 173.257511][T10825] bridge0: port 9(batadv8) entered blocking state [ 173.264107][T10825] bridge0: port 9(batadv8) entered disabled state [ 173.270973][T10825] batadv8: entered allmulticast mode [ 173.277613][T10825] batadv8: entered promiscuous mode [ 173.322055][T10834] FAULT_INJECTION: forcing a failure. [ 173.322055][T10834] name failslab, interval 1, probability 0, space 0, times 0 [ 173.334917][T10834] CPU: 0 UID: 0 PID: 10834 Comm: syz.2.2559 Not tainted syzkaller #0 PREEMPT(voluntary) [ 173.334972][T10834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 173.334989][T10834] Call Trace: [ 173.334998][T10834] [ 173.335009][T10834] __dump_stack+0x1d/0x30 [ 173.335054][T10834] dump_stack_lvl+0xe8/0x140 [ 173.335075][T10834] dump_stack+0x15/0x1b [ 173.335093][T10834] should_fail_ex+0x265/0x280 [ 173.335178][T10834] should_failslab+0x8c/0xb0 [ 173.335210][T10834] __kmalloc_noprof+0xa5/0x570 [ 173.335299][T10834] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 173.335399][T10834] ? obj_cgroup_charge_account+0x122/0x1a0 [ 173.335430][T10834] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 173.335471][T10834] genl_family_rcv_msg_doit+0x48/0x1b0 [ 173.335509][T10834] ? genl_get_cmd+0x425/0x660 [ 173.335547][T10834] ? radix_tree_lookup+0xfa/0x140 [ 173.335580][T10834] genl_rcv_msg+0x422/0x460 [ 173.335620][T10834] ? __pfx_ctrl_getfamily+0x10/0x10 [ 173.335655][T10834] netlink_rcv_skb+0x123/0x220 [ 173.335692][T10834] ? __pfx_genl_rcv_msg+0x10/0x10 [ 173.335742][T10834] genl_rcv+0x28/0x40 [ 173.335818][T10834] netlink_unicast+0x5c0/0x690 [ 173.335862][T10834] netlink_sendmsg+0x58b/0x6b0 [ 173.335885][T10834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.335975][T10834] __sock_sendmsg+0x145/0x180 [ 173.336002][T10834] __sys_sendto+0x268/0x330 [ 173.336052][T10834] __x64_sys_sendto+0x76/0x90 [ 173.336173][T10834] x64_sys_call+0x2d14/0x3000 [ 173.336242][T10834] do_syscall_64+0xd2/0x200 [ 173.336308][T10834] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 173.336337][T10834] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 173.336375][T10834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.336404][T10834] RIP: 0033:0x7f20d122155c [ 173.336497][T10834] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 173.336520][T10834] RSP: 002b:00007f20cfc7dec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 173.336540][T10834] RAX: ffffffffffffffda RBX: 00007f20cfc7dfc0 RCX: 00007f20d122155c [ 173.336552][T10834] RDX: 0000000000000024 RSI: 00007f20cfc7e010 RDI: 0000000000000003 [ 173.336564][T10834] RBP: 0000000000000000 R08: 00007f20cfc7df14 R09: 000000000000000c [ 173.336576][T10834] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 173.336588][T10834] R13: 00007f20cfc7df68 R14: 00007f20cfc7e010 R15: 0000000000000000 [ 173.336610][T10834] [ 173.588554][T10836] SELinux: policydb string SE Linu does not match my string SE Linux [ 173.597191][T10836] SELinux: failed to load policy [ 173.611796][T10833] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 173.619620][ T8764] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 173.629077][ T8764] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 173.637089][T10833] 8021q: adding VLAN 0 to HW filter on device bond20 [ 173.648199][T10838] netlink: 'syz.4.2562': attribute type 4 has an invalid length. [ 173.658114][ T2968] lo speed is unknown, defaulting to 1000 [ 173.663885][ T2968] syz0: Port: 1 Link DOWN [ 173.756852][ T8764] batman_adv: batadv8: No IGMP Querier present - multicast optimizations disabled [ 173.766169][ T8764] batman_adv: batadv8: No MLD Querier present - multicast optimizations disabled [ 174.008450][T10864] lo speed is unknown, defaulting to 1000 [ 174.014644][T10864] lo speed is unknown, defaulting to 1000 [ 174.022492][T10864] lo speed is unknown, defaulting to 1000 [ 174.028769][T10864] wg1 speed is unknown, defaulting to 1000 [ 174.042773][T10867] SELinux: policydb version 0 does not match my version range 15-35 [ 174.051316][T10867] SELinux: failed to load policy [ 174.077467][T10870] FAULT_INJECTION: forcing a failure. [ 174.077467][T10870] name failslab, interval 1, probability 0, space 0, times 0 [ 174.091211][T10870] CPU: 0 UID: 0 PID: 10870 Comm: syz.0.2574 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.091245][T10870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.091257][T10870] Call Trace: [ 174.091265][T10870] [ 174.091273][T10870] __dump_stack+0x1d/0x30 [ 174.091300][T10870] dump_stack_lvl+0xe8/0x140 [ 174.091346][T10870] dump_stack+0x15/0x1b [ 174.091363][T10870] should_fail_ex+0x265/0x280 [ 174.091395][T10870] should_failslab+0x8c/0xb0 [ 174.091431][T10870] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 174.091470][T10870] ? __d_alloc+0x3d/0x340 [ 174.091540][T10870] __d_alloc+0x3d/0x340 [ 174.091581][T10870] ? from_vfsgid+0x70/0xa0 [ 174.091652][T10870] d_alloc_pseudo+0x1e/0x80 [ 174.091738][T10870] alloc_file_pseudo+0x71/0x160 [ 174.091773][T10870] hugetlb_file_setup+0x2a6/0x3d0 [ 174.091859][T10870] ksys_mmap_pgoff+0x157/0x310 [ 174.091884][T10870] x64_sys_call+0x14a3/0x3000 [ 174.091918][T10870] do_syscall_64+0xd2/0x200 [ 174.091943][T10870] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.091982][T10870] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.092087][T10870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.092112][T10870] RIP: 0033:0x7fe8ad97f6c9 [ 174.092128][T10870] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.092151][T10870] RSP: 002b:00007fe8ac3e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.092225][T10870] RAX: ffffffffffffffda RBX: 00007fe8adbd5fa0 RCX: 00007fe8ad97f6c9 [ 174.092242][T10870] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 174.092259][T10870] RBP: 00007fe8ac3e7090 R08: ffffffffffffffff R09: 0000000000000000 [ 174.092276][T10870] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 174.092293][T10870] R13: 00007fe8adbd6038 R14: 00007fe8adbd5fa0 R15: 00007fffe5a89218 [ 174.092379][T10870] [ 174.289615][T10873] FAULT_INJECTION: forcing a failure. [ 174.289615][T10873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.302976][T10873] CPU: 1 UID: 0 PID: 10873 Comm: syz.4.2575 Not tainted syzkaller #0 PREEMPT(voluntary) [ 174.303025][T10873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.303041][T10873] Call Trace: [ 174.303049][T10873] [ 174.303060][T10873] __dump_stack+0x1d/0x30 [ 174.303090][T10873] dump_stack_lvl+0xe8/0x140 [ 174.303118][T10873] dump_stack+0x15/0x1b [ 174.303142][T10873] should_fail_ex+0x265/0x280 [ 174.303218][T10873] should_fail+0xb/0x20 [ 174.303239][T10873] should_fail_usercopy+0x1a/0x20 [ 174.303266][T10873] _copy_from_iter+0xd2/0xe80 [ 174.303296][T10873] ? __build_skb_around+0x1ab/0x200 [ 174.303377][T10873] ? __alloc_skb+0x223/0x320 [ 174.303541][T10873] netlink_sendmsg+0x471/0x6b0 [ 174.303570][T10873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.303661][T10873] __sock_sendmsg+0x145/0x180 [ 174.303695][T10873] ____sys_sendmsg+0x31e/0x4e0 [ 174.303766][T10873] ___sys_sendmsg+0x17b/0x1d0 [ 174.303813][T10873] __x64_sys_sendmsg+0xd4/0x160 [ 174.303905][T10873] x64_sys_call+0x191e/0x3000 [ 174.303929][T10873] do_syscall_64+0xd2/0x200 [ 174.303971][T10873] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.304007][T10873] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.304046][T10873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.304077][T10873] RIP: 0033:0x7f432c1af6c9 [ 174.304094][T10873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.304118][T10873] RSP: 002b:00007f432ac0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.304142][T10873] RAX: ffffffffffffffda RBX: 00007f432c405fa0 RCX: 00007f432c1af6c9 [ 174.304220][T10873] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 174.304233][T10873] RBP: 00007f432ac0f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.304245][T10873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.304257][T10873] R13: 00007f432c406038 R14: 00007f432c405fa0 R15: 00007ffde5c1d7e8 [ 174.304281][T10873] [ 174.543753][T10878] lo speed is unknown, defaulting to 1000 [ 174.550090][T10878] lo speed is unknown, defaulting to 1000 [ 174.556315][T10878] lo speed is unknown, defaulting to 1000 [ 174.562480][T10878] wg1 speed is unknown, defaulting to 1000 [ 174.583996][T10880] IPv6: NLM_F_CREATE should be specified when creating new route [ 174.723637][T10891] program syz.4.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.763029][T10894] SELinux: policydb version 0 does not match my version range 15-35 [ 174.771419][T10894] SELinux: failed to load policy [ 174.777611][T10895] program syz.4.2583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 174.817395][T10895] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 174.926235][ T5925] usb usb6-port1: unable to enumerate USB device [ 174.932884][T10701] vhci_hcd: invalid port number 96 [ 174.938972][T10701] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 175.077608][T10919] netlink: 'syz.1.2592': attribute type 1 has an invalid length. [ 175.223555][T10923] SELinux: policydb version 0 does not match my version range 15-35 [ 175.231991][T10923] SELinux: failed to load policy [ 175.389879][T10932] FAULT_INJECTION: forcing a failure. [ 175.389879][T10932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.403005][T10932] CPU: 1 UID: 0 PID: 10932 Comm: syz.3.2599 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.403041][T10932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.403055][T10932] Call Trace: [ 175.403062][T10932] [ 175.403072][T10932] __dump_stack+0x1d/0x30 [ 175.403102][T10932] dump_stack_lvl+0xe8/0x140 [ 175.403205][T10932] dump_stack+0x15/0x1b [ 175.403254][T10932] should_fail_ex+0x265/0x280 [ 175.403282][T10932] should_fail+0xb/0x20 [ 175.403322][T10932] should_fail_usercopy+0x1a/0x20 [ 175.403351][T10932] _copy_from_user+0x1c/0xb0 [ 175.403466][T10932] ___sys_sendmsg+0xc1/0x1d0 [ 175.403514][T10932] __x64_sys_sendmsg+0xd4/0x160 [ 175.403547][T10932] x64_sys_call+0x191e/0x3000 [ 175.403621][T10932] do_syscall_64+0xd2/0x200 [ 175.403670][T10932] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.403730][T10932] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.403775][T10932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.403803][T10932] RIP: 0033:0x7f48b5f1f6c9 [ 175.403821][T10932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.403869][T10932] RSP: 002b:00007f48b497f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.403888][T10932] RAX: ffffffffffffffda RBX: 00007f48b6175fa0 RCX: 00007f48b5f1f6c9 [ 175.403904][T10932] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 175.403921][T10932] RBP: 00007f48b497f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.403937][T10932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.403952][T10932] R13: 00007f48b6176038 R14: 00007f48b6175fa0 R15: 00007fffd4a24ec8 [ 175.404001][T10932] [ 175.606738][T10934] netlink: 28 bytes leftover after parsing attributes in process `'. [ 175.650061][T10940] netlink: 'syz.4.2604': attribute type 4 has an invalid length. [ 175.738317][T10953] FAULT_INJECTION: forcing a failure. [ 175.738317][T10953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.751604][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.2.2608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.751713][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 175.751738][T10953] Call Trace: [ 175.751746][T10953] [ 175.751756][T10953] __dump_stack+0x1d/0x30 [ 175.751784][T10953] dump_stack_lvl+0xe8/0x140 [ 175.751812][T10953] dump_stack+0x15/0x1b [ 175.751836][T10953] should_fail_ex+0x265/0x280 [ 175.751863][T10953] should_fail+0xb/0x20 [ 175.751898][T10953] should_fail_usercopy+0x1a/0x20 [ 175.751985][T10953] _copy_from_iter+0xd2/0xe80 [ 175.752015][T10953] ? __build_skb_around+0x1ab/0x200 [ 175.752056][T10953] ? __alloc_skb+0x223/0x320 [ 175.752099][T10953] netlink_sendmsg+0x471/0x6b0 [ 175.752128][T10953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.752244][T10953] __sock_sendmsg+0x145/0x180 [ 175.752282][T10953] ____sys_sendmsg+0x31e/0x4e0 [ 175.752328][T10953] ___sys_sendmsg+0x17b/0x1d0 [ 175.752370][T10953] __x64_sys_sendmsg+0xd4/0x160 [ 175.752402][T10953] x64_sys_call+0x191e/0x3000 [ 175.752480][T10953] do_syscall_64+0xd2/0x200 [ 175.752523][T10953] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 175.752561][T10953] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 175.752612][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.752641][T10953] RIP: 0033:0x7f20d121f6c9 [ 175.752658][T10953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.752681][T10953] RSP: 002b:00007f20cfc7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.752765][T10953] RAX: ffffffffffffffda RBX: 00007f20d1475fa0 RCX: 00007f20d121f6c9 [ 175.752857][T10953] RDX: 0000000020008080 RSI: 0000200000000340 RDI: 0000000000000003 [ 175.752874][T10953] RBP: 00007f20cfc7f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.752888][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.752902][T10953] R13: 00007f20d1476038 R14: 00007f20d1475fa0 R15: 00007fffa9a20468 [ 175.752929][T10953] [ 176.019091][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 176.019110][ T29] audit: type=1400 audit(1762282946.605:17906): avc: denied { validate_trans } for pid=10959 comm="syz.1.2610" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 176.037450][T10960] macvtap1: entered allmulticast mode [ 176.051573][T10960] bridge0: entered allmulticast mode [ 176.069208][ T29] audit: type=1326 audit(1762282946.635:17907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.093870][ T29] audit: type=1326 audit(1762282946.635:17908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.118573][ T29] audit: type=1326 audit(1762282946.635:17909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.120735][T10960] batman_adv: batadv0: Adding interface: macvtap1 [ 176.142430][ T29] audit: type=1326 audit(1762282946.645:17910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.148897][T10960] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.151577][T10951] FAULT_INJECTION: forcing a failure. [ 176.151577][T10951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.173548][ T29] audit: type=1326 audit(1762282946.645:17911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.198957][T10951] CPU: 1 UID: 0 PID: 10951 Comm: syz.3.2607 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.199002][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 176.199016][T10951] Call Trace: [ 176.199024][T10951] [ 176.199034][T10951] __dump_stack+0x1d/0x30 [ 176.199062][T10951] dump_stack_lvl+0xe8/0x140 [ 176.199142][T10951] dump_stack+0x15/0x1b [ 176.199161][T10951] should_fail_ex+0x265/0x280 [ 176.199182][T10951] should_fail+0xb/0x20 [ 176.199203][T10951] should_fail_usercopy+0x1a/0x20 [ 176.199264][T10951] strncpy_from_user+0x25/0x230 [ 176.199307][T10951] ? kmem_cache_alloc_noprof+0x242/0x480 [ 176.199347][T10951] ? getname_flags+0x80/0x3b0 [ 176.199385][T10951] getname_flags+0xae/0x3b0 [ 176.199491][T10951] path_setxattrat+0x223/0x310 [ 176.199552][T10951] __x64_sys_setxattr+0x6e/0x90 [ 176.199586][T10951] x64_sys_call+0xad2/0x3000 [ 176.199609][T10951] do_syscall_64+0xd2/0x200 [ 176.199710][T10951] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 176.199745][T10951] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 176.199795][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.199820][T10951] RIP: 0033:0x7f48b5f1f6c9 [ 176.199837][T10951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.199856][T10951] RSP: 002b:00007f48b497f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 176.199875][T10951] RAX: ffffffffffffffda RBX: 00007f48b6175fa0 RCX: 00007f48b5f1f6c9 [ 176.199891][T10951] RDX: 0000200000000180 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 176.199904][T10951] RBP: 00007f48b497f090 R08: 0000000000000002 R09: 0000000000000000 [ 176.199947][T10951] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000001 [ 176.199966][T10951] R13: 00007f48b6176038 R14: 00007f48b6175fa0 R15: 00007fffd4a24ec8 [ 176.199997][T10951] [ 176.266071][T10960] batman_adv: batadv0: Interface activated: macvtap1 [ 176.268708][ T29] audit: type=1326 audit(1762282946.645:17912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.330285][T10960] hub 1-0:1.0: USB hub found [ 176.330337][T10960] hub 1-0:1.0: 8 ports detected [ 176.467154][ T29] audit: type=1326 audit(1762282946.645:17913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.467194][ T29] audit: type=1326 audit(1762282946.645:17914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.467235][ T29] audit: type=1326 audit(1762282946.645:17915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10958 comm="syz.2.2611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20d121f6c9 code=0x7ffc0000 [ 176.553239][T10973] netlink: 28 bytes leftover after parsing attributes in process `'. [ 176.586829][T10977] netlink: 'syz.3.2616': attribute type 4 has an invalid length. [ 176.620502][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2617'. [ 176.643786][T10979] team0: Port device team_slave_1 removed [ 176.683499][T10985] netlink: 'syz.4.2619': attribute type 1 has an invalid length. [ 176.699399][T10981] loop0: detected capacity change from 0 to 512 [ 176.706242][T10985] 8021q: adding VLAN 0 to HW filter on device bond14 [ 176.723622][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2619'. [ 176.735562][T10985] bond14 (unregistering): Released all slaves [ 177.088688][T11009] lo speed is unknown, defaulting to 1000 [ 177.099503][T11008] netlink: 'syz.2.2627': attribute type 4 has an invalid length. [ 177.121131][T11009] lo speed is unknown, defaulting to 1000 [ 177.123357][ T5925] lo speed is unknown, defaulting to 1000 [ 177.132698][ T5925] syz2: Port: 1 Link DOWN [ 177.138293][T11009] lo speed is unknown, defaulting to 1000 [ 177.234150][T11009] wg1 speed is unknown, defaulting to 1000 [ 177.409194][T11027] netlink: 'syz.0.2634': attribute type 1 has an invalid length. [ 177.423268][T11027] 8021q: adding VLAN 0 to HW filter on device bond12 [ 177.440329][T11027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2634'. [ 177.452161][T11027] bond12 (unregistering): Released all slaves [ 177.522892][T11034] bridge0: port 10(batadv9) entered blocking state [ 177.529689][T11034] bridge0: port 10(batadv9) entered disabled state [ 177.547043][T11034] batadv9: entered allmulticast mode [ 177.553682][T11034] batadv9: entered promiscuous mode [ 177.584257][T11039] netlink: 'syz.0.2638': attribute type 4 has an invalid length. [ 177.978055][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2642'. [ 177.994949][T11048] 8021q: adding VLAN 0 to HW filter on device bond14 [ 178.042585][ T8762] batman_adv: batadv9: No IGMP Querier present - multicast optimizations disabled [ 178.051876][ T8762] batman_adv: batadv9: No MLD Querier present - multicast optimizations disabled [ 178.079948][T11053] program syz.2.2643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.092278][T11050] bond14 (unregistering): Released all slaves [ 178.133476][T11059] program syz.2.2643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.221293][T11062] lo speed is unknown, defaulting to 1000 [ 178.258667][T11062] lo speed is unknown, defaulting to 1000 [ 178.271674][T11062] lo speed is unknown, defaulting to 1000 [ 178.281312][T11062] wg1 speed is unknown, defaulting to 1000 [ 178.444679][ T5925] Process accounting resumed [ 178.535411][T11080] FAULT_INJECTION: forcing a failure. [ 178.535411][T11080] name failslab, interval 1, probability 0, space 0, times 0 [ 178.548201][T11080] CPU: 1 UID: 0 PID: 11080 Comm: syz.4.2652 Not tainted syzkaller #0 PREEMPT(voluntary) [ 178.548236][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 178.548253][T11080] Call Trace: [ 178.548262][T11080] [ 178.548272][T11080] __dump_stack+0x1d/0x30 [ 178.548301][T11080] dump_stack_lvl+0xe8/0x140 [ 178.548371][T11080] dump_stack+0x15/0x1b [ 178.548394][T11080] should_fail_ex+0x265/0x280 [ 178.548419][T11080] should_failslab+0x8c/0xb0 [ 178.548467][T11080] kmem_cache_alloc_noprof+0x50/0x480 [ 178.548584][T11080] ? security_file_alloc+0x32/0x100 [ 178.548691][T11080] security_file_alloc+0x32/0x100 [ 178.548731][T11080] init_file+0x5c/0x1d0 [ 178.548804][T11080] alloc_empty_file+0x8b/0x200 [ 178.548828][T11080] path_openat+0x68/0x2170 [ 178.548906][T11080] ? _parse_integer_limit+0x170/0x190 [ 178.548952][T11080] ? kstrtoull+0x111/0x140 [ 178.548994][T11080] ? kstrtouint+0x76/0xc0 [ 178.549099][T11080] do_filp_open+0x109/0x230 [ 178.549221][T11080] do_sys_openat2+0xa6/0x110 [ 178.549258][T11080] __x64_sys_openat+0xf2/0x120 [ 178.549287][T11080] x64_sys_call+0x2eab/0x3000 [ 178.549326][T11080] do_syscall_64+0xd2/0x200 [ 178.549351][T11080] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 178.549443][T11080] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 178.549490][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.549540][T11080] RIP: 0033:0x7f432c1af6c9 [ 178.549559][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.549634][T11080] RSP: 002b:00007f432ac0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 178.549676][T11080] RAX: ffffffffffffffda RBX: 00007f432c405fa0 RCX: 00007f432c1af6c9 [ 178.549692][T11080] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 178.549708][T11080] RBP: 00007f432ac0f090 R08: 0000000000000000 R09: 0000000000000000 [ 178.549724][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.549739][T11080] R13: 00007f432c406038 R14: 00007f432c405fa0 R15: 00007ffde5c1d7e8 [ 178.549765][T11080] [ 178.764675][T11078] loop0: detected capacity change from 0 to 8192 [ 178.776036][T11078] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 178.906884][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2651'. [ 179.120703][T11093] SELinux: failed to load policy [ 179.126585][T11093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2573 sclass=netlink_route_socket pid=11093 comm=syz.0.2658 [ 179.147002][T11096] bridge0: port 7(batadv7) entered blocking state [ 179.153555][T11096] bridge0: port 7(batadv7) entered disabled state [ 179.168808][T11096] batadv7: entered allmulticast mode [ 179.176556][T11096] batadv7: entered promiscuous mode [ 179.276564][T11104] loop0: detected capacity change from 0 to 1024 [ 179.332268][T11104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.355241][ T5925] kernel read not supported for file /mls (pid: 5925 comm: kworker/0:13) [ 179.378243][T11104] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 179.395942][T11105] lo speed is unknown, defaulting to 1000 [ 179.396204][T11104] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 179.402207][T11105] lo speed is unknown, defaulting to 1000 [ 179.413909][T11104] EXT4-fs (loop0): This should not happen!! Data will be lost [ 179.413909][T11104] [ 179.424116][T11105] lo speed is unknown, defaulting to 1000 [ 179.429444][T11104] EXT4-fs (loop0): Total free blocks count 0 [ 179.435546][T11105] wg1 speed is unknown, defaulting to 1000 [ 179.441102][T11104] EXT4-fs (loop0): Free/Dirty block details [ 179.441136][T11104] EXT4-fs (loop0): free_blocks=68451041280 [ 179.441151][T11104] EXT4-fs (loop0): dirty_blocks=80 [ 179.463968][T11104] EXT4-fs (loop0): Block reservation details [ 179.470094][T11104] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 179.527412][T11125] 9pnet_fd: Insufficient options for proto=fd [ 179.553544][T11123] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 65 with error 28 [ 179.646115][ T12] batman_adv: batadv7: No IGMP Querier present - multicast optimizations disabled [ 179.655477][ T12] batman_adv: batadv7: No MLD Querier present - multicast optimizations disabled [ 180.253018][T11151] loop0: detected capacity change from 0 to 1024 [ 180.270762][T11153] validate_nla: 2 callbacks suppressed [ 180.270728][T11151] EXT4-fs: Ignoring removed orlov option [ 180.270889][T11153] netlink: 'syz.4.2677': attribute type 1 has an invalid length. [ 180.295651][T11151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.310962][T11153] 8021q: adding VLAN 0 to HW filter on device bond14 [ 180.326362][T11153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2677'. [ 180.337754][T11153] bond14 (unregistering): Released all slaves [ 180.433059][T11157] EXT4-fs (loop0): shut down requested (0) [ 180.445941][ T3421] usb usb6-port1: attempt power cycle [ 180.527501][T11161] program syz.2.2679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.578070][T11163] program syz.2.2679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.588771][T11163] netlink: 'syz.2.2679': attribute type 1 has an invalid length. [ 180.866268][T11172] lo speed is unknown, defaulting to 1000 [ 180.872658][T11172] lo speed is unknown, defaulting to 1000 [ 180.895436][T11172] lo speed is unknown, defaulting to 1000 [ 180.908981][T11172] wg1 speed is unknown, defaulting to 1000 [ 181.026115][T11166] FAULT_INJECTION: forcing a failure. [ 181.026115][T11166] name failslab, interval 1, probability 0, space 0, times 0 [ 181.039606][T11166] CPU: 0 UID: 0 PID: 11166 Comm: syz.4.2680 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.039678][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 181.039734][T11166] Call Trace: [ 181.039740][T11166] [ 181.039747][T11166] __dump_stack+0x1d/0x30 [ 181.039795][T11166] dump_stack_lvl+0xe8/0x140 [ 181.039814][T11166] dump_stack+0x15/0x1b [ 181.039829][T11166] should_fail_ex+0x265/0x280 [ 181.039872][T11166] should_failslab+0x8c/0xb0 [ 181.039898][T11166] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 181.039925][T11166] ? __d_alloc+0x3d/0x340 [ 181.039955][T11166] __d_alloc+0x3d/0x340 [ 181.040059][T11166] d_alloc_parallel+0x58/0xc70 [ 181.040077][T11166] ? __rcu_read_unlock+0x4f/0x70 [ 181.040120][T11166] ? __d_lookup+0x316/0x340 [ 181.040144][T11166] path_openat+0x6b5/0x2170 [ 181.040212][T11166] do_filp_open+0x109/0x230 [ 181.040243][T11166] do_sys_openat2+0xa6/0x110 [ 181.040263][T11166] __x64_sys_openat+0xf2/0x120 [ 181.040283][T11166] x64_sys_call+0x2eab/0x3000 [ 181.040322][T11166] do_syscall_64+0xd2/0x200 [ 181.040340][T11166] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 181.040368][T11166] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 181.040448][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.040468][T11166] RIP: 0033:0x7f432c1af6c9 [ 181.040482][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.040546][T11166] RSP: 002b:00007f432ac0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.040570][T11166] RAX: ffffffffffffffda RBX: 00007f432c405fa0 RCX: 00007f432c1af6c9 [ 181.040663][T11166] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 181.040736][T11166] RBP: 00007f432ac0f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.040751][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.040765][T11166] R13: 00007f432c406038 R14: 00007f432c405fa0 R15: 00007ffde5c1d7e8 [ 181.040846][T11166] [ 181.359026][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 181.359044][ T29] audit: type=1326 audit(1762282951.945:18684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 181.406535][ T29] audit: type=1326 audit(1762282951.975:18685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 181.430877][ T29] audit: type=1326 audit(1762282951.975:18686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 181.454596][ T29] audit: type=1326 audit(1762282951.975:18687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 181.479144][ T29] audit: type=1326 audit(1762282951.975:18688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 181.503161][ T29] audit: type=1326 audit(1762282951.975:18689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 181.527312][ T29] audit: type=1326 audit(1762282951.975:18690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b5f1f6c9 code=0x7ffc0000 [ 181.551178][ T29] audit: type=1326 audit(1762282951.975:18691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f48b5f215e7 code=0x7ffc0000 [ 181.575380][ T29] audit: type=1326 audit(1762282951.975:18692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f48b5f2155c code=0x7ffc0000 [ 181.599749][ T29] audit: type=1326 audit(1762282951.975:18693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11188 comm="syz.3.2688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f48b5f21494 code=0x7ffc0000 [ 181.865332][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2690'. [ 181.909257][T11202] program syz.3.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.983129][T11203] program syz.3.2691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 182.010267][T11205] FAULT_INJECTION: forcing a failure. [ 182.010267][T11205] name failslab, interval 1, probability 0, space 0, times 0 [ 182.023020][T11205] CPU: 1 UID: 0 PID: 11205 Comm: syz.4.2692 Not tainted syzkaller #0 PREEMPT(voluntary) [ 182.023057][T11205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 182.023075][T11205] Call Trace: [ 182.023083][T11205] [ 182.023093][T11205] __dump_stack+0x1d/0x30 [ 182.023174][T11205] dump_stack_lvl+0xe8/0x140 [ 182.023202][T11205] dump_stack+0x15/0x1b [ 182.023219][T11205] should_fail_ex+0x265/0x280 [ 182.023241][T11205] should_failslab+0x8c/0xb0 [ 182.023277][T11205] __kmalloc_noprof+0xa5/0x570 [ 182.023374][T11205] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 182.023406][T11205] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 182.023551][T11205] genl_family_rcv_msg_doit+0x48/0x1b0 [ 182.023586][T11205] ? selinux_capable+0x31/0x40 [ 182.023661][T11205] ? security_capable+0x83/0x90 [ 182.023751][T11205] ? ns_capable+0x7d/0xb0 [ 182.023777][T11205] genl_rcv_msg+0x422/0x460 [ 182.023806][T11205] ? __pfx_netlbl_unlabel_staticadddef+0x10/0x10 [ 182.023842][T11205] netlink_rcv_skb+0x123/0x220 [ 182.023957][T11205] ? __pfx_genl_rcv_msg+0x10/0x10 [ 182.024001][T11205] genl_rcv+0x28/0x40 [ 182.024025][T11205] netlink_unicast+0x5c0/0x690 [ 182.024150][T11205] netlink_sendmsg+0x58b/0x6b0 [ 182.024183][T11205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 182.024210][T11205] __sock_sendmsg+0x145/0x180 [ 182.024244][T11205] ____sys_sendmsg+0x31e/0x4e0 [ 182.024364][T11205] ___sys_sendmsg+0x17b/0x1d0 [ 182.024459][T11205] __x64_sys_sendmsg+0xd4/0x160 [ 182.024559][T11205] x64_sys_call+0x191e/0x3000 [ 182.024584][T11205] do_syscall_64+0xd2/0x200 [ 182.024603][T11205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 182.024631][T11205] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 182.024686][T11205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.024707][T11205] RIP: 0033:0x7f432c1af6c9 [ 182.024723][T11205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.024781][T11205] RSP: 002b:00007f432ac0f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.024805][T11205] RAX: ffffffffffffffda RBX: 00007f432c405fa0 RCX: 00007f432c1af6c9 [ 182.024876][T11205] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 182.024893][T11205] RBP: 00007f432ac0f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.024910][T11205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.025005][T11205] R13: 00007f432c406038 R14: 00007f432c405fa0 R15: 00007ffde5c1d7e8 [ 182.025028][T11205] [ 182.315818][T11203] netlink: 'syz.3.2691': attribute type 1 has an invalid length. [ 182.525979][ T3421] usb usb6-port1: unable to enumerate USB device [ 182.730592][T11221] lo speed is unknown, defaulting to 1000 [ 182.772663][T11221] lo speed is unknown, defaulting to 1000 [ 182.810776][T11221] lo speed is unknown, defaulting to 1000 [ 182.855168][T11221] wg1 speed is unknown, defaulting to 1000 [ 183.878452][T11233] netlink: 'syz.3.2701': attribute type 21 has an invalid length. [ 183.923425][T11235] vlan2: entered allmulticast mode [ 184.237636][T11276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.246610][T11276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.495934][ T3421] usb usb6-port1: attempt power cycle [ 184.802490][T11285] bridge0: left allmulticast mode [ 184.809151][T11285] netlink: 'syz.2.2723': attribute type 10 has an invalid length. [ 184.817043][T11285] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2723'. [ 184.826155][T11285] team0: entered promiscuous mode [ 184.831631][T11285] team_slave_0: entered promiscuous mode [ 184.839277][T11285] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.840823][T11287] 9pnet_virtio: no channels available for device syz [ 184.846680][T11285] bridge0: port 4(team0) entered blocking state [ 184.859230][T11285] bridge0: port 4(team0) entered disabled state [ 184.933866][T11301] 9pnet_virtio: no channels available for device syz [ 185.973184][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2739'. [ 186.114733][T11330] 9pnet_virtio: no channels available for device syz [ 186.157045][T11334] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2744'. [ 186.351168][ T3421] usb usb6-port1: unable to enumerate USB device [ 186.359046][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.388272][T11344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.399159][T11344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.408612][T11348] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2751'. [ 186.547075][T11356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.555739][T11356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.835345][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 186.835363][ T29] audit: type=1400 audit(1762282957.415:18730): avc: denied { setopt } for pid=11359 comm="syz.2.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.862096][ T29] audit: type=1400 audit(1762282957.425:18731): avc: denied { write } for pid=11359 comm="syz.2.2755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 186.874890][T11362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2756'. [ 186.881789][ T29] audit: type=1400 audit(1762282957.455:18732): avc: denied { watch_reads } for pid=11361 comm="syz.2.2756" path="/565" dev="tmpfs" ino=2972 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 186.941586][T11364] lo speed is unknown, defaulting to 1000 [ 186.948000][T11364] lo speed is unknown, defaulting to 1000 [ 186.954219][T11364] lo speed is unknown, defaulting to 1000 [ 186.960319][T11364] wg1 speed is unknown, defaulting to 1000 [ 187.100077][ T29] audit: type=1400 audit(1762282957.685:18733): avc: denied { read append } for pid=11379 comm="syz.3.2764" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 187.112693][T11380] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 187.125407][ T29] audit: type=1400 audit(1762282957.685:18734): avc: denied { open } for pid=11379 comm="syz.3.2764" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 187.164202][T11381] vlan0: entered promiscuous mode [ 187.199173][T11385] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2766'. [ 187.222307][T11386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11386 comm=syz.0.2762 [ 187.340929][T11401] hsr0: default FDB implementation only supports local addresses [ 187.360921][T11405] 9pnet_virtio: no channels available for device syz [ 187.576806][ T29] audit: type=1400 audit(1762282958.165:18735): avc: denied { connect } for pid=11442 comm="syz.1.2793" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 187.616851][T11440] lo speed is unknown, defaulting to 1000 [ 187.630653][T11441] lo speed is unknown, defaulting to 1000 [ 187.636721][T11440] lo speed is unknown, defaulting to 1000 [ 187.643130][T11440] lo speed is unknown, defaulting to 1000 [ 187.649670][T11441] lo speed is unknown, defaulting to 1000 [ 187.660609][T11451] syzkaller1: entered promiscuous mode [ 187.666378][T11451] syzkaller1: entered allmulticast mode [ 187.692432][T11441] lo speed is unknown, defaulting to 1000 [ 187.693920][T11440] wg1 speed is unknown, defaulting to 1000 [ 187.725402][T11441] wg1 speed is unknown, defaulting to 1000 [ 187.747387][ T29] audit: type=1400 audit(1762282958.335:18736): avc: denied { write } for pid=11458 comm="syz.2.2799" name="file0" dev="tmpfs" ino=2982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.770980][ T29] audit: type=1400 audit(1762282958.335:18737): avc: denied { open } for pid=11458 comm="syz.2.2799" path="/566/file0" dev="tmpfs" ino=2982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.796852][T11459] block device autoloading is deprecated and will be removed. [ 187.862954][ T29] audit: type=1400 audit(1762282958.445:18738): avc: denied { ioctl } for pid=11458 comm="syz.2.2799" path="/566/file0" dev="tmpfs" ino=2982 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 187.961377][ T29] audit: type=1400 audit(1762282958.545:18739): avc: denied { mounton } for pid=11472 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 187.962614][T11471] 9pnet_virtio: no channels available for device syz [ 188.168767][T11472] lo speed is unknown, defaulting to 1000 [ 188.175102][T11472] lo speed is unknown, defaulting to 1000 [ 188.184047][T11472] lo speed is unknown, defaulting to 1000 [ 188.191065][T11505] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2814'. [ 188.202805][T11472] wg1 speed is unknown, defaulting to 1000 [ 188.218395][T11507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2815'. [ 188.240170][T11507] netlink: 92 bytes leftover after parsing attributes in process `syz.1.2815'. [ 188.311125][T11472] chnl_net:caif_netlink_parms(): no params data found [ 188.391796][T11472] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.399213][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.412088][T11472] bridge_slave_0: entered allmulticast mode [ 188.419036][T11472] bridge_slave_0: entered promiscuous mode [ 188.427908][T11472] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.435016][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.451228][T11472] bridge_slave_1: entered allmulticast mode [ 188.458209][T11472] bridge_slave_1: entered promiscuous mode [ 188.488899][T11472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.499790][T11472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.527502][T11472] team0: Port device team_slave_0 added [ 188.550850][T11472] team0: Port device team_slave_1 added [ 188.581443][T11472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.588553][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.614580][T11472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.646943][T11472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.654040][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.680760][T11472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.838444][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.848902][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 188.872243][ T37] bond0 (unregistering): Released all slaves [ 188.889141][ T37] bond1 (unregistering): Released all slaves [ 188.898979][ T37] bond2 (unregistering): Released all slaves [ 188.907803][ T37] bond3 (unregistering): Released all slaves [ 188.917306][ T37] bond4 (unregistering): Released all slaves [ 188.927183][ T37] bond5 (unregistering): Released all slaves [ 188.953546][ T37] bond6 (unregistering): Released all slaves [ 188.968689][ T37] bond7 (unregistering): Released all slaves [ 188.991113][ T37] bond8 (unregistering): Released all slaves [ 189.010860][ T37] bond9 (unregistering): Released all slaves [ 189.022242][ T37] bond10 (unregistering): Released all slaves [ 189.033534][ T37] bond11 (unregistering): Released all slaves [ 189.045864][ T37] bond12 (unregistering): Released all slaves [ 189.054935][ T37] bond13 (unregistering): Released all slaves [ 189.073107][ T37] bond14 (unregistering): Released all slaves [ 189.082521][ T37] bond15 (unregistering): Released all slaves [ 189.091823][ T37] bond16 (unregistering): Released all slaves [ 189.101693][ T37] bond17 (unregistering): Released all slaves [ 189.116929][ T37] bond18 (unregistering): Released all slaves [ 189.128950][ T37] bond19 (unregistering): Released all slaves [ 189.142693][ T37] bond20 (unregistering): Released all slaves [ 189.151989][ T37] bond21 (unregistering): Released all slaves [ 189.173420][T11550] team0: No ports can be present during mode change [ 189.180919][T11555] vlan0: entered promiscuous mode [ 189.251978][T11472] hsr_slave_0: entered promiscuous mode [ 189.284773][T11472] hsr_slave_1: entered promiscuous mode [ 189.296114][T11472] debugfs: 'hsr0' already exists in 'hsr' [ 189.301887][T11472] Cannot create hsr debugfs directory [ 189.340297][ T37] hsr_slave_0: left promiscuous mode [ 189.374593][ T37] hsr_slave_1: left promiscuous mode [ 189.426453][ T37] team0 (unregistering): Port device team_slave_0 removed [ 189.494907][T11591] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2846'. [ 189.963610][T11472] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.974879][T11472] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.000708][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2874'. [ 190.014365][T11472] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.062334][T11472] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.154489][T11659] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2880'. [ 190.204642][T11472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.239451][T11472] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.255429][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.262636][ T8762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.306023][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.313128][ T8762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.412747][T11472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.678823][T11710] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2898'. [ 190.838430][T11472] veth0_vlan: entered promiscuous mode [ 190.859008][T11472] veth1_vlan: entered promiscuous mode [ 190.899911][T11472] veth0_macvtap: entered promiscuous mode [ 190.907970][T11472] veth1_macvtap: entered promiscuous mode [ 190.929628][T11472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.941043][T11472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.952537][ T8764] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.975283][ T8764] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.017060][T11734] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2908'. [ 191.035768][ T8764] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.052952][ T8764] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.244094][T11758] team0: No ports can be present during mode change [ 191.255307][T11758] vlan0: entered promiscuous mode [ 191.269344][T11758] team0: Port device vlan0 added [ 191.279463][T11758] tipc: Started in network mode [ 191.284428][T11758] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 191.292343][T11758] tipc: Enabled bearer , priority 0 [ 191.348990][T11754] lo speed is unknown, defaulting to 1000 [ 191.355171][T11754] lo speed is unknown, defaulting to 1000 [ 191.361538][T11754] wg1 speed is unknown, defaulting to 1000 [ 191.492044][T11754] chnl_net:caif_netlink_parms(): no params data found [ 191.512657][T11798] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2931'. [ 191.567164][T11803] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2933'. [ 191.585076][T11754] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.592256][T11754] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.599928][T11754] bridge_slave_0: entered allmulticast mode [ 191.606496][T11754] bridge_slave_0: entered promiscuous mode [ 191.614674][T11754] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.621930][T11754] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.629176][T11754] bridge_slave_1: entered allmulticast mode [ 191.635932][T11754] bridge_slave_1: entered promiscuous mode [ 191.659922][T11754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.677712][T11754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.703343][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2937'. [ 191.732994][T11754] team0: Port device team_slave_0 added [ 191.752733][T11754] team0: Port device team_slave_1 added [ 191.783408][ T12] batadv7: left allmulticast mode [ 191.788600][ T12] batadv7: left promiscuous mode [ 191.793653][ T12] bridge0: port 7(batadv7) entered disabled state [ 191.827079][ T12] batadv6: left allmulticast mode [ 191.832177][ T12] batadv6: left promiscuous mode [ 191.837573][ T12] bridge0: port 6(batadv6) entered disabled state [ 191.846899][ T12] batadv5: left allmulticast mode [ 191.852061][ T12] batadv5: left promiscuous mode [ 191.858110][ T12] bridge0: port 5(batadv5) entered disabled state [ 191.883623][ T12] batadv4: left allmulticast mode [ 191.888772][ T12] batadv4: left promiscuous mode [ 191.893854][ T12] bridge0: port 4(batadv4) entered disabled state [ 191.917000][ T12] batadv3: left allmulticast mode [ 191.918041][T11844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2950'. [ 191.922214][ T12] batadv3: left promiscuous mode [ 191.936525][ T12] bridge0: port 3(batadv3) entered disabled state [ 191.944320][ T12] batadv2: left allmulticast mode [ 191.949414][ T12] batadv2: left promiscuous mode [ 191.954544][ T12] bridge0: port 2(batadv2) entered disabled state [ 191.964850][ T12] batadv1: left allmulticast mode [ 191.970091][ T12] batadv1: left promiscuous mode [ 191.975259][ T12] bridge0: port 1(batadv1) entered disabled state [ 192.078703][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 192.078722][ T29] audit: type=1400 audit(1762282962.665:19100): avc: denied { block_suspend } for pid=11866 comm="syz.1.2960" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 192.169112][T11877] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 192.178885][T11877] SELinux: failed to load policy [ 192.198218][ T12] bond0 (unregistering): Released all slaves [ 192.206882][ T12] bond1 (unregistering): Released all slaves [ 192.217724][ T12] bond2 (unregistering): Released all slaves [ 192.227029][ T29] audit: type=1400 audit(1762282962.815:19101): avc: denied { watch } for pid=11881 comm="syz.1.2966" path="/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 192.249638][ T12] bond3 (unregistering): Released all slaves [ 192.259380][ T12] bond4 (unregistering): Released all slaves [ 192.268476][ T12] bond5 (unregistering): Released all slaves [ 192.277246][ T12] bond6 (unregistering): Released all slaves [ 192.287288][ T12] bond7 (unregistering): Released all slaves [ 192.296085][ T12] bond8 (unregistering): Released all slaves [ 192.305091][ T12] bond9 (unregistering): Released all slaves [ 192.313352][ T12] bond10 (unregistering): Released all slaves [ 192.323047][ T12] bond11 (unregistering): Released all slaves [ 192.331838][ T12] bond12 (unregistering): Released all slaves [ 192.340205][ T12] bond13 (unregistering): Released all slaves [ 192.357841][T11754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.364828][T11754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.391501][T11754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.403022][T11754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.410146][T11754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.424641][ T5927] tipc: Node number set to 11578026 [ 192.436167][T11754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.441726][T11894] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2970'. [ 192.497873][ T12] tipc: Left network mode [ 192.651101][T11754] hsr_slave_0: entered promiscuous mode [ 192.658852][T11754] hsr_slave_1: entered promiscuous mode [ 192.666761][T11754] debugfs: 'hsr0' already exists in 'hsr' [ 192.672553][T11754] Cannot create hsr debugfs directory [ 192.699337][T11903] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.857992][T11930] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2985'. [ 192.874646][ T29] audit: type=1400 audit(1762282963.455:19102): avc: denied { write } for pid=11931 comm="syz.0.2986" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 192.899954][ T29] audit: type=1400 audit(1762282963.485:19103): avc: denied { sqpoll } for pid=11931 comm="syz.0.2986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 192.938784][ T29] audit: type=1400 audit(1762282963.485:19104): avc: denied { read } for pid=11933 comm="syz.3.2987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 193.039808][T11945] SELinux: failed to load policy [ 193.212451][T11754] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.229801][T11754] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 193.244332][ T29] audit: type=1326 audit(1762282963.825:19105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11978 comm="syz.2.3009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f20d121f6c9 code=0x0 [ 193.285978][T11754] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 193.297999][T11754] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 193.423311][T11754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.439583][T11754] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.456369][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.463579][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.473943][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.481155][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.631517][T11754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.825033][T11754] veth0_vlan: entered promiscuous mode [ 193.841444][T11754] veth1_vlan: entered promiscuous mode [ 193.868746][T11754] veth0_macvtap: entered promiscuous mode [ 193.883244][T11754] veth1_macvtap: entered promiscuous mode [ 193.899157][T11754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.910315][T11754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.921444][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.931688][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.942129][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.957204][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.269844][T12086] lo speed is unknown, defaulting to 1000 [ 194.276786][T12086] wg1 speed is unknown, defaulting to 1000 [ 194.363911][T12086] chnl_net:caif_netlink_parms(): no params data found [ 194.441564][T12086] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.448721][T12086] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.456274][T12086] bridge_slave_0: entered allmulticast mode [ 194.462945][T12086] bridge_slave_0: entered promiscuous mode [ 194.476429][T12086] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.483569][T12086] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.491848][T12086] bridge_slave_1: entered allmulticast mode [ 194.498555][T12086] bridge_slave_1: entered promiscuous mode [ 194.520064][T12086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.530849][T12086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.585573][T12086] team0: Port device team_slave_0 added [ 194.592689][T12086] team0: Port device team_slave_1 added [ 194.622782][T12086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.629819][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.655812][T12086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.673994][T12086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.681009][T12086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.707158][T12086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.737891][T12158] SELinux: failed to load policy [ 194.770610][T12086] hsr_slave_0: entered promiscuous mode [ 194.777894][T12086] hsr_slave_1: entered promiscuous mode [ 194.783781][T12086] debugfs: 'hsr0' already exists in 'hsr' [ 194.789583][T12086] Cannot create hsr debugfs directory [ 194.855171][ T37] bridge0: port 4(team0) entered disabled state [ 194.873201][ T37] batadv1: left allmulticast mode [ 194.878344][ T37] batadv1: left promiscuous mode [ 194.883512][ T37] bridge0: port 3(batadv1) entered disabled state [ 194.895855][ T37] bridge_slave_1: left allmulticast mode [ 194.901559][ T37] bridge_slave_1: left promiscuous mode [ 194.907446][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.926577][ T37] bridge_slave_0: left promiscuous mode [ 194.932341][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.057128][ T37] bond11 (unregistering): (slave bridge2): Removing an active aggregator [ 195.071002][ T37] bond11 (unregistering): (slave bridge2): Releasing backup interface [ 195.080732][ T37] bridge2 (unregistering): left promiscuous mode [ 195.087234][ T37] bridge2 (unregistering): left allmulticast mode [ 195.227916][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.237060][ T37] bond_slave_0: left allmulticast mode [ 195.258982][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.278281][ T37] bond_slave_1: left allmulticast mode [ 195.288686][ T37] bond0 (unregistering): Released all slaves [ 195.308900][ T37] bond1 (unregistering): Released all slaves [ 195.323730][ T37] bond2 (unregistering): Released all slaves [ 195.355331][ T37] bond3 (unregistering): Released all slaves [ 195.370674][ T37] bond4 (unregistering): Released all slaves [ 195.380067][ T37] bond5 (unregistering): Released all slaves [ 195.389313][ T37] bond6 (unregistering): Released all slaves [ 195.397951][ T37] bond7 (unregistering): Released all slaves [ 195.406916][ T37] bond8 (unregistering): Released all slaves [ 195.415468][ T37] bond9 (unregistering): Released all slaves [ 195.424091][ T37] bond10 (unregistering): Released all slaves [ 195.432932][ T37] bond11 (unregistering): Released all slaves [ 195.441531][ T37] bond12 (unregistering): Released all slaves [ 195.450365][ T37] bond13 (unregistering): Released all slaves [ 195.459126][ T37] bond14 (unregistering): Released all slaves [ 195.482072][T12198] lo speed is unknown, defaulting to 1000 [ 195.489227][T12198] wg1 speed is unknown, defaulting to 1000 [ 195.547272][ T37] tipc: Left network mode [ 195.655251][ T37] hsr_slave_0: left promiscuous mode [ 195.664254][ T37] hsr_slave_1: left promiscuous mode [ 195.678178][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.705322][ T29] audit: type=1326 audit(1762282966.285:19106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ad97f6c9 code=0x7ffc0000 [ 195.729902][ T29] audit: type=1326 audit(1762282966.285:19107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ad97f6c9 code=0x7ffc0000 [ 195.753857][ T29] audit: type=1326 audit(1762282966.285:19108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe8ad97f6c9 code=0x7ffc0000 [ 195.778423][ T29] audit: type=1326 audit(1762282966.285:19109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12203 comm="syz.0.3094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8ad97f6c9 code=0x7ffc0000 [ 195.833177][ T37] team_slave_0 (unregistering): left promiscuous mode [ 195.841098][ T37] team_slave_0 (unregistering): left allmulticast mode [ 195.848803][ T37] team0 (unregistering): Port device team_slave_0 removed [ 196.191479][T12222] __nla_validate_parse: 5 callbacks suppressed [ 196.191497][T12222] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3100'. [ 196.267133][T12086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 196.296173][T12086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 196.308330][T12086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 196.329531][T12086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 196.466071][T12240] lo speed is unknown, defaulting to 1000 [ 196.506267][ T37] ------------[ cut here ]------------ [ 196.511842][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 196.521499][ T37] Modules linked in: [ 196.525418][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(voluntary) [ 196.536002][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.546194][ T37] Workqueue: netns cleanup_net [ 196.550992][ T37] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 196.555737][T12240] lo speed is unknown, defaulting to 1000 [ 196.556600][ T37] Code: 48 8d bb 70 0e 00 00 e8 75 3d b7 fc 48 8b bb 70 0e 00 00 e8 29 ea c3 fc 5b 41 5e 41 5f 5d e9 be 66 b5 00 cc e8 18 e4 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 0a e4 9b fc 90 0f 0b 90 4c 89 f7 e8 3e [ 196.582749][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 196.588916][ T37] RAX: ffffffff84bb65a8 RBX: ffff888103f60000 RCX: ffff88810116e300 [ 196.596881][T12086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.596959][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888103f60e40 [ 196.596975][ T37] RBP: ffffffff86c91040 R08: 0001ffff868480ef R09: 0000000000000000 [ 196.605366][T12240] lo speed is unknown, defaulting to 1000 [ 196.612384][ T37] R10: ffffc90000143be8 R11: 0001c90000143be8 R12: ffffffff86c91060 [ 196.632466][T12086] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.633628][ T37] R13: ffff888103f60028 R14: ffff888103f60e40 R15: ffff888103f60000 [ 196.646734][T12240] infiniband s{z2: RDMA CMA: cma_listen_on_dev, error -98 [ 196.648786][ T37] FS: 0000000000000000(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 196.665345][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.669286][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.672783][ T37] CR2: 00007efc579a1f98 CR3: 0000000109220000 CR4: 00000000003506f0 [ 196.679057][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.687139][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.703086][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 196.711294][ T37] Call Trace: [ 196.714691][ T37] [ 196.717677][ T37] xfrm_net_exit+0x2d/0x60 [ 196.719172][T12240] lo speed is unknown, defaulting to 1000 [ 196.722165][ T37] ops_undo_list+0x27b/0x410 [ 196.728529][T12240] lo speed is unknown, defaulting to 1000 [ 196.728842][T12240] lo speed is unknown, defaulting to 1000 [ 196.733289][ T37] cleanup_net+0x2f4/0x4f0 [ 196.743357][T12240] lo speed is unknown, defaulting to 1000 [ 196.744779][ T37] process_scheduled_works+0x4ce/0x9d0 [ 196.753071][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.754992][ T37] worker_thread+0x582/0x770 [ 196.755021][ T37] kthread+0x489/0x510 [ 196.755044][ T37] ? finish_task_switch+0xad/0x2b0 [ 196.760564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.777482][T12240] lo speed is unknown, defaulting to 1000 [ 196.782345][ T37] ? __pfx_worker_thread+0x10/0x10 [ 196.782379][ T37] ? __pfx_kthread+0x10/0x10 [ 196.795241][T12086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.796096][ T37] ret_from_fork+0x122/0x1b0 [ 196.801322][T12086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.805871][ T37] ? __pfx_kthread+0x10/0x10 [ 196.836581][ T37] ret_from_fork_asm+0x1a/0x30 [ 196.841462][ T37] [ 196.844588][ T37] ---[ end trace 0000000000000000 ]--- [ 196.848454][T12240] lo speed is unknown, defaulting to 1000 [ 196.851818][ T37] ------------[ cut here ]------------ [ 196.861424][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 196.870881][ T37] Modules linked in: [ 196.874866][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 196.875172][T12240] lo speed is unknown, defaulting to 1000 [ 196.887034][ T37] Tainted: [W]=WARN [ 196.895851][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 196.906044][ T37] Workqueue: netns cleanup_net [ 196.906202][ T2968] usb usb6-port1: attempt power cycle [ 196.910845][ T37] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 196.922461][ T37] Code: 3d b7 fc 4d 8b 3e e9 06 ff ff ff e8 f1 e3 9b fc 90 0f 0b 90 4c 89 f7 e8 25 3d b7 fc 4d 8b 3e e9 24 ff ff ff e8 d8 e3 9b fc 90 <0f> 0b 90 4c 89 f7 e8 0c 3d b7 fc 4d 8b 3e e9 42 ff ff ff e8 bf e3 [ 196.942358][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 196.949287][ T37] RAX: ffffffff84bb65e8 RBX: ffff888103f60000 RCX: ffff88810116e300 [ 196.957552][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810928b9c0 [ 196.965693][ T37] RBP: 0000000000000040 R08: 0001888103f60e5f R09: 0000000000000000 [ 196.973911][ T37] R10: ffff88810928ba40 R11: 000188810928ba3f R12: ffffffff86c91060 [ 196.982730][ T37] R13: ffff888103f60028 R14: ffff888103f60e58 R15: ffff88810928b9c0 [ 196.990773][ T37] FS: 0000000000000000(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 196.999955][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.007344][ T37] CR2: 00007efc579a1f98 CR3: 0000000109220000 CR4: 00000000003506f0 [ 197.015370][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.023459][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 197.031594][ T37] Call Trace: [ 197.034911][ T37] [ 197.038576][ T37] xfrm_net_exit+0x2d/0x60 [ 197.042855][T12086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.043093][ T37] ops_undo_list+0x27b/0x410 [ 197.054574][ T37] cleanup_net+0x2f4/0x4f0 [ 197.059125][ T37] process_scheduled_works+0x4ce/0x9d0 [ 197.064652][ T37] worker_thread+0x582/0x770 [ 197.069985][ T37] kthread+0x489/0x510 [ 197.074205][ T37] ? finish_task_switch+0xad/0x2b0 [ 197.079420][ T37] ? __pfx_worker_thread+0x10/0x10 [ 197.084642][ T37] ? __pfx_kthread+0x10/0x10 [ 197.089356][ T37] ret_from_fork+0x122/0x1b0 [ 197.094120][ T37] ? __pfx_kthread+0x10/0x10 [ 197.099634][ T37] ret_from_fork_asm+0x1a/0x30 [ 197.104464][ T37] [ 197.107563][ T37] ---[ end trace 0000000000000000 ]--- [ 197.114949][ T37] ------------[ cut here ]------------ [ 197.120583][ T37] WARNING: CPU: 0 PID: 37 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 197.130794][ T37] Modules linked in: [ 197.134729][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.146084][ T37] Tainted: [W]=WARN [ 197.149943][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 197.160796][ T37] Workqueue: netns cleanup_net [ 197.165681][ T37] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 197.171331][ T37] Code: 3d b7 fc 4d 8b 3e e9 24 ff ff ff e8 d8 e3 9b fc 90 0f 0b 90 4c 89 f7 e8 0c 3d b7 fc 4d 8b 3e e9 42 ff ff ff e8 bf e3 9b fc 90 <0f> 0b 90 4c 89 f7 e8 f3 3c b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 197.192025][ T37] RSP: 0018:ffffc90000143c60 EFLAGS: 00010293 [ 197.198167][ T37] RAX: ffffffff84bb6601 RBX: ffff888103f60000 RCX: ffff88810116e300 [ 197.206199][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810928b980 [ 197.214287][ T37] RBP: 0000000000000040 R08: 0001888103f60e57 R09: 0000000000000000 [ 197.223054][ T37] R10: ffff88810928ba00 R11: 000188810928b9ff R12: ffffffff86c91060 [ 197.231136][ T37] R13: ffff888103f60028 R14: ffff888103f60e50 R15: ffff88810928b980 [ 197.239175][ T37] FS: 0000000000000000(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 197.249080][ T37] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 197.255736][ T37] CR2: 00007efc579a1f98 CR3: 0000000109220000 CR4: 00000000003506f0 [ 197.264180][ T37] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 197.272225][ T37] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 197.281009][ T37] Call Trace: [ 197.284367][ T37] [ 197.287467][ T37] xfrm_net_exit+0x2d/0x60 [ 197.292102][ T37] ops_undo_list+0x27b/0x410 [ 197.296818][ T37] cleanup_net+0x2f4/0x4f0 [ 197.301462][ T37] process_scheduled_works+0x4ce/0x9d0 [ 197.307805][ T37] worker_thread+0x582/0x770 [ 197.312451][ T37] kthread+0x489/0x510 [ 197.316579][ T37] ? finish_task_switch+0xad/0x2b0 [ 197.320088][T12086] veth0_vlan: entered promiscuous mode [ 197.321826][ T37] ? __pfx_worker_thread+0x10/0x10 [ 197.321855][ T37] ? __pfx_kthread+0x10/0x10 [ 197.338001][ T37] ret_from_fork+0x122/0x1b0 [ 197.342761][ T37] ? __pfx_kthread+0x10/0x10 [ 197.347571][ T37] ret_from_fork_asm+0x1a/0x30 [ 197.348283][T12086] veth1_vlan: entered promiscuous mode [ 197.352489][ T37] [ 197.361454][ T37] ---[ end trace 0000000000000000 ]--- [ 197.382858][T12086] veth0_macvtap: entered promiscuous mode [ 197.390606][T12086] veth1_macvtap: entered promiscuous mode [ 197.433439][T12086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.444911][T12086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.457461][ T8763] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.474798][ T8763] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.488270][ T8763] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.498100][ T8763] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.552510][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 197.552527][ T29] audit: type=1400 audit(1762282968.135:19128): avc: denied { write } for pid=12086 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:getty_etc_t:s0" [ 197.586657][ T29] audit: type=1400 audit(1762282968.135:19129): avc: denied { open } for pid=12086 comm="syz-executor" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:getty_etc_t:s0" [ 197.651190][ T29] audit: type=1326 audit(1762282968.235:19130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.678901][ T29] audit: type=1326 audit(1762282968.235:19131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.702620][ T29] audit: type=1326 audit(1762282968.235:19132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.727096][ T29] audit: type=1326 audit(1762282968.235:19133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.750816][ T29] audit: type=1326 audit(1762282968.235:19134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.775059][ T29] audit: type=1326 audit(1762282968.235:19135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.799725][ T29] audit: type=1326 audit(1762282968.235:19136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.823841][ T29] audit: type=1326 audit(1762282968.235:19137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12278 comm="syz.2.3114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f810401f6c9 code=0x7ffc0000 [ 197.879225][T12289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3117'. [ 197.978038][T12307] team0: No ports can be present during mode change [ 197.986097][T12307] vlan0: entered promiscuous mode [ 197.998922][T12307] team0: Port device vlan0 added [ 198.007319][T12307] tipc: Started in network mode [ 198.012313][T12307] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 198.019731][T12307] tipc: Enabled bearer , priority 0 [ 198.094177][T12320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 198.102357][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 198.149382][T12324] loop4: detected capacity change from 0 to 512 [ 198.156604][T12324] EXT4-fs: Ignoring removed i_version option [ 198.162653][T12324] EXT4-fs: Ignoring removed bh option [ 198.186907][T12324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.200990][T12324] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.213074][T12324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3130'. [ 198.230844][T12332] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 198.239043][T12332] netlink: 'syz.0.3132': attribute type 4 has an invalid length. [ 198.270451][T11754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.314858][T12340] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3134'. [ 198.402485][T12352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3140'. [ 198.438367][T12358] netlink: 'syz.2.3143': attribute type 4 has an invalid length. [ 198.450117][T12358] netlink: 'syz.2.3143': attribute type 4 has an invalid length. [ 198.507321][T12364] vlan2: entered allmulticast mode [ 198.679352][ T8763] syzkaller0: tun_net_xmit 76 [ 198.684189][ T8763] syzkaller0: tun_net_xmit 48 [ 198.776050][ T2968] usb usb6-port1: unable to enumerate USB device [ 198.789469][T12194] vhci_hcd: invalid port number 96 [ 198.794620][T12194] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 199.036203][T12407] netlink: 'syz.0.3164': attribute type 1 has an invalid length. [ 199.076889][T12407] 8021q: adding VLAN 0 to HW filter on device bond12 [ 199.092839][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3164'. [ 199.105910][T12407] bond12 (unregistering): Released all slaves [ 199.119406][T12418] netlink: 'syz.2.3166': attribute type 4 has an invalid length. [ 199.134185][T12418] netlink: 'syz.2.3166': attribute type 4 has an invalid length. [ 199.136601][ T5927] tipc: Node number set to 11578026 [ 199.156098][T12396] lo speed is unknown, defaulting to 1000 [ 199.287338][ T8763] batadv4: left allmulticast mode [ 199.292473][ T8763] batadv4: left promiscuous mode [ 199.297665][ T8763] bridge0: port 6(batadv4) entered disabled state [ 199.306888][ T8763] batadv3: left allmulticast mode [ 199.311976][ T8763] batadv3: left promiscuous mode [ 199.317237][ T8763] bridge0: port 5(batadv3) entered disabled state [ 199.332491][ T8763] batadv2: left allmulticast mode [ 199.337672][ T8763] batadv2: left promiscuous mode [ 199.342796][ T8763] bridge0: port 4(batadv2) entered disabled state [ 199.356389][ T8763] batadv1: left allmulticast mode [ 199.361493][ T8763] batadv1: left promiscuous mode [ 199.366641][ T8763] bridge0: port 3(batadv1) entered disabled state [ 199.381032][ T8763] bridge_slave_1: left allmulticast mode [ 199.386936][ T8763] bridge_slave_1: left promiscuous mode [ 199.392647][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.401162][ T8763] bridge_slave_0: left promiscuous mode [ 199.407295][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.455210][ T8763] batman_adv: batadv0: Interface deactivated: macvtap1 [ 199.475932][ T8763] bridge0 (unregistering): left allmulticast mode [ 199.484057][ T8763] batman_adv: batadv0: Removing interface: macvtap1 [ 199.648343][ T8763] bond11 (unregistering): (slave bridge3): Releasing active interface [ 199.749889][ T8763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.759975][ T8763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.769243][ T8763] bond0 (unregistering): Released all slaves [ 199.778909][ T8763] bond1 (unregistering): Released all slaves [ 199.787937][ T8763] bond2 (unregistering): Released all slaves [ 199.796970][ T8763] bond3 (unregistering): Released all slaves [ 199.806022][ T8763] bond4 (unregistering): Released all slaves [ 199.815184][ T8763] bond5 (unregistering): Released all slaves [ 199.836528][ T8763] bond6 (unregistering): Released all slaves [ 199.850243][ T8763] bond7 (unregistering): Released all slaves [ 199.859639][ T8763] bond8 (unregistering): Released all slaves [ 199.868312][ T8763] bond9 (unregistering): Released all slaves [ 199.877511][ T8763] bond10 (unregistering): Released all slaves [ 199.886640][ T8763] bond11 (unregistering): Released all slaves [ 199.895446][ T8763] bond12 (unregistering): Released all slaves [ 199.911260][ T8763] bond13 (unregistering): Released all slaves [ 199.929132][ T8763] bond14 (unregistering): Released all slaves [ 199.942294][ T8763] bond15 (unregistering): Released all slaves [ 199.953666][T12446] lo speed is unknown, defaulting to 1000 [ 199.960032][T12453] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3177'. [ 199.995479][T12446] lo speed is unknown, defaulting to 1000 [ 200.009034][T12396] chnl_net:caif_netlink_parms(): no params data found [ 200.021556][ T8763] tipc: Disabling bearer [ 200.026792][ T8763] tipc: Left network mode [ 200.031628][T12446] lo speed is unknown, defaulting to 1000 [ 200.045396][ T8763] hsr_slave_0: left promiscuous mode [ 200.051177][T12446] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.059407][ T8763] hsr_slave_1: left promiscuous mode [ 200.070016][ T8763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.160842][ T8763] team0 (unregistering): Port device team_slave_1 removed [ 200.178210][ T8763] team0 (unregistering): Port device team_slave_0 removed [ 200.189620][T12468] program syz.0.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.220315][T12446] lo speed is unknown, defaulting to 1000 [ 200.228434][T12446] lo speed is unknown, defaulting to 1000 [ 200.235186][T12446] lo speed is unknown, defaulting to 1000 [ 200.246740][T12446] lo speed is unknown, defaulting to 1000 [ 200.261088][T12396] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.268213][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.276556][T12473] program syz.0.3180 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.302902][T12396] bridge_slave_0: entered allmulticast mode [ 200.310238][T12396] bridge_slave_0: entered promiscuous mode [ 200.318134][T12473] netlink: 'syz.0.3180': attribute type 1 has an invalid length. [ 200.328265][T12446] lo speed is unknown, defaulting to 1000 [ 200.356620][T12396] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.363746][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.409371][T12396] bridge_slave_1: entered allmulticast mode [ 200.424346][T12477] netlink: 'syz.0.3181': attribute type 1 has an invalid length. [ 200.433663][T12396] bridge_slave_1: entered promiscuous mode [ 200.454255][T12477] 8021q: adding VLAN 0 to HW filter on device bond13 [ 200.489729][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3181'. [ 200.502175][T12396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.513926][T12477] bond13 (unregistering): Released all slaves [ 200.528940][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.565562][T12396] team0: Port device team_slave_0 added [ 200.651916][T12396] team0: Port device team_slave_1 added [ 200.731001][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.738052][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.764086][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.024223][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.031492][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 201.057623][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.135201][T12504] program syz.4.3190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.163134][T12396] hsr_slave_0: entered promiscuous mode [ 201.169576][T12396] hsr_slave_1: entered promiscuous mode [ 201.191955][T12505] program syz.4.3190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.227727][T12505] netlink: 'syz.4.3190': attribute type 1 has an invalid length. [ 201.557176][T12396] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 201.575930][T12396] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 201.591435][T12396] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 201.605787][T12396] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 201.744621][T12396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.762317][T12396] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.774648][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.781772][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.807803][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.814975][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.855035][T12540] __nla_validate_parse: 1 callbacks suppressed [ 201.855053][T12540] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3199'. [ 201.871366][T12539] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3200'. [ 201.998037][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.145142][T12396] veth0_vlan: entered promiscuous mode [ 202.247429][T12396] veth1_vlan: entered promiscuous mode [ 202.281340][T12396] veth0_macvtap: entered promiscuous mode [ 202.292478][T12396] veth1_macvtap: entered promiscuous mode [ 202.320406][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.345031][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.386994][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.408246][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.446181][ T5910] lo speed is unknown, defaulting to 1000 [ 202.451959][ T5910] s{z2: Port: 1 Link DOWN [ 202.458405][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.474851][ T5910] lo speed is unknown, defaulting to 1000 [ 202.480689][ T5910] s{z2: Port: 1 Link ACTIVE [ 202.507185][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.694365][T12593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3216'. [ 202.708669][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 202.717805][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 202.727036][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 202.785730][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 202.794747][T12597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3215'. [ 202.803714][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 202.880616][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3215'. [ 203.511847][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 203.511867][ T29] audit: type=1326 audit(1762282974.095:19352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.541865][ T29] audit: type=1326 audit(1762282974.095:19353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.566484][ T29] audit: type=1326 audit(1762282974.095:19354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.590337][ T29] audit: type=1326 audit(1762282974.095:19355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.614143][ T29] audit: type=1326 audit(1762282974.095:19356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.637831][ T29] audit: type=1326 audit(1762282974.155:19357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.661463][ T29] audit: type=1326 audit(1762282974.155:19358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.685101][ T29] audit: type=1326 audit(1762282974.155:19359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.785673][ T29] audit: type=1326 audit(1762282974.155:19360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.809323][ T29] audit: type=1326 audit(1762282974.155:19361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12648 comm="syz.3.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6157aaf6c9 code=0x7ffc0000 [ 203.890698][T12652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.913022][T12652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.939472][T12656] vlan2: entered allmulticast mode [ 204.065945][ T5910] Process accounting resumed [ 204.544231][T12698] lo speed is unknown, defaulting to 1000 [ 204.586854][T12698] lo speed is unknown, defaulting to 1000 [ 204.640867][T12699] siw: device registration error -23 [ 205.268457][T12733] bridge0: port 3(batadv1) entered blocking state [ 205.274964][T12733] bridge0: port 3(batadv1) entered disabled state [ 205.281652][T12733] batadv1: entered allmulticast mode [ 205.287746][T12733] batadv1: entered promiscuous mode [ 205.432122][T12741] team0: No ports can be present during mode change [ 205.444421][T12739] lo speed is unknown, defaulting to 1000 [ 205.462654][T12739] lo speed is unknown, defaulting to 1000 [ 205.489747][T12741] tipc: Enabled bearer , priority 0 [ 205.497937][T12742] siw: device registration error -23 [ 205.720069][T12747] loop4: detected capacity change from 0 to 512 [ 205.782450][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 205.791872][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 206.450732][T12785] team0: No ports can be present during mode change [ 206.461031][T12785] vlan0: entered promiscuous mode [ 206.470009][T12785] tipc: Started in network mode [ 206.475026][T12785] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 206.482252][T12785] tipc: Enabled bearer , priority 0 [ 206.565939][ T5910] usb usb6-port1: attempt power cycle [ 206.657147][T12790] lo speed is unknown, defaulting to 1000 [ 206.673044][T12790] lo speed is unknown, defaulting to 1000 [ 206.867496][T12806] vlan2: entered allmulticast mode [ 206.911265][T12814] __nla_validate_parse: 9 callbacks suppressed [ 206.911283][T12814] netlink: 28 bytes leftover after parsing attributes in process `'. [ 207.098586][T12839] lo speed is unknown, defaulting to 1000 [ 207.115078][T12839] lo speed is unknown, defaulting to 1000 [ 207.222556][T12848] netlink: 28 bytes leftover after parsing attributes in process `'. [ 207.595682][ T5927] tipc: Node number set to 11578026 [ 207.798623][T12870] bridge0: port 3(batadv1) entered blocking state [ 207.805245][T12870] bridge0: port 3(batadv1) entered disabled state [ 207.812103][T12870] batadv1: entered allmulticast mode [ 207.818218][T12870] batadv1: entered promiscuous mode [ 207.837348][T12872] netlink: 28 bytes leftover after parsing attributes in process `'. [ 207.936901][T12881] lo speed is unknown, defaulting to 1000 [ 207.943015][T12881] lo speed is unknown, defaulting to 1000 [ 207.973979][T12885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3321'. [ 207.997454][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.008285][T12887] siw: device registration error -23 [ 208.167775][T12888] lo speed is unknown, defaulting to 1000 [ 208.173955][T12888] lo speed is unknown, defaulting to 1000 [ 208.295566][ T8762] batadv9: left allmulticast mode [ 208.300786][ T8762] batadv9: left promiscuous mode [ 208.305929][ T8762] bridge0: port 10(batadv9) entered disabled state [ 208.313371][ T8763] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 208.322751][ T8763] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 208.339128][ T8762] batadv8: left allmulticast mode [ 208.344244][ T8762] batadv8: left promiscuous mode [ 208.349430][ T8762] bridge0: port 9(batadv8) entered disabled state [ 208.377996][ T8762] batadv7: left allmulticast mode [ 208.383084][ T8762] batadv7: left promiscuous mode [ 208.388580][ T8762] bridge0: port 8(batadv7) entered disabled state [ 208.400684][ T5910] usb usb6-port1: unable to enumerate USB device [ 208.415820][T12712] vhci_hcd: invalid port number 96 [ 208.420995][T12712] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 208.439307][ T8762] batadv6: left allmulticast mode [ 208.444400][ T8762] batadv6: left promiscuous mode [ 208.449635][ T8762] bridge0: port 7(batadv6) entered disabled state [ 208.472935][ T8762] batadv5: left allmulticast mode [ 208.478232][ T8762] batadv5: left promiscuous mode [ 208.483615][ T8762] bridge0: port 6(batadv5) entered disabled state [ 208.495983][ T8762] batadv4: left allmulticast mode [ 208.501096][ T8762] batadv4: left promiscuous mode [ 208.506294][ T8762] bridge0: port 5(batadv4) entered disabled state [ 208.514996][ T8762] batadv3: left allmulticast mode [ 208.520119][ T8762] batadv3: left promiscuous mode [ 208.525220][ T8762] bridge0: port 4(batadv3) entered disabled state [ 208.543543][ T8762] batadv2: left allmulticast mode [ 208.548704][ T8762] batadv2: left promiscuous mode [ 208.548862][T12914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3327'. [ 208.554079][ T8762] bridge0: port 3(batadv2) entered disabled state [ 208.570613][ T8762] bridge_slave_1: left allmulticast mode [ 208.576413][ T8762] bridge_slave_1: left promiscuous mode [ 208.582182][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.590243][ T8762] bridge_slave_0: left promiscuous mode [ 208.596058][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.768142][ T8762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.786807][ T8762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.805393][ T8762] bond0 (unregistering): Released all slaves [ 208.817702][ T8762] bond1 (unregistering): Released all slaves [ 208.835389][ T8762] bond2 (unregistering): Released all slaves [ 208.847758][ T8762] bond3 (unregistering): Released all slaves [ 208.862438][ T8762] bond4 (unregistering): Released all slaves [ 208.878090][ T8762] bond5 (unregistering): Released all slaves [ 208.893155][ T8762] bond6 (unregistering): Released all slaves [ 208.902863][ T8762] bond7 (unregistering): Released all slaves [ 208.913078][ T8762] bond8 (unregistering): Released all slaves [ 208.922359][ T8762] bond9 (unregistering): Released all slaves [ 208.931361][ T8762] bond10 (unregistering): Released all slaves [ 208.940571][ T8762] bond11 (unregistering): Released all slaves [ 208.949505][ T8762] bond12 (unregistering): Released all slaves [ 208.960536][T12888] chnl_net:caif_netlink_parms(): no params data found [ 208.983465][T12934] lo speed is unknown, defaulting to 1000 [ 209.005332][T12934] lo speed is unknown, defaulting to 1000 [ 209.014268][ T8762] tipc: Disabling bearer [ 209.019484][ T8762] tipc: Disabling bearer [ 209.027062][T12936] siw: device registration error -23 [ 209.033214][ T8762] tipc: Left network mode [ 209.097740][T12940] validate_nla: 5 callbacks suppressed [ 209.097757][T12940] netlink: 'syz.4.3333': attribute type 1 has an invalid length. [ 209.112470][ T8762] hsr_slave_0: left promiscuous mode [ 209.122821][ T8762] hsr_slave_1: left promiscuous mode [ 209.133447][ T8762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.148956][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3333'. [ 209.208421][ T8762] team0 (unregistering): Port device team_slave_1 removed [ 209.401807][ T8762] team0 (unregistering): Port device team_slave_0 removed [ 209.471933][T12940] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.496572][T12941] bond2 (unregistering): Released all slaves [ 209.511860][T12952] vlan2: entered allmulticast mode [ 209.529134][T12888] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.536360][T12888] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.543559][T12888] bridge_slave_0: entered allmulticast mode [ 209.550100][T12888] bridge_slave_0: entered promiscuous mode [ 209.557173][T12888] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.564255][T12888] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.571552][T12888] bridge_slave_1: entered allmulticast mode [ 209.579521][T12888] bridge_slave_1: entered promiscuous mode [ 209.621937][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 209.669146][T12888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.686354][T12888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.722669][T12888] team0: Port device team_slave_0 added [ 209.731854][T12888] team0: Port device team_slave_1 added [ 209.754498][T12888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.761634][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.787867][T12888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.834882][T12976] lo speed is unknown, defaulting to 1000 [ 209.835875][T12888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.847742][T12888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.873685][T12888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.912798][T12888] hsr_slave_0: entered promiscuous mode [ 209.919119][T12888] hsr_slave_1: entered promiscuous mode [ 209.925378][T12888] debugfs: 'hsr0' already exists in 'hsr' [ 209.931184][T12888] Cannot create hsr debugfs directory [ 209.936869][T12976] lo speed is unknown, defaulting to 1000 [ 209.994633][T12994] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3350'. [ 210.103091][T13002] loop4: detected capacity change from 0 to 1024 [ 210.103937][T13006] bridge0: port 3(batadv1) entered blocking state [ 210.116148][T13006] bridge0: port 3(batadv1) entered disabled state [ 210.116562][T13002] EXT4-fs: Ignoring removed orlov option [ 210.123377][T13006] batadv1: entered allmulticast mode [ 210.131227][T13002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.134529][T13006] batadv1: entered promiscuous mode [ 210.224710][T13011] ================================================================== [ 210.232840][T13011] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 210.242075][T13011] [ 210.244429][T13011] write to 0xffff88810a6e4ea8 of 4 bytes by task 13002 on cpu 0: [ 210.252171][T13011] writeback_single_inode+0x150/0x3f0 [ 210.257585][T13011] sync_inode_metadata+0x5b/0x90 [ 210.262573][T13011] generic_buffers_fsync_noflush+0xd9/0x120 [ 210.268518][T13011] ext4_sync_file+0x1ab/0x690 [ 210.273271][T13011] vfs_fsync_range+0x10d/0x130 [ 210.278074][T13011] ext4_buffered_write_iter+0x34f/0x3c0 [ 210.283664][T13011] ext4_file_write_iter+0x387/0xf60 [ 210.288901][T13011] iter_file_splice_write+0x666/0xa60 [ 210.294315][T13011] direct_splice_actor+0x156/0x2a0 [ 210.299455][T13011] splice_direct_to_actor+0x312/0x680 [ 210.304885][T13011] do_splice_direct+0xda/0x150 [ 210.309686][T13011] do_sendfile+0x380/0x650 [ 210.314181][T13011] __x64_sys_sendfile64+0x105/0x150 [ 210.319428][T13011] x64_sys_call+0x2bb4/0x3000 [ 210.324145][T13011] do_syscall_64+0xd2/0x200 [ 210.328678][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.334601][T13011] [ 210.336940][T13011] read to 0xffff88810a6e4ea8 of 4 bytes by task 13011 on cpu 1: [ 210.344596][T13011] generic_buffers_fsync_noflush+0x80/0x120 [ 210.350541][T13011] ext4_sync_file+0x1ab/0x690 [ 210.355321][T13011] vfs_fsync_range+0x10d/0x130 [ 210.360135][T13011] ext4_buffered_write_iter+0x34f/0x3c0 [ 210.365724][T13011] ext4_file_write_iter+0x387/0xf60 [ 210.370959][T13011] iter_file_splice_write+0x666/0xa60 [ 210.376366][T13011] direct_splice_actor+0x156/0x2a0 [ 210.381515][T13011] splice_direct_to_actor+0x312/0x680 [ 210.386931][T13011] do_splice_direct+0xda/0x150 [ 210.391726][T13011] do_sendfile+0x380/0x650 [ 210.396199][T13011] __x64_sys_sendfile64+0x105/0x150 [ 210.401462][T13011] x64_sys_call+0x2bb4/0x3000 [ 210.406160][T13011] do_syscall_64+0xd2/0x200 [ 210.410685][T13011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.416682][T13011] [ 210.419014][T13011] value changed: 0x00000070 -> 0x00000002 [ 210.424758][T13011] [ 210.427083][T13011] Reported by Kernel Concurrency Sanitizer on: [ 210.433273][T13011] CPU: 1 UID: 0 PID: 13011 Comm: syz.4.3351 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.444659][T13011] Tainted: [W]=WARN [ 210.448472][T13011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 210.458639][T13011] ================================================================== [ 210.605807][ T37] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 210.615051][ T37] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 210.641854][T12888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.650901][T12888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.660296][T12888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.672149][T12888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.708572][T12888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.720873][T12888] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.730300][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.737516][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.748962][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.756318][ T8762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.822615][T12888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.889278][T12888] veth0_vlan: entered promiscuous mode [ 210.897128][T12888] veth1_vlan: entered promiscuous mode [ 210.912897][T12888] veth0_macvtap: entered promiscuous mode [ 210.920546][T12888] veth1_macvtap: entered promiscuous mode [ 210.932145][T12888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.943627][T12888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.955396][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.964956][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.977477][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.986332][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.036147][ T23] usb usb6-port1: attempt power cycle [ 213.876014][ T23] usb usb6-port1: unable to enumerate USB device [ 213.882532][T13012] vhci_hcd: invalid port number 96 [ 213.887706][T13012] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 213.905037][T11754] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.