last executing test programs: 7.76828402s ago: executing program 1 (id=2942): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000200)=ANY=[@ANYBLOB="3002000000000000c910ff02000000000000000000000000000100000000000082f18b65a5dbb3df103e55d0f54d1da0aec728dbe51d595f46d86844fb162858166fe79285524d139df3fb99cac70f3226875539d8ae82237d703063924a11fe1142f8c1f705801b87eb27bafbd2654253cac863a671365bea1c81b178ec93f215e1191271c0aba4c94397ea164df1b171e6473fdbfe30d003492629"], 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-'], 0x5) write$cgroup_subtree(r7, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x88, 0x1403, 0x1, 0x70bd2a, 0x25dfdbf9, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10000}, 0x4004) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000010000108fdffffff0000000000000000", @ANYRES32=r7, @ANYBLOB="000000000000000008001b000000000040001680"], 0x68}, 0x1, 0x0, 0x0, 0x44004}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r10, 0x0, 0x20, &(0x7f00000005c0)="f1c13cab0dc1a46378781de8c9", 0xd) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r11, 0x0, 0x0) 6.999895324s ago: executing program 1 (id=2944): r0 = io_uring_setup(0x25f5, &(0x7f0000000680)={0x0, 0x75a9, 0x2, 0x0, 0x199}) r1 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x4c092, r1, 0x200000000000000) io_uring_enter(r0, 0x2000003, 0x169f, 0x7, &(0x7f0000000000), 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x29, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x21c489, &(0x7f0000000600)=ANY=[@ANYBLOB="8037fceff5d06fecf6b1227abc1e46445801b9e953991b0a045c7f0f56894e070dcb2309df5c2134dc0032ac43b77c45fcfbfc9741b7afe293a77cce440737739acd696e2f0e4c2aab837f5742016952e1509332b4b74eb0d95ea137652301d2d18764c54aeb10b1ffdb78", @ANYRES8=r4]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r6, @ANYRESOCT=0x0, @ANYRES64], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) r9 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x1) ioctl$int_in(r10, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r10, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r11}], 0x2c, 0xffffffffffbffff8) dup2(r10, r11) fcntl$setown(r10, 0x8, r9) tkill(r9, 0x13) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) quotactl_fd$Q_GETFMT(r8, 0xffffffff80000401, 0x0, 0x0) r12 = socket$inet6(0xa, 0x5, 0xffffffff) setsockopt$sock_int(r12, 0x1, 0x8, 0x0, 0x0) 3.755988722s ago: executing program 1 (id=2984): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) (fail_nth: 1) 3.412049698s ago: executing program 0 (id=2985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 3.136141073s ago: executing program 1 (id=2986): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r4, 0x0, 0xffffffbf) 2.74393923s ago: executing program 4 (id=2991): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x3}, 0x18) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="040002"], 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x45, 0x0}, 0x40002020) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000050c0200000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000e0010380dc010080080003400000000273000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000000e14000180090001"], 0x290}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'veth1_to_bridge\x00', {0x2, 0x4000, @empty=0xfe000000}}) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000000)={'erspan0\x00'}) 2.557836574s ago: executing program 0 (id=2993): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0xff, 0x6, 0xf4, 0x8, 0xc, 0x10, 0x6, 0x80, 0x2, 0x4, 0x9, 0x4, 0x6, 0xd}, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400000000000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000680)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="60f046faec00364eb70d4d5ce7131b7240b2861ce8803fd3148e25717f29080d776db4c90f10ad40f2996cebab4f17baa5ea0e2d72"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0x887) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x20000000ec071, 0xffffffffffffffff, 0x9bfd000) socket$tipc(0x1e, 0x5, 0x0) 2.336010807s ago: executing program 2 (id=2995): r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000002380)='net/ip_mr_cache\x00') r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) pread64(r1, &(0x7f0000000100)=""/253, 0xfd, 0x36) 2.335553937s ago: executing program 2 (id=2996): r0 = eventfd(0x0) read$eventfd(r0, &(0x7f0000000240), 0x8) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaae2, 0x40, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f4, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000300), 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x5, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x901000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000800aaaaaaaaaaaaffffffffffff0180c20000080086bbbbbbbb0000640ab578eff867916505ed5efb486983804ca7d23d02000173ca35c6c050ffffff10ffffea75"]) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r8 = io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x8000, 0xffffffff, 0x3bd}) r9 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x2a1840, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r7, @ANYBLOB="ded946f4a7025240d553d4e66cfcc9b4795a903e47628823c172316573c9d38932e2a6dbf8958cf48fb69a3e9500287dcf48cdfc911c280711a86d549a7b10c835a74c1de12bf797c1ae4a3b4d4f0cd6288407b2dcf07d9c3ce06154a9eb6ffb49853818274acd830b9a04559b3430c611eb2b4e0133825da2d7f15ce2987fffdb2c22a54b7963348db092619439b694738ff44865e8e9d03afed2b275153b69ad0508a979b54878808fa3f2ad844ff722"], 0x3, 0x37c, &(0x7f0000000ec0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRES16=r9], 0x28}, 0x1, 0x0, 0x0, 0x4048041}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="00042abd7000fedbdf25070000000800020005000000080004000500000008000400feffffff08000400ff00000024000180080003000a01010008000700", @ANYRES32=r13, @ANYBLOB="060001000a000000080003007f0000010c000680060001000a000000"], 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x2000c010) r14 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) r15 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fsetxattr(r15, &(0x7f0000000100)=@known='system.posix_acl_access\x00', &(0x7f0000000140)='\x00', 0x1, 0x1) write$binfmt_aout(r14, &(0x7f00000003c0)=ANY=[], 0xff2e) 2.159233211s ago: executing program 1 (id=2997): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = dup2(r3, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000002000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000030601040000000000000000409005b80500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f0000000080)=0x14) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r11, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) 2.049040883s ago: executing program 1 (id=2998): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.806901607s ago: executing program 4 (id=2999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) link(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5c5e52c2b9716e44, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000000efff", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfc, 0x0, 0x7ffc0002}]}) umount2(&(0x7f0000019240)='./file0\x00', 0x0) 1.806668557s ago: executing program 3 (id=2962): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mremap(&(0x7f0000d84000/0x2000)=nil, 0x7fffdf4dd000, 0x1002, 0x3, &(0x7f0000b22000/0x1000)=nil) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r0}, &(0x7f0000000580), &(0x7f0000000940)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x25dfdbfc, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0xffffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x20}, {}, {}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x2}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.806307227s ago: executing program 3 (id=3000): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0xff, 0x6, 0xf4, 0x8, 0xc, 0x10, 0x6, 0x80, 0x2, 0x4, 0x9, 0x4, 0x6, 0xd}, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400000000000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000680)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="60f046faec00364eb70d4d5ce7131b7240b2861ce8803fd3148e25717f29080d776db4c90f10ad40f2996cebab4f17baa5ea0e2d72"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0x887) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x20000000ec071, 0xffffffffffffffff, 0x9bfd000) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 1.589786711s ago: executing program 0 (id=3001): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) r5 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno', @ANYRESHEX=r5]) 1.464101913s ago: executing program 0 (id=3002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.271972537s ago: executing program 2 (id=3003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES16=0x0, @ANYRES64], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x211, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), r1) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r3, 0x917, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044000}, 0x20048040) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000080000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x99, 0x82}], 0x1, 0x0, 0x0, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000c40), 0xc6002, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x1000000, &(0x7f0000000400), 0x1, 0x758, &(0x7f0000001c00)="$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") memfd_secret(0x0) 1.243789337s ago: executing program 2 (id=3004): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f0000000b00)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write(r2, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 1.03758286s ago: executing program 2 (id=3006): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$snapshot(r4, 0x0, 0xffffffbf) 876.526884ms ago: executing program 4 (id=3007): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x32c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x238, 0x1, [@m_xt={0x128, 0xa, 0x0, 0x0, {{0x7}, {0x100, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x4d, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab"}}, @TCA_IPT_TARG={0x56, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b3858b"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xdc, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x75, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xe0, 0x1, [@m_gact={0xdc, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x101, 0x3, 0x3, 0x10000}}]}, {0x96, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a2743418947b1a45472c40db288e9fd9c34c8ceed8fb34c3bb42b89f5d42e9ec5f7e781cf88ee98688cd4e3817aab179991acb608cb1c9d6602df0c66e9c85c04ed665949bc57820d143f2c35d2b11306076c500bca5dfe8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r4, r3, 0x11, 0x0, @void}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/cpu_byteorder', 0x0, 0x13d) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="05000000005497996b8474f711cbc467e5121b4c2c6c87659b21a300000000020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f00000001c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r9, &(0x7f0000000740)="190f"}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r10, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d40)={0x18, 0x1b, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000030000000000000008e7000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000c70000004a832000f0ffffff18120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000540)='GPL\x00', 0x1, 0x0, 0x0, 0x1f00, 0x6, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x0, 0xa}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[r5, r5, r3, r3, r9, r10, r2, r2], &(0x7f0000000700)=[{0x5, 0x2, 0x6}], 0x10, 0x6}, 0x94) sendmsg$rds(r6, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x10}}], 0x30}, 0x0) 876.109914ms ago: executing program 0 (id=3008): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000fc020000009500000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_read_part_table(0x5eb, &(0x7f0000000f00)="$eJzs2zFo1FccB/DfxRwHSnFxclIHKcVFcfQoKnenohBOsxQpBhQRbzpBOOlBig56FMUbxG4uVrhF7ZTLDZkSEsjUIYQMKYEMWVqSJZClV+7yCm1KSq8kBeHz4eDHe//f/33fO976Dz5pQ/Frt9vNRET3p4gDA7492ioULx8bOV++EZGJmxHx9fef/9B7kkkd3dx2PZHGy2n89s3BzrONS9nW0vXNk7emG0N/LDne/8Whd+3RPTge++x9fubw4yfV0vNa/t5iqb76dGH+2of1Qrl9tdH8eCV78Xbqm011ONUHUYtHcT/GYji+jTtR3WX97wbMf91aOZ09WmpN3D23Vey8mDrT7xr0Xv97vfz+hY2IXv7D4y+/atYvnPrxyKuztcm58lqKruR2vjm2b3sCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/y8bM4cdPqqXntfy9xVJ99enC/LUP64Vy+2qj+fFK9uLt1Deb6nCqD6IWj+J+jEUlKnEnqrsmfPbnQW7n0/f5v+a/bq2c/u1oqTVx99xWsfNi6kzqG9mj8/5DfreX//D4yy+b9Qunckdena1NzpXXDmz3Vf628+j/ewAAAAAAAAAAAAAAAAAAALAXCsXLx0bOl29EZOJmRHzxyzdDvflu+t49k/pOpLqc5t++Odh5tnEp21q6vnny1nTj5zQ/HpkYj4hD79qj//thGNjvAQAA//8Pi5HU") r2 = socket$kcm(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setitimer(0x0, &(0x7f0000000080)={{0x7, 0x1}, {0x0, 0xb3}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}, 0x20000001) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r4, 0x1000, 0x7, 0x718}) 868.591434ms ago: executing program 3 (id=3009): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918"], 0x590}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000680)="0000657feaa0d1b46815225c5e91aec500", 0x11}], 0x1}}], 0x2, 0x8008801) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x145) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000d40)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1ab2abd70000000000032"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x0) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setlease(r4, 0x400, 0x0) fcntl$setlease(r4, 0x400, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) timer_create(0x2, 0x0, &(0x7f0000000480)=0x0) ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000240)=0x100) timer_delete(r7) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r6, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000700)={0x3c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x3}, @NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x2000c0c4) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="11", 0x1}], 0x23}}], 0x1, 0x0) 545.19082ms ago: executing program 4 (id=3010): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'ip_vti0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x80, 0x40, 0x10001, 0x28d, {{0x10, 0x4, 0x3, 0x8, 0x40, 0x67, 0x0, 0x1, 0x29, 0x0, @broadcast, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xf, 0x1, 0xd, [{@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xfffffffe}, {@remote, 0x7ff}, {@empty, 0x45d}, {@loopback, 0x1}]}]}}}}}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022abd7001000000250f0000002a000e00"], 0x40}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r2}, 0x18) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 426.459111ms ago: executing program 4 (id=3011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000}, 0x50) 425.770872ms ago: executing program 3 (id=3012): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) write$UHID_CREATE2(r1, 0x0, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) lstat(&(0x7f0000000080)='./bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000fc0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@block_validity}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@nodelalloc}, {@grpquota}, {@mblk_io_submit}, {@nodiscard}, {@bh}, {@dioread_nolock}], [{@subj_type={'subj_type', 0x3d, 'data_err=abort'}}, {@fsname={'fsname', 0x3d, '/@'}}, {@euid_eq}, {@smackfstransmute={'smackfstransmute', 0x3d, 'noblock_validity'}}, {@dont_appraise}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6}, 0x10208, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xa14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x2d3, &(0x7f0000001400)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r4, 0x4c09, 0xfffffffffffffff7) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x4000880) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) 369.896993ms ago: executing program 4 (id=3013): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x1}, 0x1205, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 275.890714ms ago: executing program 0 (id=3014): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@jqfmt_vfsold}, {@errors_remount}, {@data_journal}]}, 0x3, 0x43b, &(0x7f0000000200)="$eJzs3MtvG8UfAPDv2kn6Sx+/mKo8mhYIFETEI2nSUnrgAgKJA0hIcCjHkKRVqNugJki0iiAgVI6oEnfEEYm/gBNcEHBC4gp3VKlCubT0ZLT2buI4dh5uEgf8+UibzOzOaubr3bFnduIE0LWG0h9JxMGI+D0iBmrZ1QWGar/uLC1M/r20MJlEpfLWX0m13O2lhcm8aH7egTxTiih8lsSxJvXOXb12caJcnr6S5UfnL70/Onf12nMzlyYuTF+Yvjx+9uzpU2MvnBl/flviTOO6PfjR7PGjr71z443Jczfe/fnbJI+/IY4tKbQ8MrTeaU9WKm1Vt1cdqksnPSvJDU6rtH752A3FiEgvV2+1/w9EMVYu3kC8+mlHGwfsqL71Dy9WgP+wdDQPdKP8gz6d/+bbLgw79oxbL9UmQGncd7KtdqRneWrf2zC/3U5DEXFu8e5X6Rb38hwCAGCTvk/HP882G/8V4oG6cv/P1lBKEXFfRByOiDMRcSQi7o+oln0wIh7aYv2NiyRrxz+Fm20Ftknp+O/FbG1r9fhveWWiVMxyh6rx9ybnZ8rTJ7PXZDh696X5sXXq+OGV375odax+/Jduaf35WDBrx82efavPmZqYn7iXmOvd+iRisKdZ/MnySkASEUcjYrDNOmae/uZ4q2Mbx7+zKl9HPFW7/ovREH8uWX99cvR/UZ4+OZrfFWv98uv1N1vV3+n40+u/v+n9vxx/Kalfr53beh3X//i85Zym3fu/L3l71b4PJ+bnr4xF9CWv1xpdv3+8odz4Svk0/uETzfv/4Vh5JY5FRHoTPxwRj0TEo1nbH4uIxyPixDrx//TyE++1H//OSuOfioi72fOAja//SqIvGvc0TxQv/vjdqkpLW4k/vf6nq6nhbM9m3v8206727mYAAAD49ylExMFICiPL6UJhZKT2N/xHYn+hPDs3/8z52Q8uT9W+I1CK3kL+pGug7nnoWDatz/PjDflT2XPjL4v91fzI5Gx5qtPBQ5c70KL/p/4sdrp1wI7r6XQDgI7R/6F76f/QvfR/6F5N+n9/J9oB7L5q/2/4V00fd6gtwO5q+Py37AddxPwfupf+D91L/4euNNcfG39JXkJiTSIKe6IZEjuU6PQ7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPb4JwAA///5++Y6") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@noload}, {@resgid}]}, 0x3, 0x450, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0xff, 0x6, 0xf4, 0x8, 0xc, 0x10, 0x6, 0x80, 0x2, 0x4, 0x9, 0x4, 0x6, 0xd}, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x4, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a6970"], 0x5c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x400000000000000, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='loginuid\x00') r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000680)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB="60f046faec00364eb70d4d5ce7131b7240b2861ce8803fd3148e25717f29080d776db4c90f10ad40f2996cebab4f17baa5ea0e2d72"]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) exit(0x887) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xb, 0x20000000ec071, 0xffffffffffffffff, 0x9bfd000) socket$tipc(0x1e, 0x5, 0x0) 170.693026ms ago: executing program 3 (id=3015): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000001700000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x58, &(0x7f0000000b00)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) write(r2, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x180, 0x0) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 19.844389ms ago: executing program 2 (id=3016): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x2b, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r2, &(0x7f0000ffc000/0x2000)=nil, 0x6000) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x5, 0x1, 0x0, 0x0, 0x8, 0x50}, 0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0x83}, 0x18) 0s ago: executing program 3 (id=3017): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000280)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0 [ 86.134244][ T5524] __nla_validate_parse: 7 callbacks suppressed [ 86.134260][ T5524] netlink: 44 bytes leftover after parsing attributes in process `syz.4.728'. [ 86.520847][ T5544] lo speed is unknown, defaulting to 1000 [ 86.698413][ T5550] lo speed is unknown, defaulting to 1000 [ 86.714363][ T5555] netlink: 'syz.1.738': attribute type 13 has an invalid length. [ 86.722452][ T5555] netlink: 'syz.1.738': attribute type 17 has an invalid length. [ 86.800678][ T5555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.809877][ T5555] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.823520][ T5555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.850860][ T5549] lo speed is unknown, defaulting to 1000 [ 86.887199][ T5562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 87.136475][ T5570] netlink: 28 bytes leftover after parsing attributes in process `syz.1.743'. [ 87.147251][ T5570] serio: Serial port ptm0 [ 87.354307][ C0] hrtimer: interrupt took 42368 ns [ 87.472151][ T5588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.750'. [ 87.481169][ T5588] netem: change failed [ 87.531959][ T5599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.756'. [ 87.573815][ T5602] netlink: 84 bytes leftover after parsing attributes in process `syz.4.754'. [ 87.582957][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.754'. [ 87.592173][ T5602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.754'. [ 87.943862][ T5619] lo speed is unknown, defaulting to 1000 [ 88.094849][ T5626] netlink: 36 bytes leftover after parsing attributes in process `syz.2.765'. [ 88.124332][ T5628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.766'. [ 88.133568][ T5628] netem: change failed [ 89.546023][ T5757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.555766][ T5757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.809791][ T5776] sch_fq: defrate 4294967295 ignored. [ 90.814236][ T5776] bond1: entered promiscuous mode [ 90.820080][ T5776] bond1: entered allmulticast mode [ 90.835361][ T5776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.847412][ T5776] bond1 (unregistering): Released all slaves [ 91.216736][ T5783] lo speed is unknown, defaulting to 1000 [ 91.400436][ T5803] __nla_validate_parse: 8 callbacks suppressed [ 91.400456][ T5803] netlink: 20 bytes leftover after parsing attributes in process `syz.3.828'. [ 91.593227][ T5828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.838'. [ 91.714152][ T5831] lo speed is unknown, defaulting to 1000 [ 92.015281][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 92.096431][ T5838] serio: Serial port ptm0 [ 92.097915][ T5842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.846'. [ 92.106501][ T5843] netlink: 36 bytes leftover after parsing attributes in process `syz.1.845'. [ 92.402988][ T5871] netlink: 36 bytes leftover after parsing attributes in process `syz.0.858'. [ 92.521028][ T5876] netlink: 'syz.2.854': attribute type 5 has an invalid length. [ 92.544001][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 92.544020][ T29] audit: type=1326 audit(92.512:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 92.573029][ T29] audit: type=1326 audit(92.512:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 92.595822][ T29] audit: type=1326 audit(92.512:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 92.622848][ T29] audit: type=1326 audit(92.512:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 92.645480][ T29] audit: type=1326 audit(92.512:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 92.668260][ T29] audit: type=1326 audit(92.512:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 92.692267][ T29] audit: type=1326 audit(92.512:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5878 comm="syz.0.861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 92.738632][ T5889] serio: Serial port ptm0 [ 92.830192][ T29] audit: type=1326 audit(92.802:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 92.853022][ T29] audit: type=1326 audit(92.802:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 92.876088][ T29] audit: type=1326 audit(92.802:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5892 comm="syz.2.866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 92.917156][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 92.933653][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 92.940372][ T5893] netlink: 44 bytes leftover after parsing attributes in process `syz.2.866'. [ 93.044493][ T5910] netlink: 44 bytes leftover after parsing attributes in process `syz.2.873'. [ 93.122473][ T5918] vhci_hcd: invalid port number 236 [ 93.128135][ T5918] vhci_hcd: invalid port number 236 [ 93.366921][ T5929] lo speed is unknown, defaulting to 1000 [ 94.545455][ T5984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.901'. [ 95.389338][ T6017] 9pnet_fd: Insufficient options for proto=fd [ 95.584672][ T37] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.594617][ T37] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.609967][ T37] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.619214][ T37] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.776942][ T6053] serio: Serial port ptm0 [ 96.219750][ T6089] FAULT_INJECTION: forcing a failure. [ 96.219750][ T6089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.233311][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.2.942 Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.233340][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.233378][ T6089] Call Trace: [ 96.233383][ T6089] [ 96.233390][ T6089] __dump_stack+0x1d/0x30 [ 96.233413][ T6089] dump_stack_lvl+0xe8/0x140 [ 96.233434][ T6089] dump_stack+0x15/0x1b [ 96.233452][ T6089] should_fail_ex+0x265/0x280 [ 96.233517][ T6089] should_fail+0xb/0x20 [ 96.233539][ T6089] should_fail_usercopy+0x1a/0x20 [ 96.233566][ T6089] _copy_from_iter+0xd2/0xe80 [ 96.233617][ T6089] ? __build_skb_around+0x1a0/0x200 [ 96.233642][ T6089] ? __alloc_skb+0x223/0x320 [ 96.233668][ T6089] netlink_sendmsg+0x471/0x6b0 [ 96.233750][ T6089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 96.233779][ T6089] __sock_sendmsg+0x145/0x180 [ 96.233957][ T6089] ____sys_sendmsg+0x31e/0x4e0 [ 96.234065][ T6089] ___sys_sendmsg+0x17b/0x1d0 [ 96.234111][ T6089] __x64_sys_sendmsg+0xd4/0x160 [ 96.234145][ T6089] x64_sys_call+0x191e/0x2ff0 [ 96.234167][ T6089] do_syscall_64+0xd2/0x200 [ 96.234227][ T6089] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 96.234252][ T6089] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 96.234285][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.234307][ T6089] RIP: 0033:0x7f3e64e0eba9 [ 96.234323][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.234364][ T6089] RSP: 002b:00007f3e63877038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 96.234384][ T6089] RAX: ffffffffffffffda RBX: 00007f3e65055fa0 RCX: 00007f3e64e0eba9 [ 96.234397][ T6089] RDX: 0000000000040840 RSI: 00002000000001c0 RDI: 0000000000000008 [ 96.234409][ T6089] RBP: 00007f3e63877090 R08: 0000000000000000 R09: 0000000000000000 [ 96.234422][ T6089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.234434][ T6089] R13: 00007f3e65056038 R14: 00007f3e65055fa0 R15: 00007ffd47fc4638 [ 96.234457][ T6089] [ 96.490509][ T6097] __nla_validate_parse: 6 callbacks suppressed [ 96.490526][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 96.506023][ T6097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.946'. [ 96.655402][ T6100] netlink: 12 bytes leftover after parsing attributes in process `syz.1.947'. [ 96.669255][ T6102] tipc: Started in network mode [ 96.674311][ T6102] tipc: Node identity d6a13543404e, cluster identity 4711 [ 96.681582][ T6102] tipc: Enabled bearer , priority 0 [ 96.697277][ T6101] tipc: Resetting bearer [ 96.720789][ T6101] tipc: Disabling bearer [ 96.866444][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.960'. [ 96.959842][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.966'. [ 97.051345][ T6149] syzkaller1: entered promiscuous mode [ 97.057067][ T6149] syzkaller1: entered allmulticast mode [ 97.184542][ T6154] lo speed is unknown, defaulting to 1000 [ 97.572793][ T6153] netlink: 'syz.3.968': attribute type 10 has an invalid length. [ 97.583719][ T6153] team0 (unregistering): Port device team_slave_0 removed [ 97.603627][ T6153] team0 (unregistering): Port device team_slave_1 removed [ 97.629232][ T6151] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.686865][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.3.971'. [ 97.714454][ T6151] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.767653][ T6151] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.787076][ T6170] serio: Serial port ptm0 [ 97.900936][ T6151] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.923500][ T6183] serio: Serial port ptm0 [ 97.972203][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.985675][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 97.985692][ T29] audit: type=1326 audit(97.827:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 98.015612][ T29] audit: type=1326 audit(97.827:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6186 comm="syz.1.983" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 98.046023][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.064414][ T6187] lo speed is unknown, defaulting to 1000 [ 98.070349][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.097635][ T6185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.982'. [ 98.107515][ T29] audit: type=1326 audit(97.929:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.130641][ T29] audit: type=1326 audit(97.929:2284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.153310][ T29] audit: type=1326 audit(97.929:2285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.176152][ T29] audit: type=1326 audit(97.929:2286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.199048][ T29] audit: type=1326 audit(97.929:2287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.221623][ T29] audit: type=1326 audit(97.929:2288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.244343][ T29] audit: type=1326 audit(97.929:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.266921][ T29] audit: type=1326 audit(97.929:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6184 comm="syz.2.982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 98.290278][ T3415] usb usb6-port1: attempt power cycle [ 98.299184][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.331882][ T6193] netlink: 44 bytes leftover after parsing attributes in process `syz.0.985'. [ 98.374795][ T6204] netlink: 20 bytes leftover after parsing attributes in process `syz.1.989'. [ 98.420825][ T6211] serio: Serial port ptm0 [ 98.462148][ T6218] serio: Serial port ptm1 [ 98.552412][ T6227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.999'. [ 98.969040][ T6273] FAULT_INJECTION: forcing a failure. [ 98.969040][ T6273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.982346][ T6273] CPU: 0 UID: 0 PID: 6273 Comm: syz.1.1018 Not tainted syzkaller #0 PREEMPT(voluntary) [ 98.982384][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 98.982401][ T6273] Call Trace: [ 98.982410][ T6273] [ 98.982421][ T6273] __dump_stack+0x1d/0x30 [ 98.982449][ T6273] dump_stack_lvl+0xe8/0x140 [ 98.982495][ T6273] dump_stack+0x15/0x1b [ 98.982513][ T6273] should_fail_ex+0x265/0x280 [ 98.982589][ T6273] should_fail+0xb/0x20 [ 98.982617][ T6273] should_fail_usercopy+0x1a/0x20 [ 98.982651][ T6273] _copy_from_user+0x1c/0xb0 [ 98.982694][ T6273] ___sys_sendmsg+0xc1/0x1d0 [ 98.982808][ T6273] __sys_sendmmsg+0x178/0x300 [ 98.982862][ T6273] __x64_sys_sendmmsg+0x57/0x70 [ 98.982899][ T6273] x64_sys_call+0x1c4a/0x2ff0 [ 98.982930][ T6273] do_syscall_64+0xd2/0x200 [ 98.983020][ T6273] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 98.983094][ T6273] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 98.983135][ T6273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.983164][ T6273] RIP: 0033:0x7f78a96deba9 [ 98.983185][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.983255][ T6273] RSP: 002b:00007f78a813f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.983302][ T6273] RAX: ffffffffffffffda RBX: 00007f78a9925fa0 RCX: 00007f78a96deba9 [ 98.983316][ T6273] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 98.983328][ T6273] RBP: 00007f78a813f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.983403][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.983419][ T6273] R13: 00007f78a9926038 R14: 00007f78a9925fa0 R15: 00007fff42fabd68 [ 98.983478][ T6273] [ 99.240254][ T6277] lo speed is unknown, defaulting to 1000 [ 99.506611][ T6297] serio: Serial port ptm1 [ 100.467699][ T6381] netem: change failed [ 100.570755][ T3415] usb usb6-port1: unable to enumerate USB device [ 100.584161][ T6059] vhci_hcd: invalid port number 96 [ 100.589369][ T6059] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 101.242610][ T6417] FAULT_INJECTION: forcing a failure. [ 101.242610][ T6417] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.256094][ T6417] CPU: 0 UID: 0 PID: 6417 Comm: syz.4.1051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.256234][ T6417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 101.256319][ T6417] Call Trace: [ 101.256327][ T6417] [ 101.256337][ T6417] __dump_stack+0x1d/0x30 [ 101.256362][ T6417] dump_stack_lvl+0xe8/0x140 [ 101.256384][ T6417] dump_stack+0x15/0x1b [ 101.256402][ T6417] should_fail_ex+0x265/0x280 [ 101.256491][ T6417] should_fail_alloc_page+0xf2/0x100 [ 101.256522][ T6417] __alloc_frozen_pages_noprof+0xff/0x360 [ 101.256610][ T6417] alloc_pages_mpol+0xb3/0x250 [ 101.256649][ T6417] vma_alloc_folio_noprof+0x1aa/0x300 [ 101.256729][ T6417] do_wp_page+0x5db/0x24e0 [ 101.256771][ T6417] ? css_rstat_updated+0xb7/0x240 [ 101.256805][ T6417] ? __rcu_read_lock+0x37/0x50 [ 101.256832][ T6417] handle_mm_fault+0x77d/0x2c20 [ 101.256857][ T6417] ? __rcu_read_unlock+0x4f/0x70 [ 101.256932][ T6417] do_user_addr_fault+0x3fe/0x1090 [ 101.256976][ T6417] exc_page_fault+0x62/0xa0 [ 101.257008][ T6417] asm_exc_page_fault+0x26/0x30 [ 101.257030][ T6417] RIP: 0010:__put_user_4+0xd/0x20 [ 101.257192][ T6417] Code: 66 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 101.257212][ T6417] RSP: 0018:ffffc90000e7fd18 EFLAGS: 00050206 [ 101.257229][ T6417] RAX: 00000000fffffff2 RBX: 0000000000000000 RCX: 0000200000001000 [ 101.257243][ T6417] RDX: ffff88812cfde300 RSI: 00000000fffffff2 RDI: 0000000000000000 [ 101.257256][ T6417] RBP: ffffc90000e7fec0 R08: 000188812338d207 R09: 0000000000000000 [ 101.257309][ T6417] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 101.257322][ T6417] R13: 0000000000000400 R14: 0000000000000000 R15: 00000000fffffff2 [ 101.257345][ T6417] __se_sys_move_pages+0xa2f/0x1360 [ 101.257382][ T6417] ? get_pid_task+0x96/0xd0 [ 101.257408][ T6417] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 101.257490][ T6417] ? __fget_files+0x184/0x1c0 [ 101.257520][ T6417] ? fput+0x8f/0xc0 [ 101.257552][ T6417] ? ksys_write+0x192/0x1a0 [ 101.257579][ T6417] __x64_sys_move_pages+0x78/0x90 [ 101.257649][ T6417] x64_sys_call+0x2f78/0x2ff0 [ 101.257690][ T6417] do_syscall_64+0xd2/0x200 [ 101.257803][ T6417] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 101.257914][ T6417] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 101.257951][ T6417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.257976][ T6417] RIP: 0033:0x7fe5f5edeba9 [ 101.257995][ T6417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.258016][ T6417] RSP: 002b:00007fe5f4947038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 101.258038][ T6417] RAX: ffffffffffffffda RBX: 00007fe5f6125fa0 RCX: 00007fe5f5edeba9 [ 101.258057][ T6417] RDX: 0000200000000040 RSI: 0000000000002064 RDI: 0000000000000000 [ 101.258099][ T6417] RBP: 00007fe5f4947090 R08: 0000200000000000 R09: 0000000000000000 [ 101.258113][ T6417] R10: 0000200000001180 R11: 0000000000000246 R12: 0000000000000001 [ 101.258128][ T6417] R13: 00007fe5f6126038 R14: 00007fe5f6125fa0 R15: 00007fff882c0438 [ 101.258152][ T6417] [ 101.995277][ T6445] 9pnet_fd: Insufficient options for proto=fd [ 102.001607][ T6453] IPv6: NLM_F_CREATE should be specified when creating new route [ 102.009761][ T6453] 9pnet_fd: Insufficient options for proto=fd [ 102.046980][ T6455] capability: warning: `syz.3.1067' uses deprecated v2 capabilities in a way that may be insecure [ 102.128944][ T6457] lo speed is unknown, defaulting to 1000 [ 102.253639][ T6461] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 102.261627][ T6461] __nla_validate_parse: 5 callbacks suppressed [ 102.261647][ T6461] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1069'. [ 102.281411][ T6461] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 102.375597][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1070'. [ 102.570386][ T6475] serio: Serial port ptm1 [ 102.797601][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1078'. [ 103.201936][ T6519] FAULT_INJECTION: forcing a failure. [ 103.201936][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 103.201967][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.2.1093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.201997][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 103.202038][ T6519] Call Trace: [ 103.202047][ T6519] [ 103.202056][ T6519] __dump_stack+0x1d/0x30 [ 103.202083][ T6519] dump_stack_lvl+0xe8/0x140 [ 103.202105][ T6519] dump_stack+0x15/0x1b [ 103.202122][ T6519] should_fail_ex+0x265/0x280 [ 103.202146][ T6519] ? kobject_uevent_env+0x1c0/0x570 [ 103.202227][ T6519] should_failslab+0x8c/0xb0 [ 103.202254][ T6519] __kmalloc_cache_noprof+0x4c/0x320 [ 103.202345][ T6519] kobject_uevent_env+0x1c0/0x570 [ 103.202370][ T6519] ? device_pm_check_callbacks+0x683/0x6a0 [ 103.202436][ T6519] kobject_uevent+0x1d/0x30 [ 103.202516][ T6519] device_del+0x710/0x790 [ 103.202549][ T6519] device_unregister+0x15/0x40 [ 103.202577][ T6519] bdi_unregister+0x307/0x3a0 [ 103.202658][ T6519] __del_gendisk+0x2c3/0x570 [ 103.202705][ T6519] del_gendisk+0xac/0xf0 [ 103.202802][ T6519] loop_remove+0x26/0x80 [ 103.202825][ T6519] loop_control_ioctl+0x3b3/0x3f0 [ 103.202851][ T6519] ? __pfx_loop_control_ioctl+0x10/0x10 [ 103.202919][ T6519] __se_sys_ioctl+0xce/0x140 [ 103.202945][ T6519] __x64_sys_ioctl+0x43/0x50 [ 103.202965][ T6519] x64_sys_call+0x1816/0x2ff0 [ 103.203017][ T6519] do_syscall_64+0xd2/0x200 [ 103.203081][ T6519] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 103.203110][ T6519] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 103.203141][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.203187][ T6519] RIP: 0033:0x7f3e64e0eba9 [ 103.203272][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.203290][ T6519] RSP: 002b:00007f3e63877038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.203309][ T6519] RAX: ffffffffffffffda RBX: 00007f3e65055fa0 RCX: 00007f3e64e0eba9 [ 103.203321][ T6519] RDX: 0000000000000005 RSI: 0000000000004c81 RDI: 0000000000000006 [ 103.203333][ T6519] RBP: 00007f3e63877090 R08: 0000000000000000 R09: 0000000000000000 [ 103.203344][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.203440][ T6519] R13: 00007f3e65056038 R14: 00007f3e65055fa0 R15: 00007ffd47fc4638 [ 103.203542][ T6519] [ 103.210397][ T6520] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1094'. [ 103.309521][ T6525] serio: Serial port ptm0 [ 103.472851][ T6536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1101'. [ 103.705771][ T6548] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.757807][ T6548] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.834451][ T6548] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.876872][ T6548] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.939670][ T6358] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.939932][ T6358] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.940183][ T6358] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.954201][ T31] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.030068][ T6561] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1107'. [ 104.103150][ T6565] lo speed is unknown, defaulting to 1000 [ 104.125498][ T6567] serio: Serial port ptm0 [ 104.259431][ T6578] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 104.274647][ T6578] netlink: 'syz.3.1113': attribute type 10 has an invalid length. [ 104.292844][ T6578] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.294786][ T6570] 9pnet_fd: Insufficient options for proto=fd [ 104.368050][ T6578] lo speed is unknown, defaulting to 1000 [ 104.405019][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 104.405035][ T29] audit: type=1400 audit(103.743:2406): avc: denied { getopt } for pid=6577 comm="syz.3.1113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 104.704755][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1118'. [ 105.052042][ T6607] serio: Serial port ptm0 [ 105.277664][ T6615] lo speed is unknown, defaulting to 1000 [ 105.997679][ T6612] lo speed is unknown, defaulting to 1000 [ 106.230694][ T6636] serio: Serial port ptm0 [ 106.621558][ T6669] lo speed is unknown, defaulting to 1000 [ 106.639659][ T6675] bond0: (slave dummy0): Releasing backup interface [ 106.672162][ T6675] bridge_slave_0: left allmulticast mode [ 106.678133][ T6675] bridge_slave_0: left promiscuous mode [ 106.683986][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.718006][ T6674] 9pnet_fd: Insufficient options for proto=fd [ 106.746846][ T6675] bridge_slave_1: left allmulticast mode [ 106.752646][ T6675] bridge_slave_1: left promiscuous mode [ 106.759066][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.804724][ T6675] bond0: (slave bond_slave_0): Releasing backup interface [ 106.831052][ T6675] bond0: (slave bond_slave_1): Releasing backup interface [ 106.879289][ T6673] lo speed is unknown, defaulting to 1000 [ 107.140678][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1151'. [ 107.299394][ T6700] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1152'. [ 107.838880][ T6726] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1163'. [ 108.102820][ T6738] 9pnet_fd: Insufficient options for proto=fd [ 108.672142][ T6785] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1185'. [ 108.672241][ T6761] 9pnet_fd: Insufficient options for proto=fd [ 109.030630][ T6799] lo speed is unknown, defaulting to 1000 [ 109.340716][ T29] audit: type=1326 audit(108.303:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6800 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 109.376836][ T29] audit: type=1326 audit(108.331:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6800 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 109.399764][ T29] audit: type=1326 audit(108.331:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6800 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 109.423136][ T29] audit: type=1326 audit(108.331:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6800 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 109.445983][ T29] audit: type=1326 audit(108.331:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6800 comm="syz.3.1191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 109.538533][ T29] audit: type=1326 audit(108.478:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 109.561880][ T29] audit: type=1326 audit(108.478:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 109.584892][ T29] audit: type=1326 audit(108.478:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 109.608303][ T29] audit: type=1326 audit(108.478:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6808 comm="syz.4.1195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 109.636986][ T6815] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1198'. [ 110.001679][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 110.001761][ T29] audit: type=1326 audit(108.912:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 110.031736][ T29] audit: type=1326 audit(108.912:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 110.055006][ T29] audit: type=1326 audit(108.912:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 110.077975][ T29] audit: type=1326 audit(108.912:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6837 comm="syz.0.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 110.102577][ T29] audit: type=1400 audit(109.014:2442): avc: denied { bind } for pid=6802 comm="syz.1.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.121581][ T29] audit: type=1400 audit(109.014:2443): avc: denied { name_bind } for pid=6802 comm="syz.1.1192" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 110.141917][ T29] audit: type=1400 audit(109.014:2444): avc: denied { node_bind } for pid=6802 comm="syz.1.1192" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 110.347662][ T6835] 9pnet_fd: Insufficient options for proto=fd [ 110.474737][ T6840] 9pnet_fd: Insufficient options for proto=fd [ 110.568355][ T6855] lo speed is unknown, defaulting to 1000 [ 111.327691][ T6876] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1219'. [ 111.494296][ T6896] serio: Serial port ptm0 [ 111.645040][ T6907] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1230'. [ 111.743413][ T6908] lo speed is unknown, defaulting to 1000 [ 111.772809][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 112.081430][ T6911] lo speed is unknown, defaulting to 1000 [ 112.262302][ T29] audit: type=1400 audit(111.007:2445): avc: denied { bind } for pid=6917 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.262967][ T29] audit: type=1400 audit(111.007:2446): avc: denied { listen } for pid=6917 comm="syz.0.1234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.301672][ T29] audit: type=1326 audit(111.026:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6917 comm="syz.0.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 112.754353][ T6951] lo speed is unknown, defaulting to 1000 [ 113.269102][ T6959] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1251'. [ 113.383768][ T6965] lo speed is unknown, defaulting to 1000 [ 114.159009][ T6983] 9pnet_fd: Insufficient options for proto=fd [ 114.461277][ T7009] FAULT_INJECTION: forcing a failure. [ 114.461277][ T7009] name failslab, interval 1, probability 0, space 0, times 0 [ 114.462155][ T7004] lo speed is unknown, defaulting to 1000 [ 114.473990][ T7009] CPU: 1 UID: 0 PID: 7009 Comm: syz.0.1269 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.474023][ T7009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 114.474041][ T7009] Call Trace: [ 114.474051][ T7009] [ 114.474063][ T7009] __dump_stack+0x1d/0x30 [ 114.474166][ T7009] dump_stack_lvl+0xe8/0x140 [ 114.474195][ T7009] dump_stack+0x15/0x1b [ 114.474217][ T7009] should_fail_ex+0x265/0x280 [ 114.474291][ T7009] should_failslab+0x8c/0xb0 [ 114.474328][ T7009] kmem_cache_alloc_noprof+0x50/0x310 [ 114.474369][ T7009] ? copy_signal+0x53/0x340 [ 114.474540][ T7009] copy_signal+0x53/0x340 [ 114.474658][ T7009] copy_process+0xcde/0x2000 [ 114.474708][ T7009] kernel_clone+0x16c/0x5c0 [ 114.474781][ T7009] ? vfs_write+0x7e8/0x960 [ 114.474817][ T7009] __x64_sys_clone+0xe6/0x120 [ 114.474870][ T7009] x64_sys_call+0x119c/0x2ff0 [ 114.474943][ T7009] do_syscall_64+0xd2/0x200 [ 114.474989][ T7009] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 114.475025][ T7009] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.475178][ T7009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.475262][ T7009] RIP: 0033:0x7f3d24f4eba9 [ 114.475287][ T7009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.475313][ T7009] RSP: 002b:00007f3d239aefe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 114.475358][ T7009] RAX: ffffffffffffffda RBX: 00007f3d25195fa0 RCX: 00007f3d24f4eba9 [ 114.475377][ T7009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000640c7000 [ 114.475392][ T7009] RBP: 00007f3d239af090 R08: 0000000000000000 R09: 0000000000000000 [ 114.475410][ T7009] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 114.475427][ T7009] R13: 00007f3d25196038 R14: 00007f3d25195fa0 R15: 00007fffaeaaab88 [ 114.475459][ T7009] [ 114.934409][ T7015] lo speed is unknown, defaulting to 1000 [ 115.136850][ T7028] serio: Serial port ptm0 [ 115.281812][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1277'. [ 115.485308][ T7034] 9pnet_fd: Insufficient options for proto=fd [ 115.525842][ T7047] netlink: 'syz.2.1283': attribute type 7 has an invalid length. [ 115.533741][ T7047] netlink: 'syz.2.1283': attribute type 8 has an invalid length. [ 115.624313][ T7049] lo speed is unknown, defaulting to 1000 [ 115.669671][ T7057] serio: Serial port ptm0 [ 115.748777][ T7063] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1288'. [ 115.815843][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 115.815860][ T29] audit: type=1326 audit(114.284:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 115.869270][ T29] audit: type=1326 audit(114.312:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 115.892840][ T29] audit: type=1326 audit(114.312:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7068 comm="syz.2.1291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 115.915735][ T29] audit: type=1326 audit(114.321:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 115.938978][ T29] audit: type=1326 audit(114.321:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 115.961907][ T29] audit: type=1326 audit(114.321:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 115.984769][ T29] audit: type=1326 audit(114.321:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 116.007659][ T29] audit: type=1326 audit(114.321:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 116.030501][ T29] audit: type=1326 audit(114.321:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 116.053635][ T29] audit: type=1326 audit(114.321:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7072 comm="syz.2.1292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 116.304955][ T7089] serio: Serial port ptm0 [ 116.451055][ T7095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1301'. [ 116.524377][ T7090] 9pnet_fd: Insufficient options for proto=fd [ 116.634322][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 116.650410][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 116.737138][ T7123] serio: Serial port ptm1 [ 116.982100][ T7153] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1319'. [ 116.999926][ T7153] 9pnet_fd: Insufficient options for proto=fd [ 117.093242][ T7160] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1322'. [ 117.407560][ T7168] serio: Serial port ptm1 [ 117.571919][ T7175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1328'. [ 117.701608][ T7185] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1333'. [ 117.965896][ T7205] serio: Serial port ptm0 [ 118.093678][ T7219] lo speed is unknown, defaulting to 1000 [ 118.242700][ T7236] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 118.331453][ T7250] serio: Serial port ptm0 [ 118.416050][ T7263] netem: change failed [ 118.636506][ T7270] 9pnet_fd: Insufficient options for proto=fd [ 118.835072][ T7273] 9pnet_fd: Insufficient options for proto=fd [ 119.187215][ T7291] __nla_validate_parse: 3 callbacks suppressed [ 119.187237][ T7291] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1374'. [ 119.216420][ T7291] netem: change failed [ 119.234750][ T7289] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.254759][ T7293] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1375'. [ 119.293530][ T7289] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.382130][ T7289] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.465924][ T7289] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.489696][ T7311] futex_wake_op: syz.3.1381 tries to shift op by -1; fix this program [ 119.597870][ T6350] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.654042][ T6350] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.696467][ T6338] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.715025][ T6338] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.828642][ T7331] loop7: detected capacity change from 0 to 16384 [ 119.907084][ T7335] pim6reg: entered allmulticast mode [ 119.925247][ T7335] pim6reg: left allmulticast mode [ 120.000214][ T7320] 9pnet_fd: Insufficient options for proto=fd [ 120.068999][ T7335] netlink: 'syz.3.1389': attribute type 3 has an invalid length. [ 120.277712][ T7338] loop7: detected capacity change from 16384 to 16383 [ 120.391946][ T7352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.402355][ T7352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.414378][ T7322] 9pnet_fd: Insufficient options for proto=fd [ 120.572816][ T7352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.583231][ T7352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.702677][ T7359] lo speed is unknown, defaulting to 1000 [ 120.895277][ T7352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 120.905782][ T7352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.128037][ T7352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.138436][ T7352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.192892][ T7372] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7372 comm=syz.0.1404 [ 121.792558][ T6343] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.800854][ T6343] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.808279][ T7386] serio: Serial port ptm0 [ 121.819703][ T6343] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.828200][ T6343] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.848246][ T6343] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.856570][ T6343] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.864905][ T7391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1412'. [ 121.875490][ T7391] netem: change failed [ 121.883591][ T6343] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.892057][ T6343] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.303262][ T7430] lo speed is unknown, defaulting to 1000 [ 122.343939][ T7431] lo speed is unknown, defaulting to 1000 [ 122.828213][ T7443] rtc_cmos 00:00: Alarms can be up to one day in the future [ 122.932975][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 122.932991][ T29] audit: type=1326 audit(120.856:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 122.975159][ T7450] FAULT_INJECTION: forcing a failure. [ 122.975159][ T7450] name failslab, interval 1, probability 0, space 0, times 0 [ 122.988277][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.0.1431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.988312][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 122.988329][ T7450] Call Trace: [ 122.988337][ T7450] [ 122.988348][ T7450] __dump_stack+0x1d/0x30 [ 122.988382][ T7450] dump_stack_lvl+0xe8/0x140 [ 122.988498][ T7450] dump_stack+0x15/0x1b [ 122.988520][ T7450] should_fail_ex+0x265/0x280 [ 122.988553][ T7450] should_failslab+0x8c/0xb0 [ 122.988584][ T7450] kmem_cache_alloc_noprof+0x50/0x310 [ 122.988642][ T7450] ? getname_flags+0x80/0x3b0 [ 122.988721][ T7450] getname_flags+0x80/0x3b0 [ 122.988754][ T7450] user_path_at+0x28/0x130 [ 122.988793][ T7450] __x64_sys_umount+0x85/0xe0 [ 122.988819][ T7450] x64_sys_call+0xdd2/0x2ff0 [ 122.988971][ T7450] do_syscall_64+0xd2/0x200 [ 122.989013][ T7450] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 122.989046][ T7450] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 122.989118][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.989139][ T7450] RIP: 0033:0x7f3d24f4eba9 [ 122.989159][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.989201][ T7450] RSP: 002b:00007f3d239af038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 122.989287][ T7450] RAX: ffffffffffffffda RBX: 00007f3d25195fa0 RCX: 00007f3d24f4eba9 [ 122.989300][ T7450] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000019240 [ 122.989316][ T7450] RBP: 00007f3d239af090 R08: 0000000000000000 R09: 0000000000000000 [ 122.989332][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.989348][ T7450] R13: 00007f3d25196038 R14: 00007f3d25195fa0 R15: 00007fffaeaaab88 [ 122.989370][ T7450] [ 122.990450][ T29] audit: type=1326 audit(120.884:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d24f4d510 code=0x7ffc0000 [ 123.193750][ T29] audit: type=1326 audit(120.884:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d24f4d65f code=0x7ffc0000 [ 123.217427][ T29] audit: type=1326 audit(120.884:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 123.245975][ T29] audit: type=1326 audit(120.967:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3d24f4d5bc code=0x7ffc0000 [ 123.269433][ T29] audit: type=1326 audit(120.967:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3d24f4d65f code=0x7ffc0000 [ 123.292569][ T29] audit: type=1326 audit(120.967:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3d24f4d80a code=0x7ffc0000 [ 123.316008][ T29] audit: type=1326 audit(120.967:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 123.338999][ T29] audit: type=1326 audit(120.967:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7449 comm="syz.0.1431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 123.503476][ T29] audit: type=1400 audit(121.373:2498): avc: denied { append } for pid=7466 comm="syz.2.1437" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 123.568224][ T7486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1443'. [ 123.838740][ T7504] lo speed is unknown, defaulting to 1000 [ 123.978674][ T7497] 9pnet_fd: Insufficient options for proto=fd [ 124.407385][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 124.417024][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 124.730800][ T7538] lo speed is unknown, defaulting to 1000 [ 124.748682][ T7548] serio: Serial port ptm0 [ 124.917646][ T7556] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1468'. [ 125.004004][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1469'. [ 125.427479][ T7575] lo speed is unknown, defaulting to 1000 [ 125.932122][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 125.932972][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 126.096735][ T7598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 126.170991][ T7601] serio: Serial port ptm0 [ 126.219566][ T7605] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.229519][ T7605] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.288487][ T7605] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.298478][ T7605] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.309324][ T7594] 9pnet_fd: Insufficient options for proto=fd [ 126.477148][ T7605] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.487246][ T7605] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.708064][ T7605] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 126.717912][ T7605] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.889267][ T7628] lo speed is unknown, defaulting to 1000 [ 127.292577][ T7618] 9pnet_fd: Insufficient options for proto=fd [ 127.320894][ T7639] sg_write: data in/out 197376/1 bytes for SCSI command 0x8-- guessing data in; [ 127.320894][ T7639] program syz.1.1497 not setting count and/or reply_len properly [ 127.361811][ T6343] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.370191][ T6343] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.381648][ T6343] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.381753][ T6343] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.388230][ T6343] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.388268][ T6343] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.399173][ T6343] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.435668][ T6343] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.684413][ T7655] futex_wake_op: syz.3.1504 tries to shift op by -1; fix this program [ 127.804698][ T7659] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1508'. [ 128.179349][ T7669] lo speed is unknown, defaulting to 1000 [ 129.040130][ T7673] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.142434][ T7673] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.186482][ T7673] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.224883][ T7673] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.342343][ T6334] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.342593][ T6334] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.396577][ T6334] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.396623][ T6334] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.456357][ T7693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1520'. [ 129.645899][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 129.645916][ T29] audit: type=1326 audit(127.040:2518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e64e05b67 code=0x7ffc0000 [ 129.653817][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1523'. [ 129.684974][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1523'. [ 129.684997][ T7700] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1523'. [ 129.748252][ T29] audit: type=1326 audit(127.077:2519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e64daada9 code=0x7ffc0000 [ 129.771053][ T29] audit: type=1326 audit(127.077:2520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3e64e05b67 code=0x7ffc0000 [ 129.771091][ T29] audit: type=1326 audit(127.077:2521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3e64daada9 code=0x7ffc0000 [ 129.771146][ T29] audit: type=1326 audit(127.077:2522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 129.771179][ T29] audit: type=1326 audit(127.077:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 129.771212][ T29] audit: type=1326 audit(127.077:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 129.771237][ T29] audit: type=1326 audit(127.077:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 129.771263][ T29] audit: type=1326 audit(127.077:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 129.771309][ T29] audit: type=1326 audit(127.077:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7699 comm="syz.2.1524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 129.888875][ T7700] lo speed is unknown, defaulting to 1000 [ 130.930818][ T7725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1531'. [ 132.125341][ T7761] FAULT_INJECTION: forcing a failure. [ 132.125341][ T7761] name failslab, interval 1, probability 0, space 0, times 0 [ 132.138540][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.1.1545 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.138573][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.138587][ T7761] Call Trace: [ 132.138594][ T7761] [ 132.138602][ T7761] __dump_stack+0x1d/0x30 [ 132.138653][ T7761] dump_stack_lvl+0xe8/0x140 [ 132.138679][ T7761] dump_stack+0x15/0x1b [ 132.138701][ T7761] should_fail_ex+0x265/0x280 [ 132.138733][ T7761] ? io_ring_ctx_alloc+0x38/0x6a0 [ 132.138768][ T7761] should_failslab+0x8c/0xb0 [ 132.138896][ T7761] __kmalloc_cache_noprof+0x4c/0x320 [ 132.138976][ T7761] ? avc_has_perm_noaudit+0x1b1/0x200 [ 132.139011][ T7761] io_ring_ctx_alloc+0x38/0x6a0 [ 132.139044][ T7761] ? avc_has_perm+0xf7/0x180 [ 132.139081][ T7761] ? io_uring_fill_params+0x27f/0x300 [ 132.139116][ T7761] io_uring_create+0x10f/0x610 [ 132.139262][ T7761] __se_sys_io_uring_setup+0x1f7/0x210 [ 132.139294][ T7761] __x64_sys_io_uring_setup+0x31/0x40 [ 132.139319][ T7761] x64_sys_call+0x2b21/0x2ff0 [ 132.139346][ T7761] do_syscall_64+0xd2/0x200 [ 132.139401][ T7761] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.139435][ T7761] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.139519][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.139546][ T7761] RIP: 0033:0x7f78a96deba9 [ 132.139563][ T7761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.139581][ T7761] RSP: 002b:00007f78a813efc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 132.139676][ T7761] RAX: ffffffffffffffda RBX: 00007f78a9925fa0 RCX: 00007f78a96deba9 [ 132.139693][ T7761] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000003c0a [ 132.139709][ T7761] RBP: 0000200000000400 R08: 0000000000000000 R09: 0000000000000000 [ 132.139725][ T7761] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 132.139741][ T7761] R13: 0000000000000000 R14: 0000000000003c0a R15: 0000000000000000 [ 132.139768][ T7761] [ 132.491866][ T7768] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1548'. [ 132.779734][ T7788] lo speed is unknown, defaulting to 1000 [ 133.503912][ T7817] lo speed is unknown, defaulting to 1000 [ 133.921387][ T7819] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1564'. [ 134.045493][ T7823] serio: Serial port ptm0 [ 134.556502][ T7857] lo speed is unknown, defaulting to 1000 [ 135.027848][ T7861] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1579'. [ 135.397030][ T7869] lo speed is unknown, defaulting to 1000 [ 136.291207][ T7898] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.346371][ T7898] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.411295][ T7898] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.455863][ T7898] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.519649][ T171] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.560230][ T171] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.560333][ T171] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.560363][ T171] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.633290][ T7908] serio: Serial port ptm0 [ 137.241187][ T7933] lo speed is unknown, defaulting to 1000 [ 138.255990][ T7965] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 138.343013][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 138.343074][ T29] audit: type=1326 audit(135.070:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 138.391392][ T29] audit: type=1326 audit(135.107:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 138.414343][ T29] audit: type=1326 audit(135.107:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7967 comm="syz.4.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 138.513127][ T7972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 138.538357][ T7974] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1618'. [ 138.703333][ T29] audit: type=1400 audit(135.402:2580): avc: denied { create } for pid=7977 comm="syz.1.1620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 138.823983][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1626'. [ 138.886659][ T7998] FAULT_INJECTION: forcing a failure. [ 138.886659][ T7998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.900079][ T7998] CPU: 0 UID: 0 PID: 7998 Comm: syz.1.1629 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.900179][ T7998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.900192][ T7998] Call Trace: [ 138.900198][ T7998] [ 138.900207][ T7998] __dump_stack+0x1d/0x30 [ 138.900228][ T7998] dump_stack_lvl+0xe8/0x140 [ 138.900364][ T7998] dump_stack+0x15/0x1b [ 138.900386][ T7998] should_fail_ex+0x265/0x280 [ 138.900411][ T7998] should_fail+0xb/0x20 [ 138.900433][ T7998] should_fail_usercopy+0x1a/0x20 [ 138.900462][ T7998] copy_fpstate_to_sigframe+0x628/0x7d0 [ 138.900599][ T7998] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 138.900640][ T7998] ? x86_task_fpu+0x36/0x60 [ 138.900677][ T7998] get_sigframe+0x34d/0x490 [ 138.900744][ T7998] ? get_signal+0xdc8/0xf70 [ 138.900773][ T7998] x64_setup_rt_frame+0xa8/0x580 [ 138.900799][ T7998] arch_do_signal_or_restart+0x27c/0x480 [ 138.900826][ T7998] exit_to_user_mode_loop+0x7a/0x100 [ 138.900849][ T7998] do_syscall_64+0x1d6/0x200 [ 138.900930][ T7998] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.901014][ T7998] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.901053][ T7998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.901191][ T7998] RIP: 0033:0x7f78a96deba7 [ 138.901207][ T7998] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 138.901299][ T7998] RSP: 002b:00007f78a813f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 138.901323][ T7998] RAX: 00000000000000f0 RBX: 00007f78a9925fa0 RCX: 00007f78a96deba9 [ 138.901337][ T7998] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000b40 [ 138.901350][ T7998] RBP: 00007f78a813f090 R08: 0000000000000000 R09: 0000000000000000 [ 138.901362][ T7998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.901405][ T7998] R13: 00007f78a9926038 R14: 00007f78a9925fa0 R15: 00007fff42fabd68 [ 138.901431][ T7998] [ 139.143609][ T8001] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1632'. [ 139.337146][ T29] audit: type=1400 audit(135.984:2581): avc: denied { mount } for pid=8017 comm="syz.2.1637" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 139.978596][ T29] audit: type=1326 audit(136.584:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 140.001803][ T29] audit: type=1326 audit(136.584:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 140.149289][ T8038] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1642'. [ 140.192637][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1642'. [ 140.317733][ T29] audit: type=1326 audit(136.630:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm="syz.2.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 140.340633][ T29] audit: type=1326 audit(136.630:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 140.364518][ T29] audit: type=1326 audit(136.630:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8034 comm=77DEA105FF07 exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e64e0eba9 code=0x7ffc0000 [ 140.458780][ T8044] lo speed is unknown, defaulting to 1000 [ 140.924385][ T8055] serio: Serial port ptm0 [ 141.011098][ T3415] hid (null): unknown global tag 0xe [ 141.025115][ T8070] program syz.4.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.046108][ T3415] hid-generic 8C00:1000000:DC000000.0002: unknown global tag 0xe [ 141.054031][ T3415] hid-generic 8C00:1000000:DC000000.0002: item 0 2 1 14 parsing failed [ 141.065618][ T3415] hid-generic 8C00:1000000:DC000000.0002: probe with driver hid-generic failed with error -22 [ 141.159566][ T8071] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 142.116816][ T8100] serio: Serial port ptm1 [ 142.535802][ T8111] lo speed is unknown, defaulting to 1000 [ 142.577095][ T8112] lo speed is unknown, defaulting to 1000 [ 143.567458][ T8142] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1678'. [ 143.804490][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 143.804508][ T29] audit: type=1400 audit(140.119:2645): avc: denied { mount } for pid=8152 comm="syz.4.1681" name="/" dev="configfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 144.140214][ T8161] lo speed is unknown, defaulting to 1000 [ 144.508573][ T8163] lo speed is unknown, defaulting to 1000 [ 145.010985][ T8168] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.154461][ T8168] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.242169][ T8168] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.309014][ T8168] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.419916][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.470178][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.505225][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.523840][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.686853][ T29] audit: type=1400 audit(141.854:2646): avc: denied { read } for pid=8201 comm="syz.0.1699" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.709166][ T29] audit: type=1400 audit(141.854:2647): avc: denied { open } for pid=8201 comm="syz.0.1699" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 145.856772][ T8202] IPVS: Unknown mcast interface:  [ 146.231478][ T8223] lo speed is unknown, defaulting to 1000 [ 146.796740][ T8232] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.878047][ T8232] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.961944][ T8232] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.042002][ T8232] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.153259][ T8244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1710'. [ 147.223593][ T29] audit: type=1326 audit(143.266:2648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 147.246693][ T29] audit: type=1326 audit(143.266:2649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 147.269528][ T29] audit: type=1326 audit(143.266:2650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 147.292556][ T29] audit: type=1326 audit(143.266:2651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 147.315576][ T29] audit: type=1326 audit(143.266:2652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 147.338467][ T29] audit: type=1326 audit(143.266:2653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 147.361546][ T29] audit: type=1326 audit(143.266:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8245 comm="syz.4.1711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 147.626030][ T8255] 9pnet_fd: Insufficient options for proto=fd [ 147.757635][ T8260] serio: Serial port ptm0 [ 147.820736][ T8262] serio: Serial port ptm0 [ 148.223998][ T8289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1726'. [ 148.561878][ T8289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.643984][ T8291] vlan2: entered allmulticast mode [ 148.649285][ T8291] bond1: entered allmulticast mode [ 148.997050][ T8308] serio: Serial port ptm1 [ 149.138015][ T8319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.147347][ T8319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.201898][ T8322] netlink: 'syz.3.1734': attribute type 2 has an invalid length. [ 149.343420][ T8321] 9pnet_fd: Insufficient options for proto=fd [ 149.374839][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 149.374853][ T29] audit: type=1326 audit(145.251:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 149.404675][ T29] audit: type=1326 audit(145.251:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 149.427577][ T29] audit: type=1326 audit(145.251:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 149.451185][ T29] audit: type=1326 audit(145.251:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 149.474020][ T29] audit: type=1326 audit(145.251:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 149.497888][ T29] audit: type=1326 audit(145.251:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8318 comm="syz.1.1738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 149.736111][ T8344] serio: Serial port ptm0 [ 150.072633][ T29] audit: type=1400 audit(145.897:2711): avc: denied { bind } for pid=8364 comm="syz.2.1754" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 150.092315][ T29] audit: type=1400 audit(145.906:2712): avc: denied { read write } for pid=8364 comm="syz.2.1754" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.115212][ T29] audit: type=1400 audit(145.906:2713): avc: denied { open } for pid=8364 comm="syz.2.1754" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.178661][ T29] audit: type=1400 audit(145.998:2714): avc: denied { ioctl } for pid=8364 comm="syz.2.1754" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 150.521572][ T8375] lo speed is unknown, defaulting to 1000 [ 150.602770][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.877520][ T8377] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1757'. [ 150.983482][ T8372] 9pnet_fd: Insufficient options for proto=fd [ 151.008583][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.028187][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.053275][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.061932][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.344045][ T8401] lo speed is unknown, defaulting to 1000 [ 151.778241][ T8398] 9pnet_fd: Insufficient options for proto=fd [ 151.837779][ T8412] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.847773][ T8412] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.916608][ T8412] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 151.926449][ T8412] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.024795][ T8412] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.034852][ T8412] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.212646][ T8412] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.223261][ T8412] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.412836][ T171] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.416831][ T8447] serio: Serial port ptm1 [ 152.421595][ T171] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.455778][ T171] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.464225][ T171] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.501546][ T171] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.510870][ T171] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.535223][ T171] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.544266][ T171] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.892644][ T8460] lo speed is unknown, defaulting to 1000 [ 153.067698][ T8459] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1790'. [ 153.245398][ T8452] 9pnet_fd: Insufficient options for proto=fd [ 153.454959][ T8481] serio: Serial port ptm0 [ 153.987993][ T8530] lo speed is unknown, defaulting to 1000 [ 154.443317][ T8549] serio: Serial port ptm0 [ 154.612333][ T8572] serio: Serial port ptm0 [ 154.982649][ T8599] lo speed is unknown, defaulting to 1000 [ 155.704643][ T8625] lo speed is unknown, defaulting to 1000 [ 156.224619][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 156.224638][ T29] audit: type=1326 audit(151.573:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.3.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 156.254321][ T29] audit: type=1326 audit(151.573:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.3.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 156.277249][ T29] audit: type=1326 audit(151.573:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.3.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 156.300754][ T29] audit: type=1326 audit(151.573:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.3.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 156.323638][ T29] audit: type=1326 audit(151.573:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8648 comm="syz.3.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 156.541664][ T8668] lo speed is unknown, defaulting to 1000 [ 157.076442][ T8694] lo speed is unknown, defaulting to 1000 [ 157.943396][ T8744] lo speed is unknown, defaulting to 1000 [ 158.659969][ T8772] lo speed is unknown, defaulting to 1000 [ 159.922051][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 159.967337][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 160.457574][ T8861] 9pnet_fd: Insufficient options for proto=fd [ 160.901133][ T8904] lo speed is unknown, defaulting to 1000 [ 161.418648][ T8926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1989'. [ 161.700862][ T8937] 9pnet_fd: Insufficient options for proto=fd [ 162.034381][ T8958] serio: Serial port ptm1 [ 162.410025][ T8978] lo speed is unknown, defaulting to 1000 [ 162.852734][ T8990] serio: Serial port ptm0 [ 163.314169][ T9017] 9pnet_fd: Insufficient options for proto=fd [ 163.367404][ T9020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 164.320879][ T9059] serio: Serial port ptm0 [ 164.585188][ T9091] serio: Serial port ptm0 [ 164.660863][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2054'. [ 166.152508][ T9128] serio: Serial port ptm0 [ 166.478813][ T9154] serio: Serial port ptm0 [ 166.700171][ T9183] serio: Serial port ptm0 [ 168.133920][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 168.143741][ T9244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 168.696323][ T9258] serio: Serial port ptm2 [ 168.799224][ T9254] 9pnet_fd: Insufficient options for proto=fd [ 168.974275][ T9267] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2116'. [ 168.983542][ T9267] netem: change failed [ 169.368642][ T9286] lo speed is unknown, defaulting to 1000 [ 169.884658][ T9303] serio: Serial port ptm1 [ 170.188120][ T9310] serio: Serial port ptm1 [ 170.744828][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2143'. [ 170.793604][ T9344] serio: Serial port ptm1 [ 171.269706][ T9356] 9pnet_fd: Insufficient options for proto=fd [ 172.033788][ T9384] serio: Serial port ptm1 [ 172.289462][ T9400] serio: Serial port ptm1 [ 172.300948][ T9396] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.310889][ T9396] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.350774][ T9396] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.360730][ T9396] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.447098][ T9396] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.457117][ T9396] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.522518][ T9396] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.532498][ T9396] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.602455][ T6367] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.610864][ T6367] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.639794][ T6367] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.648047][ T6367] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.657556][ T9408] 9pnet_fd: Insufficient options for proto=fd [ 172.797191][ T9414] serio: Serial port ptm1 [ 172.870143][ T6367] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.878421][ T6367] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.969498][ T6367] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.977895][ T6367] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.944705][ T9469] serio: Serial port ptm0 [ 174.056340][ T9473] lo speed is unknown, defaulting to 1000 [ 174.509814][ T9480] serio: Serial port ptm0 [ 174.642606][ T9500] serio: Serial port ptm0 [ 176.580749][ T9633] serio: Serial port ptm1 [ 177.203914][ T9651] serio: Serial port ptm1 [ 177.302259][ T9661] serio: Serial port ptm1 [ 177.733220][ T9688] serio: Serial port ptm0 [ 177.832623][ T9685] 9pnet_fd: Insufficient options for proto=fd [ 178.140281][ T9708] serio: Serial port ptm1 [ 178.549219][ T9727] serio: Serial port ptm1 [ 178.822898][ T9736] serio: Serial port ptm1 [ 179.366634][ T9769] serio: Serial port ptm0 [ 180.038160][ T9802] serio: Serial port ptm1 [ 180.682284][ T9841] serio: Serial port ptm0 [ 180.930845][ T9847] lo speed is unknown, defaulting to 1000 [ 181.374009][ T9851] lo speed is unknown, defaulting to 1000 [ 181.798490][ T9876] serio: Serial port ptm1 [ 182.550121][ T9898] lo speed is unknown, defaulting to 1000 [ 182.656660][ T9905] serio: Serial port ptm0 [ 182.955831][ T9909] 9pnet_fd: Insufficient options for proto=fd [ 183.315016][ T9935] 9pnet_fd: Insufficient options for proto=fd [ 184.078842][ T9948] serio: Serial port ptm0 [ 184.246084][ T9969] serio: Serial port ptm1 [ 184.400706][ T9970] 9pnet_fd: Insufficient options for proto=fd [ 184.555636][ T9974] 9pnet_fd: Insufficient options for proto=fd [ 185.259222][ T9998] 9pnet_fd: Insufficient options for proto=fd [ 185.972635][T10023] 9pnet_fd: Insufficient options for proto=fd [ 186.049342][T10028] 9pnet_fd: Insufficient options for proto=fd [ 186.172135][T10026] 9pnet_fd: Insufficient options for proto=fd [ 186.450687][T10044] serio: Serial port ptm1 [ 186.871795][T10061] 9pnet_fd: Insufficient options for proto=fd [ 187.198097][T10070] serio: Serial port ptm0 [ 187.275291][T10084] futex_wake_op: syz.1.2424 tries to shift op by -1; fix this program [ 187.497435][T10088] 9pnet_fd: Insufficient options for proto=fd [ 187.508462][T10097] 9pnet_fd: Insufficient options for proto=fd [ 187.542835][T10109] serio: Serial port ptm1 [ 188.272556][T10125] futex_wake_op: syz.1.2439 tries to shift op by -1; fix this program [ 188.721981][T10156] serio: Serial port ptm0 [ 188.767424][T10142] 9pnet_fd: Insufficient options for proto=fd [ 188.816786][T10151] 9pnet_fd: Insufficient options for proto=fd [ 189.520035][T10184] lo speed is unknown, defaulting to 1000 [ 190.236929][T10205] futex_wake_op: syz.0.2466 tries to shift op by -1; fix this program [ 190.569141][T10212] serio: Serial port ptm0 [ 191.494889][T10246] serio: Serial port ptm1 [ 191.577587][T10253] futex_wake_op: syz.2.2482 tries to shift op by -1; fix this program [ 192.676860][T10282] serio: Serial port ptm0 [ 192.699110][T10274] 9pnet_fd: Insufficient options for proto=fd [ 193.632378][T10311] lo speed is unknown, defaulting to 1000 [ 193.774934][T10325] serio: Serial port ptm1 [ 193.902240][T10327] lo speed is unknown, defaulting to 1000 [ 194.609304][T10349] lo speed is unknown, defaulting to 1000 [ 194.928174][T10367] 9pnet_fd: Insufficient options for proto=fd [ 195.590717][T10383] lo speed is unknown, defaulting to 1000 [ 196.001060][T10403] lo speed is unknown, defaulting to 1000 [ 196.544160][T10408] 9pnet_fd: Insufficient options for proto=fd [ 196.995394][T10431] 9pnet_fd: Insufficient options for proto=fd [ 197.277986][T10435] lo speed is unknown, defaulting to 1000 [ 197.737774][T10454] serio: Serial port ptm1 [ 197.998263][T10469] lo speed is unknown, defaulting to 1000 [ 198.463557][T10470] 9pnet_fd: Insufficient options for proto=fd [ 198.885879][T10497] serio: Serial port ptm1 [ 198.969932][T10503] futex_wake_op: syz.0.2568 tries to shift op by -1; fix this program [ 199.013921][T10498] 9pnet_fd: Insufficient options for proto=fd [ 199.755761][T10521] lo speed is unknown, defaulting to 1000 [ 200.173548][T10530] serio: Serial port ptm0 [ 200.412727][T10531] 9pnet_fd: Insufficient options for proto=fd [ 201.299966][T10566] 9pnet_fd: Insufficient options for proto=fd [ 201.748294][T10590] 9pnet_fd: Insufficient options for proto=fd [ 202.301446][T10618] serio: Serial port ptm0 [ 202.618225][T10637] 9pnet_fd: Insufficient options for proto=fd [ 203.294327][T10650] serio: Serial port ptm0 [ 203.574052][T10662] 9pnet_fd: Insufficient options for proto=fd [ 204.284425][T10683] futex_wake_op: syz.2.2631 tries to shift op by -1; fix this program [ 204.368113][T10689] serio: Serial port ptm1 [ 204.569862][T10701] 9pnet_fd: Insufficient options for proto=fd [ 205.220931][T10714] 9pnet_fd: Insufficient options for proto=fd [ 205.327818][T10718] futex_wake_op: syz.1.2644 tries to shift op by -1; fix this program [ 205.436372][T10729] serio: Serial port ptm0 [ 205.967894][T10746] serio: Serial port ptm0 [ 206.252496][T10758] futex_wake_op: syz.0.2658 tries to shift op by -1; fix this program [ 206.347554][T10756] 9pnet_fd: Insufficient options for proto=fd [ 206.393788][T10763] serio: Serial port ptm0 [ 206.897378][T10779] serio: Serial port ptm0 [ 207.593122][T10798] serio: Serial port ptm0 [ 207.594473][T10800] futex_wake_op: syz.2.2672 tries to shift op by -1; fix this program [ 208.265078][T10834] futex_wake_op: syz.1.2683 tries to shift op by -1; fix this program [ 208.350603][T10838] serio: Serial port ptm0 [ 208.838787][T10852] 9pnet_fd: Insufficient options for proto=fd [ 209.650298][T10872] serio: Serial port ptm0 [ 210.345437][T10897] 9pnet_fd: Insufficient options for proto=fd [ 210.781531][T10901] 9pnet_fd: Insufficient options for proto=fd [ 210.904004][T10908] serio: Serial port ptm0 [ 212.365061][T10950] serio: Serial port ptm0 [ 212.736028][T10948] lo speed is unknown, defaulting to 1000 [ 213.238909][T10965] 9pnet_fd: Insufficient options for proto=fd [ 213.433531][T10967] lo speed is unknown, defaulting to 1000 [ 213.689826][T10984] serio: Serial port ptm0 [ 214.003896][T10999] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2733'. [ 214.057364][T11002] lo speed is unknown, defaulting to 1000 [ 214.973835][T11025] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.983683][T11025] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.167261][T11025] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.177121][T11025] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.220629][T11025] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.230485][T11025] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.415612][T11036] lo speed is unknown, defaulting to 1000 [ 215.534573][T11025] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 215.544526][T11025] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.737433][ T6367] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.745715][ T6367] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.782062][T11023] 9pnet_fd: Insufficient options for proto=fd [ 215.790296][ T6367] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.798629][ T6367] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.826015][ T6367] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.834229][ T6367] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.867495][ T6367] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 215.875780][ T6367] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.604172][T11104] lo speed is unknown, defaulting to 1000 [ 217.810686][T11094] 9pnet_fd: Insufficient options for proto=fd [ 217.846774][T11109] lo speed is unknown, defaulting to 1000 [ 218.028470][T11119] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.125648][T11119] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.221359][T11119] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.309019][T11119] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.388894][T11133] 9pnet_fd: Insufficient options for proto=fd [ 218.410839][ T56] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.445262][ T56] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.457040][ T56] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.466216][ T56] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 218.562791][T11145] 9pnet_fd: Insufficient options for proto=fd [ 219.214046][T11158] serio: Serial port ptm0 [ 219.581114][T11164] 9pnet_fd: Insufficient options for proto=fd [ 219.689959][T11180] lo speed is unknown, defaulting to 1000 [ 220.075033][T11185] serio: Serial port ptm0 [ 220.091171][T11187] serio: Serial port ptm1 [ 220.351719][T11198] 9pnet_fd: Insufficient options for proto=fd [ 221.408525][T11223] serio: Serial port ptm1 [ 221.979531][ T29] audit: type=1326 audit(212.279:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.003480][ T29] audit: type=1326 audit(212.279:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.028550][ T29] audit: type=1326 audit(212.316:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.065497][ T29] audit: type=1326 audit(212.316:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.088460][ T29] audit: type=1326 audit(212.316:2732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.111468][ T29] audit: type=1326 audit(212.316:2733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.134449][ T29] audit: type=1326 audit(212.316:2734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.157660][ T29] audit: type=1326 audit(212.316:2735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.180939][ T29] audit: type=1326 audit(212.316:2736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11237 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f3d24f4eba9 code=0x7ffc0000 [ 222.803746][T11234] 9pnet_fd: Insufficient options for proto=fd [ 223.083403][T11243] 9pnet_fd: Insufficient options for proto=fd [ 223.278962][T11263] 9pnet_fd: Insufficient options for proto=fd [ 223.378354][T11265] serio: Serial port ptm0 [ 224.282457][ T29] audit: type=1326 audit(214.393:2737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11274 comm="syz.1.2825" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78a96deba9 code=0x7ffc0000 [ 224.842009][T11282] netlink: 'syz.1.2825': attribute type 2 has an invalid length. [ 225.337387][T11292] 9pnet_fd: Insufficient options for proto=fd [ 227.290095][T11347] 9pnet_fd: Insufficient options for proto=fd [ 227.403890][T11353] loop9: detected capacity change from 0 to 7 [ 227.413627][T11353] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.439523][T11353] Buffer I/O error on dev loop9, logical block 0, async page read [ 227.447424][T11353] loop9: unable to read partition table [ 227.454029][T11353] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 227.454029][T11353] ) failed (rc=-5) [ 227.992893][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2856'. [ 228.002329][T11371] bridge_slave_1: left allmulticast mode [ 228.008522][T11371] bridge_slave_1: left promiscuous mode [ 228.015431][T11371] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.030848][T11371] bridge_slave_0: left allmulticast mode [ 228.036715][T11371] bridge_slave_0: left promiscuous mode [ 228.042540][T11371] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.065677][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 228.065696][ T29] audit: type=1326 audit(217.882:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.4.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 228.094871][ T29] audit: type=1326 audit(217.882:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11345 comm="syz.4.2848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 228.248777][T11388] serio: Serial port ptm0 [ 228.397974][T11396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11396 comm=syz.4.2861 [ 228.940368][ T29] audit: type=1326 audit(218.694:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 228.964592][ T29] audit: type=1326 audit(218.694:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 228.987905][ T29] audit: type=1326 audit(218.694:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 229.011716][ T29] audit: type=1326 audit(218.694:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 229.034672][ T29] audit: type=1326 audit(218.694:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 229.038768][T11408] 9pnet_fd: Insufficient options for proto=fd [ 229.058396][ T29] audit: type=1326 audit(218.694:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 229.087257][ T29] audit: type=1326 audit(218.694:2806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 229.087302][ T29] audit: type=1326 audit(218.694:2807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11414 comm="syz.4.2870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f5edeba9 code=0x7ffc0000 [ 229.218010][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2872'. [ 229.305852][T11424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 229.324327][T11425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.333050][T11425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.789421][T11432] serio: Serial port ptm0 [ 229.812793][T11422] 9pnet_fd: Insufficient options for proto=fd [ 229.984552][T11449] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2880'. [ 230.846248][T11471] 9pnet_fd: Insufficient options for proto=fd [ 231.089808][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2893'. [ 231.105479][T11486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'. [ 231.606622][T11512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11512 comm=syz.1.2903 [ 231.626484][T11512] vxcan3: entered promiscuous mode [ 231.631698][T11512] vxcan3: entered allmulticast mode [ 231.850411][T11521] usb usb8: usbfs: process 11521 (syz.3.2902) did not claim interface 0 before use [ 231.916633][T11521] lo speed is unknown, defaulting to 1000 [ 232.327616][T11523] lo speed is unknown, defaulting to 1000 [ 232.567262][T11534] pim6reg1: entered promiscuous mode [ 232.629135][T11541] infiniband !yz!: set down [ 232.633788][T11541] infiniband !yz!: added team_slave_0 [ 232.654599][T11541] RDS/IB: !yz!: added [ 232.658760][T11541] smc: adding ib device !yz! with port count 1 [ 232.714048][T11541] smc: ib device !yz! port 1 has pnetid [ 232.724348][T11553] lo speed is unknown, defaulting to 1000 [ 233.047633][T11569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2923'. [ 233.080808][T11571] netlink: zone id is out of range [ 233.086233][T11571] netlink: zone id is out of range [ 233.095207][T11571] netlink: zone id is out of range [ 233.100392][T11571] netlink: zone id is out of range [ 233.128913][T11571] netlink: zone id is out of range [ 233.154406][T11571] netlink: zone id is out of range [ 233.203301][T11571] netlink: zone id is out of range [ 233.224959][T11571] netlink: zone id is out of range [ 233.230305][T11571] netlink: zone id is out of range [ 233.235954][T11571] netlink: zone id is out of range [ 233.262579][T11584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2926'. [ 233.292860][T11584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2926'. [ 233.301978][T11584] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2926'. [ 233.317252][T11584] netlink: 'syz.2.2926': attribute type 6 has an invalid length. [ 233.424789][T11576] lo speed is unknown, defaulting to 1000 [ 233.435937][T11598] 9pnet_fd: Insufficient options for proto=fd [ 233.730531][T11608] __nla_validate_parse: 2 callbacks suppressed [ 233.730549][T11608] netlink: 400 bytes leftover after parsing attributes in process `syz.3.2933'. [ 233.765976][T11576] chnl_net:caif_netlink_parms(): no params data found [ 233.803895][T11612] wireguard0: entered promiscuous mode [ 233.809425][T11612] wireguard0: entered allmulticast mode [ 233.895905][T11576] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.903173][T11576] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.913676][T11576] bridge_slave_0: entered allmulticast mode [ 233.932365][T11576] bridge_slave_0: entered promiscuous mode [ 233.939628][T11576] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.946943][T11576] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.955258][T11576] bridge_slave_1: entered allmulticast mode [ 233.962393][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 233.962409][ T29] audit: type=1400 audit(223.337:3146): avc: denied { watch_reads } for pid=11631 comm="syz.1.2940" path="/599" dev="tmpfs" ino=3172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 233.962989][T11576] bridge_slave_1: entered promiscuous mode [ 234.017992][T11576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.030483][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2940'. [ 234.040645][T11576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.091150][T11576] team0: Port device team_slave_0 added [ 234.101955][T11576] team0: Port device team_slave_1 added [ 234.109461][ T12] bridge_slave_1: left allmulticast mode [ 234.115389][ T12] bridge_slave_1: left promiscuous mode [ 234.121131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.144823][ T12] bridge_slave_0: left allmulticast mode [ 234.150642][ T12] bridge_slave_0: left promiscuous mode [ 234.156492][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.503057][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 234.657660][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.667229][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.677624][ T12] bond0 (unregistering): Released all slaves [ 234.686212][ T12] bond1 (unregistering): Released all slaves [ 234.709654][T11576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.716740][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.742783][T11576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.756446][T11576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.763470][T11576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.789568][T11576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.802662][T11647] lo speed is unknown, defaulting to 1000 [ 234.812866][ T12] IPVS: stopping backup sync thread 4072 ... [ 234.863596][T11642] lo speed is unknown, defaulting to 1000 [ 234.914729][ T12] hsr_slave_0: left promiscuous mode [ 234.921704][ T12] hsr_slave_1: left promiscuous mode [ 234.928947][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.938286][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.972991][ T12] team0 (unregistering): Port device team_slave_1 removed [ 234.983182][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.025372][T11576] hsr_slave_0: entered promiscuous mode [ 235.031643][T11576] hsr_slave_1: entered promiscuous mode [ 235.038606][T11576] debugfs: 'hsr0' already exists in 'hsr' [ 235.044407][T11576] Cannot create hsr debugfs directory [ 235.069225][T11657] lo speed is unknown, defaulting to 1000 [ 235.296145][T11667] futex_wake_op: syz.3.2948 tries to shift op by -1; fix this program [ 235.466124][T11684] lo speed is unknown, defaulting to 1000 [ 235.537523][T11576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.552885][T11576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.566145][T11576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.583947][T11576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.634379][ T29] audit: type=1326 audit(224.878:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.657403][ T29] audit: type=1326 audit(224.878:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.680330][ T29] audit: type=1326 audit(224.878:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.703383][ T29] audit: type=1326 audit(224.878:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.726498][ T29] audit: type=1326 audit(224.878:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.749441][ T29] audit: type=1326 audit(224.878:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.772367][ T29] audit: type=1326 audit(224.878:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.795276][ T29] audit: type=1326 audit(224.878:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.818932][ T29] audit: type=1326 audit(224.878:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.3.2957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7942d9eba9 code=0x7ffc0000 [ 235.859153][T11576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.871114][T11699] pim6reg: entered allmulticast mode [ 235.877856][T11699] pim6reg: left allmulticast mode [ 235.889617][T11576] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.900252][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.907464][ T6348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.921700][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.928854][ T6348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.008396][T11576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.164037][T11576] veth0_vlan: entered promiscuous mode [ 236.173543][T11576] veth1_vlan: entered promiscuous mode [ 236.188568][T11576] veth0_macvtap: entered promiscuous mode [ 236.196582][T11576] veth1_macvtap: entered promiscuous mode [ 236.207798][T11576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.220099][T11576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.234011][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.249669][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.261903][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.276419][T11718] 9pnet_fd: Insufficient options for proto=fd [ 236.276942][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.322937][T11724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'. [ 236.337621][T11724] loop9: detected capacity change from 0 to 7 [ 236.352082][T11724] Buffer I/O error on dev loop9, logical block 0, async page read [ 236.369020][T11724] Buffer I/O error on dev loop9, logical block 0, async page read [ 236.376900][T11724] loop9: unable to read partition table [ 236.388773][T11724] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 236.388773][T11724] ) failed (rc=-5) [ 236.655371][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.703860][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.759569][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.793027][T11733] lo speed is unknown, defaulting to 1000 [ 236.803487][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 236.848560][T11748] loop4: detected capacity change from 0 to 1024 [ 236.877631][T11748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.954743][ T12] bond0 (unregistering): Released all slaves [ 236.970884][T11748] : renamed from vlan1 (while UP) [ 236.976551][T11755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2967'. [ 237.010817][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 237.020868][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2967'. [ 237.029884][T11755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2967'. [ 237.039745][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2967'. [ 237.048765][T11755] netlink: 'syz.0.2967': attribute type 6 has an invalid length. [ 237.051708][T11759] futex_wake_op: syz.2.2969 tries to shift op by -1; fix this program [ 237.083986][T11576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.126729][T11763] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2971'. [ 237.142359][T11733] chnl_net:caif_netlink_parms(): no params data found [ 237.169046][ T12] hsr_slave_0: left promiscuous mode [ 237.177742][ T12] hsr_slave_1: left promiscuous mode [ 237.377042][T11777] FAULT_INJECTION: forcing a failure. [ 237.377042][T11777] name failslab, interval 1, probability 0, space 0, times 0 [ 237.390249][T11777] CPU: 0 UID: 0 PID: 11777 Comm: syz.2.2974 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.390285][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 237.390300][T11777] Call Trace: [ 237.390306][T11777] [ 237.390315][T11777] __dump_stack+0x1d/0x30 [ 237.390336][T11777] dump_stack_lvl+0xe8/0x140 [ 237.390439][T11777] dump_stack+0x15/0x1b [ 237.390462][T11777] should_fail_ex+0x265/0x280 [ 237.390566][T11777] should_failslab+0x8c/0xb0 [ 237.390593][T11777] kmem_cache_alloc_noprof+0x50/0x310 [ 237.390699][T11777] ? skb_clone+0x151/0x1f0 [ 237.390728][T11777] skb_clone+0x151/0x1f0 [ 237.390755][T11777] inet_frag_reasm_prepare+0xbf/0x800 [ 237.390816][T11777] ip_frag_reasm+0x93/0x340 [ 237.390848][T11777] ? inet_frag_queue_insert+0x2ff/0x3e0 [ 237.390894][T11777] ip_defrag+0xc98/0xe50 [ 237.390935][T11777] ? ipv4_conntrack_defrag+0x2c6/0x350 [ 237.391044][T11777] ipv4_conntrack_defrag+0x2db/0x350 [ 237.391079][T11777] ? skb_orphan+0x4c/0x80 [ 237.391106][T11777] ? __pfx_ipv4_conntrack_defrag+0x10/0x10 [ 237.391191][T11777] nf_hook_slow+0x78/0x180 [ 237.391223][T11777] ip_rcv+0xfe/0x140 [ 237.391248][T11777] ? __pfx_ip_rcv_finish+0x10/0x10 [ 237.391363][T11777] ? __pfx_ip_rcv+0x10/0x10 [ 237.391397][T11777] __netif_receive_skb+0xff/0x270 [ 237.391483][T11777] ? tun_rx_batched+0xc7/0x430 [ 237.391504][T11777] netif_receive_skb+0x4b/0x2e0 [ 237.391539][T11777] ? tun_rx_batched+0xc7/0x430 [ 237.391577][T11777] tun_rx_batched+0xfc/0x430 [ 237.391608][T11777] tun_get_user+0x1eb6/0x2680 [ 237.391644][T11777] ? ref_tracker_alloc+0x1f2/0x2f0 [ 237.391677][T11777] tun_chr_write_iter+0x15e/0x210 [ 237.391697][T11777] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 237.391718][T11777] vfs_write+0x52a/0x960 [ 237.391816][T11777] ksys_write+0xda/0x1a0 [ 237.391881][T11777] __x64_sys_write+0x40/0x50 [ 237.391905][T11777] x64_sys_call+0x27fe/0x2ff0 [ 237.391926][T11777] do_syscall_64+0xd2/0x200 [ 237.391967][T11777] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 237.392022][T11777] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 237.392055][T11777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.392132][T11777] RIP: 0033:0x7f3e64e0d65f [ 237.392151][T11777] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 237.392175][T11777] RSP: 002b:00007f3e63877000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 237.392202][T11777] RAX: ffffffffffffffda RBX: 00007f3e65055fa0 RCX: 00007f3e64e0d65f [ 237.392219][T11777] RDX: 000000000000003a RSI: 00002000000000c0 RDI: 00000000000000c8 [ 237.392235][T11777] RBP: 00007f3e63877090 R08: 0000000000000000 R09: 0000000000000000 [ 237.392251][T11777] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 237.392267][T11777] R13: 00007f3e65056038 R14: 00007f3e65055fa0 R15: 00007ffd47fc4638 [ 237.392373][T11777] [ 237.698572][T11733] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.706629][T11733] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.716001][T11733] bridge_slave_0: entered allmulticast mode [ 237.723059][T11733] bridge_slave_0: entered promiscuous mode [ 237.733901][T11733] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.741062][T11733] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.748656][T11733] bridge_slave_1: entered allmulticast mode [ 237.755711][T11733] bridge_slave_1: entered promiscuous mode [ 237.802737][T11733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.826898][T11733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.873617][T11793] futex_wake_op: syz.4.2981 tries to shift op by -1; fix this program [ 237.883772][T11733] team0: Port device team_slave_0 added [ 237.890635][T11733] team0: Port device team_slave_1 added [ 237.925362][T11793] loop4: detected capacity change from 0 to 2048 [ 237.945340][T11733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.952521][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.978602][T11733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.990102][T11733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.997095][T11733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.023085][T11733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.042175][T11793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.067096][T11576] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.104635][T11733] hsr_slave_0: entered promiscuous mode [ 238.131717][T11733] hsr_slave_1: entered promiscuous mode [ 238.514752][T11807] FAULT_INJECTION: forcing a failure. [ 238.514752][T11807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.528000][T11807] CPU: 1 UID: 0 PID: 11807 Comm: syz.1.2984 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.528033][T11807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 238.528050][T11807] Call Trace: [ 238.528085][T11807] [ 238.528094][T11807] __dump_stack+0x1d/0x30 [ 238.528116][T11807] dump_stack_lvl+0xe8/0x140 [ 238.528139][T11807] dump_stack+0x15/0x1b [ 238.528160][T11807] should_fail_ex+0x265/0x280 [ 238.528206][T11807] should_fail+0xb/0x20 [ 238.528227][T11807] should_fail_usercopy+0x1a/0x20 [ 238.528255][T11807] _copy_from_user+0x1c/0xb0 [ 238.528400][T11807] __sys_bind+0x106/0x2a0 [ 238.528439][T11807] __x64_sys_bind+0x3f/0x50 [ 238.528464][T11807] x64_sys_call+0x2b6e/0x2ff0 [ 238.528535][T11807] do_syscall_64+0xd2/0x200 [ 238.528644][T11807] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 238.528666][T11807] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 238.528692][T11807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.528764][T11807] RIP: 0033:0x7f78a96deba9 [ 238.528777][T11807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.528793][T11807] RSP: 002b:00007f78a813f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 238.528885][T11807] RAX: ffffffffffffffda RBX: 00007f78a9925fa0 RCX: 00007f78a96deba9 [ 238.528896][T11807] RDX: 0000000000000014 RSI: 0000200000000300 RDI: 0000000000000005 [ 238.528907][T11807] RBP: 00007f78a813f090 R08: 0000000000000000 R09: 0000000000000000 [ 238.528918][T11807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.528929][T11807] R13: 00007f78a9926038 R14: 00007f78a9925fa0 R15: 00007fff42fabd68 [ 238.528948][T11807] [ 238.845871][T11818] netlink: 'syz.4.2988': attribute type 83 has an invalid length. [ 239.130609][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.224980][T11828] __nla_validate_parse: 4 callbacks suppressed [ 239.224999][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.240331][T11828] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.244618][T11832] futex_wake_op: syz.2.2992 tries to shift op by -1; fix this program [ 239.249510][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.249569][T11828] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.249680][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.328911][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.337999][T11828] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.347148][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.356066][T11828] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.376759][T11828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2991'. [ 239.457681][T11733] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 239.474274][T11733] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 239.484156][T11841] syz_tun: entered allmulticast mode [ 239.490386][T11840] syz_tun: left allmulticast mode [ 239.495824][T11733] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 239.506091][T11733] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 239.551015][T11733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.568009][T11733] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.572220][T11839] 9pnet_fd: Insufficient options for proto=fd [ 239.580192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.588748][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.613744][T11733] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 239.624212][T11733] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.688561][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.695702][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.778655][T11733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.863375][T11733] veth0_vlan: entered promiscuous mode [ 239.872340][T11733] veth1_vlan: entered promiscuous mode [ 239.889679][T11733] veth0_macvtap: entered promiscuous mode [ 239.897303][T11733] veth1_macvtap: entered promiscuous mode [ 239.909754][T11733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.921463][T11733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.934086][ T6367] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.943769][ T6367] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.955739][ T6367] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.972230][ T6367] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.030737][T11872] loop3: detected capacity change from 0 to 512 [ 240.038875][T11872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.052237][T11872] EXT4-fs error (device loop3): ext4_init_orphan_info:611: comm syz.3.3000: orphan file block 0: bad magic [ 240.065231][T11872] EXT4-fs (loop3): Remounting filesystem read-only [ 240.073458][T11872] EXT4-fs (loop3): mount failed [ 240.087182][T11872] loop3: detected capacity change from 0 to 512 [ 240.095935][T11872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 240.108101][T11872] EXT4-fs (loop3): 1 truncate cleaned up [ 240.114518][T11872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.131135][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 240.131206][ T29] audit: type=1400 audit(229.022:3309): avc: denied { append } for pid=11871 comm="syz.3.3000" path="/1/bus/cgroup.controllers" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 240.161839][T11868] Driver unsupported XDP return value 0 on prog (id 1424) dev N/A, expect packet loss! [ 240.187842][ T29] audit: type=1400 audit(229.078:3310): avc: denied { create } for pid=11871 comm="syz.3.3000" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 240.224590][ T29] audit: type=1326 audit(229.105:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370d33eba9 code=0x7ffc0000 [ 240.247590][ T29] audit: type=1326 audit(229.105:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370d33eba9 code=0x7ffc0000 [ 240.270861][ T29] audit: type=1326 audit(229.115:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7f370d33eba9 code=0x7ffc0000 [ 240.294027][ T29] audit: type=1326 audit(229.115:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370d33eba9 code=0x7ffc0000 [ 240.317044][ T29] audit: type=1326 audit(229.115:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11867 comm="syz.4.2999" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370d33eba9 code=0x7ffc0000 [ 240.348445][T11878] 9pnet_fd: Insufficient options for proto=fd [ 240.468247][T11876] 9pnet_fd: Insufficient options for proto=fd [ 240.474835][ T29] audit: type=1400 audit(229.336:3316): avc: denied { mounton } for pid=11871 comm="syz.3.3000" path="/1/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.536023][T11882] futex_wake_op: syz.2.3003 tries to shift op by -1; fix this program [ 240.978533][T11733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.177552][T11889] chnl_net:caif_netlink_parms(): no params data found [ 241.230627][T11889] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.238836][T11889] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.248434][T11889] bridge_slave_0: entered allmulticast mode [ 241.255359][T11889] bridge_slave_0: entered promiscuous mode [ 241.273669][T11889] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.280857][T11889] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.305315][T11889] bridge_slave_1: entered allmulticast mode [ 241.311957][ T29] audit: type=1326 audit(230.111:3317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11909 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370d33eba9 code=0x7ffc0000 [ 241.312108][T11889] bridge_slave_1: entered promiscuous mode [ 241.335938][ T29] audit: type=1326 audit(230.111:3318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11909 comm="syz.4.3010" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f370d33eba9 code=0x7ffc0000 [ 241.451802][ T6348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.466672][T11918] loop3: detected capacity change from 0 to 1024 [ 241.475735][ T6348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.485033][T11918] EXT4-fs: Ignoring removed mblk_io_submit option [ 241.492335][T11918] EXT4-fs: Ignoring removed bh option [ 241.498018][T11918] ext3: Unknown parameter 'subj_type' [ 241.505240][ T6348] bond0 (unregistering): Released all slaves [ 241.538897][T11889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.576114][T11889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.630051][T11889] team0: Port device team_slave_0 added [ 241.643533][T11889] team0: Port device team_slave_1 added [ 241.701050][ T6348] hsr_slave_0: left promiscuous mode [ 241.707005][ T6348] hsr_slave_1: left promiscuous mode [ 241.713000][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.722377][ T6348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.800420][T11923] 9pnet_fd: Insufficient options for proto=fd [ 241.816285][ T6348] team0 (unregistering): Port device team_slave_1 removed [ 241.835727][ T6348] team0 (unregistering): Port device team_slave_0 removed [ 241.863028][T11921] ================================================================== [ 241.871166][T11921] BUG: KCSAN: data-race in shmem_fallocate / shmem_fault [ 241.878221][T11921] [ 241.880573][T11921] write to 0xffff888119819d00 of 8 bytes by task 11923 on cpu 0: [ 241.888309][T11921] shmem_fallocate+0x301/0x840 [ 241.893107][T11921] vfs_fallocate+0x3b6/0x400 [ 241.897725][T11921] madvise_vma_behavior+0x192d/0x1cf0 [ 241.903128][T11921] madvise_do_behavior+0x5b7/0x970 [ 241.908282][T11921] do_madvise+0x10e/0x190 [ 241.912628][T11921] __x64_sys_madvise+0x64/0x80 [ 241.917414][T11921] x64_sys_call+0x1f1a/0x2ff0 [ 241.922106][T11921] do_syscall_64+0xd2/0x200 [ 241.926641][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.932550][T11921] [ 241.934890][T11921] read to 0xffff888119819d00 of 8 bytes by task 11921 on cpu 1: [ 241.942524][T11921] shmem_fault+0x90/0x250 [ 241.946965][T11921] __do_fault+0xb9/0x200 [ 241.951258][T11921] handle_mm_fault+0xf78/0x2c20 [ 241.956133][T11921] __get_user_pages+0x102e/0x1fa0 [ 241.961170][T11921] __mm_populate+0x243/0x3a0 [ 241.965800][T11921] vm_mmap_pgoff+0x232/0x2e0 [ 241.970416][T11921] ksys_mmap_pgoff+0xc2/0x310 [ 241.975114][T11921] x64_sys_call+0x14a3/0x2ff0 [ 241.979808][T11921] do_syscall_64+0xd2/0x200 [ 241.984343][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.990256][T11921] [ 241.992592][T11921] value changed: 0xffffc9001346fb58 -> 0x0000000000000000 [ 241.999706][T11921] [ 242.002037][T11921] Reported by Kernel Concurrency Sanitizer on: [ 242.008456][T11921] CPU: 1 UID: 0 PID: 11921 Comm: syz.0.3014 Not tainted syzkaller #0 PREEMPT(voluntary) [ 242.018274][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 242.028426][T11921] ================================================================== [ 242.039578][T11889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.046761][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.072891][T11889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.087815][T11889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.094857][T11889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.121628][T11889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.221247][T11889] hsr_slave_0: entered promiscuous mode [ 242.236907][T11889] hsr_slave_1: entered promiscuous mode [ 242.257595][T11889] debugfs: 'hsr0' already exists in 'hsr' [ 242.263426][T11889] Cannot create hsr debugfs directory [ 242.753835][T11889] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 242.762869][T11889] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 242.772900][T11889] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 242.782068][T11889] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 242.817829][T11889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.831189][T11889] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.840977][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.848102][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.860191][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.867303][ T6348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.934935][T11889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.998266][T11889] veth0_vlan: entered promiscuous mode [ 243.008599][T11889] veth1_vlan: entered promiscuous mode [ 243.024645][T11889] veth0_macvtap: entered promiscuous mode [ 243.032619][T11889] veth1_macvtap: entered promiscuous mode [ 243.044584][T11889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.055996][T11889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.067333][ T6348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.076427][ T6348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.085736][ T6348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.097142][ T6348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0