last executing test programs: 2.492680429s ago: executing program 4 (id=309): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syslog(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x3, 0x0, 0x80004, 0x10530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x6, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 2.35630582s ago: executing program 4 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = signalfd4(r0, &(0x7f0000001240)={[0xb3b]}, 0x8, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, &(0x7f0000001280)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x6, 0x31, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x1, 0xb, 0x1, 0x0, &(0x7f0000000040), 0x3) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r6, 0x331, 0x0, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRESHEX], 0xfe, 0x677, &(0x7f0000000c00)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r9, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x64, 0x1, 0x7, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_FLAGS={0x8}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4f1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7ff}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6, 0xd}, {0x0, 0x6}, {0x3}, {}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {0x0, 0x0, 0x101}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9, 0x58d}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0x50}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x7, 0x0, 0x40000, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x6}, {}, {0x0, 0xfffffffd}, {0x8}, {0x7f, 0x0, 0x0, 0xfffffffe, 0xa}, {}, {}, {0x0, 0x2, 0x0, 0x5ee, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2ea0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffc}, {0x0, 0x800, 0x0, 0x0, 0xfffffffd}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x0, 0x0, 0x5}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x13, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x0, 0x3, 0x0, 0x2, 0x2, 0xffffffffffffffff}, @ldst={0x1, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffc0, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x10, 0xe9, &(0x7f00000008c0)=""/233, 0x41100, 0x13, '\x00', r11, 0x25, r12, 0x8, &(0x7f0000000340)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x4, 0x6, 0x591}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x9cdc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0xe, &(0x7f0000000b40)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @generic={0x8, 0xa, 0x1, 0x0, 0x9}, @exit], &(0x7f0000000bc0)='syzkaller\x00', 0x4, 0x5a, &(0x7f0000000c00)=""/90, 0x40f00, 0x61, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x5, 0x9, 0x8000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000d00), &(0x7f0000000d40)=[{0x2, 0x0, 0xd, 0x9}, {0x1, 0x4, 0x3, 0x9}, {0x5, 0x3, 0x7, 0xb}, {0x5, 0x5, 0x1, 0x7}, {0x4, 0x2, 0xf, 0xb}], 0x10, 0x5}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x512, &(0x7f0000000380)="$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") 2.23634404s ago: executing program 0 (id=314): r0 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0x40000, 0xd, 0x5, "4c6bc09f5a156f1ee39b763ddcbb626052103c678ce02c7a8d4b2e9f978d936e8a9a8d0f9a91407364422c1d56a3e707f9c9f70834d1f8038e02de39c389c18c8876b10a4c8f557eec57bb5c8d195560a0faca27b9add7ae7b59194f00b8bc3044fa1280368bd07416af150ec7301dcb542e8a5ccdf5f2c329241f847af2830ebe128153212bd1c84e34b753d6dd973c2192996294aeb613b9de6742b061b16b7ca511e2345119fa2a3611f8372908e3d4f5458888de9a829ce21c0a6a02cc32040e169e7a198444211a4801892fe447a60d1bb278289d120dbdf4bc75a1d26ada1f7ffbe67e57c438e3d35e7e8a86acddcadf4013ad97b9447c2aedb83749edc15d2d1f7316d783d195388c5ae2e975dc9140b40401010a2ca1058bd6f50a51ac43a3efb27af73f54a4c611db0d464a55c4d071e8df9f30c85be8122afcc10a8a40bfd7d2ad4bacc6b89018054a9eb7d93db7d902cb32d6d1829b6dc725cb7e3eaede569e668f2847bd94667f734a652ac87243ed3bc7efbb3f0edfae2716699c27e250df98ea65b6c6c1c098de543434f38272e9389ec051f28c8ae45f2ef3bf8b36d9e9961e1fbd2261d0cbc7b6f3007d07bf3634faf96c8e10d546932c2a010d6805b7ca76536077b7f8883e588dcf9c908331c672660a2a5f993c9740385a457d44bd107ee958"}) 2.11383403s ago: executing program 0 (id=317): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x26, 0x103, 0x70bd27, 0x25dfdbfe, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4008880}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), 0xffffffffffffffff) r8 = openat(r4, &(0x7f0000000440)='./bus\x00', 0x2, 0xc) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000540)={&(0x7f0000000180), 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r7, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0xe, 0xa, '*-@].-&\x14(\\'}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8004}, 0x28008800) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 1.901881057s ago: executing program 1 (id=318): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x24, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @remote, 0xadf}, 0x10) 1.531233457s ago: executing program 1 (id=322): clock_gettime(0x5, &(0x7f0000000180)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2002}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/94, 0x5e}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xb, 0x518, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000100)={0x18, 0x0, {0xfffe, @empty, 'veth1_to_bond\x00'}}, 0x1e) close(r5) close(r4) socket$tipc(0x1e, 0x2, 0x0) 1.449036993s ago: executing program 0 (id=324): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000132) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r5, 0x10, 0x17e, 0x1000f) lseek(r5, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) fcntl$notify(r2, 0x402, 0x1e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x457) 1.389131858s ago: executing program 4 (id=325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r4}, 0x10) listen(r3, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x100, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r6) 1.273586658s ago: executing program 3 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6, 0x37}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r8], 0x38}, 0x0) sendto$packet(r2, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="76eaeb3acb2c"}, 0x14) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 1.232170551s ago: executing program 0 (id=328): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x200008f}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r0, 0x402, 0x80000004) getdents(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x11, &(0x7f0000000a40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7f}, @jmp={0x5, 0x0, 0x1, 0x7, 0xb, 0x40, 0x4}], &(0x7f00000003c0)='GPL\x00', 0xe15, 0xe0, &(0x7f0000000b00)=""/224, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xffffffa9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x2, 0x2, 0x7, 0x1}, {0x4, 0x4, 0x5, 0x7}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0x5}, 0x94) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0xa2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.180833015s ago: executing program 3 (id=329): r0 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r4}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, r7, 0x25, 0x2, @val=@perf_event}, 0x18) syz_emit_ethernet(0x7e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabba2dd6a00000000481100fe8000000000000000000000000000aafe8000000000000000000000000000aa4e1d4e200048907803000087480000000000dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027fd446c098cfc27eb8549d66e79219c2c3385e4508546e551a0de59631719ba089"], 0x0) 1.180302065s ago: executing program 3 (id=330): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) close(r0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES32=0x0, @ANYBLOB="0000000000000000004d3e0cac00008000000000", @ANYRESOCT=r2, @ANYRES32, @ANYRES32=r4], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usbip_server_init(0x3) 972.331872ms ago: executing program 0 (id=332): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x8, 0x4690, 0x4}) (fail_nth: 2) 949.018394ms ago: executing program 1 (id=333): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) 869.31433ms ago: executing program 1 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 812.694015ms ago: executing program 1 (id=336): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xfd, 0x0, 0x40, 0x0, 0x201, 0x805a8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7, 0x8, 0x2000000000, 0x37e, 0x0, 0x0, 0x4, 0x0, 0x100001001}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=ANY=[], 0x10}}, 0x4041) close(r3) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000012c0)={@cgroup=r0, 0x37, 0x0, 0x6, &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0xb, &(0x7f00000010c0)=ANY=[@ANYRES8=r5, @ANYRES64, @ANYRESDEC=r2, @ANYRES16=r1], &(0x7f0000001080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffff9, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001300)={0x80, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xe}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x67b}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket(0x6, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r9, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r9, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYRES16=r2], 0xdd12}], 0x1}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xc2, &(0x7f0000001200)=ANY=[@ANYBLOB="aa8350ed6581a7a0cedbe40ff284afe8ea2725fe544b79c63590fcdda043044b0d43c343511cc0b58b664f085209a6bcb43bd5de973a6a9a3793cf0aa318c1b29c46f46b483b540b99ccc628119bd01ad195023e6fac2f00e8a5135ca21474c61ececd5d3722d4671dca32cf9c9f2305cc1ec12d5971c908"], 0x0) sendmsg$IPSET_CMD_ADD(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 744.37634ms ago: executing program 2 (id=337): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "1178e5101b4743e7", "476ece4b0522d6db17791e318092f2c6", "21421f19", "fc8d25a33e63bdcb"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032dbd7000fedbdf25050000000c0099000002000061000000"], 0x20}}, 0x20000000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) r10 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) io_uring_setup(0x749f, &(0x7f0000000280)={0x0, 0x7ab2, 0x4000, 0x0, 0xe0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r12, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x24}}, 0x0) 634.120539ms ago: executing program 1 (id=338): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="0000000000000000004d3e0cac00008000000000", @ANYRESOCT, @ANYRES32, @ANYRES32=r1], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") io_uring_setup(0x5b42, 0x0) syz_usbip_server_init(0x3) 621.99091ms ago: executing program 4 (id=339): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r5, 0x2285, 0x0) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000)=0xf41, 0x4) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff038}, {0x6, 0x37}]}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r7, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r7], 0x38}, 0x0) r8 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mlock2(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r8, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 584.639033ms ago: executing program 2 (id=340): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x40000132) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0) fallocate(r5, 0x10, 0x17e, 0x1000f) lseek(r5, 0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x14, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}}], {0x14}}, 0xa4}}, 0x0) fcntl$notify(r2, 0x402, 0x1e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendfile(r0, r0, 0x0, 0x457) 506.667109ms ago: executing program 4 (id=341): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xf, &(0x7f0000006680)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000c000000180818000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) mmap(&(0x7f0000166000/0x1000)=nil, 0x1000, 0x3000003, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x800, 0x11, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e00, 0x8000000, @local}, 0x1c) listen(0xffffffffffffffff, 0x80) r2 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r2, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r2, 0x3a5) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="03a3fc0c931fec976728e73d1e94002d05dc4c8bde9800da3f5d3344da9d9e025aad830121145b380f10a3a8e3a1ff3f9dabaa43e67f16113fa9e55254661c12c9e1403098210dbac545e72dfb5f61eb108465ee6cc3537f09118759a16414"], 0x44}}, 0x8000) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r5 = semget$private(0x0, 0x20000000102, 0x0) semop(r5, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x0, 0x523b}], 0x2) semctl$GETVAL(r5, 0x3, 0xc, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x4000) setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000100)=0x4, 0x4) ioctl$BLKCLOSEZONE(r4, 0x40101287, &(0x7f00000000c0)={0x81, 0xffff}) socket$nl_sock_diag(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 437.707265ms ago: executing program 0 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syslog(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$unix(0x1, 0x1, 0x0) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) fcntl$setlease(r2, 0x400, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00') r6 = syz_open_dev$sg(&(0x7f0000000440), 0x2, 0x61d182) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r8) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="e90100000d000000050400004c6bc09f5a156f1ee39b763ddcbb626052103c678ce02c7a8d4b2e9f97ad936e8a9a8d0f9a91407364422c1d56a3e707f9c9f70834d1f8038e02de39c389c18c8876b10a4c8f557eec57bb5c8d195560a0faca27b9add7ae7b59194f00b8bc3044fa1280368bd07416af150ec7301dcb542e8a5ccdf5f2c329241f847af2830ebe128153212bd1c84e34b753d6dd973c2192996294aeb613b9de6742b061b16b7ca511e2345119fa2a3611f8372908e3d4f5458888de9a829ce21c0a6a02cc32040e169e7a198444211a4801892fe447a60d1bb278289d120dbdf4bc75a1d26ada1f7ffbe67e57c438e3d35e6e8a86acddcadf4013ad97b9447c2aedb83749edc15d2d1f7316d783d195388c5ae2e975dc9140b40401010a2ca1058bd6f50a51ac43a3efb27af73f54a4c611db0d464a55c4d071e8df9f30c85be8122afcc10a8a40bfd7d2ad4bacc6b89018054a9eb7d93db7d902cb32d6d1829b6dc725cb7e3eaede569e668f2847bd94667f734a652ac87243ed3bc7efbb3f0edfae2716699c27e250df98ea65b6c6c1c098de543434f38272e9389ec051f28c8ae45f2ef3bf8b36d9e9961e1fbd2261d0cbc7b6f3007d07bf3634faf96c8e10d546932c2a010d6805b7ca76536077b7f8883e588dcf9c908331c672660a2a5f993c9740385a457d44bd107ee958dba1a2eda066013be12aec76cf85d702c16595ee850c210721800f151def5eff027afc0aa94709e4c6d3f7c8e0b645c89fb6ef8042c526e56af8a216b9cf9d3d252a05ae9cfbbd542f5123cef8d68db75153fef97e7e151508f43a5d80a07eb4b81b9c94432f00b7e982c9397eb129a2cd693c3b6f72efabb665fdae3af487873340a237b88428c78f8917b2e84b408f755ad241cc5d6169128cd987021ed7dfad81f9f0583205b9e8832396182b605af3779ff962027b7482669fffc01598a3b59fd64bf69a1b34f7565c984d0fd59188b6449df6644a43ac6d908884120c03b50df7"]) 432.017836ms ago: executing program 2 (id=343): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x200008f}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r0, 0x402, 0x80000004) getdents(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x11, &(0x7f0000000a40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7f}, @jmp={0x5, 0x0, 0x1, 0x7, 0xb, 0x40, 0x4}], &(0x7f00000003c0)='GPL\x00', 0xe15, 0xe0, &(0x7f0000000b00)=""/224, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xffffffa9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x2, 0x2, 0x7, 0x1}, {0x4, 0x4, 0x5, 0x7}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0x5}, 0x94) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0xa2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 355.350721ms ago: executing program 3 (id=344): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "1178e5101b4743e7", "476ece4b0522d6db17791e318092f2c6", "21421f19", "fc8d25a33e63bdcb"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032dbd7000fedbdf25050000000c0099000002000061000000"], 0x20}}, 0x20000000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) r10 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) io_uring_setup(0x749f, &(0x7f0000000280)={0x0, 0x7ab2, 0x4000, 0x0, 0xe0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r12, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x24}}, 0x0) 271.681209ms ago: executing program 3 (id=345): capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x200008f}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r0, 0x402, 0x80000004) getdents(r0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x11, &(0x7f0000000a40)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x7f}, @jmp={0x5, 0x0, 0x1, 0x7, 0xb, 0x40, 0x4}], &(0x7f00000003c0)='GPL\x00', 0xe15, 0xe0, &(0x7f0000000b00)=""/224, 0x41000, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x10, 0xffffffa9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000780)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x2, 0x2, 0x7, 0x1}, {0x4, 0x4, 0x5, 0x7}, {0x2, 0x1, 0x0, 0x8}], 0x10, 0x5}, 0x94) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r2, 0x46bc, 0x3, 0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0], 0x0, 0xa2, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0xed, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 126.60701ms ago: executing program 2 (id=346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) 103.209272ms ago: executing program 2 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syslog(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x3, 0x0, 0x80004, 0x10530, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x5, 0x6, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = dup(r6) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={{}, {0x0, 0x2710}}) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) 30.940498ms ago: executing program 4 (id=348): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000040)='.\x02\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="636865636b3d7374726963742c756e686964652c63727566742c696f636861727365743d63a08033322c636865636b3d72656c617865642c6e6f6a6f6c6965742c636865636b3d72656c617865642c6e6f6a6f6c6965742c00"], 0x1, 0x55d, &(0x7f0000000b00)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) socket$caif_seqpacket(0x25, 0x5, 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) fallocate(r2, 0x0, 0xffff, 0x8009) 3.88033ms ago: executing program 3 (id=349): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000110000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) listen(r4, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r1, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r7) 0s ago: executing program 2 (id=350): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000500)=@gcm_128={{0x303}, "1178e5101b4743e7", "476ece4b0522d6db17791e318092f2c6", "21421f19", "fc8d25a33e63bdcb"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) ioctl$TCSETSW2(r0, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='%\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01032dbd7000fedbdf25050000000c0099000002000061000000"], 0x20}}, 0x20000000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r9, 0x400448cb, 0x0) r10 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x9) io_uring_setup(0x749f, &(0x7f0000000280)={0x0, 0x7ab2, 0x4000, 0x0, 0xe0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r12, 0x1, 0x0, 0x10, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}]}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts. [ 33.259592][ T29] audit: type=1400 audit(1755155881.434:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.260791][ T3294] cgroup: Unknown subsys name 'net' [ 33.282981][ T29] audit: type=1400 audit(1755155881.434:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.310955][ T29] audit: type=1400 audit(1755155881.474:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.424256][ T3294] cgroup: Unknown subsys name 'cpuset' [ 33.431407][ T3294] cgroup: Unknown subsys name 'rlimit' [ 33.562590][ T29] audit: type=1400 audit(1755155881.734:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.587066][ T29] audit: type=1400 audit(1755155881.744:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.608673][ T29] audit: type=1400 audit(1755155881.744:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.628915][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.629753][ T29] audit: type=1400 audit(1755155881.744:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.660369][ T29] audit: type=1400 audit(1755155881.754:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.686491][ T29] audit: type=1400 audit(1755155881.754:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.693648][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.712192][ T29] audit: type=1400 audit(1755155881.824:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.899030][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 34.976849][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.984323][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.991592][ T3304] bridge_slave_0: entered allmulticast mode [ 34.998349][ T3304] bridge_slave_0: entered promiscuous mode [ 35.005732][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.013423][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.020893][ T3304] bridge_slave_1: entered allmulticast mode [ 35.027688][ T3304] bridge_slave_1: entered promiscuous mode [ 35.062270][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.088446][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.112361][ T3304] team0: Port device team_slave_0 added [ 35.136825][ T3304] team0: Port device team_slave_1 added [ 35.153587][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.162680][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.214262][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.221347][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.247403][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.260401][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.267847][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.294947][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.350324][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.375800][ T3304] hsr_slave_0: entered promiscuous mode [ 35.381982][ T3304] hsr_slave_1: entered promiscuous mode [ 35.408031][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 35.420709][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.427911][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.435336][ T3311] bridge_slave_0: entered allmulticast mode [ 35.441787][ T3311] bridge_slave_0: entered promiscuous mode [ 35.448505][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.455643][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.463166][ T3314] bridge_slave_0: entered allmulticast mode [ 35.469761][ T3314] bridge_slave_0: entered promiscuous mode [ 35.492794][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.499949][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.507398][ T3311] bridge_slave_1: entered allmulticast mode [ 35.514177][ T3311] bridge_slave_1: entered promiscuous mode [ 35.520768][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.528179][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.535522][ T3314] bridge_slave_1: entered allmulticast mode [ 35.542005][ T3314] bridge_slave_1: entered promiscuous mode [ 35.587032][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.610588][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.621528][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.656315][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.680267][ T3311] team0: Port device team_slave_0 added [ 35.686944][ T3311] team0: Port device team_slave_1 added [ 35.697800][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.704945][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.712268][ T3310] bridge_slave_0: entered allmulticast mode [ 35.719095][ T3310] bridge_slave_0: entered promiscuous mode [ 35.729104][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.736751][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.744314][ T3303] bridge_slave_0: entered allmulticast mode [ 35.750753][ T3303] bridge_slave_0: entered promiscuous mode [ 35.773286][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.780745][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.789125][ T3310] bridge_slave_1: entered allmulticast mode [ 35.797260][ T3310] bridge_slave_1: entered promiscuous mode [ 35.811588][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.820038][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.827444][ T3303] bridge_slave_1: entered allmulticast mode [ 35.834416][ T3303] bridge_slave_1: entered promiscuous mode [ 35.841898][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.849472][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.879485][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.897441][ T3314] team0: Port device team_slave_0 added [ 35.923486][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.930949][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.960150][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.973847][ T3314] team0: Port device team_slave_1 added [ 35.981403][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.003481][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.028130][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.051769][ T3310] team0: Port device team_slave_0 added [ 36.059999][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.084436][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.092073][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.122291][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.135082][ T3310] team0: Port device team_slave_1 added [ 36.147761][ T3303] team0: Port device team_slave_0 added [ 36.159000][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.166589][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.194643][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.220145][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.227337][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.254344][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.266506][ T3303] team0: Port device team_slave_1 added [ 36.280492][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.287856][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.315777][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.335015][ T3311] hsr_slave_0: entered promiscuous mode [ 36.342249][ T3311] hsr_slave_1: entered promiscuous mode [ 36.348467][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.354286][ T3311] Cannot create hsr debugfs directory [ 36.378081][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.385166][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.411572][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.431212][ T3314] hsr_slave_0: entered promiscuous mode [ 36.437695][ T3314] hsr_slave_1: entered promiscuous mode [ 36.445333][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.451940][ T3314] Cannot create hsr debugfs directory [ 36.466888][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.475848][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.504776][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.560262][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.572242][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.594061][ T3310] hsr_slave_0: entered promiscuous mode [ 36.600313][ T3310] hsr_slave_1: entered promiscuous mode [ 36.607013][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.613870][ T3310] Cannot create hsr debugfs directory [ 36.623071][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.644245][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.659128][ T3303] hsr_slave_0: entered promiscuous mode [ 36.665505][ T3303] hsr_slave_1: entered promiscuous mode [ 36.671576][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 36.677502][ T3303] Cannot create hsr debugfs directory [ 36.838190][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.850205][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.865710][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.875208][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.905532][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.918536][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.937642][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.945313][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.954908][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.964415][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.982541][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.989681][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.009922][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.017379][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.044732][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.054904][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.074000][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.084081][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.114059][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.140038][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.150960][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.161792][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.172276][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.183850][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.211785][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.219012][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.229464][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.237071][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.270517][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.292210][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.311908][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.319016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.337628][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.345254][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.359734][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.393873][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.425118][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.438728][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.450876][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.458058][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.478398][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.485606][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.502928][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.521109][ T1839] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.528565][ T1839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.549251][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.560431][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.590721][ T1839] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.598110][ T1839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.615314][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.627462][ T3304] veth0_vlan: entered promiscuous mode [ 37.670593][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.686423][ T3304] veth1_vlan: entered promiscuous mode [ 37.719952][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.730202][ T3304] veth0_macvtap: entered promiscuous mode [ 37.747985][ T3304] veth1_macvtap: entered promiscuous mode [ 37.788551][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.810813][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.826018][ T3314] veth0_vlan: entered promiscuous mode [ 37.852133][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.871862][ T3314] veth1_vlan: entered promiscuous mode [ 37.878785][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.889104][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.914214][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.924193][ T3311] veth0_vlan: entered promiscuous mode [ 37.932631][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.955919][ T3311] veth1_vlan: entered promiscuous mode [ 37.980211][ T3314] veth0_macvtap: entered promiscuous mode [ 38.004399][ T3314] veth1_macvtap: entered promiscuous mode [ 38.034751][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.056437][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.059039][ T3311] veth0_macvtap: entered promiscuous mode [ 38.091624][ T3311] veth1_macvtap: entered promiscuous mode [ 38.101570][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.149227][ T3471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3471 comm=syz.3.4 [ 38.161913][ T3471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3471 comm=syz.3.4 [ 38.178380][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.187412][ T1839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.222562][ T1839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.244066][ T3310] veth0_vlan: entered promiscuous mode [ 38.252128][ T3303] veth0_vlan: entered promiscuous mode [ 38.262231][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.270608][ T3475] mmap: syz.3.6 (3475) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.274662][ T3303] veth1_vlan: entered promiscuous mode [ 38.291314][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.312894][ T3310] veth1_vlan: entered promiscuous mode [ 38.322861][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 38.322878][ T29] audit: type=1400 audit(1755155886.504:103): avc: denied { create } for pid=3472 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.349026][ T29] audit: type=1400 audit(1755155886.504:104): avc: denied { bind } for pid=3472 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.368725][ T29] audit: type=1400 audit(1755155886.504:105): avc: denied { node_bind } for pid=3472 comm="syz.3.6" saddr=172.20.20.170 src=52768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 38.393699][ T29] audit: type=1400 audit(1755155886.514:106): avc: denied { watch } for pid=3476 comm="syz.2.3" path="/proc/2/task" dev="proc" ino=4650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 38.417358][ T29] audit: type=1400 audit(1755155886.514:107): avc: denied { allowed } for pid=3476 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.439353][ T29] audit: type=1400 audit(1755155886.534:108): avc: denied { create } for pid=3476 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.464716][ T29] audit: type=1400 audit(1755155886.534:109): avc: denied { map } for pid=3476 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.495830][ T29] audit: type=1400 audit(1755155886.534:110): avc: denied { read write } for pid=3476 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4651 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.525039][ T29] audit: type=1400 audit(1755155886.534:111): avc: denied { create } for pid=3476 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.525117][ T29] audit: type=1400 audit(1755155886.554:112): avc: denied { listen } for pid=3472 comm="syz.3.6" laddr=172.20.20.170 lport=52768 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.542338][ T3303] veth0_macvtap: entered promiscuous mode [ 38.552783][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.552896][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.552930][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.553012][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.553081][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.564741][ T3303] veth1_macvtap: entered promiscuous mode [ 38.582644][ T3310] veth0_macvtap: entered promiscuous mode [ 38.742717][ T3310] veth1_macvtap: entered promiscuous mode [ 38.759487][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.790463][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.803891][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.817239][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.829312][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851649][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.865564][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.875356][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.914838][ T1791] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.934691][ T1791] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945407][ T3486] Illegal XDP return value 277595065 on prog (id 3) dev syz_tun, expect packet loss! [ 38.999456][ T1791] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046663][ T1791] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.145128][ T3504] netlink: 'syz.2.7': attribute type 12 has an invalid length. [ 39.242407][ T3506] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 39.342755][ T3506] SELinux: failed to load policy [ 39.536538][ T3509] loop4: detected capacity change from 0 to 512 [ 39.583289][ T3509] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 39.602779][ T3511] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.756894][ T3511] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.998873][ T3515] loop2: detected capacity change from 0 to 128 [ 40.023992][ T3515] ======================================================= [ 40.023992][ T3515] WARNING: The mand mount option has been deprecated and [ 40.023992][ T3515] and is ignored by this kernel. Remove the mand [ 40.023992][ T3515] option from the mount to silence this warning. [ 40.023992][ T3515] ======================================================= [ 40.065975][ T3515] msdos: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ' [ 40.087002][ T3509] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.10: casefold flag without casefold feature [ 40.115277][ T3515] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.13'. [ 40.135229][ T3509] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.10: couldn't read orphan inode 15 (err -117) [ 40.162446][ T3511] syz.0.12 (3511) used greatest stack depth: 10712 bytes left [ 40.174359][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.235406][ T3520] loop3: detected capacity change from 0 to 2048 [ 40.294447][ T3520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.337671][ T3527] loop2: detected capacity change from 0 to 512 [ 40.347200][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.364214][ T3528] loop0: detected capacity change from 0 to 512 [ 40.391071][ T3528] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.16: bad orphan inode 13 [ 40.410545][ T3528] ext4_test_bit(bit=12, block=4) = 1 [ 40.416433][ T3528] is_bad_inode(inode)=0 [ 40.420748][ T3528] NEXT_ORPHAN(inode)=0 [ 40.425076][ T3528] max_ino=32 [ 40.428476][ T3528] i_nlink=1 [ 40.447315][ T3534] netlink: 256 bytes leftover after parsing attributes in process `syz.4.18'. [ 40.457635][ T3527] EXT4-fs (loop2): too many log groups per flexible block group [ 40.465488][ T3527] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 40.472613][ T3527] EXT4-fs (loop2): mount failed [ 40.497237][ T3527] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 40.504358][ T3527] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 40.513519][ T3527] vhci_hcd vhci_hcd.0: Device attached [ 40.540318][ T3541] netlink: 256 bytes leftover after parsing attributes in process `syz.1.19'. [ 40.552813][ T3542] vhci_hcd: connection closed [ 40.554246][ T31] vhci_hcd: stop threads [ 40.563617][ T31] vhci_hcd: release socket [ 40.565213][ T3528] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.568410][ T31] vhci_hcd: disconnect device [ 40.648188][ T3523] EXT4-fs warning (device loop0): dx_probe:801: inode #2: comm syz.0.16: Unrecognised inode hash code 20 [ 40.660665][ T3523] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.16: Corrupt directory, running e2fsck is recommended [ 40.732692][ T3523] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.16: path /3/file0: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 40.823545][ T3523] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.16: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 40.946613][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.078772][ T3560] netlink: 256 bytes leftover after parsing attributes in process `syz.0.21'. [ 41.123861][ T3561] Zero length message leads to an empty skb [ 41.139559][ T3569] loop2: detected capacity change from 0 to 512 [ 41.154816][ T3561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.23'. [ 41.209213][ T3569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.252839][ T36] Process accounting resumed [ 41.266374][ T3576] loop4: detected capacity change from 0 to 512 [ 41.280960][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.295211][ T3569] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.298380][ T3576] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.314864][ T3576] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.328806][ T3576] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 41.343329][ T3576] EXT4-fs (loop4): 1 truncate cleaned up [ 41.349524][ T3576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.368424][ T3569] EXT4-fs: Ignoring removed orlov option [ 41.374770][ T3569] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.397676][ T3569] EXT4-fs (loop2): can't enable nombcache during remount [ 41.461225][ T3581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3581 comm=syz.0.29 [ 41.475736][ T3581] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3581 comm=syz.0.29 [ 41.715426][ T3594] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.789076][ T3589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.798031][ T3589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.30'. [ 41.811936][ T3569] lo speed is unknown, defaulting to 1000 [ 41.817976][ T3569] lo speed is unknown, defaulting to 1000 [ 41.831005][ T3594] loop3: detected capacity change from 0 to 512 [ 41.837733][ T3569] lo speed is unknown, defaulting to 1000 [ 41.845605][ T3569] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 41.886086][ T3594] msdos: Unknown parameter 'gh' [ 41.919213][ T3597] netlink: 256 bytes leftover after parsing attributes in process `syz.0.32'. [ 42.009602][ T3595] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 42.016573][ T3595] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.025470][ T3595] vhci_hcd vhci_hcd.0: Device attached [ 42.057631][ T3569] lo speed is unknown, defaulting to 1000 [ 42.071214][ T3604] bridge0: entered promiscuous mode [ 42.106153][ T3604] macsec1: entered promiscuous mode [ 42.115124][ T3604] bridge0: port 3(macsec1) entered blocking state [ 42.116669][ T3605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.122772][ T3604] bridge0: port 3(macsec1) entered disabled state [ 42.133219][ T3605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.157171][ T3604] macsec1: entered allmulticast mode [ 42.158707][ T3602] vhci_hcd: connection closed [ 42.162626][ T3604] bridge0: entered allmulticast mode [ 42.177004][ T1697] vhci_hcd: stop threads [ 42.181833][ T1697] vhci_hcd: release socket [ 42.186710][ T1697] vhci_hcd: disconnect device [ 42.198714][ T3604] macsec1: left allmulticast mode [ 42.207682][ T3604] bridge0: left allmulticast mode [ 42.215433][ T3604] bridge0: left promiscuous mode [ 42.216952][ T1036] vhci_hcd: vhci_device speed not set [ 42.253888][ T3569] lo speed is unknown, defaulting to 1000 [ 42.265146][ T3569] lo speed is unknown, defaulting to 1000 [ 42.278085][ T3569] lo speed is unknown, defaulting to 1000 [ 42.299073][ T3569] lo speed is unknown, defaulting to 1000 [ 42.309145][ T3569] lo speed is unknown, defaulting to 1000 [ 42.312010][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.402905][ T3620] loop3: detected capacity change from 0 to 164 [ 42.474607][ T3620] IPv6: NLM_F_CREATE should be specified when creating new route [ 42.647693][ T3630] netlink: 256 bytes leftover after parsing attributes in process `syz.3.37'. [ 42.677451][ T3633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3633 comm=syz.4.38 [ 42.691926][ T3633] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3633 comm=syz.4.38 [ 42.734122][ T3637] usb usb7: usbfs: process 3637 (syz.3.39) did not claim interface 0 before use [ 42.751040][ T3640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3640 comm=syz.4.41 [ 42.766375][ T3640] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3640 comm=syz.4.41 [ 42.806348][ T3643] siw: device registration error -23 [ 42.813987][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.966855][ T3649] netlink: 256 bytes leftover after parsing attributes in process `syz.2.43'. [ 43.001692][ T3655] loop3: detected capacity change from 0 to 256 [ 43.107766][ T3660] loop2: detected capacity change from 0 to 2048 [ 43.124942][ T3667] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 43.132951][ T3667] 0ªî{X¹¦: entered allmulticast mode [ 43.142149][ T3667] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 43.171485][ T3672] loop3: detected capacity change from 0 to 164 [ 43.185593][ T3672] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.219469][ T3672] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 43.259397][ T3545] loop2: unable to read partition table [ 43.266263][ T3545] loop2: partition table beyond EOD, truncated [ 43.343035][ T3660] loop2: unable to read partition table [ 43.350044][ T3660] loop2: partition table beyond EOD, truncated [ 43.357965][ T3660] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 43.369528][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 43.369545][ T29] audit: type=1326 audit(1755155891.544:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fefab85d3fa code=0x7ffc0000 [ 43.407611][ T29] audit: type=1326 audit(1755155891.584:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fefab85d3fa code=0x7ffc0000 [ 43.435567][ T29] audit: type=1326 audit(1755155891.584:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fefab85d3fa code=0x7ffc0000 [ 43.462598][ T29] audit: type=1326 audit(1755155891.584:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fefab85d3fa code=0x7ffc0000 [ 43.489800][ T29] audit: type=1326 audit(1755155891.584:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fefab85d3fa code=0x7ffc0000 [ 43.518211][ T29] audit: type=1326 audit(1755155891.584:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fefab85d3fa code=0x7ffc0000 [ 43.544636][ T29] audit: type=1326 audit(1755155891.584:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fefab85d3fa code=0x7ffc0000 [ 43.571521][ T29] audit: type=1326 audit(1755155891.584:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fefab85d84a code=0x7ffc0000 [ 43.649322][ T2994] loop2: unable to read partition table [ 43.657636][ T2994] loop2: partition table beyond EOD, truncated [ 43.665567][ T29] audit: type=1326 audit(1755155891.854:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab85ebe9 code=0x7ffc0000 [ 43.694373][ T29] audit: type=1326 audit(1755155891.854:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3659 comm="syz.2.47" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefab85ebe9 code=0x7ffc0000 [ 43.856703][ T3689] usb usb7: usbfs: process 3689 (syz.2.53) did not claim interface 0 before use [ 43.914360][ T3693] siw: device registration error -23 [ 43.939979][ T3695] siw: device registration error -23 [ 44.030606][ T3691] loop0: detected capacity change from 0 to 512 [ 44.047355][ T3691] EXT4-fs (loop0): too many log groups per flexible block group [ 44.056617][ T3691] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 44.064246][ T3691] EXT4-fs (loop0): mount failed [ 44.076520][ T3691] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 44.083637][ T3691] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.094467][ T3691] vhci_hcd vhci_hcd.0: Device attached [ 44.103599][ T3705] vhci_hcd: connection closed [ 44.104261][ T51] vhci_hcd: stop threads [ 44.116322][ T51] vhci_hcd: release socket [ 44.121290][ T51] vhci_hcd: disconnect device [ 44.319522][ T3709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3709 comm=syz.3.58 [ 44.333802][ T3709] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3709 comm=syz.3.58 [ 44.373025][ T3711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3711 comm=syz.3.59 [ 44.386989][ T3711] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3711 comm=syz.3.59 [ 44.424534][ T3713] usb usb7: usbfs: process 3713 (syz.3.60) did not claim interface 0 before use [ 44.524839][ T3717] can0: slcan on ttyS3. [ 44.790965][ T3739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3739 comm=syz.4.64 [ 44.805484][ T3739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3739 comm=syz.4.64 [ 44.887631][ T3749] loop4: detected capacity change from 0 to 128 [ 44.894842][ T3749] EXT4-fs: Ignoring removed nobh option [ 44.964150][ T3738] loop3: detected capacity change from 0 to 512 [ 44.971953][ T3752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3752 comm=syz.1.68 [ 44.986426][ T3752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3752 comm=syz.1.68 [ 44.986976][ T3743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.004054][ T3749] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.010117][ T3743] IPv6: NLM_F_CREATE should be set when creating new route [ 45.060326][ T3749] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 45.075149][ T3738] EXT4-fs (loop3): too many log groups per flexible block group [ 45.084086][ T3738] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 45.091632][ T3738] EXT4-fs (loop3): mount failed [ 45.123268][ T3749] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.67: checksumming directory block 0 [ 45.163944][ T3738] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 45.172962][ T3738] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 45.182013][ T3738] vhci_hcd vhci_hcd.0: Device attached [ 45.190560][ T3759] vhci_hcd: connection closed [ 45.193760][ T3761] __nla_validate_parse: 3 callbacks suppressed [ 45.193781][ T3761] netlink: 256 bytes leftover after parsing attributes in process `syz.1.69'. [ 45.219724][ T58] vhci_hcd: stop threads [ 45.224603][ T58] vhci_hcd: release socket [ 45.229737][ T58] vhci_hcd: disconnect device [ 45.292236][ T3769] netlink: 40 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.303002][ T3769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.367310][ T3769] loop1: detected capacity change from 0 to 1024 [ 45.569102][ T3769] EXT4-fs: Ignoring removed oldalloc option [ 45.579860][ T3769] EXT4-fs: Ignoring removed orlov option [ 45.594787][ T3749] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.67: checksumming directory block 0 [ 45.612193][ T3749] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.67: checksumming directory block 0 [ 45.642371][ T3769] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.694167][ T3774] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.67: checksumming directory block 0 [ 45.715621][ T3735] can0 (unregistered): slcan off ttyS3. [ 45.911649][ T3782] can0: slcan on ttyS3. [ 45.920109][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.952072][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.984890][ T3782] can0 (unregistered): slcan off ttyS3. [ 45.991781][ T3791] loop3: detected capacity change from 0 to 512 [ 45.997036][ T3782] Falling back ldisc for ttyS3. [ 46.027021][ T3791] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.054734][ T3789] can0: slcan on ttyS3. [ 46.069240][ T3795] loop4: detected capacity change from 0 to 736 [ 46.084209][ T3791] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.181477][ T3791] EXT4-fs (loop3): 1 truncate cleaned up [ 46.218517][ T3795] rock: directory entry would overflow storage [ 46.226191][ T3795] rock: sig=0x3b10, size=4, remaining=3 [ 46.254945][ T3791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.299066][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 46.333520][ T3789] can0 (unregistered): slcan off ttyS3. [ 46.352516][ T3789] Falling back ldisc for ttyS3. [ 46.371524][ T3795] syz_tun: entered allmulticast mode [ 46.439328][ T3816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3816 comm=syz.0.77 [ 46.454075][ T3816] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3816 comm=syz.0.77 [ 46.497421][ T3793] syz_tun: left allmulticast mode [ 46.548606][ T3823] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.596470][ T3828] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 46.596470][ T3828] program syz.2.80 not setting count and/or reply_len properly [ 46.685096][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.79'. [ 46.717432][ T3823] netlink: 88 bytes leftover after parsing attributes in process `syz.0.79'. [ 46.839254][ T3838] netlink: 268 bytes leftover after parsing attributes in process `syz.1.84'. [ 46.850236][ T3838] unsupported nla_type 65024 [ 46.960764][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.961107][ T3846] netlink: 256 bytes leftover after parsing attributes in process `syz.0.88'. [ 47.019850][ T3839] loop4: detected capacity change from 0 to 512 [ 47.027429][ T3857] usb usb7: usbfs: process 3857 (syz.3.90) did not claim interface 0 before use [ 47.046424][ T3839] EXT4-fs (loop4): too many log groups per flexible block group [ 47.056644][ T3839] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 47.065170][ T3839] EXT4-fs (loop4): mount failed [ 47.072450][ T3862] loop3: detected capacity change from 0 to 1024 [ 47.090472][ T3839] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 47.098004][ T3839] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.107215][ T3839] vhci_hcd vhci_hcd.0: Device attached [ 47.115420][ T3862] EXT4-fs: Ignoring removed nobh option [ 47.115598][ T3863] vhci_hcd: connection closed [ 47.121759][ T3862] EXT4-fs: inline encryption not supported [ 47.135731][ T1697] vhci_hcd: stop threads [ 47.140468][ T1697] vhci_hcd: release socket [ 47.141865][ T2994] udevd[2994]: worker [3296] terminated by signal 33 (Unknown signal 33) [ 47.146136][ T1697] vhci_hcd: disconnect device [ 47.170280][ T2994] udevd[2994]: worker [3296] failed while handling '/devices/platform/mac802154_hwsim/ieee802154/phy10/net/wpan10' [ 47.205672][ T3866] netlink: 256 bytes leftover after parsing attributes in process `syz.0.92'. [ 47.235949][ T3862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.292886][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.317862][ T3873] usb usb7: usbfs: process 3873 (syz.0.93) did not claim interface 0 before use [ 47.385173][ T3879] can0: slcan on ttyS3. [ 47.443270][ T3881] can0 (unregistered): slcan off ttyS3. [ 47.455438][ T3881] Falling back ldisc for ttyS3. [ 47.460973][ T3886] loop2: detected capacity change from 0 to 512 [ 47.514602][ T3886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.544728][ T3886] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.574987][ T3883] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.98: corrupted inode contents [ 47.615878][ T3883] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #2: comm syz.2.98: mark_inode_dirty error [ 47.630500][ T3883] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #2: comm syz.2.98: corrupted inode contents [ 47.664041][ T3886] netlink: 96 bytes leftover after parsing attributes in process `syz.2.98'. [ 47.705068][ T3883] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.98: mark_inode_dirty error [ 47.755255][ T3894] loop1: detected capacity change from 0 to 512 [ 47.774307][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.800681][ T3894] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.819280][ T3893] loop3: detected capacity change from 0 to 512 [ 47.838644][ T3893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.871762][ T3894] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.890207][ T3893] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.907341][ T3894] EXT4-fs (loop1): 1 truncate cleaned up [ 47.934486][ T3894] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.967671][ T3910] loop4: detected capacity change from 0 to 1024 [ 47.970278][ T3909] tipc: Started in network mode [ 47.980898][ T3909] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 47.986000][ T3910] EXT4-fs: Ignoring removed nobh option [ 47.988729][ T3909] tipc: Enabled bearer , priority 10 [ 47.994420][ T3910] EXT4-fs: inline encryption not supported [ 48.006961][ T3909] SELinux: security_context_str_to_sid () failed with errno=-22 [ 48.037882][ C0] hrtimer: interrupt took 37743 ns [ 48.065173][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.090393][ T3910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.158856][ T3919] loop0: detected capacity change from 0 to 512 [ 48.196855][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.240089][ T3919] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 48.269616][ T3919] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 48.296493][ T3919] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.107: corrupted in-inode xattr: e_value size too large [ 48.306171][ T3926] netlink: 'syz.4.109': attribute type 30 has an invalid length. [ 48.327210][ T1791] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.327263][ T3919] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.107: couldn't read orphan inode 15 (err -117) [ 48.348609][ T1791] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.361619][ T3919] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.381518][ T1791] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.392067][ T1791] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.449380][ T3928] can0: slcan on ttyS3. [ 48.472675][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.508325][ T3928] can0 (unregistered): slcan off ttyS3. [ 48.533418][ T3928] Falling back ldisc for ttyS3. [ 48.557574][ T3939] loop0: detected capacity change from 0 to 512 [ 48.597514][ T3939] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.113: corrupted inode contents [ 48.649345][ T3939] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.113: mark_inode_dirty error [ 48.662849][ T3939] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.113: corrupted inode contents [ 48.679195][ T3939] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.113: mark_inode_dirty error [ 48.692401][ T3939] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.113: corrupted inode contents [ 48.708175][ T3939] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 48.731632][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.747160][ T3939] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.113: corrupted inode contents [ 48.844203][ T3956] loop2: detected capacity change from 0 to 1024 [ 48.867405][ T3939] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.113: mark_inode_dirty error [ 48.883633][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 48.883650][ T29] audit: type=1400 audit(1755155897.064:646): avc: denied { mounton } for pid=3955 comm="syz.2.117" path="/20/file1" dev="tmpfs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.933426][ T3956] EXT4-fs (loop2): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 48.948352][ T3956] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 48.954307][ T3939] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 48.969547][ T3939] EXT4-fs (loop0): 1 truncate cleaned up [ 48.971342][ T3956] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.984902][ T1791] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 48.997187][ T1791] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 1 [ 49.009813][ T3939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.011078][ T3956] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 49.041941][ T3956] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 49.051106][ T3956] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.117: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.066935][ T3939] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.103380][ T1036] tipc: Node number set to 10005162 [ 49.109938][ T29] audit: type=1400 audit(1755155897.254:647): avc: denied { mounton } for pid=3938 comm="syz.0.113" path="/27/file0/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.136484][ T29] audit: type=1400 audit(1755155897.254:648): avc: denied { mount } for pid=3938 comm="syz.0.113" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.144689][ T3956] EXT4-fs (loop2): Remounting filesystem read-only [ 49.161214][ T29] audit: type=1400 audit(1755155897.254:649): avc: denied { mount } for pid=3938 comm="syz.0.113" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.173807][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.193414][ T29] audit: type=1400 audit(1755155897.274:650): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.223229][ T3956] EXT4-fs (loop2): 1 orphan inode deleted [ 49.228202][ T29] audit: type=1400 audit(1755155897.274:651): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 49.259685][ T3956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.279323][ T3976] FAULT_INJECTION: forcing a failure. [ 49.279323][ T3976] name failslab, interval 1, probability 0, space 0, times 1 [ 49.292150][ T3956] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.294528][ T3976] CPU: 1 UID: 0 PID: 3976 Comm: syz.3.119 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 49.294619][ T3976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.294636][ T3976] Call Trace: [ 49.294690][ T3976] [ 49.294705][ T3976] __dump_stack+0x1d/0x30 [ 49.294738][ T3976] dump_stack_lvl+0xe8/0x140 [ 49.294765][ T3976] dump_stack+0x15/0x1b [ 49.294788][ T3976] should_fail_ex+0x265/0x280 [ 49.294819][ T3976] should_failslab+0x8c/0xb0 [ 49.294944][ T3976] kmem_cache_alloc_noprof+0x50/0x310 [ 49.294985][ T3976] ? io_submit_one+0xb8/0x11d0 [ 49.295025][ T3976] io_submit_one+0xb8/0x11d0 [ 49.295072][ T3976] __se_sys_io_submit+0xfb/0x280 [ 49.295181][ T3976] __x64_sys_io_submit+0x43/0x50 [ 49.295215][ T3976] x64_sys_call+0x2d5d/0x2ff0 [ 49.295246][ T3976] do_syscall_64+0xd2/0x200 [ 49.295285][ T3976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.295368][ T3976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.295466][ T3976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.295496][ T3976] RIP: 0033:0x7f3df80aebe9 [ 49.295523][ T3976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.295549][ T3976] RSP: 002b:00007f3df6b17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 49.295581][ T3976] RAX: ffffffffffffffda RBX: 00007f3df82d5fa0 RCX: 00007f3df80aebe9 [ 49.295599][ T3976] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f3df6ad3000 [ 49.295663][ T3976] RBP: 00007f3df6b17090 R08: 0000000000000000 R09: 0000000000000000 [ 49.295680][ T3976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.295698][ T3976] R13: 00007f3df82d6038 R14: 00007f3df82d5fa0 R15: 00007ffc57fb7278 [ 49.295773][ T3976] [ 49.315376][ T29] audit: type=1400 audit(1755155897.454:652): avc: denied { bind } for pid=3968 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.536209][ T29] audit: type=1400 audit(1755155897.454:653): avc: denied { setopt } for pid=3968 comm="syz.3.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.562318][ T29] audit: type=1400 audit(1755155897.494:654): avc: denied { write } for pid=3974 comm="syz.4.118" path="socket:[6433]" dev="sockfs" ino=6433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.612408][ T3983] loop0: detected capacity change from 0 to 1024 [ 49.644945][ T3983] EXT4-fs: Ignoring removed nobh option [ 49.652380][ T3983] EXT4-fs: inline encryption not supported [ 49.714908][ T10] hid (null): global environment stack underflow [ 49.722319][ T10] hid (null): invalid report_size 52218 [ 49.743539][ T3983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.767967][ T10] hid-generic 0001:0003:01FF.0001: reserved main item tag 0xd [ 49.776864][ T10] hid-generic 0001:0003:01FF.0001: global environment stack underflow [ 49.787280][ T10] hid-generic 0001:0003:01FF.0001: item 0 2 1 11 parsing failed [ 49.828941][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.881499][ T4000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.898094][ T10] hid-generic 0001:0003:01FF.0001: probe with driver hid-generic failed with error -22 [ 49.923349][ T4000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.050402][ T4009] vxcan0: tx address claim with dest, not broadcast [ 50.059177][ T4009] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 50.172005][ T4025] selinux_netlink_send: 8 callbacks suppressed [ 50.172023][ T4025] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11266 sclass=netlink_route_socket pid=4025 comm=syz.0.133 [ 50.608863][ T4034] siw: device registration error -23 [ 50.729752][ T4039] loop1: detected capacity change from 0 to 764 [ 50.737881][ T4039] iso9660: Unknown parameter '' [ 50.762161][ T4042] __nla_validate_parse: 4 callbacks suppressed [ 50.762180][ T4042] netlink: 104 bytes leftover after parsing attributes in process `syz.0.140'. [ 50.837471][ T4048] netlink: 'syz.4.143': attribute type 1 has an invalid length. [ 50.900397][ T4053] loop1: detected capacity change from 0 to 512 [ 50.951947][ T4057] loop3: detected capacity change from 0 to 1024 [ 50.954318][ T4056] lo speed is unknown, defaulting to 1000 [ 50.980269][ T4057] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 50.987290][ T4059] loop0: detected capacity change from 0 to 1024 [ 51.033832][ T4053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.049597][ T4057] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.100167][ T4053] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.135186][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.148350][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.158752][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.198689][ T4059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.235125][ T4059] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.149: bg 0: block 88: padding at end of block bitmap is not set [ 51.265115][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.290810][ T4059] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 51.309969][ T4080] loop3: detected capacity change from 0 to 512 [ 51.328651][ T4081] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 51.336960][ T4081] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.345037][ T4081] vhci_hcd vhci_hcd.0: Device attached [ 51.373010][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.385175][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.390048][ T4080] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 51.395284][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.395937][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.410345][ T4082] vhci_hcd: connection closed [ 51.428043][ T12] vhci_hcd: stop threads [ 51.438494][ T12] vhci_hcd: release socket [ 51.442303][ T4080] EXT4-fs (loop3): 1 truncate cleaned up [ 51.444209][ T12] vhci_hcd: disconnect device [ 51.452859][ T4080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.488477][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.504507][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.515709][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.528699][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.147'. [ 51.596132][ T4093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4093 comm=syz.1.154 [ 51.610328][ T4093] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4093 comm=syz.1.154 [ 51.743003][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.781212][ T4103] loop3: detected capacity change from 0 to 1024 [ 51.796176][ T4103] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 52.030527][ T1036] hid (null): global environment stack underflow [ 52.038328][ T1036] hid (null): invalid report_size 52218 [ 52.053964][ T1036] hid-generic 0001:0003:01FF.0002: reserved main item tag 0xd [ 52.062937][ T1036] hid-generic 0001:0003:01FF.0002: global environment stack underflow [ 52.072441][ T1036] hid-generic 0001:0003:01FF.0002: item 0 2 1 11 parsing failed [ 52.110843][ T1036] hid-generic 0001:0003:01FF.0002: probe with driver hid-generic failed with error -22 [ 52.181309][ T4127] usb usb7: usbfs: process 4127 (syz.2.163) did not claim interface 0 before use [ 52.320947][ T4136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4136 comm=syz.3.166 [ 52.335781][ T4136] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4136 comm=syz.3.166 [ 52.378707][ T4139] loop2: detected capacity change from 0 to 1024 [ 52.436666][ T4139] bridge_slave_0: left allmulticast mode [ 52.444590][ T4139] bridge_slave_0: left promiscuous mode [ 52.451089][ T4139] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.476492][ T4139] bridge_slave_1: left allmulticast mode [ 52.482914][ T4139] bridge_slave_1: left promiscuous mode [ 52.489298][ T4139] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.534475][ T4139] bond0: (slave bond_slave_0): Releasing backup interface [ 52.566681][ T4139] bond0: (slave bond_slave_1): Releasing backup interface [ 52.601849][ T4139] team0: Port device team_slave_0 removed [ 52.629728][ T4139] team0: Port device team_slave_1 removed [ 52.656607][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.665422][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.678109][ T4139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.686246][ T4139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.720184][ T1036] lo speed is unknown, defaulting to 1000 [ 52.838351][ T4151] usb usb7: usbfs: process 4151 (syz.2.174) did not claim interface 0 before use [ 52.882530][ T4156] siw: device registration error -23 [ 52.890061][ T4156] 9pnet_fd: Insufficient options for proto=fd [ 52.957393][ T4165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4165 comm=syz.3.178 [ 52.971491][ T4165] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4165 comm=syz.3.178 [ 53.202902][ T4180] 9pnet: Could not find request transport: 0xffffffffffffffff [ 53.307130][ T4190] bpf: Bad value for 'gid' [ 53.398899][ T4196] usb usb7: usbfs: process 4196 (syz.3.187) did not claim interface 0 before use [ 53.432120][ T4198] siw: device registration error -23 [ 53.446461][ T4198] 9pnet_fd: Insufficient options for proto=fd [ 53.487975][ T4200] loop3: detected capacity change from 0 to 512 [ 53.506178][ T4200] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.189: bad orphan inode 15 [ 53.528024][ T4202] siw: device registration error -23 [ 53.533935][ T4200] ext4_test_bit(bit=14, block=5) = 0 [ 53.541033][ T4200] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.567796][ T4200] SELinux: Context system_u:object_r:ptmx_t:s0 is not valid (left unmapped). [ 53.611328][ T4200] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.792025][ T4220] loop1: detected capacity change from 0 to 8192 [ 53.833784][ T3546] loop1: p1 p2 p3 p4 [ 53.838479][ T3546] loop1: p1 size 3523149824 extends beyond EOD, truncated [ 53.861025][ T4222] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 53.861025][ T4222] program syz.2.197 not setting count and/or reply_len properly [ 53.881006][ T3546] loop1: p2 start 4293394688 is beyond EOD, truncated [ 53.890402][ T3546] loop1: p3 start 150994944 is beyond EOD, truncated [ 53.898315][ T3546] loop1: p4 size 50331648 extends beyond EOD, truncated [ 53.987649][ T4220] loop1: p1 p2 p3 p4 [ 53.992446][ T4220] loop1: p1 size 3523149824 extends beyond EOD, truncated [ 54.000629][ T4220] loop1: p2 start 4293394688 is beyond EOD, truncated [ 54.007998][ T4220] loop1: p3 start 150994944 is beyond EOD, truncated [ 54.015864][ T4220] loop1: p4 size 50331648 extends beyond EOD, truncated [ 54.249828][ T4228] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 54.249828][ T4228] program syz.2.201 not setting count and/or reply_len properly [ 54.358698][ T29] kauditd_printk_skb: 251 callbacks suppressed [ 54.358774][ T29] audit: type=1400 audit(1755155903.458:906): avc: denied { write } for pid=4227 comm="syz.2.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 54.570954][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 54.590474][ T3545] udevd[3545]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 54.640426][ T29] audit: type=1400 audit(1755155903.818:907): avc: denied { read } for pid=4237 comm="syz.2.203" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.679702][ T29] audit: type=1400 audit(1755155903.818:908): avc: denied { open } for pid=4237 comm="syz.2.203" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 54.706241][ T29] audit: type=1400 audit(1755155903.838:909): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 54.731018][ T29] audit: type=1400 audit(1755155903.858:910): avc: denied { search } for pid=3033 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.754860][ T29] audit: type=1400 audit(1755155903.858:911): avc: denied { search } for pid=3033 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.780393][ T29] audit: type=1400 audit(1755155903.858:912): avc: denied { search } for pid=3033 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.804542][ T29] audit: type=1400 audit(1755155903.858:913): avc: denied { read } for pid=3033 comm="dhcpcd" name="n40" dev="tmpfs" ino=1978 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.829548][ T29] audit: type=1400 audit(1755155903.858:914): avc: denied { open } for pid=3033 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=1978 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.831640][ T4244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4244 comm=syz.3.204 [ 54.855342][ T29] audit: type=1400 audit(1755155903.858:915): avc: denied { getattr } for pid=3033 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=1978 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.869403][ T4244] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4244 comm=syz.3.204 [ 54.972518][ T4246] siw: device registration error -23 [ 55.030750][ T4252] can: request_module (can-proto-0) failed. [ 55.057222][ T4258] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 55.057222][ T4258] program syz.3.209 not setting count and/or reply_len properly [ 55.249423][ T4276] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 55.256266][ T4276] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 55.264142][ T4276] vhci_hcd vhci_hcd.0: Device attached [ 55.266137][ T4278] loop0: detected capacity change from 0 to 128 [ 55.292242][ T4277] vhci_hcd: connection closed [ 55.292421][ T12] vhci_hcd: stop threads [ 55.302356][ T12] vhci_hcd: release socket [ 55.307298][ T12] vhci_hcd: disconnect device [ 55.364779][ T803] IPVS: starting estimator thread 0... [ 55.453413][ T4283] IPVS: using max 2256 ests per chain, 112800 per kthread [ 55.463798][ T4287] siw: device registration error -23 [ 55.565577][ T4291] lo speed is unknown, defaulting to 1000 [ 55.576321][ T4291] lo speed is unknown, defaulting to 1000 [ 55.600985][ T4291] lo speed is unknown, defaulting to 1000 [ 55.625956][ T4291] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 55.631835][ T4303] FAULT_INJECTION: forcing a failure. [ 55.631835][ T4303] name failslab, interval 1, probability 0, space 0, times 0 [ 55.648486][ T4303] CPU: 0 UID: 0 PID: 4303 Comm: syz.2.222 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 55.648590][ T4303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 55.648606][ T4303] Call Trace: [ 55.648615][ T4303] [ 55.648687][ T4303] __dump_stack+0x1d/0x30 [ 55.648716][ T4303] dump_stack_lvl+0xe8/0x140 [ 55.648741][ T4303] dump_stack+0x15/0x1b [ 55.648763][ T4303] should_fail_ex+0x265/0x280 [ 55.648830][ T4303] should_failslab+0x8c/0xb0 [ 55.648859][ T4303] kmem_cache_alloc_noprof+0x50/0x310 [ 55.648896][ T4303] ? skb_clone+0x151/0x1f0 [ 55.648922][ T4303] skb_clone+0x151/0x1f0 [ 55.648944][ T4303] __netlink_deliver_tap+0x2c9/0x500 [ 55.648999][ T4303] netlink_unicast+0x66b/0x690 [ 55.649033][ T4303] netlink_sendmsg+0x58b/0x6b0 [ 55.649057][ T4303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 55.649107][ T4303] __sock_sendmsg+0x145/0x180 [ 55.649159][ T4303] ____sys_sendmsg+0x31e/0x4e0 [ 55.649190][ T4303] ___sys_sendmsg+0x17b/0x1d0 [ 55.649231][ T4303] __x64_sys_sendmsg+0xd4/0x160 [ 55.649365][ T4303] x64_sys_call+0x191e/0x2ff0 [ 55.649387][ T4303] do_syscall_64+0xd2/0x200 [ 55.649438][ T4303] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 55.649463][ T4303] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 55.649521][ T4303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.649549][ T4303] RIP: 0033:0x7fefab85ebe9 [ 55.649631][ T4303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.649690][ T4303] RSP: 002b:00007fefaa2bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.649721][ T4303] RAX: ffffffffffffffda RBX: 00007fefaba85fa0 RCX: 00007fefab85ebe9 [ 55.649733][ T4303] RDX: 0000000028040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 55.649745][ T4303] RBP: 00007fefaa2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 55.649756][ T4303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.649768][ T4303] R13: 00007fefaba86038 R14: 00007fefaba85fa0 R15: 00007ffcfb235d98 [ 55.649831][ T4303] [ 55.876603][ T4303] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 55.891040][ T4291] lo speed is unknown, defaulting to 1000 [ 55.897448][ T4291] lo speed is unknown, defaulting to 1000 [ 55.927104][ T4291] lo speed is unknown, defaulting to 1000 [ 55.954585][ T4291] lo speed is unknown, defaulting to 1000 [ 55.961380][ T4291] lo speed is unknown, defaulting to 1000 [ 55.979561][ T4307] lo speed is unknown, defaulting to 1000 [ 55.987229][ T4307] lo speed is unknown, defaulting to 1000 [ 55.989753][ T4311] loop2: detected capacity change from 0 to 1024 [ 56.021043][ T4311] EXT4-fs: Ignoring removed nobh option [ 56.028422][ T4311] EXT4-fs: inline encryption not supported [ 56.038626][ T4314] __nla_validate_parse: 9 callbacks suppressed [ 56.038644][ T4314] netlink: 256 bytes leftover after parsing attributes in process `syz.3.228'. [ 56.063944][ T4311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.083428][ T4323] netlink: 5 bytes leftover after parsing attributes in process `syz.1.226'. [ 56.092654][ T4323] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 56.125385][ T4323] 0ªî{X¹¦: entered allmulticast mode [ 56.151916][ T4323] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 56.187438][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.204610][ T4327] siw: device registration error -23 [ 56.294321][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.303848][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.338884][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.349878][ T4333] loop3: detected capacity change from 0 to 1024 [ 56.380892][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.390176][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.404395][ T4333] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.409055][ T4331] FAULT_INJECTION: forcing a failure. [ 56.409055][ T4331] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 56.431241][ T4331] CPU: 0 UID: 0 PID: 4331 Comm: syz.2.230 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 56.431273][ T4331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.431288][ T4331] Call Trace: [ 56.431295][ T4331] [ 56.431303][ T4331] __dump_stack+0x1d/0x30 [ 56.431422][ T4331] dump_stack_lvl+0xe8/0x140 [ 56.431450][ T4331] dump_stack+0x15/0x1b [ 56.431505][ T4331] should_fail_ex+0x265/0x280 [ 56.431576][ T4331] should_fail_alloc_page+0xf2/0x100 [ 56.431611][ T4331] __alloc_frozen_pages_noprof+0xff/0x360 [ 56.432104][ T4331] alloc_pages_mpol+0xb3/0x250 [ 56.432222][ T4331] vma_alloc_folio_noprof+0x1aa/0x300 [ 56.432310][ T4331] do_wp_page+0x5db/0x24e0 [ 56.432395][ T4331] ? css_rstat_updated+0xb7/0x240 [ 56.432425][ T4331] ? __rcu_read_lock+0x37/0x50 [ 56.432449][ T4331] handle_mm_fault+0x77d/0x2c20 [ 56.432478][ T4331] ? __rcu_read_unlock+0x4f/0x70 [ 56.432508][ T4331] do_user_addr_fault+0x3fe/0x1090 [ 56.432590][ T4331] ? avc_has_perm+0xf7/0x180 [ 56.432617][ T4331] exc_page_fault+0x62/0xa0 [ 56.432641][ T4331] asm_exc_page_fault+0x26/0x30 [ 56.432668][ T4331] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 56.432748][ T4331] Code: f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 56.432766][ T4331] RSP: 0018:ffffc9001198bb90 EFLAGS: 00050206 [ 56.432782][ T4331] RAX: ffff88811c760aa0 RBX: ffffc9001198bde8 RCX: 0000000000000080 [ 56.432795][ T4331] RDX: 0000000000000000 RSI: ffff888122583f80 RDI: 0000200000005000 [ 56.432811][ T4331] RBP: 0000000000004000 R08: 000000000000056e R09: 0000000000000000 [ 56.432860][ T4331] R10: 0001888122583000 R11: 0001888122583fff R12: ffffc9001198bdd0 [ 56.432877][ T4331] R13: 0000000000001000 R14: 0000000000001000 R15: 0000000000001000 [ 56.433064][ T4331] _copy_to_iter+0x2d9/0xe30 [ 56.433117][ T4331] ? terminate_walk+0x27f/0x2a0 [ 56.433156][ T4331] copy_page_to_iter+0x18f/0x2d0 [ 56.433188][ T4331] shmem_file_read_iter+0x2d6/0x540 [ 56.433224][ T4331] do_iter_readv_writev+0x49c/0x540 [ 56.433287][ T4331] vfs_readv+0x1ea/0x690 [ 56.433334][ T4331] __x64_sys_preadv+0xfd/0x1c0 [ 56.433542][ T4331] x64_sys_call+0x282a/0x2ff0 [ 56.433645][ T4331] do_syscall_64+0xd2/0x200 [ 56.433681][ T4331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.433709][ T4331] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.433866][ T4331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.433896][ T4331] RIP: 0033:0x7fefab85ebe9 [ 56.433938][ T4331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.434119][ T4331] RSP: 002b:00007fefaa29e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 56.434144][ T4331] RAX: ffffffffffffffda RBX: 00007fefaba86090 RCX: 00007fefab85ebe9 [ 56.434239][ T4331] RDX: 0000000000000005 RSI: 00002000000015c0 RDI: 0000000000000003 [ 56.434251][ T4331] RBP: 00007fefaa29e090 R08: 000000000000003f R09: 0000000000000000 [ 56.434263][ T4331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.434275][ T4331] R13: 00007fefaba86128 R14: 00007fefaba86090 R15: 00007ffcfb235d98 [ 56.434296][ T4331] [ 56.448180][ T4330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.223'. [ 56.648495][ T4333] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 56.840363][ T4344] loop1: detected capacity change from 0 to 512 [ 56.866779][ T4344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.880986][ T4344] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.981785][ T4344] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.233: corrupted inode contents [ 57.015297][ T4344] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.233: mark_inode_dirty error [ 57.040520][ T4344] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.233: corrupted inode contents [ 57.056230][ T4344] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.233: mark_inode_dirty error [ 57.148933][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.233'. [ 57.229348][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.355292][ T4365] FAULT_INJECTION: forcing a failure. [ 57.355292][ T4365] name failslab, interval 1, probability 0, space 0, times 0 [ 57.369611][ T4365] CPU: 1 UID: 0 PID: 4365 Comm: syz.4.239 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 57.369718][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.369735][ T4365] Call Trace: [ 57.369744][ T4365] [ 57.369752][ T4365] __dump_stack+0x1d/0x30 [ 57.369778][ T4365] dump_stack_lvl+0xe8/0x140 [ 57.369804][ T4365] dump_stack+0x15/0x1b [ 57.369825][ T4365] should_fail_ex+0x265/0x280 [ 57.369913][ T4365] ? __se_sys_memfd_create+0x1cc/0x590 [ 57.369941][ T4365] should_failslab+0x8c/0xb0 [ 57.369973][ T4365] __kmalloc_cache_noprof+0x4c/0x320 [ 57.370062][ T4365] ? fput+0x8f/0xc0 [ 57.370092][ T4365] __se_sys_memfd_create+0x1cc/0x590 [ 57.370114][ T4365] __x64_sys_memfd_create+0x31/0x40 [ 57.370138][ T4365] x64_sys_call+0x2abe/0x2ff0 [ 57.370171][ T4365] do_syscall_64+0xd2/0x200 [ 57.370204][ T4365] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 57.370236][ T4365] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 57.370314][ T4365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.370343][ T4365] RIP: 0033:0x7f84f675ebe9 [ 57.370362][ T4365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.370455][ T4365] RSP: 002b:00007f84f5184e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 57.370476][ T4365] RAX: ffffffffffffffda RBX: 0000000000000538 RCX: 00007f84f675ebe9 [ 57.370489][ T4365] RDX: 00007f84f5184ef0 RSI: 0000000000000000 RDI: 00007f84f67e27e8 [ 57.370503][ T4365] RBP: 0000200000000600 R08: 00007f84f5184bb7 R09: 00007f84f5184e40 [ 57.370519][ T4365] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000580 [ 57.370535][ T4365] R13: 00007f84f5184ef0 R14: 00007f84f5184eb0 R15: 00002000000005c0 [ 57.370560][ T4365] [ 57.371649][ T4356] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 57.619465][ T4356] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.233: corrupted inode contents [ 57.655987][ T4367] loop2: detected capacity change from 0 to 1024 [ 57.689831][ T4367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.703209][ T4367] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.726059][ T4356] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #2: comm syz.1.233: mark_inode_dirty error [ 57.887144][ T4356] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #2: comm syz.1.233: corrupted inode contents [ 58.190894][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.285862][ T4381] netlink: 5 bytes leftover after parsing attributes in process `syz.3.244'. [ 58.320712][ T4381] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 58.348236][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.367413][ T4381] 0ªî{X¹¦: entered allmulticast mode [ 58.399837][ T4381] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 58.422709][ T4374] loop4: detected capacity change from 0 to 512 [ 58.438638][ T4374] EXT4-fs (loop4): too many log groups per flexible block group [ 58.439694][ T4393] FAULT_INJECTION: forcing a failure. [ 58.439694][ T4393] name failslab, interval 1, probability 0, space 0, times 0 [ 58.447566][ T4374] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 58.461019][ T4393] CPU: 1 UID: 0 PID: 4393 Comm: syz.1.249 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 58.461053][ T4393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 58.461068][ T4393] Call Trace: [ 58.461077][ T4393] [ 58.461143][ T4393] __dump_stack+0x1d/0x30 [ 58.461176][ T4393] dump_stack_lvl+0xe8/0x140 [ 58.461204][ T4393] dump_stack+0x15/0x1b [ 58.461229][ T4393] should_fail_ex+0x265/0x280 [ 58.461261][ T4393] should_failslab+0x8c/0xb0 [ 58.461300][ T4393] kmem_cache_alloc_noprof+0x50/0x310 [ 58.461341][ T4393] ? audit_log_start+0x365/0x6c0 [ 58.461387][ T4393] audit_log_start+0x365/0x6c0 [ 58.461474][ T4393] audit_seccomp+0x48/0x100 [ 58.461607][ T4393] ? __seccomp_filter+0x68c/0x10d0 [ 58.461638][ T4393] __seccomp_filter+0x69d/0x10d0 [ 58.461670][ T4393] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 58.461708][ T4393] ? vfs_write+0x7e8/0x960 [ 58.461851][ T4393] __secure_computing+0x82/0x150 [ 58.461881][ T4393] syscall_trace_enter+0xcf/0x1e0 [ 58.461917][ T4393] do_syscall_64+0xac/0x200 [ 58.461964][ T4393] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 58.461997][ T4393] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.462088][ T4393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.462118][ T4393] RIP: 0033:0x7f76b84bebe9 [ 58.462141][ T4393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.462165][ T4393] RSP: 002b:00007f76b6f1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 58.462230][ T4393] RAX: ffffffffffffffda RBX: 00007f76b86e5fa0 RCX: 00007f76b84bebe9 [ 58.462248][ T4393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 58.462265][ T4393] RBP: 00007f76b6f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.462281][ T4393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.462365][ T4393] R13: 00007f76b86e6038 R14: 00007f76b86e5fa0 R15: 00007ffc33fd6208 [ 58.462392][ T4393] [ 58.699469][ T4374] EXT4-fs (loop4): mount failed [ 58.720296][ T4374] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 58.728180][ T4374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 58.737171][ T4374] vhci_hcd vhci_hcd.0: Device attached [ 58.778430][ T4407] loop2: detected capacity change from 0 to 164 [ 58.787342][ T4404] vhci_hcd: connection closed [ 58.793383][ T4407] rock: directory entry would overflow storage [ 58.793610][ T12] vhci_hcd: stop threads [ 58.798570][ T4407] rock: sig=0x66, size=4, remaining=3 [ 58.817102][ T12] vhci_hcd: release socket [ 58.823439][ T12] vhci_hcd: disconnect device [ 59.133678][ T4422] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 59.140433][ T4422] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.149008][ T4422] vhci_hcd vhci_hcd.0: Device attached [ 59.167847][ T4423] vhci_hcd: connection closed [ 59.168176][ T1791] vhci_hcd: stop threads [ 59.179442][ T1791] vhci_hcd: release socket [ 59.184010][ T1791] vhci_hcd: disconnect device [ 59.234423][ T4430] tipc: Started in network mode [ 59.239923][ T4430] tipc: Node identity ca95ab655157, cluster identity 4711 [ 59.247991][ T4430] tipc: Enabled bearer , priority 0 [ 59.251195][ T4421] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 59.262465][ T4421] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 59.270809][ T4421] vhci_hcd vhci_hcd.0: Device attached [ 59.280052][ T4431] vhci_hcd: connection closed [ 59.280219][ T1791] vhci_hcd: stop threads [ 59.280622][ T4430] syzkaller0: entered promiscuous mode [ 59.287119][ T1791] vhci_hcd: release socket [ 59.287132][ T1791] vhci_hcd: disconnect device [ 59.292384][ T4430] syzkaller0: entered allmulticast mode [ 59.321629][ T4430] FAULT_INJECTION: forcing a failure. [ 59.321629][ T4430] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 59.336055][ T4430] CPU: 0 UID: 0 PID: 4430 Comm: syz.1.260 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 59.336109][ T4430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.336124][ T4430] Call Trace: [ 59.336132][ T4430] [ 59.336141][ T4430] __dump_stack+0x1d/0x30 [ 59.336166][ T4430] dump_stack_lvl+0xe8/0x140 [ 59.336228][ T4430] dump_stack+0x15/0x1b [ 59.336249][ T4430] should_fail_ex+0x265/0x280 [ 59.336275][ T4430] should_fail+0xb/0x20 [ 59.336296][ T4430] should_fail_usercopy+0x1a/0x20 [ 59.336409][ T4430] _copy_from_user+0x1c/0xb0 [ 59.336444][ T4430] sock_do_ioctl+0xe6/0x220 [ 59.336517][ T4430] sock_ioctl+0x41b/0x610 [ 59.336552][ T4430] ? __pfx_sock_ioctl+0x10/0x10 [ 59.336630][ T4430] __se_sys_ioctl+0xcb/0x140 [ 59.336665][ T4430] __x64_sys_ioctl+0x43/0x50 [ 59.336702][ T4430] x64_sys_call+0x1816/0x2ff0 [ 59.336738][ T4430] do_syscall_64+0xd2/0x200 [ 59.336773][ T4430] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.336805][ T4430] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.336837][ T4430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.336911][ T4430] RIP: 0033:0x7f76b84bebe9 [ 59.336930][ T4430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.336974][ T4430] RSP: 002b:00007f76b6f1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 59.336999][ T4430] RAX: ffffffffffffffda RBX: 00007f76b86e5fa0 RCX: 00007f76b84bebe9 [ 59.337011][ T4430] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 59.337023][ T4430] RBP: 00007f76b6f1f090 R08: 0000000000000000 R09: 0000000000000000 [ 59.337060][ T4430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.337076][ T4430] R13: 00007f76b86e6038 R14: 00007f76b86e5fa0 R15: 00007ffc33fd6208 [ 59.337100][ T4430] [ 59.546584][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 59.546597][ T29] audit: type=1400 audit(1755155908.728:1056): avc: denied { write } for pid=4433 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.574338][ T29] audit: type=1400 audit(1755155908.728:1057): avc: denied { sqpoll } for pid=4433 comm="syz.3.261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 59.595493][ T4429] tipc: Resetting bearer [ 59.609169][ T4429] tipc: Disabling bearer [ 59.625145][ T4434] tipc: Started in network mode [ 59.630378][ T4434] tipc: Node identity ae7ade3ddfdf, cluster identity 4711 [ 59.638432][ T4434] tipc: Enabled bearer , priority 0 [ 59.650393][ T4433] tipc: Disabling bearer [ 59.660142][ T29] audit: type=1400 audit(1755155908.838:1058): avc: denied { ioctl } for pid=4439 comm="syz.4.263" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 59.779663][ T4452] siw: device registration error -23 [ 59.831895][ T4456] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 59.841400][ T4456] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 59.905186][ T4462] loop3: detected capacity change from 0 to 512 [ 59.931914][ T2994] udevd[2994]: worker [3546] terminated by signal 33 (Unknown signal 33) [ 59.942325][ T2994] udevd[2994]: worker [3546] failed while handling '/devices/virtual/block/loop2' [ 59.959302][ T4464] random: crng reseeded on system resumption [ 59.968664][ T29] audit: type=1400 audit(1755155909.138:1059): avc: granted { setsecparam } for pid=4463 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 59.990566][ T29] audit: type=1400 audit(1755155909.138:1060): avc: denied { ioctl } for pid=4463 comm="syz.2.275" path="socket:[7365]" dev="sockfs" ino=7365 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 60.018527][ T29] audit: type=1400 audit(1755155909.138:1061): avc: denied { read append } for pid=4463 comm="syz.2.275" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.043729][ T29] audit: type=1400 audit(1755155909.138:1062): avc: denied { ioctl open } for pid=4463 comm="syz.2.275" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 60.070633][ T29] audit: type=1400 audit(1755155909.148:1063): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.124012][ T4468] FAULT_INJECTION: forcing a failure. [ 60.124012][ T4468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.137657][ T4468] CPU: 0 UID: 0 PID: 4468 Comm: syz.3.277 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 60.137769][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.137787][ T4468] Call Trace: [ 60.137792][ T4468] [ 60.137800][ T4468] __dump_stack+0x1d/0x30 [ 60.137828][ T4468] dump_stack_lvl+0xe8/0x140 [ 60.137853][ T4468] dump_stack+0x15/0x1b [ 60.137928][ T4468] should_fail_ex+0x265/0x280 [ 60.138007][ T4468] should_fail+0xb/0x20 [ 60.138090][ T4468] should_fail_usercopy+0x1a/0x20 [ 60.138113][ T4468] _copy_from_user+0x1c/0xb0 [ 60.138142][ T4468] ___sys_sendmsg+0xc1/0x1d0 [ 60.138202][ T4468] __x64_sys_sendmsg+0xd4/0x160 [ 60.138236][ T4468] x64_sys_call+0x191e/0x2ff0 [ 60.138264][ T4468] do_syscall_64+0xd2/0x200 [ 60.138300][ T4468] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.138344][ T4468] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.138387][ T4468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.138408][ T4468] RIP: 0033:0x7f3df80aebe9 [ 60.138435][ T4468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.138456][ T4468] RSP: 002b:00007f3df6b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 60.138565][ T4468] RAX: ffffffffffffffda RBX: 00007f3df82d5fa0 RCX: 00007f3df80aebe9 [ 60.138578][ T4468] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 60.138596][ T4468] RBP: 00007f3df6b17090 R08: 0000000000000000 R09: 0000000000000000 [ 60.138610][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.138621][ T4468] R13: 00007f3df82d6038 R14: 00007f3df82d5fa0 R15: 00007ffc57fb7278 [ 60.138640][ T4468] [ 60.353268][ T29] audit: type=1400 audit(1755155909.528:1064): avc: denied { setopt } for pid=4474 comm="syz.3.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.405727][ T29] audit: type=1404 audit(1755155909.558:1065): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 60.437753][ T4481] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20000 [ 60.448378][ T4483] siw: device registration error -23 [ 60.515027][ T4488] FAULT_INJECTION: forcing a failure. [ 60.515027][ T4488] name failslab, interval 1, probability 0, space 0, times 0 [ 60.528263][ T4488] CPU: 1 UID: 0 PID: 4488 Comm: syz.3.284 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 60.528327][ T4488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 60.528338][ T4488] Call Trace: [ 60.528344][ T4488] [ 60.528352][ T4488] __dump_stack+0x1d/0x30 [ 60.528371][ T4488] dump_stack_lvl+0xe8/0x140 [ 60.528390][ T4488] dump_stack+0x15/0x1b [ 60.528405][ T4488] should_fail_ex+0x265/0x280 [ 60.528468][ T4488] should_failslab+0x8c/0xb0 [ 60.528489][ T4488] kmem_cache_alloc_node_noprof+0x57/0x320 [ 60.528515][ T4488] ? __alloc_skb+0x101/0x320 [ 60.528618][ T4488] __alloc_skb+0x101/0x320 [ 60.528708][ T4488] tipc_msg_create+0x47/0x230 [ 60.528737][ T4488] ? kstrtoull+0x111/0x140 [ 60.528755][ T4488] tipc_group_proto_xmit+0xb7/0x2f0 [ 60.528776][ T4488] tipc_group_delete+0x97/0x290 [ 60.528797][ T4488] tipc_sk_leave+0xa9/0x270 [ 60.528830][ T4488] tipc_setsockopt+0x4de/0x620 [ 60.528929][ T4488] ? __pfx_tipc_setsockopt+0x10/0x10 [ 60.528956][ T4488] __sys_setsockopt+0x184/0x200 [ 60.528975][ T4488] __x64_sys_setsockopt+0x64/0x80 [ 60.529024][ T4488] x64_sys_call+0x20ec/0x2ff0 [ 60.529043][ T4488] do_syscall_64+0xd2/0x200 [ 60.529105][ T4488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 60.529126][ T4488] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.529148][ T4488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.529243][ T4488] RIP: 0033:0x7f3df80aebe9 [ 60.529327][ T4488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.529343][ T4488] RSP: 002b:00007f3df6b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 60.529359][ T4488] RAX: ffffffffffffffda RBX: 00007f3df82d5fa0 RCX: 00007f3df80aebe9 [ 60.529370][ T4488] RDX: 0000000000000088 RSI: 000000000000010f RDI: 0000000000000005 [ 60.529383][ T4488] RBP: 00007f3df6b17090 R08: 0000000000000000 R09: 0000000000000000 [ 60.529396][ T4488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.529406][ T4488] R13: 00007f3df82d6038 R14: 00007f3df82d5fa0 R15: 00007ffc57fb7278 [ 60.529424][ T4488] [ 60.798234][ T4494] loop1: detected capacity change from 0 to 1024 [ 60.813649][ T4494] EXT4-fs: Ignoring removed nobh option [ 60.819504][ T4494] EXT4-fs: inline encryption not supported [ 60.841150][ T4498] loop2: detected capacity change from 0 to 512 [ 60.860120][ T4494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.936229][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.946569][ T4498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.000746][ T4498] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.113724][ T4515] loop0: detected capacity change from 0 to 512 [ 61.135067][ T4516] loop1: detected capacity change from 0 to 512 [ 61.142065][ T4516] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 61.157899][ T4515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.177252][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.188555][ T4518] siw: device registration error -23 [ 61.201824][ T4515] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.248130][ T4518] 9pnet: Could not find request transport: fd0x0000000000000009 [ 61.251052][ T4526] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.291147][ T4515] __nla_validate_parse: 4 callbacks suppressed [ 61.291168][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 61.344425][ T4534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.293'. [ 61.379388][ T4537] netlink: 268 bytes leftover after parsing attributes in process `syz.3.300'. [ 61.388077][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 61.399765][ T4538] loop4: detected capacity change from 0 to 1024 [ 61.411198][ T4538] EXT4-fs: Ignoring removed nobh option [ 61.416968][ T4538] EXT4-fs: inline encryption not supported [ 61.468620][ T4538] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.523558][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.625129][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.774342][ T4542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.302'. [ 61.793047][ T4557] vhci_hcd: invalid port number 67 [ 61.803353][ T4542] netlink: 'syz.1.302': attribute type 10 has an invalid length. [ 61.822560][ T4542] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 61.878925][ T4563] loop1: detected capacity change from 0 to 512 [ 61.943966][ T4567] 9pnet: Could not find request transport: fd0x0000000000000009 [ 62.015962][ T4573] loop0: detected capacity change from 0 to 1024 [ 62.025763][ T4573] EXT4-fs: Ignoring removed nobh option [ 62.031915][ T4573] EXT4-fs: inline encryption not supported [ 62.056075][ T4573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.093673][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.140801][ T4577] program syz.0.314 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.308463][ T4584] loop0: detected capacity change from 0 to 512 [ 62.316672][ T4583] loop4: detected capacity change from 0 to 164 [ 62.339862][ T4583] Unable to read rock-ridge attributes [ 62.347677][ T4584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.370132][ T4583] Unable to read rock-ridge attributes [ 62.377771][ T4584] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.411573][ T4584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.317: corrupted inode contents [ 62.437757][ T4584] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.317: mark_inode_dirty error [ 62.454985][ T4593] program syz.2.319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.465994][ T4593] FAULT_INJECTION: forcing a failure. [ 62.465994][ T4593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 62.479752][ T4593] CPU: 1 UID: 0 PID: 4593 Comm: syz.2.319 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 62.479841][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 62.479902][ T4593] Call Trace: [ 62.479911][ T4593] [ 62.479921][ T4593] __dump_stack+0x1d/0x30 [ 62.479945][ T4593] dump_stack_lvl+0xe8/0x140 [ 62.480039][ T4593] dump_stack+0x15/0x1b [ 62.480061][ T4593] should_fail_ex+0x265/0x280 [ 62.480089][ T4593] should_fail+0xb/0x20 [ 62.480112][ T4593] should_fail_usercopy+0x1a/0x20 [ 62.480135][ T4593] _copy_from_user+0x1c/0xb0 [ 62.480226][ T4593] scsi_ioctl+0x116f/0x14d0 [ 62.480258][ T4593] ? avc_has_perm+0xf7/0x180 [ 62.480288][ T4593] ? file_has_perm+0x324/0x370 [ 62.480381][ T4593] ? do_vfs_ioctl+0x866/0xe10 [ 62.480404][ T4593] sg_ioctl+0xdf6/0x1360 [ 62.480438][ T4593] ? __pfx_sg_ioctl+0x10/0x10 [ 62.480588][ T4593] __se_sys_ioctl+0xcb/0x140 [ 62.480638][ T4593] __x64_sys_ioctl+0x43/0x50 [ 62.480672][ T4593] x64_sys_call+0x1816/0x2ff0 [ 62.480702][ T4593] do_syscall_64+0xd2/0x200 [ 62.480737][ T4593] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 62.480778][ T4593] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 62.480811][ T4593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.480840][ T4593] RIP: 0033:0x7fefab85ebe9 [ 62.480856][ T4593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 62.480874][ T4593] RSP: 002b:00007fefaa2bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 62.480971][ T4593] RAX: ffffffffffffffda RBX: 00007fefaba85fa0 RCX: 00007fefab85ebe9 [ 62.480987][ T4593] RDX: 0000200000001480 RSI: 0000000000000001 RDI: 0000000000000003 [ 62.481003][ T4593] RBP: 00007fefaa2bf090 R08: 0000000000000000 R09: 0000000000000000 [ 62.481018][ T4593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 62.481034][ T4593] R13: 00007fefaba86038 R14: 00007fefaba85fa0 R15: 00007ffcfb235d98 [ 62.481062][ T4593] [ 62.564274][ T4584] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.317: corrupted inode contents [ 62.639653][ T4598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.317'. [ 62.669226][ T4584] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.317: mark_inode_dirty error [ 62.748920][ T4598] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.317: corrupted inode contents [ 62.761759][ T4598] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.317: mark_inode_dirty error [ 62.781385][ T4598] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.317: corrupted inode contents [ 62.834490][ T4606] siw: device registration error -23 [ 62.851703][ T4606] 9pnet: Could not find request transport: fd0x0000000000000009 [ 62.880093][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.946216][ T4609] netlink: 268 bytes leftover after parsing attributes in process `syz.4.325'. [ 62.961239][ T4611] loop0: detected capacity change from 0 to 1024 [ 62.970090][ T4611] EXT4-fs: Ignoring removed nobh option [ 62.976475][ T4611] EXT4-fs: inline encryption not supported [ 63.072298][ T4618] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 63.072298][ T4618] program syz.3.327 not setting count and/or reply_len properly [ 63.294216][ T4624] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 63.301100][ T4624] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.309188][ T4624] vhci_hcd vhci_hcd.0: Device attached [ 63.315506][ T4630] vhci_hcd: connection closed [ 63.315735][ T12] vhci_hcd: stop threads [ 63.325425][ T12] vhci_hcd: release socket [ 63.330924][ T12] vhci_hcd: disconnect device [ 63.362317][ T4633] FAULT_INJECTION: forcing a failure. [ 63.362317][ T4633] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 63.362361][ T4633] CPU: 0 UID: 0 PID: 4633 Comm: syz.0.332 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 63.362393][ T4633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 63.362452][ T4633] Call Trace: [ 63.362462][ T4633] [ 63.362477][ T4633] __dump_stack+0x1d/0x30 [ 63.362503][ T4633] dump_stack_lvl+0xe8/0x140 [ 63.362527][ T4633] dump_stack+0x15/0x1b [ 63.362557][ T4633] should_fail_ex+0x265/0x280 [ 63.362586][ T4633] should_fail_alloc_page+0xf2/0x100 [ 63.362669][ T4633] __alloc_frozen_pages_noprof+0xff/0x360 [ 63.362720][ T4633] alloc_pages_mpol+0xb3/0x250 [ 63.362761][ T4633] alloc_frozen_pages_noprof+0x90/0x110 [ 63.362872][ T4633] ___kmalloc_large_node+0x52/0x100 [ 63.362911][ T4633] __kmalloc_large_node_noprof+0x16/0xa0 [ 63.362946][ T4633] __kmalloc_noprof+0x2ab/0x3e0 [ 63.363060][ T4633] ? vc_do_resize+0x20e/0xd70 [ 63.363194][ T4633] ? vfree+0x17f/0x3a0 [ 63.363238][ T4633] vc_do_resize+0x20e/0xd70 [ 63.363284][ T4633] ? selinux_capable+0x31/0x40 [ 63.363460][ T4633] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 63.363616][ T4633] __vc_resize+0x3c/0x50 [ 63.363658][ T4633] vt_ioctl+0x16cf/0x1880 [ 63.363699][ T4633] ? tty_jobctrl_ioctl+0x29e/0x810 [ 63.363753][ T4633] tty_ioctl+0x7de/0xb80 [ 63.363787][ T4633] ? __pfx_tty_ioctl+0x10/0x10 [ 63.363884][ T4633] __se_sys_ioctl+0xcb/0x140 [ 63.363929][ T4633] __x64_sys_ioctl+0x43/0x50 [ 63.363975][ T4633] x64_sys_call+0x1816/0x2ff0 [ 63.364039][ T4633] do_syscall_64+0xd2/0x200 [ 63.364092][ T4633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 63.364187][ T4633] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 63.364219][ T4633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.364243][ T4633] RIP: 0033:0x7f4700dfebe9 [ 63.364258][ T4633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.364277][ T4633] RSP: 002b:00007f46ff867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 63.364297][ T4633] RAX: ffffffffffffffda RBX: 00007f4701025fa0 RCX: 00007f4700dfebe9 [ 63.364313][ T4633] RDX: 0000200000000080 RSI: 0000000000005609 RDI: 0000000000000003 [ 63.364358][ T4633] RBP: 00007f46ff867090 R08: 0000000000000000 R09: 0000000000000000 [ 63.364382][ T4633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.364398][ T4633] R13: 00007f4701026038 R14: 00007f4701025fa0 R15: 00007ffeae11bb28 [ 63.364422][ T4633] [ 63.594018][ T4646] siw: device registration error -23 [ 63.594638][ T4646] 9pnet_fd: Insufficient options for proto=fd [ 63.739211][ T4650] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 63.739211][ T4650] program syz.4.339 not setting count and/or reply_len properly [ 63.781967][ T4652] loop2: detected capacity change from 0 to 1024 [ 63.795023][ T4652] EXT4-fs: Ignoring removed nobh option [ 63.801340][ T4652] EXT4-fs: inline encryption not supported [ 63.985551][ T4648] loop1: detected capacity change from 0 to 512 [ 63.985934][ T4666] siw: device registration error -23 [ 64.017258][ T4648] EXT4-fs (loop1): too many log groups per flexible block group [ 64.025777][ T4648] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 64.093732][ T4648] EXT4-fs (loop1): mount failed [ 64.128462][ T4648] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 64.135546][ T4648] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 64.143599][ T4648] vhci_hcd vhci_hcd.0: Device attached [ 64.171331][ T4673] vhci_hcd: connection closed [ 64.171680][ T1697] vhci_hcd: stop threads [ 64.181376][ T1697] vhci_hcd: release socket [ 64.186020][ T1697] vhci_hcd: disconnect device [ 64.337697][ T4681] siw: device registration error -23 [ 64.354087][ T4681] 9pnet_fd: Insufficient options for proto=fd [ 64.362109][ T4683] netlink: 268 bytes leftover after parsing attributes in process `syz.3.349'. [ 64.384318][ T3391] ================================================================== [ 64.393979][ T3391] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 64.402592][ T3391] [ 64.405222][ T3391] read-write to 0xffff888237c29d64 of 4 bytes by task 3394 on cpu 0: [ 64.414021][ T3391] wq_worker_running+0x95/0x120 [ 64.419143][ T3391] schedule_timeout+0xb7/0x170 [ 64.424131][ T3391] msleep+0x50/0x90 [ 64.428189][ T3391] hub_port_debounce+0x181/0x200 [ 64.433354][ T3391] hub_event+0x146d/0x29c0 [ 64.438068][ T3391] process_scheduled_works+0x4cb/0x9d0 [ 64.443998][ T3391] worker_thread+0x582/0x770 [ 64.448655][ T3391] kthread+0x489/0x510 [ 64.453123][ T3391] ret_from_fork+0xda/0x150 [ 64.457998][ T3391] ret_from_fork_asm+0x1a/0x30 [ 64.463245][ T3391] [ 64.465601][ T3391] read to 0xffff888237c29d64 of 4 bytes by task 3391 on cpu 1: [ 64.474409][ T3391] kick_pool+0x49/0x2d0 [ 64.480217][ T3391] __queue_work+0x8cb/0xb50 [ 64.488067][ T3391] queue_work_on+0xd1/0x160 [ 64.493879][ T3391] process_srcu+0x999/0xbc0 [ 64.499476][ T3391] process_scheduled_works+0x4cb/0x9d0 [ 64.505415][ T3391] worker_thread+0x582/0x770 [ 64.510247][ T3391] kthread+0x489/0x510 [ 64.515074][ T3391] ret_from_fork+0xda/0x150 [ 64.520056][ T3391] ret_from_fork_asm+0x1a/0x30 [ 64.524931][ T3391] [ 64.527448][ T3391] value changed: 0x00000000 -> 0x00000001 [ 64.534117][ T3391] [ 64.536873][ T3391] Reported by Kernel Concurrency Sanitizer on: [ 64.543759][ T3391] CPU: 1 UID: 0 PID: 3391 Comm: kworker/1:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 64.558145][ T3391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 64.569412][ T3391] Workqueue: rcu_gp process_srcu [ 64.574871][ T3391] ================================================================== [ 64.588624][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 64.588643][ T29] audit: type=1326 audit(1755155913.768:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.622919][ T29] audit: type=1326 audit(1755155913.768:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.650060][ T29] audit: type=1326 audit(1755155913.768:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.650675][ T4685] loop4: detected capacity change from 0 to 164 [ 64.675119][ T29] audit: type=1326 audit(1755155913.768:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.710114][ T29] audit: type=1326 audit(1755155913.768:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.736946][ T29] audit: type=1326 audit(1755155913.768:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.762937][ T4685] Unsupported NM flag settings (8) [ 64.763827][ T29] audit: type=1326 audit(1755155913.778:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.794855][ T29] audit: type=1326 audit(1755155913.778:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.822041][ T29] audit: type=1326 audit(1755155913.778:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000 [ 64.846428][ T29] audit: type=1326 audit(1755155913.778:1264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.4.348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84f675ebe9 code=0x7ffc0000