last executing test programs: 2.906741565s ago: executing program 1 (id=1272): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/63, 0x3f}, 0x7}], 0x4000135, 0x2, 0x0) write(r0, &(0x7f00000000c0), 0x0) 2.051405664s ago: executing program 1 (id=1292): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.385962158s ago: executing program 0 (id=1304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf251d00000008000300", @ANYRES32=r3, @ANYBLOB="30002f800c0002000200aaaaaaaaaaaa07000100"], 0x4c}, 0x1, 0x0, 0x0, 0x20008800}, 0x800) 1.257834228s ago: executing program 0 (id=1306): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) syz_clone(0x400cb580, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r1, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/93, 0x5d) syz_emit_ethernet(0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaa05000000ffffffff86dd60fca33f00007300fe80000000"], 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) ioctl$TIOCMBIC(r2, 0x5415, 0x0) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009110a9a69100000000009500000000007e0b3f68fcabca9c5093b57d8dfd04310e7442ebf586b6141df77ea331165c8a7884a3263fb41249e8c47effb618f6a4def8dd8bd843aa"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000001cc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000007c0)={0x40000000000ff80, 0x0, &(0x7f0000000700)={&(0x7f0000001e40)=ANY=[], 0xfffffffffffffe30}}, 0x80) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x6) r5 = syz_io_uring_setup(0x108, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0x9ffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x4001c3a, 0x8b5a, 0x22, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.147848608s ago: executing program 1 (id=1308): r0 = socket$inet_udp(0x2, 0x2, 0x0) pselect6(0x40, &(0x7f0000000140)={0x1, 0x5, 0x3, 0x0, 0xff, 0xea2b, 0x7, 0x2300000000000}, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r3, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.123391509s ago: executing program 0 (id=1310): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00030000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200", 0x58}, {&(0x7f0000000680)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1.048257946s ago: executing program 3 (id=1311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000000c0)={'pim6reg\x00', @ifru_map={0x3, 0x3, 0x1, 0x81, 0xd, 0x3}}}) 1.047762696s ago: executing program 3 (id=1312): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_emit_ethernet(0xce, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbba9b0ef2223cf8848000000000000010000000000000d0700000000004ed41370d10e5919e3f3b1f27c66ca64045ed06bf0d8204073ce7739f3378c1fba42b4c07e39dfa3d29a801eedc55f67a1f510c645698a25012008ffaf475c4e2e7a8b8f225e8d4348ab0ab19bb8c7b66a8d515d491bc0294b453f6458a94b8906320d16296eae5e59ac5d3a4d991e4cd25c2b857792cff95f9dbdf3deaceaac7857209a6d545ee3840e96dcc5685e270b84fe6ce9fff896c1def6e9c3bdefe1d30320c5aa6f77"], &(0x7f0000000040)={0x0, 0x3, [0x927, 0x603, 0x66a, 0xd72]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) alarm(0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000600)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xe}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)={r6, 0x7ff, 0x2, [0x6, 0x8]}, 0xfffffffffffffffc) sendmsg$key(r3, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x20040010) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x1, 0x803, 0x0) 1.046610255s ago: executing program 3 (id=1313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 657.953997ms ago: executing program 4 (id=1314): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 638.771168ms ago: executing program 4 (id=1315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40014) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6008ae0000283aff0f000000000000000000000000000001ff020000000000000000"], 0x0) 621.91394ms ago: executing program 4 (id=1316): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 487.145911ms ago: executing program 4 (id=1319): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) unshare(0x24040000) unshare(0x2c020400) mount$9p_fd(0x0, 0x0, 0x0, 0x80, 0x0) write$P9_RVERSION(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100008a6646e46d7f92842c1f4abdbc6794", @ANYRES32=r4, @ANYBLOB="0000000000000000b7280000000000007b8af8ff00000000bfa20000003ccc000039c52df6deedf0e68920cf4754cdbbffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$unix(0x1, 0x5, 0x0) bind$unix(r6, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) 465.334112ms ago: executing program 4 (id=1320): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10e, &(0x7f0000000340)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x52}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@grpid}]}, 0x4, 0x46b, &(0x7f00000009c0)="$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") 447.911884ms ago: executing program 2 (id=1321): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01", @ANYRES16=r1, @ANYBLOB="7aa5c6555497425569f0739a2c29c716e01638768ee4e35ee286c482b88a2bf1bfb12af81ec2770fe298f588721e924ae9ed07a9da5a465f207dc4a7213396778a7aee077c7d8c5cb9db05c42bea672a5668fad0ff7a70af1532c99844fbe4d1c6efea52112224fa07ca3cea1ab0ccb5eaf51667b55d8a2cf5a6a91f611f0d3f08cdf9ff72f310e714154c", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 397.536028ms ago: executing program 2 (id=1322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20070000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000500000008000b400000000038000480240001800b00010074756e6e656c00001400028008000140000000010800024000000009100001800500010064757000040002800900010073797a3000000000140000001100010000000000000000000000000afc407a058f23"], 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000200), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0xa, &(0x7f0000000340)=ANY=[@ANYRES16=r7, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x3}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) syz_io_uring_submit(0x0, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002180)=@ipv4_newaddr={0x34, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x18, 0x50, 0xff, r11}, [@IFA_LOCAL={0x8, 0x2, @loopback}, @IFA_LABEL={0x14, 0x3, 'dvmrp1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 378.773969ms ago: executing program 2 (id=1323): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket(0x10, 0x2, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_emit_ethernet(0xce, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbba9b0ef2223cf8848000000000000010000000000000d0700000000004ed41370d10e5919e3f3b1f27c66ca64045ed06bf0d8204073ce7739f3378c1fba42b4c07e39dfa3d29a801eedc55f67a1f510c645698a25012008ffaf475c4e2e7a8b8f225e8d4348ab0ab19bb8c7b66a8d515d491bc0294b453f6458a94b8906320d16296eae5e59ac5d3a4d991e4cd25c2b857792cff95f9dbdf3deaceaac7857209a6d545ee3840e96dcc5685e270b84fe6ce9fff896c1def6e9c3bdefe1d30320c5aa6f77"], &(0x7f0000000040)={0x0, 0x3, [0x927, 0x603, 0x66a, 0xd72]}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x300, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) alarm(0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xeb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000600)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000240)={0x0, 0xe}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)={r6, 0x7ff, 0x2, [0x6, 0x8]}, 0xfffffffffffffffc) sendmsg$key(r3, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x20040010) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r8}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x1, 0x803, 0x0) 350.477372ms ago: executing program 2 (id=1324): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0xc, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 348.172082ms ago: executing program 4 (id=1325): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008010}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f0000000480)=""/61, 0x3d, 0x5) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) sysinfo(&(0x7f00000004c0)=""/184) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) shmdt(0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) execveat(r2, &(0x7f0000000580)='./file0\x00', &(0x7f0000000780)={[&(0x7f0000000680)='inner\x00']}, &(0x7f0000000800)={[&(0x7f00000007c0)='{\x00']}, 0x100) getsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_usb_connect$uac1(0x3, 0xb3, &(0x7f0000000840)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x3, 0x1, 0x6, 0x90, 0xb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x973, 0x10}, [@mixer_unit={0x6, 0x24, 0x4, 0x6, 0x0, 'l'}, @mixer_unit={0x7, 0x24, 0x4, 0x6, 0x5, "cb83"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x6be3, 0xd, 0x6, "0eb1061813c3fdabb3"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xe, 0x4, 0x28, 0x5, "b51c781abab41513ef"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0x5, "", "9f7752"}, @as_header={0x7, 0x24, 0x1, 0xc, 0x46, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x8, 0xb, 0x5, {0x7, 0x25, 0x1, 0x81, 0x6f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x78, 0x4, 0x4, {0x7, 0x25, 0x1, 0x80, 0x4, 0x4}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000900)={0xa, 0x6, 0x201, 0x9, 0xe, 0x80, 0x20, 0x7}, 0x2e, &(0x7f0000000940)={0x5, 0xf, 0x2e, 0x3, [@wireless={0xb, 0x10, 0x1, 0x8, 0x6, 0x7c, 0x9, 0x8, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0xfc, 0xc, 0xf8}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "62c7811594a81dfc204d87038fb66cba"}]}, 0x4, [{0x13, &(0x7f0000000e80)=ANY=[@ANYBLOB="2c3e406dd4140800000038690d9b44e26a8a083b4eb9f24fb02d03a40397054be93ffbbb3034d24f32074ffccc8ae365aae436ec3a8d374b18b3dbd1f0b3265c4bc4b656e11325327a19af9dba942b756a4132be726d8f32822d6ebdcf7a4ff2d2fbefd05fae5130"]}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_emit_ethernet(0x56, &(0x7f00000022c0)=ANY=[], 0x0) 277.725428ms ago: executing program 2 (id=1326): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40014) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6008ae0000283aff0f000000000000000000000000000001ff020000000000000000"], 0x0) 277.237277ms ago: executing program 2 (id=1327): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 265.137199ms ago: executing program 0 (id=1328): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = epoll_create1(0x80000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wakeup_count', 0x80800, 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r2, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000000)) 160.750217ms ago: executing program 3 (id=1329): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x8c7) 142.454018ms ago: executing program 0 (id=1330): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x3c, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d000100000000000002001404ff00000600000000"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000030000", @ANYRES32, @ANYRES64=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") r7 = syz_open_dev$hidraw(&(0x7f0000000300), 0xfffffffffffffffe, 0x200800) ioctl$HIDIOCGRDESCSIZE(r7, 0x80044801, &(0x7f0000000340)) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) lseek(r6, 0xfffffffffffff800, 0x2) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r11 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r11, @ANYBLOB="1a60ef1b06cecb0e3503b2c1e63d54d139ffa65fb0a45b7444af90068184e87fe9dc2ece5dff4217cb656aeb2e520e7308a404748bfd8a64363e6465d4a4313f4fa4a35dda6e4d371e5fa3eb1615c2a0be9e436cfb7848c7a4788ade"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r10, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000096) chmod(&(0x7f0000000a00)='./file0\x00', 0x0) 116.421291ms ago: executing program 3 (id=1331): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 92.117152ms ago: executing program 1 (id=1332): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xc, &(0x7f00000024c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 40.009217ms ago: executing program 3 (id=1333): syz_mount_image$ext4(0x0, &(0x7f0000000640)='./file0\x00', 0x42, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0xc3200, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000a, 0x42032, 0xffffffffffffffff, 0x180000000) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x9b94, 0x29, 0x0, 0xfea3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9, 0x4}, 0x9b01, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1e3e698501000000040000004000000542000000b4ec6d2c9f917539355b5683c1b38a2c488ee02f431afc727c8f3424bc21095efc72571c4d3359f9f9983faaffd8f72f33c79e46517335c17f080e19a587d7cd9756fae3cc4dc8025a26901f7595284a53b3da2302811c5dfdfd719abec6d4343d5463a17809a75ea0111435302b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r2, &(0x7f0000000180), 0x0}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000740)={0x0, 0x7}, 0x8) pwritev2(r4, &(0x7f00000000c0)=[{&(0x7f0000000380)="60564b390f4ba980a620c296cd43768fbc2ca5323929a6f4693f30851c853c7d3d3262aa910936360fca6e072eda4f802eed1ae9591410a39b30cb99cc512eaf4fbaf5e865485eceb8456ccfb0dc66b60a985463ee69c48eba3136c9d780a2b076bbadebf693", 0x66}, {&(0x7f0000000400)="7c42de903a8bd60caa40b73d2123776b46f3847eee4ab6284e18205a3ceb202b1bda0dc5c7803ed8548457335b6b9cabcd081de6b5aa0d9d652708c6dd84e2850b874c921f338c800e307dc7eb12c1b8d02d053936ba119950a071cc73a2", 0x5e}, {&(0x7f0000000540)="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", 0xfd}, {&(0x7f0000000680)="0db13b61d4403c0fa72a914fea9d6cb094567c2814b02ea3c33f329e5878d7db11350ac2dcc322a3f5d7b4cf4cf92291b690d18d5c71e59461994b7bd36d7c409b1ad555d7e9ebc617340e4926d62d6023610d6811e2dcf65feffefbfddb1610c5061b5ad270318e7e5cd4b59418901dddd312a9ef2e16face1f3edf9c7122fd4cda4c8044697ef486160f0057f1ac35f1b03dff19b763bb39f8443418e9e51510ce2ef464b64b18c43f0e21f4b4ed25c5", 0xb1}], 0x4, 0x61, 0x10001, 0x7) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) 39.747507ms ago: executing program 1 (id=1334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01", @ANYRES16=r1, @ANYBLOB="7aa5c6555497425569f0739a2c29c716e01638768ee4e35ee286c482b88a2bf1bfb12af81ec2770fe298f588721e924ae9ed07a9da5a465f207dc4a7213396778a7aee077c7d8c5cb9db05c42bea672a5668fad0ff7a70af1532c99844fbe4d1c6efea52112224fa07ca3cea1ab0ccb5eaf51667b55d8a2cf5a6a91f611f0d3f08cdf9ff72f310e714154c", @ANYRESHEX=r0, @ANYRESHEX=r1, @ANYRESHEX=r0, @ANYRESHEX=r0], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 12.358239ms ago: executing program 0 (id=1335): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {0x0, 0x4, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e21, @remote}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffe96, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 0s ago: executing program 1 (id=1336): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$tun(r5, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESHEX=r0], 0x46) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x50, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): .0.0.2:0 - no destination available [ 42.938339][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 42.938359][ T29] audit: type=1326 audit(1756496843.524:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 42.979789][ T29] audit: type=1326 audit(1756496843.564:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.062910][ T29] audit: type=1326 audit(1756496843.654:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.086389][ T29] audit: type=1326 audit(1756496843.654:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.112721][ T29] audit: type=1326 audit(1756496843.654:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.136124][ T29] audit: type=1326 audit(1756496843.674:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.159287][ T29] audit: type=1326 audit(1756496843.674:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.182616][ T29] audit: type=1326 audit(1756496843.674:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.206167][ T29] audit: type=1326 audit(1756496843.674:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.229487][ T29] audit: type=1326 audit(1756496843.674:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.0.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 43.254781][ T3864] lo speed is unknown, defaulting to 1000 [ 43.260574][ T3864] lo speed is unknown, defaulting to 1000 [ 43.266673][ T3864] lo speed is unknown, defaulting to 1000 [ 43.273428][ T3864] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.281711][ T3864] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.298605][ T3864] lo speed is unknown, defaulting to 1000 [ 43.305301][ T3864] lo speed is unknown, defaulting to 1000 [ 43.311921][ T3864] lo speed is unknown, defaulting to 1000 [ 43.318369][ T3864] lo speed is unknown, defaulting to 1000 [ 43.324622][ T3864] lo speed is unknown, defaulting to 1000 [ 43.331049][ T3864] lo speed is unknown, defaulting to 1000 [ 43.444157][ T3866] lo speed is unknown, defaulting to 1000 [ 43.610576][ T3878] loop2: detected capacity change from 0 to 128 [ 43.617393][ T3878] ======================================================= [ 43.617393][ T3878] WARNING: The mand mount option has been deprecated and [ 43.617393][ T3878] and is ignored by this kernel. Remove the mand [ 43.617393][ T3878] option from the mount to silence this warning. [ 43.617393][ T3878] ======================================================= [ 43.668864][ T3878] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 43.678293][ T3871] Falling back ldisc for ttyS3. [ 43.700017][ T3878] loop2: detected capacity change from 0 to 512 [ 43.709060][ T3878] journal_path: Non-blockdev passed as './bus' [ 43.715323][ T3878] EXT4-fs: error: could not find journal device path [ 43.803473][ T3883] loop0: detected capacity change from 0 to 736 [ 43.838356][ T3883] 9pnet_fd: Insufficient options for proto=fd [ 43.913602][ T3891] syz_tun: entered promiscuous mode [ 43.918919][ T3891] macvtap1: entered promiscuous mode [ 43.921202][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 43.962660][ T3893] serio: Serial port ptm0 [ 43.963906][ T3891] syz_tun: left promiscuous mode [ 44.088691][ T3903] IPv6: Can't replace route, no match found [ 44.097207][ T3904] loop0: detected capacity change from 0 to 736 [ 44.100887][ T3898] Falling back ldisc for ttyS3. [ 44.110738][ T3903] FAULT_INJECTION: forcing a failure. [ 44.110738][ T3903] name failslab, interval 1, probability 0, space 0, times 1 [ 44.123518][ T3903] CPU: 1 UID: 0 PID: 3903 Comm: syz.3.129 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.123591][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.123607][ T3903] Call Trace: [ 44.123615][ T3903] [ 44.123626][ T3903] __dump_stack+0x1d/0x30 [ 44.123654][ T3903] dump_stack_lvl+0xe8/0x140 [ 44.123676][ T3903] dump_stack+0x15/0x1b [ 44.123766][ T3903] should_fail_ex+0x265/0x280 [ 44.123799][ T3903] should_failslab+0x8c/0xb0 [ 44.123828][ T3903] kmem_cache_alloc_noprof+0x50/0x310 [ 44.123928][ T3903] ? skb_clone+0x151/0x1f0 [ 44.123956][ T3903] skb_clone+0x151/0x1f0 [ 44.123984][ T3905] loop2: detected capacity change from 0 to 128 [ 44.123981][ T3903] __netlink_deliver_tap+0x2c9/0x500 [ 44.124097][ T3903] netlink_unicast+0x66b/0x690 [ 44.124143][ T3903] netlink_sendmsg+0x58b/0x6b0 [ 44.124185][ T3903] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.124246][ T3903] __sock_sendmsg+0x145/0x180 [ 44.124292][ T3903] ____sys_sendmsg+0x31e/0x4e0 [ 44.124326][ T3903] ___sys_sendmsg+0x17b/0x1d0 [ 44.124412][ T3903] __x64_sys_sendmsg+0xd4/0x160 [ 44.124480][ T3903] x64_sys_call+0x191e/0x2ff0 [ 44.124510][ T3903] do_syscall_64+0xd2/0x200 [ 44.124550][ T3903] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.124654][ T3903] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 44.124691][ T3903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.124720][ T3903] RIP: 0033:0x7f0b9ec4ebe9 [ 44.124743][ T3903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.124767][ T3903] RSP: 002b:00007f0b9d6b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.124883][ T3903] RAX: ffffffffffffffda RBX: 00007f0b9ee75fa0 RCX: 00007f0b9ec4ebe9 [ 44.124900][ T3903] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 44.124917][ T3903] RBP: 00007f0b9d6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.124932][ T3903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.124948][ T3903] R13: 00007f0b9ee76038 R14: 00007f0b9ee75fa0 R15: 00007ffde64c0118 [ 44.124972][ T3903] [ 44.124994][ T3903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 44.237511][ T3903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.129'. [ 44.242079][ T3904] R [ 44.249946][ T3905] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 44.253904][ T3904] RIP_1991A [ 44.367167][ T3900] lo speed is unknown, defaulting to 1000 [ 44.379959][ T3898] loop2: detected capacity change from 0 to 512 [ 44.418107][ T3909] Falling back ldisc for ttyS3. [ 44.437439][ T3909] loop4: detected capacity change from 0 to 128 [ 44.449754][ T3912] netlink: 96 bytes leftover after parsing attributes in process `syz.2.132'. [ 44.456845][ T3909] loop4: detected capacity change from 0 to 512 [ 44.541142][ T3922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 44.550219][ T3922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.136'. [ 44.579063][ T3920] loop1: detected capacity change from 0 to 736 [ 44.585103][ T3918] lo speed is unknown, defaulting to 1000 [ 44.596740][ T3922] loop2: detected capacity change from 0 to 1024 [ 44.641582][ T3920] 9pnet_fd: Insufficient options for proto=fd [ 44.669748][ T3922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.723121][ T3934] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 44.738328][ T3934] loop1: detected capacity change from 0 to 512 [ 44.749646][ T3941] loop0: detected capacity change from 0 to 2048 [ 44.776282][ T3934] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 44.790620][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.794584][ T3934] EXT4-fs (loop1): orphan cleanup on readonly fs [ 44.801596][ T3941] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.818579][ T3934] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.138: bad orphan inode 15 [ 44.839519][ T3941] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.868168][ T3934] ext4_test_bit(bit=14, block=18) = 1 [ 44.873664][ T3934] is_bad_inode(inode)=0 [ 44.877830][ T3934] NEXT_ORPHAN(inode)=1023 [ 44.882398][ T3934] max_ino=32 [ 44.885598][ T3934] i_nlink=0 [ 44.898880][ T3941] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.906684][ T3934] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2962: inode #15: comm syz.1.138: corrupted xattr block 19: e_value size too large [ 44.937064][ T3934] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 44.960527][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 44.970204][ T3951] loop2: detected capacity change from 0 to 736 [ 44.973952][ T3934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 44.990582][ T3950] Falling back ldisc for ttyS3. [ 44.997442][ T3934] netlink: 52 bytes leftover after parsing attributes in process `syz.1.138'. [ 44.997594][ T3950] loop3: detected capacity change from 0 to 128 [ 45.027647][ T3950] loop3: detected capacity change from 0 to 512 [ 45.045008][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.100828][ T3953] Falling back ldisc for ttyS3. [ 45.115786][ T3953] loop3: detected capacity change from 0 to 128 [ 45.152917][ T3957] netlink: 'syz.2.147': attribute type 4 has an invalid length. [ 45.184316][ T3961] loop3: detected capacity change from 0 to 128 [ 45.234737][ T3955] lo speed is unknown, defaulting to 1000 [ 45.248162][ T3957] loop2: detected capacity change from 0 to 512 [ 45.273409][ T3957] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.290634][ T3961] Falling back ldisc for ttyS3. [ 45.331177][ T3957] EXT4-fs (loop2): mount failed [ 45.417308][ T3976] serio: Serial port ptm0 [ 45.455305][ T3973] lo speed is unknown, defaulting to 1000 [ 45.624924][ T3989] netlink: 96 bytes leftover after parsing attributes in process `syz.3.154'. [ 45.735525][ T3996] loop0: detected capacity change from 0 to 736 [ 45.747317][ T3997] loop3: detected capacity change from 0 to 128 [ 45.792921][ T3997] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 45.797198][ T3994] Falling back ldisc for ttyS3. [ 45.854162][ T3997] loop3: detected capacity change from 0 to 512 [ 45.861640][ T3997] journal_path: Non-blockdev passed as './bus' [ 45.867845][ T3997] EXT4-fs: error: could not find journal device path [ 45.951472][ T4000] loop0: detected capacity change from 0 to 2048 [ 46.000525][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 46.018138][ T4000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.052612][ T4000] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.070897][ T4002] Falling back ldisc for ttyS3. [ 46.081960][ T4008] loop3: detected capacity change from 0 to 128 [ 46.122065][ T4000] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.135534][ T4008] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 46.145298][ T4006] Falling back ldisc for ttyS3. [ 46.173162][ T4006] loop4: detected capacity change from 0 to 128 [ 46.212243][ T4002] loop3: detected capacity change from 0 to 512 [ 46.271053][ T4026] lo speed is unknown, defaulting to 1000 [ 46.308150][ T4030] syz_tun: entered promiscuous mode [ 46.324172][ T4035] serio: Serial port ptm0 [ 46.335716][ T4030] macvtap1: entered promiscuous mode [ 46.351631][ T4030] syz_tun: left promiscuous mode [ 46.420574][ T4043] syz_tun: entered promiscuous mode [ 46.427618][ T4043] macvtap1: entered promiscuous mode [ 46.434902][ T4043] syz_tun: left promiscuous mode [ 46.584779][ T4054] FAULT_INJECTION: forcing a failure. [ 46.584779][ T4054] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.598143][ T4054] CPU: 0 UID: 0 PID: 4054 Comm: syz.3.168 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.598174][ T4054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.598189][ T4054] Call Trace: [ 46.598197][ T4054] [ 46.598206][ T4054] __dump_stack+0x1d/0x30 [ 46.598232][ T4054] dump_stack_lvl+0xe8/0x140 [ 46.598250][ T4054] dump_stack+0x15/0x1b [ 46.598265][ T4054] should_fail_ex+0x265/0x280 [ 46.598288][ T4054] should_fail+0xb/0x20 [ 46.598307][ T4054] should_fail_usercopy+0x1a/0x20 [ 46.598335][ T4054] _copy_to_user+0x20/0xa0 [ 46.598451][ T4054] simple_read_from_buffer+0xb5/0x130 [ 46.598477][ T4054] proc_fail_nth_read+0x10e/0x150 [ 46.598511][ T4054] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 46.598540][ T4054] vfs_read+0x1a8/0x770 [ 46.598644][ T4054] ? __rcu_read_unlock+0x4f/0x70 [ 46.598671][ T4054] ? __fget_files+0x184/0x1c0 [ 46.598726][ T4054] ? __sys_bind+0x223/0x2a0 [ 46.598767][ T4054] ksys_read+0xda/0x1a0 [ 46.598793][ T4054] __x64_sys_read+0x40/0x50 [ 46.598861][ T4054] x64_sys_call+0x27bc/0x2ff0 [ 46.598887][ T4054] do_syscall_64+0xd2/0x200 [ 46.598921][ T4054] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.598950][ T4054] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.599022][ T4054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.599045][ T4054] RIP: 0033:0x7f0b9ec4d5fc [ 46.599065][ T4054] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 46.599084][ T4054] RSP: 002b:00007f0b9d6b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 46.599107][ T4054] RAX: ffffffffffffffda RBX: 00007f0b9ee75fa0 RCX: 00007f0b9ec4d5fc [ 46.599121][ T4054] RDX: 000000000000000f RSI: 00007f0b9d6b70a0 RDI: 0000000000000003 [ 46.599133][ T4054] RBP: 00007f0b9d6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.599153][ T4054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.599165][ T4054] R13: 00007f0b9ee76038 R14: 00007f0b9ee75fa0 R15: 00007ffde64c0118 [ 46.599185][ T4054] [ 46.606419][ T4050] lo speed is unknown, defaulting to 1000 [ 46.722771][ T4056] netlink: 96 bytes leftover after parsing attributes in process `syz.4.167'. [ 46.875525][ T4061] loop3: detected capacity change from 0 to 128 [ 46.890954][ T4057] Falling back ldisc for ttyS3. [ 46.900634][ T4061] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 46.930326][ T4057] loop3: detected capacity change from 0 to 512 [ 46.960627][ T4068] loop1: detected capacity change from 0 to 128 [ 47.027889][ T4071] capability: warning: `syz.3.172' uses 32-bit capabilities (legacy support in use) [ 47.040507][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 47.047728][ T4068] Falling back ldisc for ttyS3. [ 47.110659][ T4073] Falling back ldisc for ttyS3. [ 47.123118][ T4073] loop0: detected capacity change from 0 to 128 [ 47.133456][ T4073] loop0: detected capacity change from 0 to 512 [ 47.183366][ T4087] serio: Serial port ptm0 [ 47.251695][ T4093] syz_tun: entered promiscuous mode [ 47.258926][ T4093] macvtap1: entered promiscuous mode [ 47.274328][ T4093] syz_tun: left promiscuous mode [ 47.281211][ T4090] netlink: 'syz.3.175': attribute type 21 has an invalid length. [ 47.320211][ T4090] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 47.328016][ T4090] netlink: 144 bytes leftover after parsing attributes in process `syz.3.175'. [ 47.366651][ T4097] lo speed is unknown, defaulting to 1000 [ 47.419521][ T4105] loop1: detected capacity change from 0 to 128 [ 47.570690][ T4117] Falling back ldisc for ttyS3. [ 47.651850][ T4119] loop3: detected capacity change from 0 to 1024 [ 47.693874][ T4119] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 47.735009][ T4119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.752002][ T4119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.762350][ T4135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.773610][ T4135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.781842][ T4137] Falling back ldisc for ttyS3. [ 47.788913][ T4137] loop2: detected capacity change from 0 to 128 [ 47.800993][ T4137] loop2: detected capacity change from 0 to 512 [ 47.894046][ T4145] loop3: detected capacity change from 0 to 2048 [ 47.945066][ T4145] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.970625][ T4145] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.011222][ T4145] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.050814][ T4155] loop2: detected capacity change from 0 to 736 [ 48.059030][ T4155] 9pnet_fd: Insufficient options for proto=fd [ 48.081425][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 48.101432][ T4159] netlink: 96 bytes leftover after parsing attributes in process `syz.2.189'. [ 48.138641][ T4157] syz_tun: entered promiscuous mode [ 48.149037][ T4157] macvtap1: entered promiscuous mode [ 48.157747][ T4157] syz_tun: left promiscuous mode [ 48.178757][ T4161] lo speed is unknown, defaulting to 1000 [ 48.227458][ T4164] loop3: detected capacity change from 0 to 128 [ 48.382140][ T4178] loop0: detected capacity change from 0 to 736 [ 48.413886][ T4178] 9pnet_fd: Insufficient options for proto=fd [ 48.420673][ T4171] Falling back ldisc for ttyS3. [ 48.479349][ T4175] loop2: detected capacity change from 0 to 128 [ 48.487125][ T4180] Falling back ldisc for ttyS3. [ 48.530839][ T4175] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 48.562849][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 48.562868][ T29] audit: type=1326 audit(1756496849.154:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.592555][ T29] audit: type=1326 audit(1756496849.154:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.615917][ T29] audit: type=1326 audit(1756496849.154:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.639430][ T29] audit: type=1326 audit(1756496849.154:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.662904][ T29] audit: type=1326 audit(1756496849.154:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.686248][ T29] audit: type=1326 audit(1756496849.154:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.700815][ T4180] loop2: detected capacity change from 0 to 512 [ 48.709872][ T29] audit: type=1326 audit(1756496849.154:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.737780][ T4193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 48.739382][ T29] audit: type=1326 audit(1756496849.154:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.748592][ T4193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.197'. [ 48.780744][ T29] audit: type=1326 audit(1756496849.154:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.790771][ T4191] loop0: detected capacity change from 0 to 128 [ 48.804127][ T29] audit: type=1326 audit(1756496849.154:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4173 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1382c9ebe9 code=0x7ffc0000 [ 48.887432][ T4199] loop4: detected capacity change from 0 to 736 [ 48.888009][ T4185] Falling back ldisc for ttyS3. [ 48.916973][ T4202] loop2: detected capacity change from 0 to 736 [ 48.924443][ T4193] loop3: detected capacity change from 0 to 1024 [ 48.937649][ T4191] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 48.962483][ T4202] 9pnet_fd: Insufficient options for proto=fd [ 48.982315][ T4193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.002138][ T4185] loop0: detected capacity change from 0 to 512 [ 49.064318][ T4214] netlink: 96 bytes leftover after parsing attributes in process `syz.4.201'. [ 49.085864][ T4213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.096191][ T4213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.105660][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.120486][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 49.193642][ T4223] lo speed is unknown, defaulting to 1000 [ 49.301663][ T4240] loop0: detected capacity change from 0 to 128 [ 49.309999][ T4233] Falling back ldisc for ttyS3. [ 49.326565][ T4240] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 49.397920][ T4246] serio: Serial port ptm0 [ 49.482413][ T4252] FAULT_INJECTION: forcing a failure. [ 49.482413][ T4252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.495841][ T4252] CPU: 0 UID: 0 PID: 4252 Comm: syz.1.209 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.495938][ T4252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.495952][ T4252] Call Trace: [ 49.495959][ T4252] [ 49.495967][ T4252] __dump_stack+0x1d/0x30 [ 49.496012][ T4252] dump_stack_lvl+0xe8/0x140 [ 49.496034][ T4252] dump_stack+0x15/0x1b [ 49.496132][ T4252] should_fail_ex+0x265/0x280 [ 49.496160][ T4252] should_fail+0xb/0x20 [ 49.496182][ T4252] should_fail_usercopy+0x1a/0x20 [ 49.496210][ T4252] _copy_to_user+0x20/0xa0 [ 49.496290][ T4252] simple_read_from_buffer+0xb5/0x130 [ 49.496318][ T4252] proc_fail_nth_read+0x10e/0x150 [ 49.496362][ T4252] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.496394][ T4252] vfs_read+0x1a8/0x770 [ 49.496474][ T4252] ? __rcu_read_unlock+0x4f/0x70 [ 49.496501][ T4252] ? __fget_files+0x184/0x1c0 [ 49.496534][ T4252] ? fput+0x8f/0xc0 [ 49.496572][ T4252] ksys_read+0xda/0x1a0 [ 49.496602][ T4252] __x64_sys_read+0x40/0x50 [ 49.496628][ T4252] x64_sys_call+0x27bc/0x2ff0 [ 49.496652][ T4252] do_syscall_64+0xd2/0x200 [ 49.496688][ T4252] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.496719][ T4252] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.496819][ T4252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.496858][ T4252] RIP: 0033:0x7f88d72bd5fc [ 49.496873][ T4252] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.496890][ T4252] RSP: 002b:00007f88d5d1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.496922][ T4252] RAX: ffffffffffffffda RBX: 00007f88d74e5fa0 RCX: 00007f88d72bd5fc [ 49.496936][ T4252] RDX: 000000000000000f RSI: 00007f88d5d1f0a0 RDI: 0000000000000005 [ 49.496951][ T4252] RBP: 00007f88d5d1f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.496966][ T4252] R10: 0000200000000b80 R11: 0000000000000246 R12: 0000000000000001 [ 49.496999][ T4252] R13: 00007f88d74e6038 R14: 00007f88d74e5fa0 R15: 00007ffce90af138 [ 49.497021][ T4252] [ 49.717596][ T4256] loop0: detected capacity change from 0 to 128 [ 49.728231][ T4256] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 49.750976][ T4254] Falling back ldisc for ttyS3. [ 49.784376][ T4254] loop0: detected capacity change from 0 to 512 [ 49.809142][ T4260] loop1: detected capacity change from 0 to 736 [ 49.853722][ T4260] 9pnet_fd: Insufficient options for proto=fd [ 49.922031][ T4281] loop1: detected capacity change from 0 to 128 [ 49.946189][ T4279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.954910][ T4279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.020669][ T4281] Falling back ldisc for ttyS3. [ 50.067769][ T4292] syz_tun: entered promiscuous mode [ 50.084837][ T4292] macvtap1: entered promiscuous mode [ 50.093158][ T4292] syz_tun: left promiscuous mode [ 50.137196][ T4294] lo speed is unknown, defaulting to 1000 [ 50.160499][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 50.192030][ T4306] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.211962][ T4306] FAT-fs (loop3): unable to read boot sector [ 50.224888][ T4307] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 50.245984][ T4307] FAT-fs (loop3): unable to read boot sector [ 50.348487][ T4321] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 50.381288][ T4323] FAULT_INJECTION: forcing a failure. [ 50.381288][ T4323] name failslab, interval 1, probability 0, space 0, times 0 [ 50.394066][ T4323] CPU: 0 UID: 0 PID: 4323 Comm: syz.1.223 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.394106][ T4323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.394122][ T4323] Call Trace: [ 50.394131][ T4323] [ 50.394140][ T4323] __dump_stack+0x1d/0x30 [ 50.394192][ T4323] dump_stack_lvl+0xe8/0x140 [ 50.394210][ T4323] dump_stack+0x15/0x1b [ 50.394231][ T4323] should_fail_ex+0x265/0x280 [ 50.394259][ T4323] should_failslab+0x8c/0xb0 [ 50.394300][ T4323] kmem_cache_alloc_noprof+0x50/0x310 [ 50.394334][ T4323] ? getname_flags+0x80/0x3b0 [ 50.394362][ T4323] getname_flags+0x80/0x3b0 [ 50.394470][ T4323] user_path_at+0x28/0x130 [ 50.394509][ T4323] __se_sys_mount+0x25b/0x2e0 [ 50.394534][ T4323] ? fput+0x8f/0xc0 [ 50.394563][ T4323] __x64_sys_mount+0x67/0x80 [ 50.394588][ T4323] x64_sys_call+0x2b4d/0x2ff0 [ 50.394616][ T4323] do_syscall_64+0xd2/0x200 [ 50.394738][ T4323] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.394769][ T4323] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.394803][ T4323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.394830][ T4323] RIP: 0033:0x7f88d72bebe9 [ 50.394849][ T4323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.394915][ T4323] RSP: 002b:00007f88d5d1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 50.394935][ T4323] RAX: ffffffffffffffda RBX: 00007f88d74e5fa0 RCX: 00007f88d72bebe9 [ 50.395023][ T4323] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 50.395039][ T4323] RBP: 00007f88d5d1f090 R08: 0000200000000240 R09: 0000000000000000 [ 50.395054][ T4323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.395069][ T4323] R13: 00007f88d74e6038 R14: 00007f88d74e5fa0 R15: 00007ffce90af138 [ 50.395091][ T4323] [ 50.398020][ T4321] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 50.628726][ T4330] loop1: detected capacity change from 0 to 128 [ 50.637158][ T4330] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 50.670584][ T4330] loop1: detected capacity change from 0 to 512 [ 50.677627][ T4330] journal_path: Non-blockdev passed as './bus' [ 50.683986][ T4330] EXT4-fs: error: could not find journal device path [ 50.696672][ T4326] Falling back ldisc for ttyS3. [ 50.718665][ T4333] lo speed is unknown, defaulting to 1000 [ 50.808435][ T4339] loop1: detected capacity change from 0 to 128 [ 50.816549][ T4339] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 50.830670][ T4336] Falling back ldisc for ttyS3. [ 50.843534][ T4340] loop0: detected capacity change from 0 to 128 [ 50.873315][ T4336] loop1: detected capacity change from 0 to 512 [ 50.978272][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 50.987387][ T4347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.230'. [ 51.028997][ T4347] loop2: detected capacity change from 0 to 1024 [ 51.050844][ T4340] Falling back ldisc for ttyS3. [ 51.059117][ T4347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.111702][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.165040][ T4355] 9pnet: p9_errstr2errno: server reported unknown error [ 51.200523][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 51.211133][ T4357] lo speed is unknown, defaulting to 1000 [ 51.217526][ T4362] FAULT_INJECTION: forcing a failure. [ 51.217526][ T4362] name failslab, interval 1, probability 0, space 0, times 0 [ 51.217892][ T4361] SELinux: Context system_u:object_r:hald_var_run_t:s0 is not valid (left unmapped). [ 51.230322][ T4362] CPU: 0 UID: 0 PID: 4362 Comm: syz.0.233 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.230383][ T4362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.230403][ T4362] Call Trace: [ 51.230413][ T4362] [ 51.230429][ T4362] __dump_stack+0x1d/0x30 [ 51.230464][ T4362] dump_stack_lvl+0xe8/0x140 [ 51.230517][ T4362] dump_stack+0x15/0x1b [ 51.230533][ T4362] should_fail_ex+0x265/0x280 [ 51.230566][ T4362] should_failslab+0x8c/0xb0 [ 51.230602][ T4362] kmem_cache_alloc_noprof+0x50/0x310 [ 51.230658][ T4362] ? getname_flags+0x80/0x3b0 [ 51.230698][ T4362] getname_flags+0x80/0x3b0 [ 51.230737][ T4362] user_path_at+0x28/0x130 [ 51.230828][ T4362] __se_sys_mount+0x25b/0x2e0 [ 51.230860][ T4362] ? fput+0x8f/0xc0 [ 51.230902][ T4362] __x64_sys_mount+0x67/0x80 [ 51.230934][ T4362] x64_sys_call+0x2b4d/0x2ff0 [ 51.231039][ T4362] do_syscall_64+0xd2/0x200 [ 51.231077][ T4362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.231110][ T4362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 51.231146][ T4362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.231235][ T4362] RIP: 0033:0x7fb4ae6febe9 [ 51.231257][ T4362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.231290][ T4362] RSP: 002b:00007fb4ad146038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 51.231405][ T4362] RAX: ffffffffffffffda RBX: 00007fb4ae926090 RCX: 00007fb4ae6febe9 [ 51.231422][ T4362] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 51.231439][ T4362] RBP: 00007fb4ad146090 R08: 0000200000000080 R09: 0000000000000000 [ 51.231456][ T4362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.231473][ T4362] R13: 00007fb4ae926128 R14: 00007fb4ae926090 R15: 00007ffc6c89c3a8 [ 51.231500][ T4362] [ 51.443620][ T4361] 9pnet: p9_errstr2errno: server reported unknown error [ 51.476200][ T4366] loop0: detected capacity change from 0 to 128 [ 51.625927][ T4381] loop2: detected capacity change from 0 to 2048 [ 51.647169][ T4381] EXT4-fs (loop2): #clusters per group too big: 32768 [ 51.654188][ T4378] Falling back ldisc for ttyS3. [ 51.719505][ T4387] loop4: detected capacity change from 0 to 128 [ 51.726934][ T4387] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 51.740769][ T4384] Falling back ldisc for ttyS3. [ 51.750774][ T4389] netlink: 96 bytes leftover after parsing attributes in process `syz.0.242'. [ 51.775497][ T4384] loop4: detected capacity change from 0 to 512 [ 51.830355][ T4397] loop0: detected capacity change from 0 to 128 [ 51.890940][ T4397] Falling back ldisc for ttyS3. [ 51.946330][ T4402] loop1: detected capacity change from 0 to 2048 [ 51.956466][ T4408] loop2: detected capacity change from 0 to 736 [ 51.976856][ T4402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.996491][ T4409] Falling back ldisc for ttyS3. [ 52.013022][ T4404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.248'. [ 52.022071][ T4404] netlink: 28 bytes leftover after parsing attributes in process `syz.3.248'. [ 52.044243][ T4409] loop0: detected capacity change from 0 to 128 [ 52.078338][ T4402] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.108564][ T4415] loop3: detected capacity change from 0 to 1024 [ 52.116790][ T4409] loop0: detected capacity change from 0 to 512 [ 52.133860][ T4417] loop2: detected capacity change from 0 to 2048 [ 52.151904][ T4402] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.188112][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.204623][ T4417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.272201][ T4417] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.302088][ T4417] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.314418][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.404693][ T4430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.253'. [ 52.414315][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 52.440524][ T4434] loop1: detected capacity change from 0 to 128 [ 52.457541][ T4436] netlink: 96 bytes leftover after parsing attributes in process `syz.2.256'. [ 52.465680][ T4427] Falling back ldisc for ttyS3. [ 52.481618][ T4434] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 52.530189][ T4427] loop1: detected capacity change from 0 to 512 [ 52.568644][ T4449] loop1: detected capacity change from 0 to 128 [ 52.568882][ T4451] loop2: detected capacity change from 0 to 128 [ 52.640920][ T4449] Falling back ldisc for ttyS3. [ 52.710863][ T4466] Falling back ldisc for ttyS3. [ 52.766476][ T4475] loop1: detected capacity change from 0 to 512 [ 52.792212][ T4475] EXT4-fs: Ignoring removed oldalloc option [ 52.819352][ T4480] IPv6: Can't replace route, no match found [ 52.827233][ T4480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 52.836329][ T4480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.262'. [ 52.855882][ T4475] EXT4-fs (loop1): 1 truncate cleaned up [ 52.892182][ T4475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.103441][ T4492] loop4: detected capacity change from 0 to 128 [ 53.113265][ T4492] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 53.130808][ T4491] Falling back ldisc for ttyS3. [ 53.152839][ T4491] loop4: detected capacity change from 0 to 512 [ 53.217647][ T4497] loop0: detected capacity change from 0 to 1024 [ 53.237362][ T4499] loop4: detected capacity change from 0 to 2048 [ 53.245429][ T4497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.273989][ T4499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.286873][ T4499] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.298102][ T4499] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.298380][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.388886][ T4507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.398399][ T4507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.509252][ T4513] loop4: detected capacity change from 0 to 128 [ 53.516643][ T4513] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 53.541445][ T4512] Falling back ldisc for ttyS3. [ 53.558221][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.602954][ T4516] loop1: detected capacity change from 0 to 128 [ 53.625345][ T4518] loop4: detected capacity change from 0 to 736 [ 53.682136][ T4516] Falling back ldisc for ttyS3. [ 53.732461][ T4527] loop4: detected capacity change from 0 to 512 [ 53.741217][ T4524] Falling back ldisc for ttyS3. [ 53.748728][ T4527] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 53.761899][ T4527] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 53.762067][ T4524] loop2: detected capacity change from 0 to 128 [ 53.772149][ T4527] EXT4-fs (loop4): bad geometry: first data block 1073741826 is beyond end of filesystem (256) [ 53.810285][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 53.810306][ T29] audit: type=1326 audit(1756496854.394:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 53.842197][ T29] audit: type=1326 audit(1756496854.394:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 53.865623][ T29] audit: type=1326 audit(1756496854.394:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 53.889290][ T29] audit: type=1326 audit(1756496854.394:1026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 53.912971][ T29] audit: type=1326 audit(1756496854.394:1027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 53.936434][ T29] audit: type=1326 audit(1756496854.394:1028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 53.959808][ T29] audit: type=1326 audit(1756496854.394:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 53.983338][ T29] audit: type=1326 audit(1756496854.394:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 54.006614][ T29] audit: type=1326 audit(1756496854.394:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 54.006932][ T4524] loop2: detected capacity change from 0 to 512 [ 54.030182][ T29] audit: type=1326 audit(1756496854.394:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.1.278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 54.063237][ T4532] loop1: detected capacity change from 0 to 1024 [ 54.083576][ T4532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.092152][ T4541] loop0: detected capacity change from 0 to 736 [ 54.097544][ T4537] syz_tun: entered promiscuous mode [ 54.107416][ T4537] macvtap1: entered promiscuous mode [ 54.131383][ T4537] syz_tun: left promiscuous mode [ 54.167684][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.249785][ T4541] 9pnet_fd: Insufficient options for proto=fd [ 54.326057][ T4556] loop0: detected capacity change from 0 to 736 [ 54.346361][ T4558] loop4: detected capacity change from 0 to 128 [ 54.401509][ T4561] mmap: syz.0.289 (4561) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.490623][ T4558] Falling back ldisc for ttyS3. [ 54.601896][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.630879][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.667834][ T4575] loop4: detected capacity change from 0 to 128 [ 54.675049][ T4575] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 54.710867][ T4571] Falling back ldisc for ttyS3. [ 54.722349][ T4571] loop4: detected capacity change from 0 to 512 [ 54.796134][ T4582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.804794][ T4582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.966509][ T4598] loop3: detected capacity change from 0 to 128 [ 55.089090][ T4614] loop2: detected capacity change from 0 to 736 [ 55.098410][ T4611] Falling back ldisc for ttyS3. [ 55.118980][ T4614] 9pnet_fd: Insufficient options for proto=fd [ 55.228415][ T4618] loop3: detected capacity change from 0 to 1024 [ 55.237471][ T4627] loop0: detected capacity change from 0 to 736 [ 55.241360][ T4618] EXT4-fs: dax option not supported [ 55.251520][ T4626] loop2: detected capacity change from 0 to 128 [ 55.407454][ T4629] lo speed is unknown, defaulting to 1000 [ 55.461793][ T4641] Falling back ldisc for ttyS3. [ 55.488780][ T4641] loop3: detected capacity change from 0 to 128 [ 55.521005][ T4641] loop3: detected capacity change from 0 to 512 [ 55.579401][ T4667] loop3: detected capacity change from 0 to 736 [ 55.603034][ T4667] 9pnet_fd: Insufficient options for proto=fd [ 55.663738][ T4668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.706159][ T4668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.730826][ T4678] loop3: detected capacity change from 0 to 2048 [ 55.731576][ T4679] loop0: detected capacity change from 0 to 2048 [ 55.776906][ T4678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.781933][ T4679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.814600][ T4679] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.842817][ T4678] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.861792][ T4679] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.881060][ T4678] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.994033][ T4699] FAULT_INJECTION: forcing a failure. [ 55.994033][ T4699] name failslab, interval 1, probability 0, space 0, times 0 [ 56.006748][ T4699] CPU: 1 UID: 0 PID: 4699 Comm: syz.1.312 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.006778][ T4699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.006791][ T4699] Call Trace: [ 56.006800][ T4699] [ 56.006809][ T4699] __dump_stack+0x1d/0x30 [ 56.006916][ T4699] dump_stack_lvl+0xe8/0x140 [ 56.006984][ T4699] dump_stack+0x15/0x1b [ 56.007033][ T4699] should_fail_ex+0x265/0x280 [ 56.007105][ T4699] should_failslab+0x8c/0xb0 [ 56.007177][ T4699] kmem_cache_alloc_noprof+0x50/0x310 [ 56.007213][ T4699] ? alloc_empty_file+0x76/0x200 [ 56.007319][ T4699] alloc_empty_file+0x76/0x200 [ 56.007353][ T4699] alloc_file_pseudo+0xc6/0x160 [ 56.007394][ T4699] __shmem_file_setup+0x1de/0x210 [ 56.007509][ T4699] shmem_file_setup+0x3b/0x50 [ 56.007562][ T4699] __se_sys_memfd_create+0x2c3/0x590 [ 56.007603][ T4699] __x64_sys_memfd_create+0x31/0x40 [ 56.007628][ T4699] x64_sys_call+0x2abe/0x2ff0 [ 56.007651][ T4699] do_syscall_64+0xd2/0x200 [ 56.007707][ T4699] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.007790][ T4699] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 56.007832][ T4699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.007937][ T4699] RIP: 0033:0x7f88d72bebe9 [ 56.007963][ T4699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.007984][ T4699] RSP: 002b:00007f88d5d1ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 56.008072][ T4699] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007f88d72bebe9 [ 56.008083][ T4699] RDX: 00007f88d5d1eef0 RSI: 0000000000000000 RDI: 00007f88d73427e8 [ 56.008114][ T4699] RBP: 00002000000191c0 R08: 00007f88d5d1ebb7 R09: 00007f88d5d1ee40 [ 56.008128][ T4699] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 56.008141][ T4699] R13: 00007f88d5d1eef0 R14: 00007f88d5d1eeb0 R15: 00002000000000c0 [ 56.008162][ T4699] [ 56.211496][ T4707] loop0: detected capacity change from 0 to 128 [ 56.235923][ T4707] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 56.255554][ T4708] loop3: detected capacity change from 0 to 128 [ 56.270857][ T4708] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 56.290798][ T4702] Falling back ldisc for ttyS3. [ 56.297819][ T4706] loop0: detected capacity change from 0 to 512 [ 56.307102][ T4706] journal_path: Non-blockdev passed as './bus' [ 56.313447][ T4706] EXT4-fs: error: could not find journal device path [ 56.319449][ T4704] loop3: detected capacity change from 0 to 512 [ 56.356367][ T4715] loop3: detected capacity change from 0 to 128 [ 56.375608][ T4711] lo speed is unknown, defaulting to 1000 [ 56.506854][ T4733] loop0: detected capacity change from 0 to 512 [ 56.525215][ T4736] loop3: detected capacity change from 0 to 128 [ 56.544951][ T4734] loop2: detected capacity change from 0 to 736 [ 56.552224][ T4733] EXT4-fs: Ignoring removed orlov option [ 56.561005][ T4733] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.585818][ T4733] EXT4-fs (loop0): failed to initialize system zone (-117) [ 56.650774][ T4739] Falling back ldisc for ttyS3. [ 56.660738][ T4733] EXT4-fs (loop0): mount failed [ 56.783253][ T4747] Falling back ldisc for ttyS3. [ 56.791620][ T4750] loop1: detected capacity change from 0 to 2048 [ 56.816305][ T4753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.824972][ T4753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.839151][ T4747] loop0: detected capacity change from 0 to 128 [ 56.873560][ T4750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.890255][ T4767] loop3: detected capacity change from 0 to 736 [ 56.902975][ T4747] loop0: detected capacity change from 0 to 512 [ 56.906658][ T4750] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.931079][ T4750] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.966905][ T4767] 9pnet_fd: Insufficient options for proto=fd [ 56.986520][ T4774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.996169][ T4774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.010670][ T4775] Falling back ldisc for ttyS3. [ 57.016458][ T4779] loop0: detected capacity change from 0 to 128 [ 57.026187][ T4779] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 57.051504][ T4780] __nla_validate_parse: 10 callbacks suppressed [ 57.051527][ T4780] netlink: 96 bytes leftover after parsing attributes in process `syz.3.329'. [ 57.133177][ T4788] netlink: zone id is out of range [ 57.138347][ T4788] netlink: zone id is out of range [ 57.154663][ T4792] loop0: detected capacity change from 0 to 128 [ 57.156161][ T4788] netlink: zone id is out of range [ 57.166154][ T4788] netlink: zone id is out of range [ 57.177348][ T4788] netlink: zone id is out of range [ 57.182951][ T4788] netlink: zone id is out of range [ 57.188678][ T4788] netlink: zone id is out of range [ 57.194465][ T4788] netlink: zone id is out of range [ 57.200016][ T4788] netlink: zone id is out of range [ 57.215765][ T4788] netlink: zone id is out of range [ 57.244399][ T4788] netlink: 14 bytes leftover after parsing attributes in process `syz.1.330'. [ 57.303763][ T4812] loop0: detected capacity change from 0 to 128 [ 57.342016][ T4816] syz_tun: entered promiscuous mode [ 57.347414][ T4816] macvtap1: entered promiscuous mode [ 57.355732][ T4816] syz_tun: left promiscuous mode [ 57.406170][ T4824] lo speed is unknown, defaulting to 1000 [ 57.440697][ T4821] Falling back ldisc for ttyS3. [ 57.500812][ T4826] Falling back ldisc for ttyS3. [ 57.513874][ T4826] loop1: detected capacity change from 0 to 128 [ 57.525753][ T4826] loop1: detected capacity change from 0 to 512 [ 57.620736][ T4841] Falling back ldisc for ttyS3. [ 57.651276][ T4841] loop4: detected capacity change from 0 to 128 [ 57.657800][ T4854] netlink: 96 bytes leftover after parsing attributes in process `syz.1.343'. [ 57.687859][ T4841] loop4: detected capacity change from 0 to 512 [ 57.699585][ T4859] loop0: detected capacity change from 0 to 512 [ 57.755064][ T4859] EXT4-fs: Ignoring removed orlov option [ 57.791709][ T4862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.800586][ T4859] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 57.824143][ T4862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.842038][ T4859] EXT4-fs (loop0): failed to initialize system zone (-117) [ 57.857966][ T4872] loop4: detected capacity change from 0 to 128 [ 57.875172][ T4859] EXT4-fs (loop0): mount failed [ 58.003266][ T4884] Falling back ldisc for ttyS3. [ 58.026281][ T4888] lo speed is unknown, defaulting to 1000 [ 58.089963][ T4898] loop4: detected capacity change from 0 to 736 [ 58.106384][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.115216][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.303603][ T4912] netlink: 96 bytes leftover after parsing attributes in process `syz.0.356'. [ 58.315126][ T4913] loop4: detected capacity change from 0 to 128 [ 58.328903][ T4913] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 58.344065][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.357'. [ 58.353237][ T4915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.357'. [ 58.362090][ T4907] Falling back ldisc for ttyS3. [ 58.374276][ T4915] loop0: detected capacity change from 0 to 1024 [ 58.383167][ T4907] loop4: detected capacity change from 0 to 512 [ 58.411315][ T4915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.442728][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.502992][ T4920] loop1: detected capacity change from 0 to 2048 [ 58.507925][ T4924] loop0: detected capacity change from 0 to 512 [ 58.530312][ T4920] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.555605][ T4924] EXT4-fs: Ignoring removed orlov option [ 58.571918][ T4924] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.577303][ T4920] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.600210][ T4920] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.612337][ T4924] EXT4-fs (loop0): failed to initialize system zone (-117) [ 58.619620][ T4924] EXT4-fs (loop0): mount failed [ 58.652195][ T4933] syz_tun: entered promiscuous mode [ 58.690771][ T4933] macvtap1: entered promiscuous mode [ 58.698801][ T4933] syz_tun: left promiscuous mode [ 58.710644][ T4936] loop4: detected capacity change from 0 to 128 [ 58.805466][ T4937] lo speed is unknown, defaulting to 1000 [ 58.840683][ T4946] Falling back ldisc for ttyS3. [ 58.897619][ T4957] loop3: detected capacity change from 0 to 736 [ 58.914340][ T4959] loop1: detected capacity change from 0 to 128 [ 58.942697][ T4952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.964293][ T4952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.010300][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 59.010321][ T29] audit: type=1326 audit(1756496859.594:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.035512][ T4971] loop4: detected capacity change from 0 to 512 [ 59.082389][ C1] hrtimer: interrupt took 37359 ns [ 59.091960][ T4966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.111305][ T4966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.115280][ T29] audit: type=1326 audit(1756496859.634:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.142358][ T29] audit: type=1326 audit(1756496859.634:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.166057][ T29] audit: type=1326 audit(1756496859.634:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.181115][ T4971] EXT4-fs: Ignoring removed orlov option [ 59.189675][ T29] audit: type=1326 audit(1756496859.634:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.189712][ T29] audit: type=1326 audit(1756496859.634:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.189779][ T29] audit: type=1326 audit(1756496859.634:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.189810][ T29] audit: type=1326 audit(1756496859.634:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.229185][ T4971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 59.242422][ T29] audit: type=1326 audit(1756496859.634:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.296452][ T4971] EXT4-fs (loop4): failed to initialize system zone (-117) [ 59.299779][ T29] audit: type=1326 audit(1756496859.634:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4968 comm="syz.3.374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 59.324102][ T4973] Falling back ldisc for ttyS3. [ 59.342674][ T4971] EXT4-fs (loop4): mount failed [ 59.430340][ T4983] syz_tun: entered promiscuous mode [ 59.435814][ T4983] macvtap1: entered promiscuous mode [ 59.447523][ T4983] syz_tun: left promiscuous mode [ 59.487478][ T4980] loop3: detected capacity change from 0 to 8192 [ 59.569078][ T4992] loop4: detected capacity change from 0 to 128 [ 59.575177][ T4990] netlink: 96 bytes leftover after parsing attributes in process `syz.3.379'. [ 59.621774][ T5000] loop3: detected capacity change from 0 to 128 [ 59.667844][ T5001] Falling back ldisc for ttyS3. [ 59.706039][ T5006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.382'. [ 59.715152][ T5006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.382'. [ 59.715189][ T5000] Falling back ldisc for ttyS3. [ 59.732472][ T5006] loop4: detected capacity change from 0 to 1024 [ 59.750823][ T5006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.797926][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.852196][ T5011] Falling back ldisc for ttyS3. [ 59.866457][ T5011] loop3: detected capacity change from 0 to 128 [ 59.895281][ T5017] netlink: 36 bytes leftover after parsing attributes in process `syz.2.387'. [ 59.898040][ T5015] lo speed is unknown, defaulting to 1000 [ 59.914273][ T5011] loop3: detected capacity change from 0 to 512 [ 59.942614][ T5019] loop0: detected capacity change from 0 to 736 [ 60.030384][ T5019] 9pnet_fd: Insufficient options for proto=fd [ 60.085201][ T5031] loop4: detected capacity change from 0 to 736 [ 60.115646][ T5034] syz_tun: entered promiscuous mode [ 60.145274][ T5034] macvtap1: entered promiscuous mode [ 60.161475][ T5034] syz_tun: left promiscuous mode [ 60.308522][ T5053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.332388][ T5053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.368508][ T5061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.388406][ T5061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.397172][ T5065] lo speed is unknown, defaulting to 1000 [ 60.442581][ T5073] netlink: 'syz.2.398': attribute type 1 has an invalid length. [ 60.451844][ T5068] Falling back ldisc for ttyS3. [ 60.498000][ T5077] loop2: detected capacity change from 0 to 512 [ 60.505041][ T5077] EXT4-fs: Ignoring removed orlov option [ 60.515707][ T5077] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.533890][ T5077] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 60.548610][ T5077] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 17. Delete some EAs or run e2fsck. [ 60.564764][ T5077] EXT4-fs (loop2): 1 orphan inode deleted [ 60.571100][ T5077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.688463][ T5082] loop4: detected capacity change from 0 to 736 [ 60.704745][ T5082] 9pnet_fd: Insufficient options for proto=fd [ 60.732956][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.820114][ T5088] lo speed is unknown, defaulting to 1000 [ 60.865453][ T5090] loop4: detected capacity change from 0 to 736 [ 60.975023][ T5104] syz_tun: entered promiscuous mode [ 60.988609][ T5104] macvtap1: entered promiscuous mode [ 61.004246][ T5104] syz_tun: left promiscuous mode [ 61.033804][ T5109] syz_tun: entered promiscuous mode [ 61.039239][ T5109] macvtap1: entered promiscuous mode [ 61.054116][ T5109] syz_tun: left promiscuous mode [ 61.078871][ T5105] loop4: detected capacity change from 0 to 128 [ 61.098218][ T5105] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 61.140763][ T5112] Falling back ldisc for ttyS3. [ 61.147246][ T5116] loop1: detected capacity change from 0 to 128 [ 61.181390][ T5105] loop4: detected capacity change from 0 to 512 [ 61.189856][ T5105] journal_path: Non-blockdev passed as './bus' [ 61.196322][ T5105] EXT4-fs: error: could not find journal device path [ 61.235885][ T5123] loop0: detected capacity change from 0 to 512 [ 61.276115][ T5123] EXT4-fs: Ignoring removed orlov option [ 61.304805][ T5123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 61.323678][ T5123] EXT4-fs (loop0): failed to initialize system zone (-117) [ 61.331435][ T5128] Falling back ldisc for ttyS3. [ 61.361048][ T5123] EXT4-fs (loop0): mount failed [ 61.436383][ T5147] loop0: detected capacity change from 0 to 128 [ 61.444673][ T5142] lo speed is unknown, defaulting to 1000 [ 61.571155][ T5156] Falling back ldisc for ttyS3. [ 61.587092][ T5173] loop3: detected capacity change from 0 to 128 [ 61.603796][ T5159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.605351][ T5173] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 61.624333][ T5159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.719836][ T5156] loop3: detected capacity change from 0 to 512 [ 61.864234][ T5196] Falling back ldisc for ttyS3. [ 61.876825][ T5196] loop3: detected capacity change from 0 to 128 [ 61.938709][ T5215] bridge_slave_1: left allmulticast mode [ 61.944504][ T5215] bridge_slave_1: left promiscuous mode [ 61.950792][ T5215] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.976516][ T5215] bridge_slave_0: left allmulticast mode [ 61.982293][ T5215] bridge_slave_0: left promiscuous mode [ 61.988009][ T5215] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.041835][ T5222] tipc: Started in network mode [ 62.046783][ T5222] tipc: Node identity ac14140f, cluster identity 4711 [ 62.054045][ T5222] tipc: New replicast peer: 255.255.255.255 [ 62.060165][ T5222] tipc: Enabled bearer , priority 10 [ 62.222769][ T5253] __nla_validate_parse: 6 callbacks suppressed [ 62.222792][ T5253] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 62.249454][ T5255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.438'. [ 62.262556][ T5236] tipc: Cannot configure node identity twice [ 62.593293][ T5266] Falling back ldisc for ttyS3. [ 62.668195][ T5268] loop1: detected capacity change from 0 to 128 [ 62.708963][ T5268] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 62.786746][ T5276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.825809][ T5276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.842304][ T5266] loop1: detected capacity change from 0 to 512 [ 63.180473][ T3352] tipc: Node number set to 2886997007 [ 63.251241][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 63.260099][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 63.440812][ T5300] loop1: detected capacity change from 0 to 128 [ 63.610725][ T5306] Falling back ldisc for ttyS3. [ 63.954778][ T5332] Falling back ldisc for ttyS3. [ 63.971659][ T5334] loop1: detected capacity change from 0 to 128 [ 63.983676][ T5334] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 64.272432][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 64.272448][ T29] audit: type=1400 audit(1756496864.864:1762): avc: denied { read } for pid=5337 comm="syz.3.466" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.301604][ T29] audit: type=1400 audit(1756496864.864:1763): avc: denied { open } for pid=5337 comm="syz.3.466" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.331506][ T5332] loop1: detected capacity change from 0 to 512 [ 64.392017][ T29] audit: type=1400 audit(1756496864.924:1764): avc: denied { ioctl } for pid=5337 comm="syz.3.466" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.423067][ T29] audit: type=1400 audit(1756496865.004:1765): avc: denied { setattr } for pid=5343 comm="syz.1.468" name="NETLINK" dev="sockfs" ino=9678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.574273][ T5356] loop3: detected capacity change from 0 to 128 [ 65.338602][ T29] audit: type=1400 audit(1756496865.434:1766): avc: denied { execute } for pid=5353 comm="syz.1.472" dev="hugetlbfs" ino=9692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 65.360150][ T29] audit: type=1400 audit(1756496865.434:1767): avc: denied { execute_no_trans } for pid=5353 comm="syz.1.472" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAAED16D64C885202864656C6574656429 dev="hugetlbfs" ino=9692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 65.594221][ T5364] Falling back ldisc for ttyS3. [ 65.640097][ T5378] tipc: Enabling of bearer rejected, already enabled [ 65.755382][ T5391] loop2: detected capacity change from 0 to 128 [ 65.762530][ T29] audit: type=1400 audit(1756496866.344:1768): avc: denied { create } for pid=5389 comm="syz.0.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 65.786981][ T5384] Falling back ldisc for ttyS3. [ 65.810902][ T5391] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 65.831387][ T5384] loop2: detected capacity change from 0 to 512 [ 66.145253][ T5406] lo speed is unknown, defaulting to 1000 [ 66.452755][ T5418] tipc: Enabling of bearer rejected, already enabled [ 66.563171][ T5423] netlink: 'syz.2.492': attribute type 4 has an invalid length. [ 66.584774][ T29] audit: type=1400 audit(1756496867.174:1769): avc: denied { block_suspend } for pid=5421 comm="syz.0.493" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.827235][ T5433] loop2: detected capacity change from 0 to 128 [ 67.000669][ T5443] Falling back ldisc for ttyS3. [ 67.100545][ T5449] tipc: Enabled bearer , priority 0 [ 67.146694][ T5449] syzkaller0: entered promiscuous mode [ 67.152299][ T5449] syzkaller0: entered allmulticast mode [ 67.191620][ T5449] tipc: Resetting bearer [ 67.211822][ T5448] tipc: Resetting bearer [ 67.228793][ T5448] tipc: Disabling bearer [ 67.332741][ T5464] loop1: detected capacity change from 0 to 128 [ 67.339629][ T5464] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 67.357608][ T29] audit: type=1326 audit(1756496867.944:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 67.381087][ T29] audit: type=1326 audit(1756496867.944:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5456 comm="syz.1.504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 67.408315][ T5464] loop1: detected capacity change from 0 to 512 [ 67.416429][ T5457] Falling back ldisc for ttyS3. [ 67.417054][ T5464] journal_path: Non-blockdev passed as './bus' [ 67.427517][ T5464] EXT4-fs: error: could not find journal device path [ 67.550121][ T3391] IPVS: starting estimator thread 0... [ 67.559344][ T5483] tipc: Started in network mode [ 67.564434][ T5483] tipc: Node identity ac1414aa, cluster identity 4711 [ 67.574515][ T5483] net_ratelimit: 13 callbacks suppressed [ 67.574535][ T5483] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 67.587269][ T5483] tipc: Enabled bearer , priority 10 [ 67.650580][ T5485] IPVS: using max 2400 ests per chain, 120000 per kthread [ 67.665292][ T5493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.674483][ T5493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.710570][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 67.744979][ T5500] tipc: Enabled bearer , priority 0 [ 67.753179][ T5500] syzkaller0: entered promiscuous mode [ 67.758764][ T5500] syzkaller0: entered allmulticast mode [ 67.774270][ T5500] tipc: Resetting bearer [ 67.781080][ T5498] tipc: Resetting bearer [ 67.790155][ T5498] tipc: Disabling bearer [ 67.850495][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 67.940687][ T5504] Falling back ldisc for ttyS3. [ 67.947760][ T5504] loop4: detected capacity change from 0 to 128 [ 67.979235][ T5504] loop4: detected capacity change from 0 to 512 [ 67.990532][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.130493][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.270482][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.280078][ T5537] Falling back ldisc for ttyS3. [ 68.288208][ T5550] loop4: detected capacity change from 0 to 128 [ 68.297909][ T5550] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 68.317364][ T5537] loop4: detected capacity change from 0 to 512 [ 68.327590][ T5552] tipc: Enabled bearer , priority 0 [ 68.351457][ T5552] syzkaller0: entered promiscuous mode [ 68.357051][ T5552] syzkaller0: entered allmulticast mode [ 68.380020][ T5552] tipc: Resetting bearer [ 68.388792][ T5551] tipc: Resetting bearer [ 68.410521][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.431462][ T5551] tipc: Disabling bearer [ 68.497107][ T5556] lo speed is unknown, defaulting to 1000 [ 68.524184][ T3390] IPVS: starting estimator thread 0... [ 68.550513][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.630494][ T5573] IPVS: using max 2016 ests per chain, 100800 per kthread [ 68.641614][ T5582] loop1: detected capacity change from 0 to 128 [ 68.676359][ T5578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 68.690499][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.697561][ T5578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 68.790634][ T5590] Falling back ldisc for ttyS3. [ 68.830591][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 68.885597][ T5605] tipc: Started in network mode [ 68.890622][ T5605] tipc: Node identity 0ecfb6c381f1, cluster identity 4711 [ 68.897806][ T5605] tipc: Enabled bearer , priority 0 [ 68.911818][ T5605] syzkaller0: entered promiscuous mode [ 68.917351][ T5605] syzkaller0: entered allmulticast mode [ 68.923892][ T5611] netlink: 36 bytes leftover after parsing attributes in process `syz.2.555'. [ 68.942781][ T5605] tipc: Resetting bearer [ 68.956156][ T5604] tipc: Resetting bearer [ 68.972019][ T5604] tipc: Disabling bearer [ 69.120817][ T5630] Falling back ldisc for ttyS3. [ 69.128626][ T5630] loop4: detected capacity change from 0 to 128 [ 69.146471][ T5630] loop4: detected capacity change from 0 to 512 [ 69.243926][ T5660] loop4: detected capacity change from 0 to 128 [ 69.361652][ T5676] Falling back ldisc for ttyS3. [ 69.390499][ T3391] tipc: Node number set to 2886997162 [ 69.495246][ T5694] tipc: Enabled bearer , priority 0 [ 69.518563][ T5694] syzkaller0: entered promiscuous mode [ 69.524419][ T5694] syzkaller0: entered allmulticast mode [ 69.560665][ T5694] tipc: Resetting bearer [ 69.576684][ T5692] tipc: Resetting bearer [ 69.592017][ T5692] tipc: Disabling bearer [ 69.868660][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 69.868681][ T29] audit: type=1400 audit(1756496870.454:1815): avc: denied { connect } for pid=5708 comm="syz.2.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 69.900687][ T5707] Falling back ldisc for ttyS3. [ 69.921373][ T5707] loop4: detected capacity change from 0 to 128 [ 69.945622][ T5707] loop4: detected capacity change from 0 to 512 [ 70.025796][ T5722] tipc: Enabled bearer , priority 0 [ 70.044947][ T5722] syzkaller0: entered promiscuous mode [ 70.050615][ T5722] syzkaller0: entered allmulticast mode [ 70.074540][ T5722] tipc: Resetting bearer [ 70.092219][ T5721] tipc: Resetting bearer [ 70.101832][ T5721] tipc: Disabling bearer [ 70.304200][ T29] audit: type=1400 audit(1756496870.894:1816): avc: denied { write } for pid=5738 comm="syz.4.595" name="ptype" dev="proc" ino=4026532737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 70.570677][ T5760] Falling back ldisc for ttyS3. [ 70.576608][ T5762] loop4: detected capacity change from 0 to 128 [ 70.585810][ T5762] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 70.790690][ T29] audit: type=1400 audit(1756496871.374:1817): avc: denied { name_bind } for pid=5770 comm="syz.2.608" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 70.870624][ T5773] Falling back ldisc for ttyS3. [ 70.879054][ T5773] loop2: detected capacity change from 0 to 128 [ 70.904571][ T5773] loop2: detected capacity change from 0 to 512 [ 70.983909][ T5778] tipc: Enabled bearer , priority 10 [ 71.106587][ T5796] netlink: 48 bytes leftover after parsing attributes in process `syz.1.619'. [ 71.140717][ T5794] Falling back ldisc for ttyS3. [ 71.150398][ T5794] loop2: detected capacity change from 0 to 128 [ 71.161792][ T5794] loop2: detected capacity change from 0 to 512 [ 71.341184][ T5822] netlink: 48 bytes leftover after parsing attributes in process `syz.3.630'. [ 71.370562][ T29] audit: type=1400 audit(1756496871.954:1818): avc: denied { ioctl } for pid=5824 comm="syz.2.632" path="socket:[11379]" dev="sockfs" ino=11379 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.467949][ T5829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.482216][ T5829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.647487][ T5846] batman_adv: batadv0: Adding interface: dummy0 [ 71.653859][ T5846] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.679306][ T5846] batman_adv: batadv0: Interface activated: dummy0 [ 72.021754][ T5853] tipc: Enabled bearer , priority 0 [ 72.029155][ T5853] syzkaller0: entered promiscuous mode [ 72.034836][ T5853] syzkaller0: entered allmulticast mode [ 72.055540][ T5853] tipc: Resetting bearer [ 72.067941][ T5852] tipc: Resetting bearer [ 72.089210][ T5852] tipc: Disabling bearer [ 72.100535][ T10] tipc: Node number set to 2403251907 [ 72.666536][ T5900] netlink: 48 bytes leftover after parsing attributes in process `syz.0.660'. [ 73.224308][ T5936] batman_adv: batadv0: Adding interface: dummy0 [ 73.230753][ T5936] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.265916][ T5936] batman_adv: batadv0: Interface activated: dummy0 [ 73.311273][ T5940] lo speed is unknown, defaulting to 1000 [ 73.322378][ T5938] Falling back ldisc for ttyS3. [ 73.329576][ T5938] loop2: detected capacity change from 0 to 128 [ 73.343964][ T5938] loop2: detected capacity change from 0 to 512 [ 73.450496][ C0] net_ratelimit: 8 callbacks suppressed [ 73.450516][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 73.492902][ T29] audit: type=1326 audit(1756496874.084:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 73.516349][ T29] audit: type=1326 audit(1756496874.084:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 73.539848][ T29] audit: type=1326 audit(1756496874.084:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 73.554246][ T5953] loop3: detected capacity change from 0 to 1024 [ 73.563258][ T29] audit: type=1326 audit(1756496874.084:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 73.593000][ T29] audit: type=1326 audit(1756496874.084:1823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 73.599243][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 73.616394][ T29] audit: type=1326 audit(1756496874.084:1824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5950 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 73.648901][ T5951] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 73.684786][ T5953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.719710][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.885959][ T5978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.689'. [ 73.922689][ T5981] tipc: Enabled bearer , priority 0 [ 73.930158][ T5981] syzkaller0: entered promiscuous mode [ 73.935791][ T5981] syzkaller0: entered allmulticast mode [ 73.944855][ T5981] tipc: Resetting bearer [ 73.951436][ T5980] tipc: Resetting bearer [ 73.958573][ T5980] tipc: Disabling bearer [ 74.246635][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 74.272401][ T5984] bond_slave_0: entered promiscuous mode [ 74.278143][ T5984] bond_slave_1: entered promiscuous mode [ 74.313533][ T5984] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 74.355830][ T5984] bond_slave_0: left promiscuous mode [ 74.361323][ T5984] bond_slave_1: left promiscuous mode [ 74.458053][ T5990] loop1: detected capacity change from 0 to 128 [ 74.480496][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 74.546999][ T5994] siw: device registration error -23 [ 74.620665][ T5993] Falling back ldisc for ttyS3. [ 74.647989][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.694'. [ 74.656971][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.694'. [ 74.855618][ T5999] loop4: detected capacity change from 0 to 1024 [ 74.915508][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 74.915539][ T29] audit: type=1400 audit(1756496875.504:1942): avc: denied { getopt } for pid=6000 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 74.942049][ T6004] IPVS: length: 139 != 8 [ 74.950544][ T29] audit: type=1400 audit(1756496875.534:1943): avc: denied { create } for pid=6000 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.954968][ T5999] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.033053][ T29] audit: type=1326 audit(1756496875.624:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.056762][ T29] audit: type=1326 audit(1756496875.624:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.080166][ T29] audit: type=1326 audit(1756496875.624:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.103563][ T29] audit: type=1326 audit(1756496875.624:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.127110][ T29] audit: type=1326 audit(1756496875.624:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.150520][ T29] audit: type=1326 audit(1756496875.624:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.174111][ T29] audit: type=1326 audit(1756496875.624:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.197413][ T29] audit: type=1326 audit(1756496875.624:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5995 comm="syz.4.694" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe342c8ebe9 code=0x7ffc0000 [ 75.221849][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.326920][ T6018] netlink: 36 bytes leftover after parsing attributes in process `syz.2.700'. [ 75.405949][ T6020] lo speed is unknown, defaulting to 1000 [ 75.520527][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 75.613945][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.622944][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.951852][ T6036] netlink: 16 bytes leftover after parsing attributes in process `syz.1.706'. [ 76.480122][ T6049] siw: device registration error -23 [ 76.560491][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 76.635212][ T6051] netlink: 36 bytes leftover after parsing attributes in process `syz.2.711'. [ 76.852460][ T6059] IPVS: length: 139 != 8 [ 76.946312][ T6064] lo speed is unknown, defaulting to 1000 [ 77.207895][ T6075] batman_adv: batadv0: Interface deactivated: dummy0 [ 77.214790][ T6075] batman_adv: batadv0: Removing interface: dummy0 [ 77.233330][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 77.312683][ T6083] loop2: detected capacity change from 0 to 128 [ 77.440655][ T6083] Falling back ldisc for ttyS3. [ 77.580773][ T6106] Falling back ldisc for ttyS3. [ 77.587687][ T6106] loop2: detected capacity change from 0 to 128 [ 77.600541][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 77.602418][ T6106] loop2: detected capacity change from 0 to 512 [ 78.269332][ T6127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'. [ 78.412080][ T6138] loop0: detected capacity change from 0 to 736 [ 78.429485][ T6138] 9pnet_fd: Insufficient options for proto=fd [ 78.540258][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 78.603892][ T6157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.613878][ T6157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.640504][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 79.262906][ T6180] lo speed is unknown, defaulting to 1000 [ 79.680494][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 79.974981][ T6208] batadv0: mtu less than device minimum [ 79.981060][ T6208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 79.991949][ T6208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.002828][ T6208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.013581][ T6208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.024862][ T6208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.035688][ T6208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.046523][ T6208] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.176756][ T6225] netlink: 8 bytes leftover after parsing attributes in process `syz.2.772'. [ 80.311633][ T6239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.779'. [ 80.334493][ T6243] netlink: 'syz.2.780': attribute type 4 has an invalid length. [ 80.355863][ T6245] loop3: detected capacity change from 0 to 128 [ 80.415629][ T6254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 80.431812][ T6247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.447827][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.786'. [ 80.449783][ T6247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.620464][ T6280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.793'. [ 80.668251][ T6287] IPVS: length: 139 != 8 [ 80.686018][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 80.686036][ T29] audit: type=1400 audit(1756496881.274:2004): avc: denied { create } for pid=6282 comm="syz.3.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 80.713119][ T6286] Falling back ldisc for ttyS3. [ 80.721275][ T6286] loop2: detected capacity change from 0 to 128 [ 80.751072][ T6286] loop2: detected capacity change from 0 to 512 [ 80.882016][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 81.043433][ T6303] batman_adv: batadv0: Adding interface: dummy0 [ 81.050091][ T6303] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.075916][ T6303] batman_adv: batadv0: Interface activated: dummy0 [ 81.132476][ T6308] netlink: 48 bytes leftover after parsing attributes in process `syz.4.805'. [ 81.268929][ T6326] loop4: detected capacity change from 0 to 736 [ 81.348805][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.358401][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.367688][ T6333] syz_tun: entered promiscuous mode [ 81.373647][ T6333] macvtap1: entered promiscuous mode [ 81.381324][ T6333] syz_tun: left promiscuous mode [ 81.561850][ T6344] tipc: Enabled bearer , priority 0 [ 81.569255][ T6344] syzkaller0: entered promiscuous mode [ 81.574914][ T6344] syzkaller0: entered allmulticast mode [ 81.584908][ T6344] tipc: Resetting bearer [ 81.610589][ T6343] tipc: Resetting bearer [ 81.623238][ T6343] tipc: Disabling bearer [ 82.087841][ T6378] tipc: Enabled bearer , priority 0 [ 82.096633][ T6378] syzkaller0: entered promiscuous mode [ 82.102183][ T6378] syzkaller0: entered allmulticast mode [ 82.113192][ T6378] tipc: Resetting bearer [ 82.119989][ T6377] tipc: Resetting bearer [ 82.128959][ T6377] tipc: Disabling bearer [ 82.234275][ T6385] lo speed is unknown, defaulting to 1000 [ 82.240952][ T6382] Falling back ldisc for ttyS3. [ 82.253121][ T6382] loop0: detected capacity change from 0 to 128 [ 82.357832][ T6399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.838'. [ 82.516075][ T6428] netlink: 96 bytes leftover after parsing attributes in process `syz.1.844'. [ 82.542171][ T29] audit: type=1326 audit(1756496883.124:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 82.565708][ T29] audit: type=1326 audit(1756496883.124:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 82.587948][ T6436] tipc: Enabled bearer , priority 0 [ 82.589197][ T29] audit: type=1326 audit(1756496883.124:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 82.598993][ T6436] syzkaller0: entered promiscuous mode [ 82.619137][ T29] audit: type=1326 audit(1756496883.124:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 82.648468][ T6436] syzkaller0: entered allmulticast mode [ 82.674328][ T29] audit: type=1326 audit(1756496883.264:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 82.697918][ T29] audit: type=1326 audit(1756496883.264:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6429 comm="syz.3.845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 82.728370][ T6436] tipc: Resetting bearer [ 82.735950][ T6435] tipc: Resetting bearer [ 82.755661][ T6435] tipc: Disabling bearer [ 82.844303][ T6452] loop4: detected capacity change from 0 to 736 [ 82.852970][ T6454] loop1: detected capacity change from 0 to 128 [ 82.901496][ T6452] 9pnet_fd: Insufficient options for proto=fd [ 82.990709][ T6460] Falling back ldisc for ttyS3. [ 83.211494][ T29] audit: type=1326 audit(1756496883.804:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 83.215411][ T6499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.858'. [ 83.234970][ T29] audit: type=1326 audit(1756496883.804:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 83.255707][ T6499] loop1: detected capacity change from 0 to 1024 [ 83.289985][ T29] audit: type=1326 audit(1756496883.804:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6498 comm="syz.1.858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 83.314176][ T6499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.362514][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.548783][ T6519] lo speed is unknown, defaulting to 1000 [ 83.797970][ T6539] netlink: 'syz.4.870': attribute type 4 has an invalid length. [ 83.825966][ T6541] loop4: detected capacity change from 0 to 128 [ 83.840550][ C0] net_ratelimit: 35 callbacks suppressed [ 83.840572][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.357321][ T6565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.366699][ T6565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.614940][ T6584] loop4: detected capacity change from 0 to 736 [ 84.624858][ T6584] 9pnet_fd: Insufficient options for proto=fd [ 84.694410][ T6591] loop4: detected capacity change from 0 to 1024 [ 84.717755][ T6591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.745734][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.820626][ T6598] Falling back ldisc for ttyS3. [ 84.827729][ T6598] loop4: detected capacity change from 0 to 128 [ 84.838360][ T6598] loop4: detected capacity change from 0 to 512 [ 84.880471][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 84.977640][ T6613] loop0: detected capacity change from 0 to 736 [ 85.001483][ T6616] syzkaller0: entered promiscuous mode [ 85.007039][ T6616] syzkaller0: entered allmulticast mode [ 85.062034][ T6624] netlink: 'syz.0.902': attribute type 4 has an invalid length. [ 85.236668][ T6645] __nla_validate_parse: 4 callbacks suppressed [ 85.236708][ T6645] netlink: 16 bytes leftover after parsing attributes in process `syz.2.911'. [ 85.322110][ T6652] loop2: detected capacity change from 0 to 736 [ 85.340166][ T6652] 9pnet_fd: Insufficient options for proto=fd [ 85.368962][ T6655] netlink: 96 bytes leftover after parsing attributes in process `syz.2.915'. [ 85.433638][ T6661] serio: Serial port ptm0 [ 85.920561][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 86.054901][ T6672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.922'. [ 86.093915][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 86.093979][ T29] audit: type=1400 audit(1756496886.684:2284): avc: denied { write } for pid=6675 comm="syz.4.924" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.124495][ T29] audit: type=1400 audit(1756496886.684:2285): avc: denied { open } for pid=6675 comm="syz.4.924" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 86.338679][ T6691] loop3: detected capacity change from 0 to 736 [ 86.351924][ T6691] 9pnet_fd: Insufficient options for proto=fd [ 86.362360][ T6693] netlink: 96 bytes leftover after parsing attributes in process `syz.2.930'. [ 86.446573][ T29] audit: type=1400 audit(1756496887.034:2286): avc: denied { create } for pid=6704 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.448541][ T6703] syzkaller0: entered promiscuous mode [ 86.467556][ T29] audit: type=1400 audit(1756496887.054:2287): avc: denied { connect } for pid=6704 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.472121][ T6703] syzkaller0: entered allmulticast mode [ 86.499066][ T29] audit: type=1400 audit(1756496887.084:2288): avc: denied { bind } for pid=6704 comm="syz.3.934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 86.525289][ T6705] syz_tun: entered promiscuous mode [ 86.530600][ T6705] macvtap1: entered promiscuous mode [ 86.537685][ T6705] syz_tun: left promiscuous mode [ 86.960473][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 86.969564][ T6723] bond_slave_0: entered promiscuous mode [ 86.975295][ T6723] bond_slave_1: entered promiscuous mode [ 86.985764][ T6723] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 87.239272][ T6729] netlink: 96 bytes leftover after parsing attributes in process `syz.1.945'. [ 87.403160][ T6749] batman_adv: batadv0: Interface deactivated: dummy0 [ 87.410032][ T6749] batman_adv: batadv0: Removing interface: dummy0 [ 87.579185][ T6767] loop2: detected capacity change from 0 to 736 [ 87.615236][ T29] audit: type=1326 audit(1756496888.204:2289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 87.638746][ T29] audit: type=1326 audit(1756496888.204:2290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 87.662238][ T29] audit: type=1326 audit(1756496888.204:2291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 87.688762][ T29] audit: type=1326 audit(1756496888.274:2292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 87.712216][ T29] audit: type=1326 audit(1756496888.274:2293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6765 comm="syz.1.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 87.738265][ T6770] siw: device registration error -23 [ 88.000511][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 88.127625][ T6785] lo speed is unknown, defaulting to 1000 [ 88.150724][ T6783] Falling back ldisc for ttyS3. [ 88.159247][ T6783] loop3: detected capacity change from 0 to 128 [ 88.213048][ T6783] loop3: detected capacity change from 0 to 512 [ 88.265912][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'. [ 88.274906][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.2.973'. [ 88.283956][ T6801] loop3: detected capacity change from 0 to 736 [ 88.313264][ T6797] loop2: detected capacity change from 0 to 1024 [ 88.389696][ T6797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.417234][ T6811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.425923][ T6811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.458206][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.529781][ T6822] loop4: detected capacity change from 0 to 736 [ 88.538147][ T6822] 9pnet_fd: Insufficient options for proto=fd [ 88.588125][ T6831] netlink: 52 bytes leftover after parsing attributes in process `syz.4.983'. [ 88.608744][ T6830] lo speed is unknown, defaulting to 1000 [ 88.676649][ T6837] IPVS: length: 139 != 8 [ 88.777023][ T6843] loop3: detected capacity change from 0 to 736 [ 89.040481][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 89.268407][ T6860] serio: Serial port ptm0 [ 89.562353][ T6882] netlink: 52 bytes leftover after parsing attributes in process `syz.4.999'. [ 89.943288][ T6901] tipc: Enabled bearer , priority 0 [ 89.953667][ T6901] tipc: Resetting bearer [ 89.962841][ T6900] tipc: Disabling bearer [ 89.993801][ T6909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1010'. [ 90.032801][ T6914] loop0: detected capacity change from 0 to 736 [ 90.080494][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 90.148315][ T6922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.157204][ T6922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.859137][ T6941] lo speed is unknown, defaulting to 1000 [ 91.077175][ T6949] __nla_validate_parse: 2 callbacks suppressed [ 91.077200][ T6949] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1022'. [ 91.108595][ T6951] loop3: detected capacity change from 0 to 736 [ 91.120480][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 91.228144][ T6964] tipc: Enabled bearer , priority 0 [ 91.238277][ T6964] tipc: Resetting bearer [ 91.245746][ T6963] tipc: Disabling bearer [ 91.450290][ T6977] loop4: detected capacity change from 0 to 736 [ 91.465971][ T6977] 9pnet_fd: Insufficient options for proto=fd [ 91.530994][ T6979] Falling back ldisc for ttyS3. [ 91.536832][ T6983] loop1: detected capacity change from 0 to 736 [ 91.547327][ T6979] loop0: detected capacity change from 0 to 128 [ 91.591512][ T6979] loop0: detected capacity change from 0 to 512 [ 91.627533][ T6994] Zero length message leads to an empty skb [ 91.776661][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.780491][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 91.780512][ T29] audit: type=1326 audit(1756496892.354:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.796586][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.814813][ T29] audit: type=1326 audit(1756496892.364:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.846177][ T29] audit: type=1326 audit(1756496892.364:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.869731][ T29] audit: type=1326 audit(1756496892.364:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.893429][ T29] audit: type=1326 audit(1756496892.364:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.916941][ T29] audit: type=1326 audit(1756496892.364:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.940992][ T29] audit: type=1326 audit(1756496892.364:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.964907][ T29] audit: type=1326 audit(1756496892.364:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.988405][ T29] audit: type=1326 audit(1756496892.364:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 91.991334][ T7016] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1050'. [ 92.011901][ T29] audit: type=1326 audit(1756496892.364:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.1.1046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88d72bebe9 code=0x7ffc0000 [ 92.058930][ T7020] loop2: detected capacity change from 0 to 736 [ 92.093523][ T7020] 9pnet_fd: Insufficient options for proto=fd [ 92.143995][ T7023] lo speed is unknown, defaulting to 1000 [ 92.160585][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 92.238117][ T7039] loop3: detected capacity change from 0 to 128 [ 92.247723][ T7032] Falling back ldisc for ttyS3. [ 92.253826][ T7039] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 92.281648][ T7032] loop3: detected capacity change from 0 to 512 [ 92.388500][ T7049] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1061'. [ 92.460799][ T7055] loop2: detected capacity change from 0 to 736 [ 92.494478][ T7057] serio: Serial port ptm0 [ 92.742020][ T7083] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1074'. [ 92.795132][ T7089] lo speed is unknown, defaulting to 1000 [ 92.939417][ T7093] IPVS: length: 139 != 8 [ 93.091121][ T7095] loop0: detected capacity change from 0 to 736 [ 93.165461][ T7099] serio: Serial port ptm0 [ 93.200952][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 93.319246][ T7106] netlink: 'syz.3.1083': attribute type 4 has an invalid length. [ 93.334112][ T7106] loop3: detected capacity change from 0 to 512 [ 93.368632][ T7108] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1084'. [ 93.378126][ T7106] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.404772][ T7106] EXT4-fs (loop3): mount failed [ 93.552200][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.560952][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.575254][ T7137] loop3: detected capacity change from 0 to 1024 [ 93.583040][ T7137] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 93.594047][ T7141] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1095'. [ 93.637139][ T7137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.695070][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.734898][ T7152] netlink: 'syz.3.1100': attribute type 4 has an invalid length. [ 93.874676][ T7154] loop3: detected capacity change from 0 to 512 [ 93.914508][ T7154] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 93.982777][ T7154] EXT4-fs (loop3): mount failed [ 94.240597][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 94.429308][ T7180] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1111'. [ 94.494623][ T7189] syz_tun: entered promiscuous mode [ 94.500047][ T7189] macvtap2: entered promiscuous mode [ 94.511016][ T7189] syz_tun: left promiscuous mode [ 94.566783][ T7197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.582873][ T7197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.594515][ T7201] serio: Serial port ptm0 [ 94.682524][ T7209] loop3: detected capacity change from 0 to 736 [ 94.693748][ T7209] 9pnet_fd: Insufficient options for proto=fd [ 95.251170][ T7241] netlink: 'syz.4.1134': attribute type 4 has an invalid length. [ 95.264448][ T7241] loop4: detected capacity change from 0 to 512 [ 95.280499][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 95.298448][ T7241] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.314628][ T7241] EXT4-fs (loop4): mount failed [ 95.574228][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1140'. [ 95.583376][ T7259] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1140'. [ 95.597534][ T7259] loop4: detected capacity change from 0 to 1024 [ 95.613250][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.622729][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.630739][ T7259] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.682646][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.106047][ T7277] netlink: 'syz.0.1147': attribute type 4 has an invalid length. [ 96.165537][ T7277] loop0: detected capacity change from 0 to 512 [ 96.210561][ T7281] loop4: detected capacity change from 0 to 1024 [ 96.254974][ T7281] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.278633][ T7277] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.301120][ T7277] EXT4-fs (loop0): mount failed [ 96.312636][ T7281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.325370][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 96.413219][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.590736][ T7324] netlink: 'syz.3.1160': attribute type 4 has an invalid length. [ 96.623118][ T7324] loop3: detected capacity change from 0 to 512 [ 96.661709][ T7324] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 96.677884][ T7332] tipc: Enabling of bearer rejected, failed to enable media [ 96.684648][ T7324] EXT4-fs (loop3): mount failed [ 96.768912][ T7340] loop3: detected capacity change from 0 to 1024 [ 96.784486][ T7340] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 96.806225][ T7340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.825356][ T7340] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.845304][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 96.845322][ T29] audit: type=1326 audit(1756496897.434:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b9ec4d550 code=0x7ffc0000 [ 96.894762][ T7355] lo speed is unknown, defaulting to 1000 [ 96.921287][ T29] audit: type=1326 audit(1756496897.464:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b9ec4e7eb code=0x7ffc0000 [ 96.944251][ T29] audit: type=1326 audit(1756496897.464:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0b9ec4d84a code=0x7ffc0000 [ 96.966911][ T29] audit: type=1326 audit(1756496897.464:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 96.989782][ T29] audit: type=1326 audit(1756496897.464:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7339 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 97.095830][ T7361] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1167'. [ 97.149648][ T7366] loop2: detected capacity change from 0 to 736 [ 97.161305][ T7366] 9pnet_fd: Insufficient options for proto=fd [ 97.206262][ T7370] IPv6: Can't replace route, no match found [ 97.274495][ T7376] loop0: detected capacity change from 0 to 128 [ 97.347291][ T29] audit: type=1400 audit(1756496897.824:2766): avc: denied { write } for pid=7369 comm="syz.2.1170" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 97.360519][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 97.461146][ T7383] Falling back ldisc for ttyS3. [ 97.695278][ T7392] tipc: Enabling of bearer rejected, failed to enable media [ 97.925202][ T7408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.936433][ T7408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.000841][ T7411] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1179'. [ 98.068745][ T29] audit: type=1326 audit(1756496898.654:2767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 98.092288][ T29] audit: type=1326 audit(1756496898.654:2768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 98.160105][ T7421] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.170165][ T29] audit: type=1326 audit(1756496898.714:2769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 98.193649][ T29] audit: type=1326 audit(1756496898.714:2770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7418 comm="syz.0.1182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ae6febe9 code=0x7ffc0000 [ 98.221516][ T7421] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.248020][ T7419] loop0: detected capacity change from 0 to 1024 [ 98.256917][ T7419] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 98.273156][ T7419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.286650][ T7419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.400473][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 98.417289][ T7447] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1190'. [ 98.531468][ T7459] syz_tun: entered promiscuous mode [ 98.536878][ T7459] macvtap1: entered promiscuous mode [ 98.544485][ T7459] syz_tun: left promiscuous mode [ 99.225127][ T7486] lo speed is unknown, defaulting to 1000 [ 99.347561][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 99.356759][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1205'. [ 99.375955][ T7498] loop3: detected capacity change from 0 to 1024 [ 99.404958][ T7503] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1207'. [ 99.417263][ T7498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.440468][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 99.462314][ T7507] loop2: detected capacity change from 0 to 512 [ 99.469647][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.479372][ T7507] EXT4-fs: Ignoring removed orlov option [ 99.486509][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.495492][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.497273][ T7507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 99.514217][ T7507] EXT4-fs (loop2): failed to initialize system zone (-117) [ 99.528320][ T7507] EXT4-fs (loop2): mount failed [ 99.670762][ T7517] lo speed is unknown, defaulting to 1000 [ 99.833782][ T7532] lo speed is unknown, defaulting to 1000 [ 99.977792][ T7541] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1219'. [ 100.414499][ T7551] siw: device registration error -23 [ 100.480472][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 101.142822][ T7565] lo speed is unknown, defaulting to 1000 [ 101.305006][ T7579] tipc: Enabling of bearer rejected, failed to enable media [ 101.520660][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 102.202902][ T7605] siw: device registration error -23 [ 102.547263][ T7611] loop1: detected capacity change from 0 to 128 [ 102.552905][ T7609] lo speed is unknown, defaulting to 1000 [ 102.560463][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 102.645391][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 102.645465][ T29] audit: type=1326 audit(1756496903.234:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.654964][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.676075][ T29] audit: type=1326 audit(1756496903.234:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.707278][ T29] audit: type=1326 audit(1756496903.234:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.732089][ T29] audit: type=1326 audit(1756496903.234:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.732166][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.755596][ T29] audit: type=1326 audit(1756496903.244:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.786862][ T29] audit: type=1326 audit(1756496903.244:2944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.810495][ T29] audit: type=1326 audit(1756496903.244:2945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.834050][ T29] audit: type=1326 audit(1756496903.244:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.857496][ T29] audit: type=1326 audit(1756496903.244:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.864557][ T7626] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1241'. [ 102.881207][ T29] audit: type=1326 audit(1756496903.244:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7615 comm="syz.3.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9ec4ebe9 code=0x7ffc0000 [ 102.914096][ T7621] Falling back ldisc for ttyS3. [ 102.958382][ T7628] loop4: detected capacity change from 0 to 736 [ 103.022471][ T7628] 9pnet_fd: Insufficient options for proto=fd [ 103.029806][ T7633] IPVS: length: 139 != 8 [ 103.094771][ T7637] serio: Serial port ptm0 [ 103.124655][ T7635] lo speed is unknown, defaulting to 1000 [ 103.488460][ T7672] serio: Serial port ptm0 [ 103.600471][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 103.604013][ T7681] netlink: 'syz.2.1262': attribute type 4 has an invalid length. [ 103.624636][ T7681] loop2: detected capacity change from 0 to 512 [ 103.649535][ T7681] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 103.669291][ T7681] EXT4-fs (loop2): mount failed [ 103.747430][ T7691] lo speed is unknown, defaulting to 1000 [ 103.838424][ T7702] IPVS: length: 139 != 8 [ 104.016303][ T7708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.026307][ T7708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.253680][ T7713] lo speed is unknown, defaulting to 1000 [ 104.376971][ T7721] serio: Serial port ptm0 [ 104.473608][ T7728] loop4: detected capacity change from 0 to 512 [ 104.480373][ T7728] EXT4-fs: Ignoring removed orlov option [ 104.491198][ T7728] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 104.506628][ T7728] EXT4-fs (loop4): failed to initialize system zone (-117) [ 104.527824][ T7728] EXT4-fs (loop4): mount failed [ 104.595951][ T7737] tipc: Enabled bearer , priority 0 [ 104.607336][ T7737] tipc: Resetting bearer [ 104.616931][ T7736] tipc: Disabling bearer [ 104.640509][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 104.817939][ T7751] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1287'. [ 104.931662][ T7760] netlink: zone id is out of range [ 104.936983][ T7760] netlink: zone id is out of range [ 104.942205][ T7760] netlink: zone id is out of range [ 104.947383][ T7760] netlink: zone id is out of range [ 104.952664][ T7760] netlink: zone id is out of range [ 104.957936][ T7760] netlink: zone id is out of range [ 104.968405][ T7760] netlink: zone id is out of range [ 104.975839][ T7760] netlink: zone id is out of range [ 104.981108][ T7760] netlink: zone id is out of range [ 105.016697][ T7765] lo speed is unknown, defaulting to 1000 [ 105.178419][ T7774] tipc: Enabled bearer , priority 0 [ 105.191418][ T7774] tipc: Resetting bearer [ 105.218673][ T7773] tipc: Disabling bearer [ 105.342932][ T7778] netlink: 'syz.0.1297': attribute type 4 has an invalid length. [ 105.356215][ T7778] loop0: detected capacity change from 0 to 512 [ 105.375857][ T7778] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 105.399935][ T7778] EXT4-fs (loop0): mount failed [ 105.459025][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1301'. [ 105.468219][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1301'. [ 105.478956][ T7789] IPVS: length: 139 != 8 [ 105.520113][ T7786] loop0: detected capacity change from 0 to 1024 [ 105.572685][ T7786] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.637753][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.793944][ T7805] lo speed is unknown, defaulting to 1000 [ 105.825048][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.833980][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.498860][ T7838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1316'. [ 106.557520][ T7844] loop4: detected capacity change from 0 to 512 [ 106.565679][ T7844] EXT4-fs: Ignoring removed orlov option [ 106.577102][ T7844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 106.589351][ T7846] netlink: 360 bytes leftover after parsing attributes in process `syz.2.1321'. [ 106.607659][ T7844] EXT4-fs (loop4): failed to initialize system zone (-117) [ 106.624010][ T7844] EXT4-fs (loop4): mount failed [ 106.716017][ T7855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.726900][ T7855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.886774][ T7868] netlink: 'syz.0.1330': attribute type 4 has an invalid length. [ 106.912580][ T7868] loop0: detected capacity change from 0 to 512 [ 106.942649][ T7868] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.958075][ T7868] EXT4-fs (loop0): mount failed [ 106.976356][ T7879] netlink: 360 bytes leftover after parsing attributes in process `syz.1.1334'. [ 107.012278][ T7880] ================================================================== [ 107.020428][ T7880] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 107.027499][ T7880] [ 107.029836][ T7880] write to 0xffff88810aa3a5c8 of 8 bytes by task 3301 on cpu 0: [ 107.037476][ T7880] release_task+0x6f9/0xb60 [ 107.042081][ T7880] wait_consider_task+0x114a/0x1660 [ 107.047298][ T7880] __do_wait+0xfa/0x510 [ 107.051476][ T7880] do_wait+0xb7/0x260 [ 107.055482][ T7880] kernel_wait4+0x16b/0x1e0 [ 107.060002][ T7880] __x64_sys_wait4+0x91/0x120 [ 107.064697][ T7880] x64_sys_call+0x2a66/0x2ff0 [ 107.069384][ T7880] do_syscall_64+0xd2/0x200 [ 107.073904][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.079808][ T7880] [ 107.082137][ T7880] read to 0xffff88810aa3a100 of 3264 bytes by task 7880 on cpu 1: [ 107.089941][ T7880] memcpy_and_pad+0x48/0x80 [ 107.094450][ T7880] arch_dup_task_struct+0x2c/0x40 [ 107.099496][ T7880] dup_task_struct+0x83/0x6a0 [ 107.104182][ T7880] copy_process+0x399/0x2000 [ 107.108781][ T7880] kernel_clone+0x16c/0x5c0 [ 107.113305][ T7880] __se_sys_clone3+0x1c2/0x200 [ 107.118089][ T7880] __x64_sys_clone3+0x31/0x40 [ 107.122785][ T7880] x64_sys_call+0x1fc9/0x2ff0 [ 107.127475][ T7880] do_syscall_64+0xd2/0x200 [ 107.131993][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.137896][ T7880] [ 107.140310][ T7880] Reported by Kernel Concurrency Sanitizer on: [ 107.146463][ T7880] CPU: 1 UID: 0 PID: 7880 Comm: syz.0.1335 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.156278][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.166340][ T7880] ================================================================== [ 107.375082][ T7886] siw: device registration error -23 [ 109.850481][ C0] net_ratelimit: 6 callbacks suppressed [ 109.850502][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 110.880500][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 111.920539][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 112.960518][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 114.000511][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 115.040568][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 116.080511][ C0] IPVS: lc: UDP 224.0.0.2:0 - no destination available