last executing test programs: 4.078888014s ago: executing program 4 (id=387): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140024001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a3200"], 0x1ec}}, 0x0) 3.995002925s ago: executing program 4 (id=393): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000180)={0x0, 0x19, &(0x7f0000000f00)={&(0x7f0000000540)=ANY=[@ANYBLOB="44020000", @ANYRES16=r4, @ANYBLOB="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"], 0x244}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000079a0a031f29c3e4f0ecec48ff8cdf21edabfa3d02c02dc53b6a5ec60155d95f2927a2442364331952fbf4a30d19af893a0719da6ae39c5ffdbf5a1967fcc096e07a58fb4ab85b924feab9ed2b6b5351967fb13e52a692f003dd68c7360a8a9da90bb177ca87002aecb36c3c9437e2452f4bd89f264772488b72571f7a982c73905576b8a713ad8137a5f2ae0453a5d9bc3b38a83d3a355cccbfc51f4d75a5134f74cd6dcf74443590362d3"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r7, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r9, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$eJzs3cFvG1kZAPBvnLg0TUpSwaFUolRtUVJB7aShbcShgITgVAko9xISJ4rixFHstE1UQSq4IyFEQZw4cUHiD0BC/RMQUiW4I0AgtNvuHvawW688tnebxI6TVWJ3nd9Pmvi9mWd/77PjmXkzI08AJ9aliLgSEa+q1eq1iBhtzM80pvFaZbve7uWLx3O1KYlq9d5bSURSn1drMvHaaw7XnxKnI+IH3434cbI3bnlza3m2WCysN+r5yspavry5dX1pZXaxsFhYnZ6eujVze+bmzOSR5DkSEXe+/Z9f/+IP37nzl68+/Of9/038JGnkH/FxHketnno2fS+aBiNi/TiC9chgmiEAAJ8Gzf38yxFxLUZjIN2bAwAAAPpJ9Rsj8X4SUQUAAAD6Via9NjbJ5BrXAYxEJpPL1a/h/XycyRRL5cpXFkobq/P1a2jHIptZWCoWJhvXCo9FNqnVp9Jysz4cN3bUi4XpiDgXEb8aHUrrublScb7XBz8AAADghBjeNf5/d7Q+/gcAAAD6zFivOwAAAAAcO+N/AAAA6H/G/wAAANDXvnf3bm2qNu9/Pf9gc2O59OD6fKG8nFvZmMtFZn0tt1gqLaa/2bfS6fWKpdLa12J141G+UihX8uXNrfsrpY3Vyv2lHbfABgAAALro3Jee/SOJiO2vD6VTzaledwroisHDNP738fUD6L6BXncA6JlDbf+BvpLtdQeAnks6LG978c5fj74vAADA8Rj/Quvz/0nHYwPbmS51ETgmjv/ByeX8P5xczv/DyZWNgTCQh5Pt+M//V6uH6hAAAHDkRtIpyeQi0uMAI5HJ5HIRZ9PbAmSThaViYTIiPhsRfx/NfqZWn0qfmXQcMwAAAAAAAAAAAAAAAAAAAAAAAAAAddVqElUAAACgr0Vk/ps07v81Pnp1ZPfxgVPJe6PpY0Q8/N29pwNRqaxP1ea//dH8ym/uPX00W6ms3+jFEQwAAABgt+Y4PX2c6nVvAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOg3L188nmtO3Yz7/29FxNie+NmIwTidtjhdq8SZd5IYfO15SUQMHEH87ScRcb5V/kmtWzHW6EWr+EM9jj98BPHhJHtWW/98s9X3LxOX0sfW379bETvqn1Sb9V8av7n+G2jz/T97wBgXnv8p3zb+k4gLg63XP834SZv4Vw4Y/0c/3Npqt6z6+4jxltufZEesfGVlLV/e3Lq+tDK7WFgsrE5PT92auT1zc2Yyv7BULDT+tozxyy/++dV++Z9pE3+sQ/5XD5j/B88fvfhcvZhtFX/iSuvP/3yb+JnGtu/LjXJt+XizvF0vv+7iH/92cb/859vk3+nznzhg/te+/7N/HbApANAF5c2t5dlisbC+q3Dz57W94ogWi/qw0Ond2LdQ2y3q3Pi3l9+ITHtSGHozurG38NM3oxsHL9T+STu0GTr8KzcHWzsW9W6dBAAAHI+9Y2AAAAAAAAAAAAAAAAAAAACg27r563pN271JFQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgXx8GAAD//1jGyTE=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x42000000) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRESDEC, @ANYRES64, @ANYRESDEC, @ANYRES8], 0x1, 0x11ef, &(0x7f0000003980)="$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") setitimer(0x0, &(0x7f0000000040)={{0x0, 0x2710}}, &(0x7f0000000200)) socket$caif_stream(0x25, 0x1, 0x2) 1.654321297s ago: executing program 4 (id=411): r0 = socket(0x2, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x13, &(0x7f0000001c80)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYRESHEX=r1, @ANYRESHEX=r1, @ANYRESDEC, @ANYBLOB="c4e7574f46efc4ac0794f2c457b44b9843f584f4ec8f2c88283146da3bb6fa8e6f71121f792137589831f7843a3c642c33ef60117d5495f7f9f944215c82ef2f1052fafa3834e9eb542923ca40ee80dd96addf5c4dddef265fc8a82189cb03501ee3b978a168b496001d65f4f6b350178601610c907f52e41c8bacd3dd6d7b8cf1f0c60acf", @ANYRES32=r1, @ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x8}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x249a820aa78ebf5a, 0x2000, @fd_index=0x4, 0xffffffffffff0001, 0x20000003, 0x8020, 0xa, 0x1, {0x1}}) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000010c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x28, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0x3, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "72e8a1b0"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x6, 0xd7c, 0x40, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x4, 0xb5}}], {{0x9, 0x5, 0x82, 0x2, 0x30, 0x81, 0x8, 0x10}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0x9, 0x8}}}}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f00000011c0)={0xa, 0x6, 0x200, 0x3, 0xd, 0x0, 0x10, 0x6}, 0x58, &(0x7f00000012c0)={0x5, 0xf, 0x58, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x6, 0x0, 0x100, [0xc0, 0xcf]}, @generic={0x23, 0x10, 0xa, "f89d7723401101609672735f66975812da38cc8b55facda35b0ed3f65ce4eb82"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0xf, 0x5, [0x3f00, 0xffc0, 0x0, 0x17]}]}, 0x3, [{0x92, &(0x7f0000001340)=@string={0x92, 0x3, "978cc35a0d217b0534ae39745c4a9ed2a0b34b9b80fef248c1ace9cda9c3c21034288422522742efa64dde3958776a0ac87b4222a31e77966f289b88a6f204b4735b3cd7ca6ef77f1613d8e874480d90a833bbad8231a399e46c6b46311464e877964d7ffeccf6612e79ec1fda641f2c6134c89edd387a81ca5d4d6f9661cbae4c973e8245781f936e6cc8deac14cac5"}}, {0xc5, &(0x7f0000001400)=@string={0xc5, 0x3, "6f5f6aa3fe3d63ef99f3d72a98459de9461f2b2eeb48d03f7ceb63b30bf420365f2e1d8d7473167f50be716d5eb2f9e4ab7119898d7c65f87e853d137a8fd55b5469728a7defc5cb4da997c86bcda328fc971969a2b03d3cc1564f61f200b0dd38273753a5e5800a88e5adb830fd5195d84e80f3f2e4a373af4896ddd24e045fd54968e71e07dd7eb901fd57c677219728e0ce25c668caecda83de06b967664670b622f7ebf2bfc9d7d919317db01df38fffe235af6cf6373e7494fe2a6e2d6307b987"}}, {0x0, 0x0}]}) r4 = syz_open_dev$sg(&(0x7f0000001b00), 0xb, 0x101801) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000001b40)) shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000017c0), &(0x7f0000001800)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001900)={0x6, 0x25, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c1a8b49}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x1, 0x4, 0x9, 0x7, 0x2}, @generic={0x3d, 0x8, 0x1, 0xc, 0xd057}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x15}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001500)='syzkaller\x00', 0x9, 0x1000, &(0x7f0000002480)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001740)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001780)={0x4, 0x2, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001880)=[r2, r5, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000018c0)=[{0x3, 0x1, 0x5, 0x4}, {0x3, 0x2, 0x1, 0x4}, {0x4, 0x5, 0xf, 0x3}, {0x3, 0x3, 0xb, 0x4}], 0x10, 0x56, @void, @value}, 0x94) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 1.47314183s ago: executing program 3 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.45477124s ago: executing program 3 (id=417): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) 1.398574061s ago: executing program 3 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x9, 0xc) splice(r3, 0x0, r6, 0x0, 0x80, 0x7) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) 1.307169692s ago: executing program 1 (id=423): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='mm_page_alloc\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) getegid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a000000050001000700000005000432b33cec000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x4004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000003d00)='./file1\x00', &(0x7f0000003d40), 0x6000) statx(r1, &(0x7f00000003c0)='./file1\x00', 0x4000, 0x2, &(0x7f0000003e00)) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) fstat(r2, &(0x7f0000003f00)) fstat(r3, &(0x7f0000003f80)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000004000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket(0x40000000015, 0x5, 0x0) 1.211501223s ago: executing program 0 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.192778643s ago: executing program 1 (id=428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="100000000400000004000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r1}, &(0x7f0000000a00), &(0x7f0000000a40)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20) 1.187453964s ago: executing program 0 (id=429): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000100000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="f6ffffff03000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x101, 0x4) sendmmsg$inet6(r2, &(0x7f0000001140)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x841, 0x0) 1.127003835s ago: executing program 0 (id=430): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = gettid() r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x1c) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000380)={0x159, 0x0}, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe(0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000980)=""/247, 0xf7}], 0x1, &(0x7f0000000400)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}], 0x1, 0x0, &(0x7f0000000ac0)) 1.126161235s ago: executing program 1 (id=431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 1.097907045s ago: executing program 1 (id=432): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)=""/134, &(0x7f0000000100)=0x86) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x10) 1.002435166s ago: executing program 4 (id=433): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000280)={0xffffffffffffffff}) write$binfmt_aout(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000001000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 555.553372ms ago: executing program 3 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES8], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES16=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'gretap0\x00', &(0x7f0000000f40)={'syztnl0\x00', 0x0, 0x40, 0x40, 0x0, 0x4, {{0xb, 0x4, 0x0, 0x38, 0x2c, 0x65, 0x0, 0x0, 0x29, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x17, 0xb0, [@private=0xa010100, @initdev={0xac, 0x1e, 0x3, 0x0}, @dev={0xac, 0x14, 0x14, 0x2b}, @multicast1, @multicast1]}]}}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) getrandom(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000940)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3}}, './file0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x8, '\x00', r1, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000060000000000000001000080181000", @ANYRES32=r0, @ANYBLOB="0000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000950000000000000051184a7efc5cc3938a2691d1cb10df562e9e941a1334d2deedcbd14c267a479b3e3db2e1981a9e32c33605f2144836c0b38818680fdbeabd8cde636c08f4"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x75, &(0x7f00000008c0)=""/117, 0x41100, 0x24, '\x00', r1, 0x4a446b1a52081f5, r3, 0x8, &(0x7f0000000a80)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0x2, 0x8001, 0x100000}, 0x10, 0x1a667, r4, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) r5 = syz_open_dev$evdev(&(0x7f0000000980), 0xfffffffffffffffd, 0x38f901) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_getevents(0x0, 0x1, 0x0, &(0x7f0000000e40), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x18, 0xc, &(0x7f0000000a00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x79}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xf}], &(0x7f00000005c0)='syzkaller\x00', 0x10000, 0x78, &(0x7f0000000fc0)=""/120, 0x41000, 0x44, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000001040)={0x9, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[r0, r3, r2, 0xffffffffffffffff, r0], 0x0, 0x10, 0x2, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="54d38ea31c55150d510d20be214d2acc461a7b6e58606848bc90cb376a3eebd0d6189a853d964bd3dd332a34c61c72f734a0d1ec6da7", @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r9, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) ioctl$SIOCPNENABLEPIPE(r9, 0x89ed, 0x0) io_submit(0x0, 0x1, &(0x7f0000000940)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x0, r6, 0x0}]) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0x42, 0x4, 0x370, 0xffffffff, 0xf8, 0xf8, 0x1b8, 0xffffffff, 0xffffffff, 0x2d8, 0x2d8, 0x2d8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xf}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x7}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@multicast2, @private=0xa010102, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0x0, 0x1}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x17, 0x0, 0x0}) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRES16=r12, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r13}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r11], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 460.808784ms ago: executing program 3 (id=435): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 383.328585ms ago: executing program 2 (id=436): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x73}, 0x8) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 350.162865ms ago: executing program 3 (id=437): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000740)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000e80)={0x3, 0x80, 0x9, 0x27, 0xda, 0x9, 0x0, 0x17, 0x4, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0xe758}, 0x400, 0xf, 0x8, 0x6, 0x3620, 0x2, 0x40, 0x0, 0x8001, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x68, 0x8, 0x0, 0x0, 0x0, 0xfff, 0x4004, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x1004}, 0x1901c, 0x0, 0xfffffffb, 0x2, 0x659, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r3, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f00000000009500"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0xf8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x7f, 0xe, 0x18, 0x20, 0x9}, 0x106, &(0x7f0000000780)={0x5, 0xf, 0x106, 0x4, [@generic={0xdb, 0x10, 0xa, "ce2a5d7145ffc0f00d3ee61213851f490c4f7a2ec03d94a93b58457ffe6a39663fbe074b4cef15793cbd3c42b6d987d8ce0da6f680a0772080bfbf0b3b24c378213d3df43d67a9426b2f8e928a0dd6affa21e5dde3d212bd5c21ebf0a9f0f3ab7d7b500df57a6b3b9297577b1b6cb8b36de16dc7bc84c991247e877d73f0cf9ef090b04e29ce7d318dc9803ae9b6970e388a3b7784edbf78d0681d176350f8b18c9d17d069a5c412832d0294bcbcdea2106b210f15688e86e1f84fc6e9c2afb7217967ee5bae7b0d4a05300b37db17804a1aa7daaaba0e0c"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "09a4b84cb0a7c0a79e5584fa84483566"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x0, 0x8000}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x0, 0x7, 0xf1fd, 0x41}]}, 0x9, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x34ac}}, {0xfa, &(0x7f0000000900)=@string={0xfa, 0x3, "d6eb3fcf355a85074a829d643d01c78dcbfe791568c5ac805a8b08274b2648670cb6627e959d5fbc8993d590b932d31d3eddc82a6c316c054552d888ed0bbf57b4520bf6bf2c653ddf3d8490656979217cdabfafbf2f5447c6b33778dc00ff7f678977ce62a7c634f92d4da865a478ebac6089cf70fa9ba31cb2650f8c92c9cc51a475f8555f9b03a7d4a0ff4a96e4205e6f1167ff942b982b94ffc5227635db3d4e1ff368db3f69b5cd9277f0c5ae6dddc65f2e59839440b3bc997b7eb55e33fd64de9c87977cf3ebf579f707c6ff1b7b0cc82af7b147dbab4ca8125d52f4cab550e1481bf02b8309117b3f5d9c1e79c4339742812e23d8"}}, {0x33, &(0x7f0000000a00)=@string={0x33, 0x3, "f7aa330f8d2cd40e9cec557248084498dabb00c95c0a89dc84d5b4c88816479f9546468b3637df5527cdf7cc49a1826409"}}, {0x53, &(0x7f0000000a40)=@string={0x53, 0x3, "3a4da344553c2a0af61179f1df5962a0404ba96f6142adfc1bf31c9952e2c129bbf0e1114320b25042ec86546acb6dcd6a2d3a7f613d411e730a73587b9bd3422a3b44148df07df7dfcde42bf65f9d3027"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x425}}, {0x8f, &(0x7f0000000b00)=ANY=[@ANYBLOB="8f0304b60766b678e03d0460d96758923c8330df9a1287959319d0b3b3fc84ae68c2f49cacfb01d15912484f78c998f92dc204d3fd4e7e1e5b1858e9157556a076174fd2eb839b6238a7c583e66a6ad87c5fe7a14abe26caa49c247b1f4e8d92865543ae1eb2d7e44f05f5c305129c690bd5dbcd642692fb413e824f14ddee36b231426a5b8a7c0000000000000000"]}, {0x95, &(0x7f0000000bc0)=@string={0x95, 0x3, "27f519260040f871d4c09566bc54d0501ed02a7ec3c77e4e815e0d9280f2b899e8f2942739eb4ca2c1c00c6afd8cf45b24a111cf2fd6b8a9963898f0e1d2703d21915f1575e95cc6be178d43b31320684583352fd9bbd9ed46696a9953db6532fd52d7c89a009e20c60eb012a0026ad327c79c592c06f03ca4731da25cadc756c1fdfcaf961d7a500c25f8824ad430d6435e28"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x3409}}]}) r5 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000f00)={'#! ', './file0', [{0x20, 'veth0\x00'}, {0x20, 'veth0\x00'}, {0x20, 'veth1_to_bond\x00'}, {0x20, '\xd9-'}, {0x20, '!{!*},{'}, {0x20, 'veth0\x00'}, {0x20, 'hashlimit\x00'}, {0x20, ')'}], 0xa, "6ac613e9c83d481398ced2e539a1b8dac1d600bf52ba8e582ad6f784f1fafa0aa747c5148811a9b5ce1aabd818c17c64e2ee1f49b9cc12be1ad4b9b7"}, 0x83) bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_clone(0x4090000, &(0x7f0000000580)="0cefa0ae9eb65f543a9c937c759404afb96fd9328e3418213f", 0x19, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="2db2a4c6ffa2a6f0a8b85fc25b5fc67dc7aaafe2ced217ee7c5265f5ba") syz_open_dev$tty20(0xc, 0x4, 0x1) vmsplice(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x0) 340.649155ms ago: executing program 2 (id=438): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000700)='mm_page_alloc\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) getegid() r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$HIDIOCGNAME(0xffffffffffffffff, 0x80404806, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000002060108000000000000000000000000050005000a000000050001000700000005000432b33cec000900020073797a31000000000c000300686173683a697000"], 0x44}}, 0x4004010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000030601020000000000000000000000000500010007"], 0x1c}}, 0x0) getpid() newfstatat(0xffffffffffffff9c, &(0x7f0000003d00)='./file1\x00', &(0x7f0000003d40), 0x6000) statx(r1, &(0x7f00000003c0)='./file1\x00', 0x4000, 0x2, &(0x7f0000003e00)) r9 = getpgid(0x0) syz_pidfd_open(r9, 0x0) fstat(r2, &(0x7f0000003f00)) fstat(r3, &(0x7f0000003f80)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000004000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) socket(0x40000000015, 0x5, 0x0) 267.060616ms ago: executing program 0 (id=439): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x10b}, {0x10, 0x110, 0xc}], 0x20}, 0x0) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f00000002c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='kmem_cache_free\x00', r4, 0x0, 0x8}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffe}, 0x18) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f00000001c0)) setrlimit(0x9, &(0x7f0000000000)) 233.222617ms ago: executing program 1 (id=440): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) (async) r0 = open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f0000000040)=@caif=@rfm={0x25, 0x1, "d8eeec916126e3e20ade46c215932dcd"}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="0163f896fc1e8568f75d9bb8ec05e0e1f8b442bccb0fe62aa76effc3f200", 0x1e}, {&(0x7f0000000340)}, {&(0x7f0000000440)="2a1353aa7e9bd712672bbbfd2aeece3b37762479af8bb6294ae9aba4b2ab9f068a4d9a7803fb2ceb4135acf210fe384fa9f9fa8763320fb51ce6f59f8c8925cacb8e7cdc2a693bbab57f53d9c2a694381ee02988f0e5a1370690d89e0aaf6d5a8aff1f903a1812c3083e1dc74dffcf1dcdcd88731e664dcdf701a7549476c0c0b712c25e92de6dfcbd2e78d6189cceaf86ca0a4e17970c5fb419d635191a894f09a1fa741db2c016903b395a1f61fe086f95cd", 0xb3}, {&(0x7f0000000580)="b359acfc61dd81471c8e792dbae4685d648d9069239f0f5914ce356bd01821acad8e9e48b6f5b65c2370a941654d74fb47480aa067a9a2167a4ea0e99dbbef83aa765118a39394541551f017cae8d6b4a8a90d156f7ab9cfd29f6b498237d3d515f8bff80518f537ecf2d9a148d74a163714829153488381ba4b189189f503ce6d45404005c7eeee458aad5ef3e9845874b5f6d2a4c1c1ce51b960766760673844a05dc6a2533718d5adefbdeacb4e3db84577eadac78c34e7403db6e0509c63136788b727b75c6d61d11fb126d812f80a410d", 0xd3}, {&(0x7f0000000380)="224729a962b8f3da57beb54aa315811a31aec78ddb0c9b53ca50b85daca9ae962657802f5fab900d61a1b29658a9ce6ce5328d753f7bf635", 0x38}, {&(0x7f00000003c0)="335e7f80e5664c014fed1efcf2bf3339bf1d9b57b74832ce5dbd64f99eb297066850ad618e8e08f74cdc41bf94605090cc", 0x31}, {&(0x7f0000000700)="b313a90335ec2828364f3e7ecf5d22892e354e0f8dd0f0fd5c1553f5a3f169a212e256e483137a875781e1ad03e451592cfcd742ca389bb7dc05185efee437af54ac7c17b76a9efa81529f86594a2021fe7b31ab119993889b57841b66b56ec9fdeffd817ccdb320e6fc3f4baccb18c4cd4106530c23133799560466032f238e8c722b3b718dd82ee34cc84f559d34a938b695bc0acb1a398a0b22ad26270222", 0xa0}], 0x7, &(0x7f0000000840)=[{0x80, 0x10d, 0x4, "c9f6ee43c1c5e6e56e04948c396b88bfed8547b94694b20a2f7e3bca257465bbd475711b6bb44f5a43c7ee159b6160283406d4155b270cb862af7d8ed02d30f6ee9672705416e15528c7b31136bef7bb8226e37aa9185700edd6b5dd4721662107b91cbf1511b173cbbaed"}, {0xf0, 0x88, 0x800, "88ba8ad466ba7ae1860d1509b16cf62419efe492a9032f6f4b4c9b4610881f47eb0c9de92bd74c60689e4ce0526a26cab8a10759e904fc16d772eeb4b65291839b29647c5f4f002d297c24e983cdc19dedc54febf3bb11370aa4d131b9052ef92dae6ceb81b08d19e894826b110d2d77530317cd32b1ba0e9095a2fc9826fb1f6a68be03bde280d7a3f9cbc4e4d11402726a9f3ffb568833d5316c4a265b9673d6a358d0e3caf1b100a9c74cd4ed2dd4efc10fcfd82e39dced72fc2dcd89cc866f0c6aa0000da5a26dabab3ff65c85d06f70558ad44d8677d30c6fb1a3"}, {0x100, 0x29, 0x9, "1ba36531bd09d22948b7ac7de3177ffab7bfcbd52601f2a287f0eec1ef00b73b35f7aa4ca4675777a1caa7b67c949af339fe2264cd51e33a54e17ee88245410a97bff8ad2ad5197f6b242ccc324a7c6819e02a3e00f4fb6e5bb7e1ca3da82883cc73fafc1de904621e538b27c091b345a41e921e37ccd9b144b1674da76cd469151b5cfefd2d9147f931c86548f0990e8bfe2044d7178d25e5e1f1fd981fd1371358b0b7a178cad20db9fdf15a5b42fde68c12c2c9b3e15390cf268b863b3aa135ffeef6398c2cafa397e9dbf226e830f4e1233854be00289e61c7eff21ca17d8e79221c34e36346d6518945f4ac"}, {0x80, 0x107, 0x5, "7a074d0474ce67c5f141cafab37269060111c1f65054e9ebae0928adea039d84347835e847098ce4b58c353df191b642fdcbb8dcd68a6117636afd7e61008e642f047a24454dc1caea279595d52167c4907ca931fab90438c61ae6dc28d3ed708058fae2a9796be38a209a47fe1506"}, {0x48, 0x1, 0x7ff, "fb07933be1ebd9dd608d7b0b94cbb1349bd0a3c3fecb3395faf6aa9b44b461b7a20e854dd93305cfb290203dfa76294a0196"}, {0x30, 0x0, 0xfff, "e70f8647656df3094d6d361d7a50a95b6f2663b1fc4596747f4055"}, {0x30, 0x29, 0x8, "b03eba25dc5103d45ca3b3021989648f4a61eb787ca2789422a4d6af0d231c1e"}, {0xe8, 0x6, 0x1, "2cfa5fc59534b2801541e2e4a78d00cb579a9b23ad14210e09dcdca56a91d91a459beb58d17582d8307174f58705c0764368d22788620a7b5e3cb1093559dde43004840f153c75be855ed39f5a05f892d3399df6964639f43d0b81f140c4af5ca820dc2c4ba3e5fafd36272dd5ddf9287322a255f6c049f1b88d9ecfe861cea681e1b759e4d7625f0adcac92905af4276f4593ee1601edb3de17e0491c184038b53303ad0fe1772705b8fd5fd202fc0d8956daa1684af591b09a0fbf5026f30f20e75b0a82644e715528a0f85ede0c04eeff8eb982e8"}], 0x480}, 0x4000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r2}, 0x10) fallocate(r0, 0x10, 0x2, 0x7000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mlxsw_sp_acl_atcam_entry_add_ctcam_spill\x00', r0, 0x0, 0x5}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000340)={0x6}, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) mbind(&(0x7f000056e000/0x2000)=nil, 0x2000, 0x4000, &(0x7f0000000380)=0xfff, 0x40, 0x5) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) syz_open_dev$usbmon(&(0x7f0000000d40), 0x8, 0x10140) (async) syz_open_dev$usbmon(&(0x7f0000000d40), 0x8, 0x10140) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000240)={0x3920e, r3, 0x18, 0x0, 0x2}) 210.592467ms ago: executing program 2 (id=441): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) set_robust_list(0x0, 0x0) r2 = memfd_secret(0x80000) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000001600)="a04b2d43db1c3c41387c78eb6374fea3a1374a954cf027735dedd6289278d961480b6be4478b0162d0c1d1b174867bb92b08136e0819e87ecf953c19c4b389976c98b2c7456649af24017c96be726827060ccddf6417307b66a90c027b217f706aa51159270bb454135e53ce30a13b7ab7b2124eedb887fe43ed066912147f2266005dd683fa92a4407a4c08dfcdcfe2bf80d2c9a30227ebdce74fd5b3b6b851dc67d36376b41350e4979c617551e25d1ec7e488ac3a65916c1c33cb3cca0c9af61bb7caf708", 0xc6}, {&(0x7f0000000240)="6b0dbeae0eb56ffd992aed197cdb22969f7d42233fc1337362d4ff29eb3e2754de5ee481d3dcb0b98c20913774823c1acc3acf1ab781402f5149e2ecbdc2118d305739d207a503337278be0a3a36bcde7f19a91f66cf21a5e2671341ccba7dd87a6ef1664e80a7f6ec62303370861b263e8ab82b93c6044dee716d68b1f2586214a6781e778f92cd2df1ae2d0a34519332ee1ea6d7cfca65", 0x98}, {&(0x7f0000001700)="a4e993bc33f290472b28034ac2f208e05f47a048675721f3cda9952973302be80ee23cb8902062bbe46561f372749e8d175733ffb9ce60c56ba92fdb8063b2151e4ae0a6658226d60f479563e4dabc27f990d1d121ba93dafc53efbbd302ad6d28b42c13564edb29038ce4346eb56a3b11f08b4ce3be550ad5016fed3090c10d53678debf8d99a6f21ee4373450fdcee1c467b577ec2fb0c8404e9f665f1ad1f1ce2d7ec252cdf60bb3ab93304a9336ee347a3c0162cc4e0792e8427c6e91b7f01d16f864070ff89e3fa0a67b4d9", 0xce}, {&(0x7f00000014c0)="53f5a339ce563dfed62cfe17e9c620db149d704aaa00effed169a22e83f870a1b687772f33b590a5483d2fddfa71cdca694c6dce0b1d5293a57a7001b0679bbecc5df0a9091a23bf05894c562dd74f6b60a97109390996794862c032869f3402f6610c4dcc39266e6efdce8c253ce3f36006570035651f38d3d036e84d42172d4fc647507285a2f88fb8ff09f533e432ade5e5307588c47b37cea66de5509a26afb36f005db8ee3e82ae4a35cc8cee35a495ccc6", 0xb4}, {&(0x7f0000000000)="d8a4e32e6e025a65107b526ad347af4e26d9401fda187352a32f965fef1a23715e666107be4a7a5a5a8173430958f81c2bc7d5af4f", 0x35}], 0x5, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000050000000004000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0xff, 0x0}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x21, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1080, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) unshare(0x2c020400) r7 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) msgrcv(r7, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001900)="cd7af37b4a8298b3d811db86e68b377bfe945e51c9ecdec12dd4120c17738ea577b73c84791ba6801199f37766e42e63c814a7876d87984b4b71a256b87b0801262bede7b53db862c6205268c3a9687949356b18fa807240ad7f39b95e0ac0f27bd0af93f1352a404dafafa3f407e5f44ec320f345589dfd00cafb7ed36aee28b29a89ee530bf6079e3607371be701c10bf939e0b9b0cbfbda7af111d6932bd3f54d3d5268556d116141d798cd5e7d6367439062189d53a07621bfd459a44569a34e9a27f532de07806391211878b0f021b8ecfa1ebe96bb3c24f996406ce37401b81a82f41f", 0xe6}, {&(0x7f00000001c0)="340a6bb8a20e8695ca92e482fba810fc4465baf6841b037e35fa812ec1745e1bcf13", 0x22}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) gettid() r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r9, 0x660c) write$cgroup_subtree(r6, &(0x7f0000001800)={[{0x2b, 'perf_event'}, {0x2d, 'rdma'}, {0x2d, 'hugetlb'}]}, 0x1b) 104.190018ms ago: executing program 2 (id=442): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 103.682048ms ago: executing program 4 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x0, 0x0) mmap$usbmon(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$MON_IOCT_RING_SIZE(r1, 0x9204, 0x47cdc) 80.221869ms ago: executing program 1 (id=444): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000740)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) r3 = perf_event_open$cgroup(&(0x7f0000000e80)={0x3, 0x80, 0x9, 0x27, 0xda, 0x9, 0x0, 0x17, 0x4, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x3, 0xe758}, 0x400, 0xf, 0x8, 0x6, 0x3620, 0x2, 0x40, 0x0, 0x8001, 0x0, 0x3}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x68, 0x8, 0x0, 0x0, 0x0, 0xfff, 0x4004, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1, 0x1004}, 0x1901c, 0x0, 0xfffffffb, 0x2, 0x659, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, r3, 0xb) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="6daa00000000000071101f00000000009500"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000700)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xdf, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x7, 0x1, 0x2, 0xf8, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x3, 0x2, 0x7}}}}}]}}]}}, &(0x7f0000000d00)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x310, 0x7f, 0xe, 0x18, 0x20, 0x9}, 0x106, &(0x7f0000000780)={0x5, 0xf, 0x106, 0x4, [@generic={0xdb, 0x10, 0xa, "ce2a5d7145ffc0f00d3ee61213851f490c4f7a2ec03d94a93b58457ffe6a39663fbe074b4cef15793cbd3c42b6d987d8ce0da6f680a0772080bfbf0b3b24c378213d3df43d67a9426b2f8e928a0dd6affa21e5dde3d212bd5c21ebf0a9f0f3ab7d7b500df57a6b3b9297577b1b6cb8b36de16dc7bc84c991247e877d73f0cf9ef090b04e29ce7d318dc9803ae9b6970e388a3b7784edbf78d0681d176350f8b18c9d17d069a5c412832d0294bcbcdea2106b210f15688e86e1f84fc6e9c2afb7217967ee5bae7b0d4a05300b37db17804a1aa7daaaba0e0c"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "09a4b84cb0a7c0a79e5584fa84483566"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x6, 0x0, 0x8000}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x0, 0x7, 0xf1fd, 0x41}]}, 0x9, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x34ac}}, {0xfa, &(0x7f0000000900)=@string={0xfa, 0x3, "d6eb3fcf355a85074a829d643d01c78dcbfe791568c5ac805a8b08274b2648670cb6627e959d5fbc8993d590b932d31d3eddc82a6c316c054552d888ed0bbf57b4520bf6bf2c653ddf3d8490656979217cdabfafbf2f5447c6b33778dc00ff7f678977ce62a7c634f92d4da865a478ebac6089cf70fa9ba31cb2650f8c92c9cc51a475f8555f9b03a7d4a0ff4a96e4205e6f1167ff942b982b94ffc5227635db3d4e1ff368db3f69b5cd9277f0c5ae6dddc65f2e59839440b3bc997b7eb55e33fd64de9c87977cf3ebf579f707c6ff1b7b0cc82af7b147dbab4ca8125d52f4cab550e1481bf02b8309117b3f5d9c1e79c4339742812e23d8"}}, {0x33, &(0x7f0000000a00)=@string={0x33, 0x3, "f7aa330f8d2cd40e9cec557248084498dabb00c95c0a89dc84d5b4c88816479f9546468b3637df5527cdf7cc49a1826409"}}, {0x53, &(0x7f0000000a40)=@string={0x53, 0x3, "3a4da344553c2a0af61179f1df5962a0404ba96f6142adfc1bf31c9952e2c129bbf0e1114320b25042ec86546acb6dcd6a2d3a7f613d411e730a73587b9bd3422a3b44148df07df7dfcde42bf65f9d3027"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x425}}, {0x8f, &(0x7f0000000b00)=ANY=[@ANYBLOB="8f0304b60766b678e03d0460d96758923c8330df9a1287959319d0b3b3fc84ae68c2f49cacfb01d15912484f78c998f92dc204d3fd4e7e1e5b1858e9157556a076174fd2eb839b6238a7c583e66a6ad87c5fe7a14abe26caa49c247b1f4e8d92865543ae1eb2d7e44f05f5c305129c690bd5dbcd642692fb413e824f14ddee36b231426a5b8a7c0000000000000000"]}, {0x95, &(0x7f0000000bc0)=@string={0x95, 0x3, "27f519260040f871d4c09566bc54d0501ed02a7ec3c77e4e815e0d9280f2b899e8f2942739eb4ca2c1c00c6afd8cf45b24a111cf2fd6b8a9963898f0e1d2703d21915f1575e95cc6be178d43b31320684583352fd9bbd9ed46696a9953db6532fd52d7c89a009e20c60eb012a0026ad327c79c592c06f03ca4731da25cadc756c1fdfcaf961d7a500c25f8824ad430d6435e28"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x3409}}]}) r5 = socket$inet6(0xa, 0x2, 0x0) write$binfmt_script(r5, &(0x7f0000000f00)={'#! ', './file0', [{0x20, 'veth0\x00'}, {0x20, 'veth0\x00'}, {0x20, 'veth1_to_bond\x00'}, {0x20, '\xd9-'}, {0x20, '!{!*},{'}, {0x20, 'veth0\x00'}, {0x20, 'hashlimit\x00'}, {0x20, ')'}], 0xa, "6ac613e9c83d481398ced2e539a1b8dac1d600bf52ba8e582ad6f784f1fafa0aa747c5148811a9b5ce1aabd818c17c64e2ee1f49b9cc12be1ad4b9b7"}, 0x83) bind$inet6(r5, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_clone(0x4090000, &(0x7f0000000580)="0cefa0ae9eb65f543a9c937c759404afb96fd9328e3418213f", 0x19, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="2db2a4c6ffa2a6f0a8b85fc25b5fc67dc7aaafe2ced217ee7c5265f5ba") r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000dc0)={0x2, {0x2, 0x1, 0x7, 0x6}}) vmsplice(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x0) 65.445289ms ago: executing program 4 (id=445): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000200)=""/209, 0xd1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000480)={0x335, @tick, 0x0, {}, 0x40}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140)) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f00000000c0)={{0x7, 0x7f}, {0x10, 0x9}, 0x8, 0x1, 0x80}) 65.034589ms ago: executing program 2 (id=446): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) 38.66244ms ago: executing program 0 (id=447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 25.80757ms ago: executing program 2 (id=448): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x3, [@union={0x2, 0x1, 0x0, 0x5, 0x1, 0x9, [{0x6, 0x4}]}, @const={0x2, 0x0, 0x0, 0xa, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x25, 0x2}, @enum64={0x8, 0x3, 0x0, 0x13, 0x0, 0xc, [{0x2, 0x0, 0xfffffffa}, {0xe, 0x4, 0x2}, {0xf, 0xa906, 0xff}]}]}, {0x0, [0x0]}}, &(0x7f0000000800)=""/254, 0x7f, 0xfe, 0x1, 0x6, 0x0, @void, @value}, 0x28) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000cc0)={'sit0\x00', &(0x7f0000000b80)={'syztnl1\x00', 0x0, 0x10, 0x7, 0x8, 0x0, {{0x3f, 0x4, 0x0, 0x4, 0xfc, 0x68, 0x0, 0xfc, 0x4, 0x0, @local, @broadcast, {[@timestamp={0x44, 0xc, 0xfb, 0x0, 0x8, [0xc818, 0x7]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xc9, 0x3, 0x0, [{@remote, 0x1}, {@loopback, 0xfffffff9}, {@loopback, 0x5}, {@remote, 0xb11}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @timestamp_prespec={0x44, 0x44, 0x7d, 0x3, 0xc, [{@loopback, 0xfffffffb}, {@loopback, 0x4}, {@loopback, 0x401}, {@broadcast, 0x4}, {@broadcast, 0x2}, {@broadcast, 0x8001}, {@local, 0x4176}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @cipso={0x86, 0x54, 0x0, [{0x0, 0x4, "4cfc"}, {0x7, 0xf, "a5584327a1cfa27818b95d4eb7"}, {0x7, 0xe, "362ea29878e255de7549a54f"}, {0x0, 0x8, "b456f4224af5"}, {0x6, 0x12, "f4eace98aeb30165eb30b404d1910d03"}, {0x0, 0x2}, {0x2, 0x11, "73bc0684ed579c0de89af6c91f7074"}]}, @noop, @lsrr={0x83, 0x13, 0xbe, [@private=0xa010101, @multicast1, @dev={0xac, 0x14, 0x14, 0x32}, @remote]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000a00)={'syztnl2\x00', &(0x7f0000000980)={'syztnl2\x00', r0, 0x2f, 0x4, 0x2, 0x0, 0x10, @private2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x700, 0x8000, 0x0, 0x4}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)='%pi6 \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x20, 0x100, 0xfffffff9, 0x1, 0x40008, r2, 0x10001, '\x00', r1, r2, 0x1, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r5}, 0x38) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x18) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, r5}, 0x38) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x149a82, 0x0) sendfile(r7, r7, 0x0, 0x7) r8 = syz_io_uring_setup(0x3676, &(0x7f000000a9c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES2(r8, 0x6, &(0x7f0000001480)={0x20, 0x0, 0x20000000, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 0s ago: executing program 0 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000006006000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xbb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES16], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86641253b100000c1100208130f9f695e5d2be00000000000001ff02000000000000000000000000000100004e23000c9078e1080000"], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) listen(r1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a4", 0x1}, {0x0}], 0x2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f9787933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010b8c057327a5f5781f87cfa8a320f5f99c7d908dfe6f9574881823d0907d5dc1e04b4e6fb1cbd4512547a40360881df9a2c700368be051775e6fdd63f5ba238aa161e6fc6d952f023396e635101f87404c375efbf669b0d38"], 0x10b8}, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='cruft\x00\x00i`=', @ANYRESHEX=0x0, @ANYRES8=0x0], 0x5, 0x654, &(0x7f0000000740)="$eJzs3d1u2+b5APBH+cDf8B/Ihm0IgiBN2WQDEiB1JLlxYPRIo2mbrSQKpFwkR0XQOEUQpx2SDlhytJxkG7BdRE93EdsVFbuEDaTk1ElsK1+1iuD3E5L3FfmQ70NZ4GNaIhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLTStXa704p+Pty6kRwsXSuLwSHzd9f37+eaQ8aNaNX/YmEhzkwmnfnNj7NP1/9diHOTZ+dioW4W4vH/n/7lp78+cWx3+UMSOhIPHz2+d2tnZ/vBvBOZk41smFdFPuhtZEleFcnqykr76uYvqmQ972fVzWqcDZK0zHrjokwupZeTzurqcpIt3Sy2hhtrvX62O/H6x912eyX5bGmU9cqqGF79bKlKN/N+Px9uNDH17Drmev1G/DwfJ+OsN0iSO3d3tpdnJVkHdV4lqDsrqNvudjudbrezcm312vV2+8RLE9oviJci5v+mZb7e8R4c3tyxaf2PfuQxjK24Ecm+jzTWoowiBgfMn9qt/7+7mh067t76v1vlz/w4+2w09f/85Nn5g+r/Abkc3eNhPIrHcS9uxU7sxHY8mHtGR/vYiCyGkUcVReQxiF4zJZlOSWI1VmIl2vFlbMZ6VJHEeuTRjyyquBlVjCNr3lFplJFFL8ZRRBlJXIo0LkcSnViN1ViOJLJYiptRxFYMYyPWotes5U7cbV735UNyfBbUeZWg7iFB6j9v793vxOEN/Xe3/gMAAADvrVbz1/f6+P9kfND01vN+1p53WgAAAMA71Hzyf65uTta9D6Ll+B8AAADeN63mHLtWRCzGh5Pe7plQ/ggAAAAA74nm8//zdbNY9z6MluN/AAAAeN/8deY19qvR/7X+9Z8oy5OtJ6Mbv23d79VxvfvHJ8sdf3GN4/WzrVPTlTTNyonpszQ715pe/fLZRTB/mDZ3ZuXReiGBZ2t4jQTi7/HRJOaj25P29u6cySiL63k/W0qL/qed6PVOHRtnN8Z//Obun6LZ/L8NB6dacefuzvbSV9/u3G5yeVKv5cn96QUUX7qO4iG5fNdcb6E552LfLT7ZnIgxHXdxMm577w/g2GTxY68x5tO4MIm5sDhpF5/f/oV6zM7SQVs/zaLzllv+NC5OYi5eujhp9smiOyuL7t4s3ui1eIUslmdlsfyWWQDMy50ZVaj1cuF/g73ca1f3N/n1Ip7GpUnMpbPNjvXE2X326O1Ze/T2W1a3f8blSczl3eCDamw97j9eqKrf1wt8f+C4Vb/bql/C49/d/0Ocfvjo8cd379/6evvr7W+63eWV9ift9rVunGw2Y9qoPQDsY/Y9dmZGtD6ZcVT9q2dfKViKr+Lb2InbcaU526D5xsG+a13c8zWEKzOOWhf33OHlyoyjusU9N3p59djlI/hJAMDRuTCjDr9K/b8y47j7+Vp++NHx3loOAPw0svKHViz8pVWW+ejLzupqpzfezJKySD9PynxtI0vy4Tgr083ecCNLRmUxLtKiX3e+yNeyKqm2RqOiHCfrRZmMiiq/0dz5PZne+r3KBr3hOE+rUT/rVVmSFsNxLx0na3mVJqOt3/fzajMrm4WrUZbm63naG+fFMKmKrTLNlpKkyrI9gflaNhzn63ndHSajMh/0ypvJF0V/a5Ala1mVlvloXExWuDtWPlwvykGz2qV5v9gA8DPx8NHje7d2drYf/ISdeW8jAPA8VRoAAAAAAAAAAAAAAH7+juL8Px0dnbfs/PmoB533ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXva/AAAA///DxFbx") execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): [ 21.159520][ T29] audit: type=1400 audit(1746234487.174:81): avc: denied { read } for pid=2988 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.10.52' (ED25519) to the list of known hosts. [ 27.688505][ T29] audit: type=1400 audit(1746234493.694:82): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.689618][ T3294] cgroup: Unknown subsys name 'net' [ 27.711334][ T29] audit: type=1400 audit(1746234493.694:83): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.738669][ T29] audit: type=1400 audit(1746234493.724:84): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.891166][ T3294] cgroup: Unknown subsys name 'cpuset' [ 27.897371][ T3294] cgroup: Unknown subsys name 'rlimit' [ 28.088455][ T29] audit: type=1400 audit(1746234494.094:85): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.111912][ T29] audit: type=1400 audit(1746234494.094:86): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.132385][ T29] audit: type=1400 audit(1746234494.094:87): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.137857][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.152775][ T29] audit: type=1400 audit(1746234494.094:88): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.181637][ T29] audit: type=1400 audit(1746234494.104:89): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.206517][ T29] audit: type=1400 audit(1746234494.104:90): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.213195][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.229809][ T29] audit: type=1400 audit(1746234494.174:91): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.371645][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.445119][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.479596][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.502385][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.509531][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.516758][ T3307] bridge_slave_0: entered allmulticast mode [ 29.523232][ T3307] bridge_slave_0: entered promiscuous mode [ 29.529947][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.537067][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.544558][ T3307] bridge_slave_1: entered allmulticast mode [ 29.550933][ T3307] bridge_slave_1: entered promiscuous mode [ 29.567596][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 29.595873][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.608604][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.636716][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.643910][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.651098][ T3305] bridge_slave_0: entered allmulticast mode [ 29.657629][ T3305] bridge_slave_0: entered promiscuous mode [ 29.683720][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.690820][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.697951][ T3305] bridge_slave_1: entered allmulticast mode [ 29.704444][ T3305] bridge_slave_1: entered promiscuous mode [ 29.720588][ T3307] team0: Port device team_slave_0 added [ 29.730908][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.738023][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.745195][ T3318] bridge_slave_0: entered allmulticast mode [ 29.751703][ T3318] bridge_slave_0: entered promiscuous mode [ 29.767167][ T3307] team0: Port device team_slave_1 added [ 29.784546][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.791790][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.799119][ T3318] bridge_slave_1: entered allmulticast mode [ 29.805811][ T3318] bridge_slave_1: entered promiscuous mode [ 29.814935][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.824457][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.831537][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.857596][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.885915][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.895371][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.902404][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.928428][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.939191][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.952611][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.959736][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.966978][ T3304] bridge_slave_0: entered allmulticast mode [ 29.973353][ T3304] bridge_slave_0: entered promiscuous mode [ 29.995562][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.004890][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.012058][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.019276][ T3304] bridge_slave_1: entered allmulticast mode [ 30.025749][ T3304] bridge_slave_1: entered promiscuous mode [ 30.043544][ T3305] team0: Port device team_slave_0 added [ 30.052975][ T3305] team0: Port device team_slave_1 added [ 30.059629][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.069966][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.102737][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.129621][ T3318] team0: Port device team_slave_0 added [ 30.142411][ T3307] hsr_slave_0: entered promiscuous mode [ 30.148397][ T3307] hsr_slave_1: entered promiscuous mode [ 30.154956][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.161942][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.188010][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.201471][ T3318] team0: Port device team_slave_1 added [ 30.207920][ T3304] team0: Port device team_slave_0 added [ 30.220175][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.227349][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.253345][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.276670][ T3304] team0: Port device team_slave_1 added [ 30.300105][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.307354][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.333406][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.362499][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.369475][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.395566][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.411303][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.418275][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.444210][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.469268][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.476260][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.502291][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.515676][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.522878][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.530132][ T3316] bridge_slave_0: entered allmulticast mode [ 30.536762][ T3316] bridge_slave_0: entered promiscuous mode [ 30.545706][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.552953][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.560128][ T3316] bridge_slave_1: entered allmulticast mode [ 30.566516][ T3316] bridge_slave_1: entered promiscuous mode [ 30.582624][ T3305] hsr_slave_0: entered promiscuous mode [ 30.588753][ T3305] hsr_slave_1: entered promiscuous mode [ 30.594722][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.602365][ T3305] Cannot create hsr debugfs directory [ 30.618968][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.651056][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.685863][ T3304] hsr_slave_0: entered promiscuous mode [ 30.692013][ T3304] hsr_slave_1: entered promiscuous mode [ 30.697854][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.705678][ T3304] Cannot create hsr debugfs directory [ 30.718229][ T3318] hsr_slave_0: entered promiscuous mode [ 30.724473][ T3318] hsr_slave_1: entered promiscuous mode [ 30.730221][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.737825][ T3318] Cannot create hsr debugfs directory [ 30.751877][ T3316] team0: Port device team_slave_0 added [ 30.788929][ T3316] team0: Port device team_slave_1 added [ 30.835844][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.842930][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.868912][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.891285][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.898258][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.924230][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.961717][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.970889][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.003701][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.018510][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.032057][ T3316] hsr_slave_0: entered promiscuous mode [ 31.038098][ T3316] hsr_slave_1: entered promiscuous mode [ 31.043938][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.051546][ T3316] Cannot create hsr debugfs directory [ 31.073542][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.091253][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.103104][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.114282][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.177337][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.186350][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.196602][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.205712][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.250433][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.259338][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.268140][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.281547][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.298117][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.316166][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.328973][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.346115][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.357240][ T1679] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.364369][ T1679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.375157][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.387811][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.396840][ T1679] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.403967][ T1679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.413553][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.422619][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.441277][ T1456] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.448393][ T1456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.464025][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.471125][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.548841][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.575773][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.594533][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.610925][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.620662][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.628710][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.635833][ T1606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.648039][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.662064][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.669184][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.680158][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.687328][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.702241][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.715932][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.743135][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.750351][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.759654][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.766731][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.783170][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.790349][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.802487][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.855576][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.866106][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.878849][ T3307] veth0_vlan: entered promiscuous mode [ 31.894988][ T3307] veth1_vlan: entered promiscuous mode [ 31.929769][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.973634][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.995536][ T3307] veth0_macvtap: entered promiscuous mode [ 32.012633][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.020873][ T3307] veth1_macvtap: entered promiscuous mode [ 32.029297][ T3305] veth0_vlan: entered promiscuous mode [ 32.054842][ T3305] veth1_vlan: entered promiscuous mode [ 32.077285][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.101784][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.112268][ T3305] veth0_macvtap: entered promiscuous mode [ 32.119655][ T3305] veth1_macvtap: entered promiscuous mode [ 32.138760][ T3307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.147633][ T3307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.156465][ T3307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.165225][ T3307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191520][ T3304] veth0_vlan: entered promiscuous mode [ 32.217481][ T3304] veth1_vlan: entered promiscuous mode [ 32.240149][ T3318] veth0_vlan: entered promiscuous mode [ 32.247130][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.257648][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.269656][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.272534][ T3307] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.285497][ T3316] veth0_vlan: entered promiscuous mode [ 32.308126][ T3318] veth1_vlan: entered promiscuous mode [ 32.323779][ T3316] veth1_vlan: entered promiscuous mode [ 32.336980][ T3304] veth0_macvtap: entered promiscuous mode [ 32.344014][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.354680][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.366957][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.379647][ T3318] veth0_macvtap: entered promiscuous mode [ 32.391544][ T3304] veth1_macvtap: entered promiscuous mode [ 32.407710][ T3318] veth1_macvtap: entered promiscuous mode [ 32.415617][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.424499][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.433341][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.442231][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.460958][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.471553][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.481405][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.491882][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.502855][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.528870][ T3316] veth0_macvtap: entered promiscuous mode [ 32.542178][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.553081][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.562981][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.573510][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.585264][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.596868][ T3316] veth1_macvtap: entered promiscuous mode [ 32.604805][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.615366][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.625263][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.635798][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.645670][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.656374][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.667086][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.675314][ T3318] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.684175][ T3318] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.693011][ T3318] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.701870][ T3318] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.731886][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.742474][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.752430][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.762963][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.772812][ T3304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.783283][ T3304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.809138][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.818538][ T3304] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.827411][ T3304] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.836274][ T3304] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.836567][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 32.836604][ T29] audit: type=1400 audit(1746234498.854:140): avc: denied { mounton } for pid=3449 comm="syz.3.4" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 32.845048][ T3304] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.877630][ T3450] tmpfs: Bad value for 'mpol' [ 32.888395][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.898942][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.908878][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.919445][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.929339][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.939800][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.946196][ T29] audit: type=1400 audit(1746234498.954:141): avc: denied { open } for pid=3449 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.949632][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.968516][ T29] audit: type=1400 audit(1746234498.954:142): avc: denied { kernel } for pid=3449 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 32.978890][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.009165][ T29] audit: type=1400 audit(1746234499.024:143): avc: denied { map_read map_write } for pid=3447 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.033438][ T29] audit: type=1400 audit(1746234499.034:144): avc: denied { write } for pid=3447 comm="syz.0.7" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 33.057888][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.067765][ T3448] hub 2-0:1.0: USB hub found [ 33.072515][ T3448] hub 2-0:1.0: 8 ports detected [ 33.088286][ T29] audit: type=1400 audit(1746234499.074:145): avc: denied { create } for pid=3449 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.107612][ T29] audit: type=1400 audit(1746234499.074:146): avc: denied { write } for pid=3449 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.136021][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.146737][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.156692][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.167255][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.177366][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.187897][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.197798][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.208289][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.219556][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.247224][ T3316] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.256149][ T3316] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.265018][ T3316] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.273938][ T3316] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.290415][ T29] audit: type=1326 audit(1746234499.294:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 33.313700][ T29] audit: type=1326 audit(1746234499.294:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 33.336891][ T29] audit: type=1326 audit(1746234499.294:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3449 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 33.517564][ T3486] IPv6: NLM_F_CREATE should be specified when creating new route [ 33.525525][ T3486] FAULT_INJECTION: forcing a failure. [ 33.525525][ T3486] name failslab, interval 1, probability 0, space 0, times 1 [ 33.538291][ T3486] CPU: 1 UID: 0 PID: 3486 Comm: syz.4.5 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 33.538359][ T3486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 33.538379][ T3486] Call Trace: [ 33.538386][ T3486] [ 33.538395][ T3486] __dump_stack+0x1d/0x30 [ 33.538421][ T3486] dump_stack_lvl+0xe8/0x140 [ 33.538442][ T3486] dump_stack+0x15/0x1b [ 33.538463][ T3486] should_fail_ex+0x265/0x280 [ 33.538518][ T3486] ? fib6_new_table+0x9d/0x1c0 [ 33.538544][ T3486] should_failslab+0x8c/0xb0 [ 33.538588][ T3486] __kmalloc_cache_noprof+0x4c/0x320 [ 33.538609][ T3486] fib6_new_table+0x9d/0x1c0 [ 33.538639][ T3486] ip6_route_info_create+0x334/0xb00 [ 33.538730][ T3486] ip6_route_add+0x28/0x130 [ 33.538764][ T3486] inet6_rtm_newroute+0x15d/0x1270 [ 33.538869][ T3486] ? bpf_trace_run3+0x12c/0x1d0 [ 33.538891][ T3486] ? __kfree_skb+0x109/0x150 [ 33.538977][ T3486] ? xa_load+0xb1/0xe0 [ 33.539015][ T3486] ? security_capable+0x83/0x90 [ 33.539047][ T3486] ? ns_capable+0x7d/0xb0 [ 33.539140][ T3486] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 33.539175][ T3486] rtnetlink_rcv_msg+0x657/0x6d0 [ 33.539209][ T3486] netlink_rcv_skb+0x120/0x220 [ 33.539285][ T3486] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 33.539321][ T3486] rtnetlink_rcv+0x1c/0x30 [ 33.539345][ T3486] netlink_unicast+0x59e/0x670 [ 33.539419][ T3486] netlink_sendmsg+0x58b/0x6b0 [ 33.539459][ T3486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 33.539490][ T3486] __sock_sendmsg+0x142/0x180 [ 33.539574][ T3486] ____sys_sendmsg+0x31e/0x4e0 [ 33.539600][ T3486] ___sys_sendmsg+0x17b/0x1d0 [ 33.539638][ T3486] __x64_sys_sendmsg+0xd4/0x160 [ 33.539661][ T3486] x64_sys_call+0x2999/0x2fb0 [ 33.539763][ T3486] do_syscall_64+0xd0/0x1a0 [ 33.539790][ T3486] ? clear_bhb_loop+0x25/0x80 [ 33.539817][ T3486] ? clear_bhb_loop+0x25/0x80 [ 33.539837][ T3486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.539950][ T3486] RIP: 0033:0x7f00b4bde969 [ 33.540031][ T3486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 33.540053][ T3486] RSP: 002b:00007f00b3247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 33.540079][ T3486] RAX: ffffffffffffffda RBX: 00007f00b4e05fa0 RCX: 00007f00b4bde969 [ 33.540092][ T3486] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 33.540103][ T3486] RBP: 00007f00b3247090 R08: 0000000000000000 R09: 0000000000000000 [ 33.540120][ T3486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 33.540131][ T3486] R13: 0000000000000000 R14: 00007f00b4e05fa0 R15: 00007ffcdcd6cff8 [ 33.540153][ T3486] [ 33.860000][ T3486] syz.4.5 (3486) used greatest stack depth: 10992 bytes left [ 33.873447][ T3481] loop2: detected capacity change from 0 to 8192 [ 33.904677][ T3481] ======================================================= [ 33.904677][ T3481] WARNING: The mand mount option has been deprecated and [ 33.904677][ T3481] and is ignored by this kernel. Remove the mand [ 33.904677][ T3481] option from the mount to silence this warning. [ 33.904677][ T3481] ======================================================= [ 33.951998][ T3493] loop1: detected capacity change from 0 to 512 [ 33.958764][ T3493] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.967391][ T3493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.980533][ T3493] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 34.005193][ T3481] syz.2.3: attempt to access beyond end of device [ 34.005193][ T3481] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 34.005781][ T3493] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.018419][ T3481] Buffer I/O error on dev loop2, logical block 57847, async page read [ 34.036657][ T3481] syz.2.3: attempt to access beyond end of device [ 34.036657][ T3481] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 34.053084][ T3481] Buffer I/O error on dev loop2, logical block 57847, async page read [ 34.068100][ T3383] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 34.075721][ T3383] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 34.083418][ T3383] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 34.094264][ T3493] EXT4-fs (loop1): 1 truncate cleaned up [ 34.100960][ T3493] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.103202][ T3481] syz.2.3: attempt to access beyond end of device [ 34.103202][ T3481] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 34.126893][ T3481] Buffer I/O error on dev loop2, logical block 57847, async page read [ 34.152151][ T3491] FAULT_INJECTION: forcing a failure. [ 34.152151][ T3491] name failslab, interval 1, probability 0, space 0, times 0 [ 34.165007][ T3491] CPU: 1 UID: 0 PID: 3491 Comm: syz.0.9 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 34.165090][ T3491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 34.165102][ T3491] Call Trace: [ 34.165107][ T3491] [ 34.165114][ T3491] __dump_stack+0x1d/0x30 [ 34.165160][ T3491] dump_stack_lvl+0xe8/0x140 [ 34.165179][ T3491] dump_stack+0x15/0x1b [ 34.165259][ T3491] should_fail_ex+0x265/0x280 [ 34.165294][ T3491] should_failslab+0x8c/0xb0 [ 34.165435][ T3491] __kmalloc_node_noprof+0xa9/0x410 [ 34.165500][ T3491] ? alloc_slab_obj_exts+0x31/0x80 [ 34.165542][ T3491] alloc_slab_obj_exts+0x31/0x80 [ 34.165580][ T3491] __memcg_slab_post_alloc_hook+0x279/0x5a0 [ 34.165604][ T3491] kmem_cache_alloc_lru_noprof+0x229/0x310 [ 34.165649][ T3491] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 34.165678][ T3491] hugetlbfs_alloc_inode+0xbc/0x100 [ 34.165700][ T3491] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 34.165791][ T3491] alloc_inode+0x3d/0x170 [ 34.165819][ T3491] new_inode+0x1d/0xe0 [ 34.165916][ T3491] hugetlbfs_get_inode+0x7b/0x370 [ 34.165954][ T3491] hugetlb_file_setup+0x192/0x3d0 [ 34.165975][ T3491] ksys_mmap_pgoff+0x157/0x310 [ 34.166063][ T3491] x64_sys_call+0x1602/0x2fb0 [ 34.166083][ T3491] do_syscall_64+0xd0/0x1a0 [ 34.166165][ T3491] ? clear_bhb_loop+0x25/0x80 [ 34.166197][ T3491] ? clear_bhb_loop+0x25/0x80 [ 34.166301][ T3491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 34.166326][ T3491] RIP: 0033:0x7f4461ebe969 [ 34.166343][ T3491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 34.166434][ T3491] RSP: 002b:00007f4460527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 34.166571][ T3491] RAX: ffffffffffffffda RBX: 00007f44620e5fa0 RCX: 00007f4461ebe969 [ 34.166585][ T3491] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 34.166671][ T3491] RBP: 00007f4460527090 R08: ffffffffffffffff R09: 0000000000000000 [ 34.166704][ T3491] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 34.166718][ T3491] R13: 0000000000000000 R14: 00007f44620e5fa0 R15: 00007ffc75202178 [ 34.166815][ T3491] [ 34.175541][ T3383] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 34.255511][ T3506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 34.577904][ T3514] loop2: detected capacity change from 0 to 128 [ 34.600205][ T3514] netlink: 'syz.2.15': attribute type 13 has an invalid length. [ 34.626802][ T3505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.668792][ T3505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.740749][ T3514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 34.761107][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.809261][ T3518] netlink: 32 bytes leftover after parsing attributes in process `syz.1.17'. [ 34.842602][ T3518] vlan2: entered allmulticast mode [ 34.897037][ T3522] x_tables: ip_tables: osf match: only valid for protocol 6 [ 34.921193][ T3524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18'. [ 34.984391][ T3526] x_tables: ip_tables: osf match: only valid for protocol 6 [ 35.030024][ T3528] loop4: detected capacity change from 0 to 764 [ 35.045455][ T3528] process 'syz.4.20' launched './file1' with NULL argv: empty string added [ 35.183823][ T3520] Set syz1 is full, maxelem 65536 reached [ 35.198326][ T3536] loop4: detected capacity change from 0 to 764 [ 35.302126][ T3543] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 35.317314][ T3520] syz.2.18 (3520) used greatest stack depth: 10856 bytes left [ 35.331210][ T3543] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 35.377177][ T3543] dccp_xmit_packet: Payload too large (65475) for featneg. [ 35.429354][ T3556] loop2: detected capacity change from 0 to 128 [ 35.497101][ T3543] syz.0.27 (3543) used greatest stack depth: 10728 bytes left [ 35.564533][ T3556] netlink: 'syz.2.32': attribute type 13 has an invalid length. [ 35.676419][ T3556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.830305][ T3562] loop0: detected capacity change from 0 to 128 [ 35.843478][ T3562] netlink: 'syz.0.34': attribute type 13 has an invalid length. [ 35.878250][ T3566] x_tables: ip_tables: osf match: only valid for protocol 6 [ 35.924838][ T3562] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 35.983802][ T3577] loop2: detected capacity change from 0 to 128 [ 36.002945][ T3577] netlink: 'syz.2.41': attribute type 13 has an invalid length. [ 36.030927][ T3577] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.070667][ T3582] x_tables: ip_tables: osf match: only valid for protocol 6 [ 36.261141][ T3603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.288450][ T3608] x_tables: ip_tables: osf match: only valid for protocol 6 [ 36.307128][ T3603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.392773][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.62'. [ 36.404628][ T3623] netlink: 76 bytes leftover after parsing attributes in process `syz.2.62'. [ 36.481202][ T3637] x_tables: ip_tables: osf match: only valid for protocol 6 [ 36.501688][ T3639] loop2: detected capacity change from 0 to 512 [ 36.508738][ T3639] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.522308][ T3639] EXT4-fs (loop2): 1 truncate cleaned up [ 36.528489][ T3639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.542619][ T3639] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.583188][ T3646] loop1: detected capacity change from 0 to 512 [ 36.591982][ T3646] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 36.606684][ T3646] EXT4-fs (loop1): 1 truncate cleaned up [ 36.613073][ T3646] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.626972][ T3646] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.781438][ C1] hrtimer: interrupt took 28202 ns [ 37.068859][ T3658] loop0: detected capacity change from 0 to 512 [ 37.131295][ T3658] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.177458][ T3658] EXT4-fs (loop0): 1 truncate cleaned up [ 37.198637][ T3658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.300807][ T3665] tmpfs: Bad value for 'mpol' [ 37.309237][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.413021][ T3669] FAULT_INJECTION: forcing a failure. [ 37.413021][ T3669] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.426171][ T3669] CPU: 0 UID: 0 PID: 3669 Comm: syz.0.76 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 37.426247][ T3669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 37.426259][ T3669] Call Trace: [ 37.426265][ T3669] [ 37.426273][ T3669] __dump_stack+0x1d/0x30 [ 37.426327][ T3669] dump_stack_lvl+0xe8/0x140 [ 37.426351][ T3669] dump_stack+0x15/0x1b [ 37.426371][ T3669] should_fail_ex+0x265/0x280 [ 37.426406][ T3669] should_fail+0xb/0x20 [ 37.426436][ T3669] should_fail_usercopy+0x1a/0x20 [ 37.426513][ T3669] _copy_from_user+0x1c/0xb0 [ 37.426537][ T3669] do_sys_poll+0x148/0xbc0 [ 37.426620][ T3669] ? __fget_files+0x184/0x1c0 [ 37.426692][ T3669] ? set_user_sigmask+0x84/0x190 [ 37.426712][ T3669] __se_sys_ppoll+0x1b9/0x200 [ 37.426746][ T3669] ? fput+0x8f/0xc0 [ 37.426765][ T3669] __x64_sys_ppoll+0x67/0x80 [ 37.426799][ T3669] x64_sys_call+0x2de5/0x2fb0 [ 37.426822][ T3669] do_syscall_64+0xd0/0x1a0 [ 37.426842][ T3669] ? clear_bhb_loop+0x25/0x80 [ 37.426867][ T3669] ? clear_bhb_loop+0x25/0x80 [ 37.426947][ T3669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.426968][ T3669] RIP: 0033:0x7f4461ebe969 [ 37.426985][ T3669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.427005][ T3669] RSP: 002b:00007f4460527038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 37.427022][ T3669] RAX: ffffffffffffffda RBX: 00007f44620e5fa0 RCX: 00007f4461ebe969 [ 37.427033][ T3669] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000180 [ 37.427043][ T3669] RBP: 00007f4460527090 R08: 0000000000000000 R09: 0000000000000000 [ 37.427174][ T3669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.427189][ T3669] R13: 0000000000000000 R14: 00007f44620e5fa0 R15: 00007ffc75202178 [ 37.427219][ T3669] [ 37.658989][ T3674] loop3: detected capacity change from 0 to 764 [ 37.828632][ T3696] tmpfs: Bad value for 'mpol' [ 37.832563][ T3691] x_tables: ip_tables: osf match: only valid for protocol 6 [ 37.870673][ T3699] netlink: 76 bytes leftover after parsing attributes in process `syz.2.90'. [ 37.934893][ T3627] netlink: zone id is out of range [ 37.940070][ T3627] netlink: zone id is out of range [ 37.945333][ T3627] netlink: zone id is out of range [ 37.949403][ T3708] hub 4-0:1.0: USB hub found [ 37.950491][ T3627] netlink: zone id is out of range [ 37.955150][ T3708] hub 4-0:1.0: 8 ports detected [ 38.008750][ T3712] x_tables: ip_tables: osf match: only valid for protocol 6 [ 38.020562][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 38.020576][ T29] audit: type=1326 audit(1746234504.024:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.070088][ T29] audit: type=1326 audit(1746234504.074:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.091074][ T3714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.114745][ T29] audit: type=1326 audit(1746234504.074:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.138022][ T29] audit: type=1326 audit(1746234504.074:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.148527][ T3714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.161306][ T29] audit: type=1326 audit(1746234504.074:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.192811][ T29] audit: type=1326 audit(1746234504.074:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.216127][ T29] audit: type=1326 audit(1746234504.074:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.240272][ T29] audit: type=1326 audit(1746234504.074:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.263717][ T29] audit: type=1326 audit(1746234504.074:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.266836][ T3725] loop1: detected capacity change from 0 to 512 [ 38.286965][ T29] audit: type=1326 audit(1746234504.074:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3713 comm="syz.2.96" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f78d6fce969 code=0x7ffc0000 [ 38.323975][ T3725] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.333294][ T3725] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 38.351825][ T3729] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 38.361653][ T3725] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 38.379460][ T3725] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 38.391782][ T3725] System zones: 0-2, 18-18, 34-35 [ 38.398669][ T3725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.413819][ T3721] No source specified [ 38.418647][ T3721] netlink: 'syz.1.99': attribute type 21 has an invalid length. [ 38.426385][ T3721] netlink: 168 bytes leftover after parsing attributes in process `syz.1.99'. [ 38.476410][ T3732] tmpfs: Bad value for 'mpol' [ 38.483394][ T3721] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65531 sclass=netlink_route_socket pid=3721 comm=syz.1.99 [ 38.572095][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.690110][ T3751] program syz.3.110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 38.809350][ T3764] tmpfs: Bad value for 'mpol' [ 38.922286][ T3776] FAULT_INJECTION: forcing a failure. [ 38.922286][ T3776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.935612][ T3776] CPU: 1 UID: 0 PID: 3776 Comm: syz.2.122 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 38.935645][ T3776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 38.935660][ T3776] Call Trace: [ 38.935668][ T3776] [ 38.935676][ T3776] __dump_stack+0x1d/0x30 [ 38.935700][ T3776] dump_stack_lvl+0xe8/0x140 [ 38.935733][ T3776] dump_stack+0x15/0x1b [ 38.935748][ T3776] should_fail_ex+0x265/0x280 [ 38.935782][ T3776] should_fail+0xb/0x20 [ 38.935815][ T3776] should_fail_usercopy+0x1a/0x20 [ 38.935859][ T3776] _copy_from_user+0x1c/0xb0 [ 38.935884][ T3776] kstrtouint_from_user+0x69/0xf0 [ 38.935962][ T3776] ? avc_policy_seqno+0x15/0x30 [ 38.936001][ T3776] proc_fail_nth_write+0x50/0x160 [ 38.936031][ T3776] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 38.936110][ T3776] vfs_write+0x266/0x8d0 [ 38.936137][ T3776] ? vfs_read+0x47f/0x6f0 [ 38.936169][ T3776] ? __rcu_read_unlock+0x4f/0x70 [ 38.936194][ T3776] ? __fget_files+0x184/0x1c0 [ 38.936227][ T3776] ksys_write+0xda/0x1a0 [ 38.936257][ T3776] __x64_sys_write+0x40/0x50 [ 38.936285][ T3776] x64_sys_call+0x2cdd/0x2fb0 [ 38.936322][ T3776] do_syscall_64+0xd0/0x1a0 [ 38.936398][ T3776] ? clear_bhb_loop+0x25/0x80 [ 38.936423][ T3776] ? clear_bhb_loop+0x25/0x80 [ 38.936446][ T3776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.936471][ T3776] RIP: 0033:0x7f78d6fcd41f [ 38.936488][ T3776] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 38.936533][ T3776] RSP: 002b:00007f78d5637030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 38.936568][ T3776] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f78d6fcd41f [ 38.936582][ T3776] RDX: 0000000000000001 RSI: 00007f78d56370a0 RDI: 0000000000000005 [ 38.936596][ T3776] RBP: 00007f78d5637090 R08: 0000000000000000 R09: 0000000000000000 [ 38.936647][ T3776] R10: 00002000000000c0 R11: 0000000000000293 R12: 0000000000000001 [ 38.936661][ T3776] R13: 0000000000000000 R14: 00007f78d71f5fa0 R15: 00007ffd68c09288 [ 38.936710][ T3776] [ 38.938393][ T3761] loop0: detected capacity change from 0 to 512 [ 39.132729][ T3789] vhci_hcd: invalid port number 96 [ 39.143306][ T3761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.145212][ T3789] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 39.178117][ T3761] EXT4-fs (loop0): 1 truncate cleaned up [ 39.188780][ T3761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.220104][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.277523][ T3801] tmpfs: Bad value for 'mpol' [ 39.369031][ T3806] loop3: detected capacity change from 0 to 764 [ 39.410781][ T3815] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.426137][ T3817] loop0: detected capacity change from 0 to 128 [ 39.426462][ T3819] x_tables: ip_tables: osf match: only valid for protocol 6 [ 39.455751][ T3817] netlink: 'syz.0.138': attribute type 13 has an invalid length. [ 39.503761][ T3825] SELinux: policydb magic number 0x140 does not match expected magic number 0xf97cff8c [ 39.515335][ T3825] SELinux: failed to load policy [ 39.561245][ T3825] bond1: entered promiscuous mode [ 39.619051][ T3838] tmpfs: Bad value for 'mpol' [ 39.657248][ T3844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.150'. [ 39.685137][ T3844] netlink: 76 bytes leftover after parsing attributes in process `syz.2.150'. [ 39.727737][ T3847] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.749733][ T3854] x_tables: ip_tables: osf match: only valid for protocol 6 [ 39.807456][ T3855] FAULT_INJECTION: forcing a failure. [ 39.807456][ T3855] name failslab, interval 1, probability 0, space 0, times 0 [ 39.820276][ T3855] CPU: 1 UID: 0 PID: 3855 Comm: syz.1.155 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 39.820362][ T3855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 39.820377][ T3855] Call Trace: [ 39.820385][ T3855] [ 39.820394][ T3855] __dump_stack+0x1d/0x30 [ 39.820418][ T3855] dump_stack_lvl+0xe8/0x140 [ 39.820441][ T3855] dump_stack+0x15/0x1b [ 39.820460][ T3855] should_fail_ex+0x265/0x280 [ 39.820552][ T3855] ? bpf_xdp_link_attach+0x1a5/0x5c0 [ 39.820603][ T3855] should_failslab+0x8c/0xb0 [ 39.820666][ T3855] __kmalloc_cache_noprof+0x4c/0x320 [ 39.820694][ T3855] bpf_xdp_link_attach+0x1a5/0x5c0 [ 39.820812][ T3855] link_create+0x4fd/0x6c0 [ 39.820851][ T3855] __sys_bpf+0x4c7/0x790 [ 39.820912][ T3855] __x64_sys_bpf+0x41/0x50 [ 39.820984][ T3855] x64_sys_call+0x2478/0x2fb0 [ 39.821008][ T3855] do_syscall_64+0xd0/0x1a0 [ 39.821096][ T3855] ? clear_bhb_loop+0x25/0x80 [ 39.821122][ T3855] ? clear_bhb_loop+0x25/0x80 [ 39.821210][ T3855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.821233][ T3855] RIP: 0033:0x7f50b1d6e969 [ 39.821250][ T3855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.821286][ T3855] RSP: 002b:00007f50b03d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 39.821307][ T3855] RAX: ffffffffffffffda RBX: 00007f50b1f95fa0 RCX: 00007f50b1d6e969 [ 39.821322][ T3855] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000001c [ 39.821336][ T3855] RBP: 00007f50b03d7090 R08: 0000000000000000 R09: 0000000000000000 [ 39.821351][ T3855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.821425][ T3855] R13: 0000000000000000 R14: 00007f50b1f95fa0 R15: 00007ffee4e9e1e8 [ 39.821448][ T3855] [ 40.012884][ T3861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.157'. [ 40.115856][ T1051] IPVS: starting estimator thread 0... [ 40.121188][ T3855] bond1: entered promiscuous mode [ 40.150946][ T3886] loop3: detected capacity change from 0 to 128 [ 40.152112][ T3872] net_ratelimit: 296 callbacks suppressed [ 40.152199][ T3872] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 40.194290][ T3886] netlink: 'syz.3.165': attribute type 13 has an invalid length. [ 40.211615][ T3882] IPVS: using max 2496 ests per chain, 124800 per kthread [ 40.291336][ T3900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.309509][ T3900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.317961][ T3886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.446865][ T3923] x_tables: ip_tables: osf match: only valid for protocol 6 [ 40.485936][ T3928] x_tables: ip_tables: osf match: only valid for protocol 6 [ 40.526926][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 40.535820][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 40.573328][ T3930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 40.618176][ T3939] loop4: detected capacity change from 0 to 128 [ 40.627308][ T3939] netlink: 'syz.4.185': attribute type 13 has an invalid length. [ 40.667705][ T3939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 40.739758][ T3947] loop4: detected capacity change from 0 to 764 [ 40.755725][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 40.763236][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 40.770724][ T9] hid-generic 0000:0004:0000.0002: unknown main item tag 0x0 [ 40.778609][ T9] hid-generic 0000:0004:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 40.838952][ T3957] x_tables: ip_tables: osf match: only valid for protocol 6 [ 40.869168][ T3960] x_tables: ip_tables: osf match: only valid for protocol 6 [ 40.994401][ T3968] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.010476][ T3968] dccp_xmit_packet: Payload too large (65475) for featneg. [ 41.097472][ T3970] loop4: detected capacity change from 0 to 128 [ 41.105810][ T3970] netlink: 'syz.4.196': attribute type 13 has an invalid length. [ 41.123705][ T3970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.152708][ T3972] netlink: 'syz.0.197': attribute type 11 has an invalid length. [ 41.160792][ T3972] netlink: 448 bytes leftover after parsing attributes in process `syz.0.197'. [ 41.179116][ T3974] loop4: detected capacity change from 0 to 256 [ 41.191530][ T3972] SELinux: ebitmap: truncated map [ 41.197401][ T3972] SELinux: failed to load policy [ 41.285217][ T3981] x_tables: ip_tables: osf match: only valid for protocol 6 [ 41.318524][ T3985] x_tables: ip_tables: osf match: only valid for protocol 6 [ 41.363762][ T3991] FAULT_INJECTION: forcing a failure. [ 41.363762][ T3991] name failslab, interval 1, probability 0, space 0, times 0 [ 41.376600][ T3991] CPU: 0 UID: 0 PID: 3991 Comm: syz.3.206 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 41.376634][ T3991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 41.376650][ T3991] Call Trace: [ 41.376658][ T3991] [ 41.376667][ T3991] __dump_stack+0x1d/0x30 [ 41.376691][ T3991] dump_stack_lvl+0xe8/0x140 [ 41.376724][ T3991] dump_stack+0x15/0x1b [ 41.376743][ T3991] should_fail_ex+0x265/0x280 [ 41.376783][ T3991] should_failslab+0x8c/0xb0 [ 41.376813][ T3991] __kvmalloc_node_noprof+0x126/0x4d0 [ 41.376860][ T3991] ? io_alloc_cache_init+0x31/0xa0 [ 41.376895][ T3991] io_alloc_cache_init+0x31/0xa0 [ 41.376963][ T3991] io_ring_ctx_alloc+0x2f6/0x650 [ 41.376992][ T3991] io_uring_create+0x10f/0x610 [ 41.377025][ T3991] __se_sys_io_uring_setup+0x1f7/0x210 [ 41.377137][ T3991] __x64_sys_io_uring_setup+0x31/0x40 [ 41.377169][ T3991] x64_sys_call+0x184b/0x2fb0 [ 41.377195][ T3991] do_syscall_64+0xd0/0x1a0 [ 41.377222][ T3991] ? clear_bhb_loop+0x25/0x80 [ 41.377248][ T3991] ? clear_bhb_loop+0x25/0x80 [ 41.377305][ T3991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.377339][ T3991] RIP: 0033:0x7fcc078fe969 [ 41.377352][ T3991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.377368][ T3991] RSP: 002b:00007fcc05f67038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 41.377385][ T3991] RAX: ffffffffffffffda RBX: 00007fcc07b25fa0 RCX: 00007fcc078fe969 [ 41.377400][ T3991] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000004b4a [ 41.377420][ T3991] RBP: 00007fcc05f67090 R08: 0000000000000000 R09: 0000000000000000 [ 41.377435][ T3991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.377509][ T3991] R13: 0000000000000000 R14: 00007fcc07b25fa0 R15: 00007fffd9f31e88 [ 41.377533][ T3991] [ 41.580765][ T3995] loop3: detected capacity change from 0 to 128 [ 41.589354][ T3995] netlink: 'syz.3.208': attribute type 13 has an invalid length. [ 41.607969][ T3995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 41.631651][ T3999] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 41.654318][ T4004] x_tables: ip_tables: osf match: only valid for protocol 6 [ 41.687638][ T4008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.214'. [ 41.698741][ T4008] netlink: 76 bytes leftover after parsing attributes in process `syz.0.214'. [ 41.728299][ T4011] x_tables: ip_tables: osf match: only valid for protocol 6 [ 41.769350][ T4019] loop0: detected capacity change from 0 to 256 [ 41.782483][ T4019] FAULT_INJECTION: forcing a failure. [ 41.782483][ T4019] name failslab, interval 1, probability 0, space 0, times 0 [ 41.795289][ T4019] CPU: 0 UID: 0 PID: 4019 Comm: syz.0.219 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 41.795316][ T4019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 41.795327][ T4019] Call Trace: [ 41.795334][ T4019] [ 41.795361][ T4019] __dump_stack+0x1d/0x30 [ 41.795394][ T4019] dump_stack_lvl+0xe8/0x140 [ 41.795417][ T4019] dump_stack+0x15/0x1b [ 41.795438][ T4019] should_fail_ex+0x265/0x280 [ 41.795501][ T4019] should_failslab+0x8c/0xb0 [ 41.795537][ T4019] __kmalloc_noprof+0xa5/0x3e0 [ 41.795560][ T4019] ? process_vm_rw+0x27c/0x950 [ 41.795581][ T4019] ? iovec_from_user+0x179/0x210 [ 41.795610][ T4019] process_vm_rw+0x27c/0x950 [ 41.795679][ T4019] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 41.795712][ T4019] ? kmem_cache_free+0xdd/0x2f0 [ 41.795731][ T4019] ? audit_log_end+0x1d7/0x1f0 [ 41.795845][ T4019] __x64_sys_process_vm_writev+0x78/0x90 [ 41.795960][ T4019] x64_sys_call+0xe80/0x2fb0 [ 41.795983][ T4019] do_syscall_64+0xd0/0x1a0 [ 41.796104][ T4019] ? clear_bhb_loop+0x25/0x80 [ 41.796125][ T4019] ? clear_bhb_loop+0x25/0x80 [ 41.796144][ T4019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.796202][ T4019] RIP: 0033:0x7f4461ebe969 [ 41.796221][ T4019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.796299][ T4019] RSP: 002b:00007f4460527038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 41.796321][ T4019] RAX: ffffffffffffffda RBX: 00007f44620e5fa0 RCX: 00007f4461ebe969 [ 41.796402][ T4019] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000068 [ 41.796418][ T4019] RBP: 00007f4460527090 R08: 0000000000000001 R09: 0000000000000000 [ 41.796434][ T4019] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 41.796449][ T4019] R13: 0000000000000000 R14: 00007f44620e5fa0 R15: 00007ffc75202178 [ 41.796473][ T4019] [ 42.002297][ T9] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 42.009805][ T9] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 42.017260][ T9] hid-generic 0000:0004:0000.0003: unknown main item tag 0x0 [ 42.030300][ T9] hid-generic 0000:0004:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.054717][ T4017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.065049][ T4017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.074878][ T4028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 42.095714][ T4028] capability: warning: `syz.0.222' uses deprecated v2 capabilities in a way that may be insecure [ 42.145334][ T4037] loop0: detected capacity change from 0 to 128 [ 42.155781][ T4037] netlink: 'syz.0.224': attribute type 13 has an invalid length. [ 42.173417][ T4037] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.216286][ T4039] loop0: detected capacity change from 0 to 512 [ 42.223219][ T4039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.234274][ T4039] EXT4-fs (loop0): 1 truncate cleaned up [ 42.240519][ T4039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.254748][ T4039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 42.266354][ T4039] ipvlan2: entered promiscuous mode [ 42.271672][ T4039] ipvlan2: entered allmulticast mode [ 42.277090][ T4039] hsr0: entered allmulticast mode [ 42.282171][ T4039] hsr_slave_0: entered allmulticast mode [ 42.287857][ T4039] hsr_slave_1: entered allmulticast mode [ 42.307727][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.352494][ T4045] x_tables: ip_tables: osf match: only valid for protocol 6 [ 42.534573][ T23] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 42.542155][ T23] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 42.549573][ T23] hid-generic 0000:0004:0000.0004: unknown main item tag 0x0 [ 42.559442][ T23] hid-generic 0000:0004:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.854295][ T4084] netlink: 'syz.0.242': attribute type 22 has an invalid length. [ 42.971597][ T4089] loop0: detected capacity change from 0 to 512 [ 42.978554][ T4089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.989731][ T4089] EXT4-fs (loop0): 1 truncate cleaned up [ 42.995941][ T4089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.008412][ T4089] FAULT_INJECTION: forcing a failure. [ 43.008412][ T4089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 43.021557][ T4089] CPU: 0 UID: 0 PID: 4089 Comm: syz.0.244 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 43.021583][ T4089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 43.021595][ T4089] Call Trace: [ 43.021661][ T4089] [ 43.021669][ T4089] __dump_stack+0x1d/0x30 [ 43.021689][ T4089] dump_stack_lvl+0xe8/0x140 [ 43.021712][ T4089] dump_stack+0x15/0x1b [ 43.021733][ T4089] should_fail_ex+0x265/0x280 [ 43.021844][ T4089] should_fail+0xb/0x20 [ 43.021893][ T4089] should_fail_usercopy+0x1a/0x20 [ 43.021912][ T4089] strncpy_from_user+0x25/0x230 [ 43.022076][ T4089] ? kmem_cache_alloc_noprof+0x186/0x310 [ 43.022108][ T4089] ? getname_flags+0x80/0x3b0 [ 43.022176][ T4089] getname_flags+0xae/0x3b0 [ 43.022222][ T4089] path_setxattrat+0x223/0x310 [ 43.022273][ T4089] __x64_sys_lsetxattr+0x71/0x90 [ 43.022349][ T4089] x64_sys_call+0x1e36/0x2fb0 [ 43.022373][ T4089] do_syscall_64+0xd0/0x1a0 [ 43.022400][ T4089] ? clear_bhb_loop+0x25/0x80 [ 43.022424][ T4089] ? clear_bhb_loop+0x25/0x80 [ 43.022453][ T4089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.022471][ T4089] RIP: 0033:0x7f4461ebe969 [ 43.022484][ T4089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.022523][ T4089] RSP: 002b:00007f4460527038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 43.022539][ T4089] RAX: ffffffffffffffda RBX: 00007f44620e5fa0 RCX: 00007f4461ebe969 [ 43.022551][ T4089] RDX: 0000200000000280 RSI: 0000200000000240 RDI: 00002000000001c0 [ 43.022561][ T4089] RBP: 00007f4460527090 R08: 0000000000000000 R09: 0000000000000000 [ 43.022578][ T4089] R10: 0000000000001001 R11: 0000000000000246 R12: 0000000000000001 [ 43.022588][ T4089] R13: 0000000000000000 R14: 00007f44620e5fa0 R15: 00007ffc75202178 [ 43.022605][ T4089] [ 43.077846][ T4091] ipvlan3: entered promiscuous mode [ 43.213882][ T4091] ipvlan3: entered allmulticast mode [ 43.231697][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.249778][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 43.249795][ T29] audit: type=1400 audit(1746234509.254:648): avc: denied { create } for pid=4093 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.277183][ T29] audit: type=1400 audit(1746234509.254:649): avc: denied { ioctl } for pid=4093 comm="syz.0.245" path="socket:[5751]" dev="sockfs" ino=5751 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.394037][ T3181] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 43.401570][ T3181] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 43.409111][ T3181] hid-generic 0000:0004:0000.0005: unknown main item tag 0x0 [ 43.430564][ T3181] hid-generic 0000:0004:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 43.431196][ T29] audit: type=1326 audit(1746234509.444:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.449787][ T4108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.463408][ T29] audit: type=1326 audit(1746234509.444:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.463491][ T29] audit: type=1326 audit(1746234509.444:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.475882][ T4108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.495066][ T29] audit: type=1326 audit(1746234509.444:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.549401][ T29] audit: type=1326 audit(1746234509.444:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.572737][ T29] audit: type=1326 audit(1746234509.444:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.596032][ T29] audit: type=1326 audit(1746234509.444:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.619347][ T29] audit: type=1326 audit(1746234509.444:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.4.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f00b4bde969 code=0x7ffc0000 [ 43.646922][ T4111] netlink: 'syz.1.247': attribute type 12 has an invalid length. [ 44.268924][ T4126] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 44.287522][ T4126] 9pnet_fd: Insufficient options for proto=fd [ 44.296273][ T4126] loop2: detected capacity change from 0 to 512 [ 44.305736][ T4126] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 44.328467][ T4126] EXT4-fs (loop2): 1 truncate cleaned up [ 44.341864][ T4126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.394121][ T4139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 44.403094][ T4138] loop0: detected capacity change from 0 to 512 [ 44.410027][ T4138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.447278][ T4138] EXT4-fs (loop0): 1 truncate cleaned up [ 44.453544][ T4138] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.467271][ T4138] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.488902][ T36] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 44.496433][ T36] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 44.503868][ T36] hid-generic 0000:0004:0000.0006: unknown main item tag 0x0 [ 44.511765][ T36] hid-generic 0000:0004:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 44.897893][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.908094][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.058934][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.094093][ T4155] __nla_validate_parse: 5 callbacks suppressed [ 45.094113][ T4155] netlink: 76 bytes leftover after parsing attributes in process `syz.4.264'. [ 45.159374][ T4163] x_tables: ip_tables: osf match: only valid for protocol 6 [ 45.179592][ T4167] loop0: detected capacity change from 0 to 512 [ 45.196111][ T4167] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 45.207522][ T4167] EXT4-fs (loop0): 1 truncate cleaned up [ 45.214927][ T4167] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.228564][ T4167] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.538159][ T4198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 45.565972][ T4188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.583306][ T4188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.655837][ T4204] loop1: detected capacity change from 0 to 512 [ 45.670345][ T4203] loop3: detected capacity change from 0 to 4096 [ 45.686345][ T4203] EXT4-fs: Ignoring removed orlov option [ 45.692157][ T4203] EXT4-fs: Ignoring removed nobh option [ 45.699563][ T4204] EXT4-fs: Ignoring removed orlov option [ 45.708893][ T4204] EXT4-fs: Mount option(s) incompatible with ext2 [ 45.717500][ T4203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.734586][ T4203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 45.800553][ T4206] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.823408][ T4200] loop1: detected capacity change from 0 to 1024 [ 45.832817][ T4200] ext4: Unknown parameter 'subj_role' [ 45.966219][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.022958][ T36] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 46.030576][ T36] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 46.038043][ T36] hid-generic 0000:0004:0000.0007: unknown main item tag 0x0 [ 46.055979][ T36] hid-generic 0000:0004:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 46.144015][ T4214] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 46.199684][ T4221] xt_CT: You must specify a L4 protocol and not use inversions on it [ 46.315320][ T4233] siw: device registration error -23 [ 46.385791][ T4239] x_tables: ip_tables: osf match: only valid for protocol 6 [ 46.416921][ T4243] loop4: detected capacity change from 0 to 512 [ 46.423885][ T4243] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.435493][ T4243] EXT4-fs (loop4): 1 truncate cleaned up [ 46.441532][ T4243] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.454582][ T4243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.495362][ T4248] loop0: detected capacity change from 0 to 512 [ 46.502811][ T4248] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 46.514801][ T4248] EXT4-fs (loop0): 1 truncate cleaned up [ 46.522470][ T4248] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.665943][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.913194][ T4252] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.097135][ T4252] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.109463][ T4256] bridge0: port 3(netdevsim3) entered blocking state [ 47.116310][ T4256] bridge0: port 3(netdevsim3) entered disabled state [ 47.124446][ T4256] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 47.132613][ T4256] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 47.140287][ T4256] bridge0: port 3(netdevsim3) entered blocking state [ 47.147037][ T4256] bridge0: port 3(netdevsim3) entered forwarding state [ 47.156683][ T4258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=4258 comm=syz.3.305 [ 47.194779][ T4252] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.234021][ T4252] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.285722][ T4264] netlink: 20 bytes leftover after parsing attributes in process `syz.4.308'. [ 47.294805][ T4264] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 47.302066][ T4264] IPv6: NLM_F_CREATE should be set when creating new route [ 47.325702][ T4252] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.337532][ T4252] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.348675][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.362191][ T4252] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.366503][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.374192][ T4252] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.389871][ T4268] x_tables: ip_tables: osf match: only valid for protocol 6 [ 47.417908][ T4270] x_tables: ip_tables: osf match: only valid for protocol 6 [ 47.440989][ T4274] loop3: detected capacity change from 0 to 128 [ 47.449331][ T4274] netlink: 'syz.3.313': attribute type 13 has an invalid length. [ 47.468292][ T4274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.514031][ T4284] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 47.530213][ T4284] dccp_xmit_packet: Payload too large (65475) for featneg. [ 47.598106][ T4290] netlink: 292 bytes leftover after parsing attributes in process `syz.0.320'. [ 47.691925][ T4299] +}[@ uses obsolete (PF_INET,SOCK_PACKET) [ 47.893111][ T4303] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 47.912391][ T4305] loop4: detected capacity change from 0 to 512 [ 47.919478][ T4305] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 47.931280][ T4305] EXT4-fs (loop4): 1 truncate cleaned up [ 47.937375][ T4305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.020823][ T4321] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 48.088851][ T4330] EXT4-fs: Ignoring removed orlov option [ 48.103005][ T4330] EXT4-fs (loop4): can't enable nombcache during remount [ 48.123336][ T4330] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2798: inode #15: comm syz.4.326: corrupted xattr block 33: invalid header [ 48.140324][ T4337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4337 comm=syz.3.328 [ 48.154238][ T4330] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.326: corrupted xattr block 33: invalid header [ 48.176769][ T4330] EXT4-fs warning (device loop4): ext4_evict_inode:279: xattr delete (err -117) [ 48.218972][ T4351] netlink: 72 bytes leftover after parsing attributes in process `syz.3.332'. [ 48.228283][ T4351] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 48.237250][ T4351] netlink: 40 bytes leftover after parsing attributes in process `syz.3.332'. [ 48.247285][ T4351] Zero length message leads to an empty skb [ 48.254986][ T29] kauditd_printk_skb: 480 callbacks suppressed [ 48.255001][ T29] audit: type=1400 audit(1746234514.274:1136): avc: denied { write } for pid=4343 comm="syz.1.331" name="file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.285120][ T29] audit: type=1400 audit(1746234514.294:1137): avc: denied { open } for pid=4343 comm="syz.1.331" path="/47/file0" dev="tmpfs" ino=270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.315911][ T29] audit: type=1400 audit(1746234514.294:1138): avc: denied { ioctl } for pid=4343 comm="syz.1.331" path="/47/file0" dev="tmpfs" ino=270 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 48.363206][ T29] audit: type=1400 audit(1746234514.354:1139): avc: denied { create } for pid=4350 comm="syz.3.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.382938][ T29] audit: type=1400 audit(1746234514.354:1140): avc: denied { ioctl } for pid=4350 comm="syz.3.332" path="socket:[7103]" dev="sockfs" ino=7103 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.413882][ T29] audit: type=1400 audit(1746234514.424:1141): avc: denied { read } for pid=4343 comm="syz.1.331" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.435065][ T29] audit: type=1400 audit(1746234514.424:1142): avc: denied { open } for pid=4343 comm="syz.1.331" path="net:[4026532395]" dev="nsfs" ino=4026532395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.458275][ T29] audit: type=1400 audit(1746234514.424:1143): avc: denied { create } for pid=4343 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.469077][ T4366] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 48.481528][ T29] audit: type=1400 audit(1746234514.494:1144): avc: denied { bind } for pid=4343 comm="syz.1.331" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.562511][ T4378] loop2: detected capacity change from 0 to 764 [ 48.631992][ T4382] loop3: detected capacity change from 0 to 764 [ 48.743675][ T4408] FAULT_INJECTION: forcing a failure. [ 48.743675][ T4408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 48.757009][ T4408] CPU: 0 UID: 0 PID: 4408 Comm: syz.2.341 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 48.757045][ T4408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 48.757062][ T4408] Call Trace: [ 48.757076][ T4408] [ 48.757087][ T4408] __dump_stack+0x1d/0x30 [ 48.757112][ T4408] dump_stack_lvl+0xe8/0x140 [ 48.757200][ T4408] dump_stack+0x15/0x1b [ 48.757221][ T4408] should_fail_ex+0x265/0x280 [ 48.757261][ T4408] should_fail+0xb/0x20 [ 48.757383][ T4408] should_fail_usercopy+0x1a/0x20 [ 48.757403][ T4408] _copy_from_user+0x1c/0xb0 [ 48.757427][ T4408] __sys_sendto+0x19e/0x330 [ 48.757529][ T4408] __x64_sys_sendto+0x76/0x90 [ 48.757564][ T4408] x64_sys_call+0x2eb6/0x2fb0 [ 48.757601][ T4408] do_syscall_64+0xd0/0x1a0 [ 48.757695][ T4408] ? clear_bhb_loop+0x25/0x80 [ 48.757719][ T4408] ? clear_bhb_loop+0x25/0x80 [ 48.757739][ T4408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.757758][ T4408] RIP: 0033:0x7f78d6fce969 [ 48.757772][ T4408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.757788][ T4408] RSP: 002b:00007f78d5637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 48.757860][ T4408] RAX: ffffffffffffffda RBX: 00007f78d71f5fa0 RCX: 00007f78d6fce969 [ 48.757870][ T4408] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000006 [ 48.757881][ T4408] RBP: 00007f78d5637090 R08: 0000200000000000 R09: 000000000000001c [ 48.757892][ T4408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.757902][ T4408] R13: 0000000000000000 R14: 00007f78d71f5fa0 R15: 00007ffd68c09288 [ 48.757972][ T4408] [ 48.984402][ T4440] xt_CT: You must specify a L4 protocol and not use inversions on it [ 49.107221][ T4443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4443 comm=syz.2.342 [ 49.157712][ T4443] pim6reg: entered allmulticast mode [ 49.184697][ T4443] pim6reg: left allmulticast mode [ 49.717646][ T4465] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.769702][ T4472] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 49.865663][ T4487] FAULT_INJECTION: forcing a failure. [ 49.865663][ T4487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.878903][ T4487] CPU: 1 UID: 0 PID: 4487 Comm: syz.2.348 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 49.878982][ T4487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 49.878998][ T4487] Call Trace: [ 49.879004][ T4487] [ 49.879011][ T4487] __dump_stack+0x1d/0x30 [ 49.879040][ T4487] dump_stack_lvl+0xe8/0x140 [ 49.879065][ T4487] dump_stack+0x15/0x1b [ 49.879191][ T4487] should_fail_ex+0x265/0x280 [ 49.879231][ T4487] should_fail+0xb/0x20 [ 49.879264][ T4487] should_fail_usercopy+0x1a/0x20 [ 49.879282][ T4487] strncpy_from_user+0x25/0x230 [ 49.879332][ T4487] ? kmem_cache_alloc_noprof+0x186/0x310 [ 49.879374][ T4487] ? getname_flags+0x80/0x3b0 [ 49.879412][ T4487] getname_flags+0xae/0x3b0 [ 49.879492][ T4487] __x64_sys_mkdirat+0x40/0x60 [ 49.879520][ T4487] x64_sys_call+0x2be0/0x2fb0 [ 49.879547][ T4487] do_syscall_64+0xd0/0x1a0 [ 49.879574][ T4487] ? clear_bhb_loop+0x25/0x80 [ 49.879638][ T4487] ? clear_bhb_loop+0x25/0x80 [ 49.879664][ T4487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.879691][ T4487] RIP: 0033:0x7f78d6fce969 [ 49.879709][ T4487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.879730][ T4487] RSP: 002b:00007f78d5637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 49.879830][ T4487] RAX: ffffffffffffffda RBX: 00007f78d71f5fa0 RCX: 00007f78d6fce969 [ 49.879846][ T4487] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 49.879857][ T4487] RBP: 00007f78d5637090 R08: 0000000000000000 R09: 0000000000000000 [ 49.879868][ T4487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.879879][ T4487] R13: 0000000000000000 R14: 00007f78d71f5fa0 R15: 00007ffd68c09288 [ 49.879936][ T4487] [ 50.089754][ T4492] loop1: detected capacity change from 0 to 764 [ 50.109021][ T4496] netlink: 76 bytes leftover after parsing attributes in process `syz.2.350'. [ 50.158226][ T4482] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 50.164575][ T4502] x_tables: ip_tables: osf match: only valid for protocol 6 [ 50.177739][ T4504] FAULT_INJECTION: forcing a failure. [ 50.177739][ T4504] name failslab, interval 1, probability 0, space 0, times 0 [ 50.190530][ T4504] CPU: 0 UID: 0 PID: 4504 Comm: syz.2.353 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 50.190625][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 50.190640][ T4504] Call Trace: [ 50.190648][ T4504] [ 50.190657][ T4504] __dump_stack+0x1d/0x30 [ 50.190683][ T4504] dump_stack_lvl+0xe8/0x140 [ 50.190707][ T4504] dump_stack+0x15/0x1b [ 50.190738][ T4504] should_fail_ex+0x265/0x280 [ 50.190773][ T4504] should_failslab+0x8c/0xb0 [ 50.190808][ T4504] kmem_cache_alloc_node_noprof+0x57/0x320 [ 50.190953][ T4504] ? __alloc_skb+0x101/0x320 [ 50.190989][ T4504] __alloc_skb+0x101/0x320 [ 50.191049][ T4504] netlink_ack+0xfd/0x500 [ 50.191161][ T4504] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 50.191185][ T4504] ? __pfx_nl802154_del_llsec_seclevel+0x10/0x10 [ 50.191216][ T4504] ? __pfx_nl802154_post_doit+0x10/0x10 [ 50.191348][ T4504] netlink_rcv_skb+0x192/0x220 [ 50.191378][ T4504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.191473][ T4504] genl_rcv+0x28/0x40 [ 50.191491][ T4504] netlink_unicast+0x59e/0x670 [ 50.191517][ T4504] netlink_sendmsg+0x58b/0x6b0 [ 50.191547][ T4504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.191650][ T4504] __sock_sendmsg+0x142/0x180 [ 50.191671][ T4504] ____sys_sendmsg+0x31e/0x4e0 [ 50.191756][ T4504] ___sys_sendmsg+0x17b/0x1d0 [ 50.191842][ T4504] __x64_sys_sendmsg+0xd4/0x160 [ 50.191862][ T4504] x64_sys_call+0x2999/0x2fb0 [ 50.191881][ T4504] do_syscall_64+0xd0/0x1a0 [ 50.191945][ T4504] ? clear_bhb_loop+0x25/0x80 [ 50.191964][ T4504] ? clear_bhb_loop+0x25/0x80 [ 50.192017][ T4504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.192060][ T4504] RIP: 0033:0x7f78d6fce969 [ 50.192072][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.192087][ T4504] RSP: 002b:00007f78d5637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.192102][ T4504] RAX: ffffffffffffffda RBX: 00007f78d71f5fa0 RCX: 00007f78d6fce969 [ 50.192112][ T4504] RDX: 0000000000000010 RSI: 00002000000009c0 RDI: 0000000000000004 [ 50.192122][ T4504] RBP: 00007f78d5637090 R08: 0000000000000000 R09: 0000000000000000 [ 50.192211][ T4504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.192221][ T4504] R13: 0000000000000000 R14: 00007f78d71f5fa0 R15: 00007ffd68c09288 [ 50.192238][ T4504] [ 50.297351][ T4508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.449805][ T4508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.487299][ T4517] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 50.571696][ T9] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 50.579326][ T9] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 50.586928][ T9] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 50.594858][ T9] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 50.669442][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.696653][ T4529] loop4: detected capacity change from 0 to 764 [ 50.758397][ T4536] loop4: detected capacity change from 0 to 512 [ 50.765399][ T4536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.776577][ T4536] EXT4-fs (loop4): 1 truncate cleaned up [ 50.782895][ T4536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.795972][ T4536] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.989549][ T4541] SELinux: Context system_u:object_r:mouse_device_t:s0 is not valid (left unmapped). [ 51.015775][ T4541] bridge_slave_0: left promiscuous mode [ 51.021623][ T4541] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.035474][ T4541] bridge_slave_1: left allmulticast mode [ 51.041228][ T4541] bridge_slave_1: left promiscuous mode [ 51.046981][ T4541] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.095977][ T4541] bond0: (slave bond_slave_0): Releasing backup interface [ 51.116539][ T4541] bond0: (slave bond_slave_1): Releasing backup interface [ 51.213912][ T4541] team0: Port device team_slave_0 removed [ 51.318057][ T4541] team0: Port device team_slave_1 removed [ 51.333648][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.341295][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.361524][ T4541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.369067][ T4541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.404660][ T4542] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 51.417669][ T4546] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 51.483812][ T4553] loop2: detected capacity change from 0 to 512 [ 51.491182][ T4553] EXT4-fs: Ignoring removed nobh option [ 51.496976][ T4549] loop3: detected capacity change from 0 to 1024 [ 51.506317][ T4555] siw: device registration error -23 [ 51.513715][ T4549] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.524711][ T4549] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.532815][ T4553] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.370: invalid indirect mapped block 256 (level 2) [ 51.538449][ T4549] JBD2: no valid journal superblock found [ 51.549830][ T4553] EXT4-fs (loop2): 2 truncates cleaned up [ 51.553555][ T4549] EXT4-fs (loop3): Could not load journal inode [ 51.567088][ T4553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.631327][ T4560] netlink: 100 bytes leftover after parsing attributes in process `syz.1.373'. [ 51.652516][ T4564] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.370: bg 0: block 5: invalid block bitmap [ 51.669545][ T4562] loop4: detected capacity change from 0 to 764 [ 51.683893][ T4564] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1548 with error 28 [ 51.696481][ T4564] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.696481][ T4564] [ 51.706236][ T4564] EXT4-fs (loop2): Total free blocks count 0 [ 51.712482][ T4564] EXT4-fs (loop2): Free/Dirty block details [ 51.718573][ T4564] EXT4-fs (loop2): free_blocks=0 [ 51.723629][ T4564] EXT4-fs (loop2): dirty_blocks=1604 [ 51.727332][ T4553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.728916][ T4564] EXT4-fs (loop2): Block reservation details [ 51.728929][ T4564] EXT4-fs (loop2): i_reserved_data_blocks=1604 [ 51.749871][ T4553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.765600][ T4570] netlink: 176 bytes leftover after parsing attributes in process `syz.4.377'. [ 51.814213][ T4574] netlink: 176 bytes leftover after parsing attributes in process `syz.1.388'. [ 52.059269][ T4577] xt_CT: You must specify a L4 protocol and not use inversions on it [ 52.431641][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 1548 with max blocks 56 with error 28 [ 52.798064][ T4587] netlink: 76 bytes leftover after parsing attributes in process `syz.3.382'. [ 52.836521][ T4589] loop1: detected capacity change from 0 to 128 [ 52.838011][ T4591] siw: device registration error -23 [ 52.858305][ T4589] netlink: 'syz.1.383': attribute type 13 has an invalid length. [ 52.902064][ T4589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.112043][ T4611] loop4: detected capacity change from 0 to 512 [ 53.120414][ T4611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.128892][ T4611] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.138002][ T4611] EXT4-fs (loop4): blocks per group (39) and clusters per group (32768) inconsistent [ 53.403865][ T4611] loop4: detected capacity change from 0 to 8192 [ 53.432433][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 53.432452][ T29] audit: type=1400 audit(1746234519.434:1313): avc: denied { create } for pid=4604 comm="syz.4.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.549799][ T4616] netlink: 332 bytes leftover after parsing attributes in process `syz.2.396'. [ 53.564393][ T4616] FAULT_INJECTION: forcing a failure. [ 53.564393][ T4616] name failslab, interval 1, probability 0, space 0, times 0 [ 53.577334][ T4616] CPU: 1 UID: 0 PID: 4616 Comm: syz.2.396 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 53.577457][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 53.577478][ T4616] Call Trace: [ 53.577545][ T4616] [ 53.577551][ T4616] __dump_stack+0x1d/0x30 [ 53.577571][ T4616] dump_stack_lvl+0xe8/0x140 [ 53.577595][ T4616] dump_stack+0x15/0x1b [ 53.577616][ T4616] should_fail_ex+0x265/0x280 [ 53.577656][ T4616] ? nft_target_select_ops+0x1ff/0x320 [ 53.577750][ T4616] should_failslab+0x8c/0xb0 [ 53.577785][ T4616] __kmalloc_cache_noprof+0x4c/0x320 [ 53.577807][ T4616] nft_target_select_ops+0x1ff/0x320 [ 53.577885][ T4616] nf_tables_expr_parse+0x3c3/0x4e0 [ 53.577918][ T4616] nf_tables_newrule+0xcdc/0x17a0 [ 53.577966][ T4616] ? __nla_parse+0x40/0x60 [ 53.578042][ T4616] nfnetlink_rcv+0xb96/0x1690 [ 53.578161][ T4616] netlink_unicast+0x59e/0x670 [ 53.578199][ T4616] netlink_sendmsg+0x58b/0x6b0 [ 53.578273][ T4616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 53.578334][ T4616] __sock_sendmsg+0x142/0x180 [ 53.578359][ T4616] ____sys_sendmsg+0x31e/0x4e0 [ 53.578383][ T4616] ___sys_sendmsg+0x17b/0x1d0 [ 53.578425][ T4616] __x64_sys_sendmsg+0xd4/0x160 [ 53.578450][ T4616] x64_sys_call+0x2999/0x2fb0 [ 53.578554][ T4616] do_syscall_64+0xd0/0x1a0 [ 53.578581][ T4616] ? clear_bhb_loop+0x25/0x80 [ 53.578660][ T4616] ? clear_bhb_loop+0x25/0x80 [ 53.578680][ T4616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.578756][ T4616] RIP: 0033:0x7f78d6fce969 [ 53.578774][ T4616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.578849][ T4616] RSP: 002b:00007f78d5637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.578866][ T4616] RAX: ffffffffffffffda RBX: 00007f78d71f5fa0 RCX: 00007f78d6fce969 [ 53.578878][ T4616] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000006 [ 53.578889][ T4616] RBP: 00007f78d5637090 R08: 0000000000000000 R09: 0000000000000000 [ 53.578900][ T4616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.578915][ T4616] R13: 0000000000000000 R14: 00007f78d71f5fa0 R15: 00007ffd68c09288 [ 53.578939][ T4616] [ 54.052744][ T4616] syz.2.396 (4616) used greatest stack depth: 10696 bytes left [ 54.114090][ T4620] netlink: 'syz.1.398': attribute type 10 has an invalid length. [ 54.138676][ T3380] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 54.146293][ T3380] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 54.153783][ T3380] hid-generic 0000:0004:0000.0009: unknown main item tag 0x0 [ 54.172397][ T4624] x_tables: ip_tables: osf match: only valid for protocol 6 [ 54.183153][ T4620] batman_adv: batadv0: Adding interface: team0 [ 54.189361][ T4620] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.214681][ T4620] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 54.256085][ T3380] hid-generic 0000:0004:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 54.297230][ T29] audit: type=1326 audit(1746234520.304:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 54.320658][ T29] audit: type=1326 audit(1746234520.304:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 54.344082][ T29] audit: type=1326 audit(1746234520.304:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 54.367492][ T29] audit: type=1326 audit(1746234520.304:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 54.557453][ T4637] siw: device registration error -23 [ 54.587955][ T29] audit: type=1400 audit(1746234520.404:1318): avc: denied { read } for pid=4628 comm="syz.2.401" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.611385][ T29] audit: type=1400 audit(1746234520.404:1319): avc: denied { open } for pid=4628 comm="syz.2.401" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.635247][ T29] audit: type=1400 audit(1746234520.404:1320): avc: denied { ioctl } for pid=4628 comm="syz.2.401" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 54.660396][ T29] audit: type=1326 audit(1746234520.414:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4622 comm="syz.3.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc078fe969 code=0x7ffc0000 [ 54.683857][ T29] audit: type=1400 audit(1746234520.424:1322): avc: denied { mount } for pid=4619 comm="syz.1.398" name="/" dev="configfs" ino=1922 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 54.721029][ T4642] loop2: detected capacity change from 0 to 1024 [ 54.728459][ T4642] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.739470][ T4642] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.760769][ T4642] JBD2: no valid journal superblock found [ 54.766551][ T4642] EXT4-fs (loop2): Could not load journal inode [ 54.787135][ T4644] loop1: detected capacity change from 0 to 764 [ 55.430844][ T4655] netlink: 176 bytes leftover after parsing attributes in process `syz.3.412'. [ 55.444883][ T4653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.453861][ T4653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.495893][ T4662] netlink: 96 bytes leftover after parsing attributes in process `syz.3.414'. [ 55.523393][ T4664] netlink: 176 bytes leftover after parsing attributes in process `syz.3.415'. [ 55.580336][ T4651] sd 0:0:1:0: device reset [ 55.628912][ T4674] netlink: 76 bytes leftover after parsing attributes in process `syz.2.420'. [ 55.664875][ T4679] x_tables: ip_tables: osf match: only valid for protocol 6 [ 55.675949][ T3380] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 55.683479][ T3380] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 55.690974][ T3380] hid-generic 0000:0004:0000.000A: unknown main item tag 0x0 [ 55.700668][ T3380] hid-generic 0000:0004:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 55.716451][ T4682] loop1: detected capacity change from 0 to 128 [ 55.726006][ T4682] netlink: 'syz.1.423': attribute type 13 has an invalid length. [ 55.744690][ T4682] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.753881][ T4682] batman_adv: batadv0: Interface activated: team0 [ 55.777644][ T4682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.486911][ T4710] x_tables: ip_tables: osf match: only valid for protocol 6 [ 56.604077][ T4712] loop3: detected capacity change from 0 to 1024 [ 56.613575][ T4712] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 56.624656][ T4712] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 56.638889][ T4712] JBD2: no valid journal superblock found [ 56.644793][ T4712] EXT4-fs (loop3): Could not load journal inode [ 56.686396][ T4718] loop2: detected capacity change from 0 to 128 [ 56.711244][ T4718] netlink: 'syz.2.438': attribute type 13 has an invalid length. [ 56.755318][ T4718] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.774583][ T4716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.785009][ T4716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.813713][ T4724] loop1: detected capacity change from 0 to 512 [ 56.831581][ T4724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.857232][ T4724] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.928031][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.956643][ T4742] blktrace: Concurrent blktraces are not allowed on loop3 [ 56.969115][ T4744] netlink: 176 bytes leftover after parsing attributes in process `syz.2.446'. [ 56.982344][ T4742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.993514][ T4742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.032566][ T4751] loop0: detected capacity change from 0 to 764 [ 57.038953][ T4748] ================================================================== [ 57.047045][ T4748] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 57.054826][ T4748] [ 57.057154][ T4748] write to 0xffffffff86a1d388 of 8 bytes by task 4751 on cpu 1: [ 57.064816][ T4748] console_flush_all+0x35a/0x730 [ 57.069774][ T4748] console_unlock+0xa1/0x330 [ 57.074375][ T4748] vprintk_emit+0x388/0x650 [ 57.078885][ T4748] vprintk_default+0x26/0x30 [ 57.083485][ T4748] vprintk+0x1d/0x30 [ 57.087402][ T4748] _printk+0x79/0xa0 [ 57.091319][ T4748] isofs_fill_super+0x125e/0x1280 [ 57.096360][ T4748] get_tree_bdev_flags+0x28e/0x300 [ 57.101513][ T4748] get_tree_bdev+0x1f/0x30 [ 57.105949][ T4748] isofs_get_tree+0x1c/0x30 [ 57.110466][ T4748] vfs_get_tree+0x54/0x1d0 [ 57.114909][ T4748] do_new_mount+0x207/0x680 [ 57.119423][ T4748] path_mount+0x4a4/0xb20 [ 57.123762][ T4748] __se_sys_mount+0x28f/0x2e0 [ 57.128451][ T4748] __x64_sys_mount+0x67/0x80 [ 57.133058][ T4748] x64_sys_call+0xd36/0x2fb0 [ 57.137666][ T4748] do_syscall_64+0xd0/0x1a0 [ 57.142202][ T4748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.148133][ T4748] [ 57.150469][ T4748] read to 0xffffffff86a1d388 of 8 bytes by task 4748 on cpu 0: [ 57.158017][ T4748] console_flush_all+0x563/0x730 [ 57.162969][ T4748] console_unlock+0xa1/0x330 [ 57.167573][ T4748] do_con_write+0x25c3/0x2630 [ 57.172269][ T4748] con_write+0x24/0x40 [ 57.176353][ T4748] n_tty_write+0x7d8/0xb10 [ 57.180788][ T4748] file_tty_write+0x389/0x670 [ 57.185472][ T4748] tty_write+0x25/0x30 [ 57.189554][ T4748] vfs_write+0x49d/0x8d0 [ 57.193810][ T4748] ksys_write+0xda/0x1a0 [ 57.198067][ T4748] __x64_sys_write+0x40/0x50 [ 57.202677][ T4748] x64_sys_call+0x2cdd/0x2fb0 [ 57.207365][ T4748] do_syscall_64+0xd0/0x1a0 [ 57.211877][ T4748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.217779][ T4748] [ 57.220129][ T4748] value changed: 0x0000000000000a97 -> 0x0000000000000a98 [ 57.227259][ T4748] [ 57.229584][ T4748] Reported by Kernel Concurrency Sanitizer on: [ 57.235734][ T4748] CPU: 0 UID: 0 PID: 4748 Comm: syz.4.445 Not tainted 6.15.0-rc4-syzkaller-00189-g2bfcee565c3a #0 PREEMPT(voluntary) [ 57.248080][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 57.258159][ T4748] ================================================================== [ 57.266578][ T4749] loop2: detected capacity change from 0 to 1024 [ 57.277898][ T4749] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.277931][ T4749] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.279036][ T4749] JBD2: no valid journal superblock found [ 57.279066][ T4749] EXT4-fs (loop2): Could not load journal inode