last executing test programs: 17.88391909s ago: executing program 3 (id=103): getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = inotify_init() syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80002, 0x0) r7 = inotify_add_watch(r6, &(0x7f0000000280)='.\x00', 0x25000001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x81, "6232971d0ad1c25659d06a5096437817334955b76244ba60a8a3e72a7cc2c6ec4c530de8ef837808ad48ea63c2fe063162ebfcc5c3a2c708a3da9bd1756d634304b30f32ebc758a505001fa81d6fd39ddc60676cb73ee569d140bbca3bbaebb9afd9993906221ddfe07132a4888649336eef4c990887014416c4e76169bbe121a0"}, &(0x7f00000001c0)=0xa5) inotify_rm_watch(r6, r7) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 17.690991128s ago: executing program 3 (id=106): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000", 0x13}], 0x1) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x8000033fe3, 0x0) 16.734607678s ago: executing program 3 (id=114): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, 0x0, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 15.863086259s ago: executing program 3 (id=117): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095b44a4a1a50bbc6429a722d9a6d1f6dfcaddd5783348e64953168ab6e5243ce7e6c10b01229ebdf59e85c4c18ca183dabb99bf7dd74cbcde12a482b87b69b4c69a65f95761ffa2249e9b072c19b271cf2fa53972bb0ce8ae6f154d1775f25eb1b60de4c182ac821e0f92733a33d82ef3162e8ce4aca0cca31d8222c40b16aad91f209bdbad3d61c2956c0fb8135ec875dfeb64daf1e74fa0106a438fb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000480)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) write$binfmt_register(r3, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x1}, 0x75}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r6, 0x1, 0x0, 0x3, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @dev={0xfe, 0x80, '\x00', 0x16}, 0xff8}}, {0x20, 0x2, @in6={0xa, 0x0, 0xfffffffc, @mcast2}}}}]}]}, 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRESOCT], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = timerfd_create(0x9, 0x0) timerfd_settime(r8, 0x3, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) 15.42387427s ago: executing program 3 (id=122): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 15.024947527s ago: executing program 3 (id=126): socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380), &(0x7f00000004c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002e00010000000000fcdbf32503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='mem_connect\x00', r9, 0x0, 0x1840}, 0x7b) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) 14.913667328s ago: executing program 32 (id=126): socket$packet(0x11, 0x3, 0x300) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x110, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0xedf2}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000380), &(0x7f00000004c0)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)=ANY=[@ANYBLOB="140100002e00010000000000fcdbf32503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x38}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='mem_connect\x00', r9, 0x0, 0x1840}, 0x7b) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340b1bf747ec7f9b12eb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}}, 0x2400c004) write$cgroup_int(r5, &(0x7f0000000040)=0xfe8e, 0x12) 3.731885432s ago: executing program 1 (id=255): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6367726f75705f743a7330202f7573722f6c69622f74656c6570617468792f6d697373698f6e2d636f6e74726f6c2d3520303030303030303030303030010030333237363700"], 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) futimesat(r1, 0x0, 0x0) 3.593381534s ago: executing program 1 (id=258): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000700)=""/217, 0xd9}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 2.981482881s ago: executing program 4 (id=270): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6c001}, 0x8020) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) brk(0x800000000000) 2.981211511s ago: executing program 4 (id=271): getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = inotify_init() syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80002, 0x0) r7 = inotify_add_watch(r6, &(0x7f0000000280)='.\x00', 0x25000001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x81, "6232971d0ad1c25659d06a5096437817334955b76244ba60a8a3e72a7cc2c6ec4c530de8ef837808ad48ea63c2fe063162ebfcc5c3a2c708a3da9bd1756d634304b30f32ebc758a505001fa81d6fd39ddc60676cb73ee569d140bbca3bbaebb9afd9993906221ddfe07132a4888649336eef4c990887014416c4e76169bbe121a0"}, &(0x7f00000001c0)=0xa5) inotify_rm_watch(r6, r7) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.910213769s ago: executing program 0 (id=272): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r8}, 0x18) r9 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000740)=[@in6={0xa, 0x0, 0x0, @empty, 0xd}]}, &(0x7f00000002c0)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r6}, 0x10) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) write$selinux_attr(r2, &(0x7f0000000080)='system_u:object_r:crond_exec_t:s0\x00', 0x22) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="09020070c5d31a8e550000000001000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 2.767041002s ago: executing program 4 (id=274): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000b0601080000000000000400000000000000010007000043bb571a268b3ce0e1b2001c0007801800018014000240fc02000000000000000000000000000014000880100007800cfc"], 0x4c}}, 0x4800) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8001) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000280)=0x1ff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r7, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001280)=ANY=[@ANYBLOB="4000000010000400fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00020000e300020018001680140001801000ffffff120000000000000008001b0000000000000000"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0xbb) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) 2.739701504s ago: executing program 1 (id=276): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@cgroup, 0xa, 0x0, 0x7f, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0}, 0x40) unshare(0x22020400) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2060280) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f00000001c0)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4, 0x8], 0x0, 0x0, 0x12, 0x1}}, 0x40) 2.639600854s ago: executing program 1 (id=279): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x3, &(0x7f0000000080)=[{0xa, 0x0, 0x0, 0x7ffc1ffb}, {0xb, 0x9, 0x9}, {0x5, 0x7, 0xba, 0x3}]}) geteuid() 1.981116315s ago: executing program 0 (id=286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000700)=""/217, 0xd9}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) 1.81892016s ago: executing program 2 (id=288): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000001c0)=0x5) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd70000000200011ee000008002b01"], 0x28}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000160000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kmem_cache_free\x00', r6, 0x0, 0x871}, 0x18) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r2) 1.805510702s ago: executing program 1 (id=289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000020b200850000007b00000095", @ANYRES32, @ANYRES8], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r0, 0x3309) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e20, @private=0xa010100}}, 0x0, 0x0, 0xc, 0x0, "081be3af50e11f0e27dffa2ad94716cda765753d21d8c4372741f816021b661b6995bcd6e428952dfbf4b7042586bc697330174378eb7becec86e45204974a0913f9ee5cf7e6c47dc7e822780034b324"}, 0xd8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40940, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) 1.804856412s ago: executing program 4 (id=290): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000400)='fscache_access_volume\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000600), 0x80000, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='ext4_prefetch_bitmaps\x00', r0, 0x0, 0x1000000000000000}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000000), &(0x7f0000000580)='system_u:object_r:public_content_t:s0\x00', 0x26, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)='8', 0x20000081}], 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYBLOB="f4fbb90abb981b1785269fa13c2058c93004f29fe19ef04d10fa6c89a15ee98c0b7c680202c6bc0d00f69c12f9a7938be93635fc6a8157d16eaf77e4a755589d8b379edbe5799a6751aa7a7a9281c5c24ed99c008c1b9a52a1f3555d393c0fd1105a4e1d206ca7d057f663887a81ad4095a633c5931b"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYRES64=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="007f000000000000000000000000000000000000feffffffffffffff"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ae}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000980), &(0x7f0000000a40)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="b43400000000000000000000000804"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x12, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r4, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='inet_sock_set_state\x00', r8, 0x0, 0xff}, 0x18) fcntl$notify(r7, 0x402, 0x8000001f) r9 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x4) fcntl$notify(r9, 0x402, 0x8000003d) close_range(r7, r9, 0x0) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=@newqdisc={0xa0, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0xf}, {0x4, 0xffff}, {0xa}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xd, 0x32ea, 0x2, 0x2, 0x101, 0x6bcf, 0x3}}, {0xa, 0x2, [0x3ff, 0xf6, 0x84e]}}, {{0x1c, 0x1, {0x5, 0x7f, 0x8, 0x9, 0x0, 0x80000001, 0x5686d5da, 0x6}}, {0x10, 0x2, [0x8b7, 0x2, 0x8000, 0xc, 0x6, 0x5]}}, {{0x1c, 0x1, {0x28, 0x3, 0x542, 0x4, 0x1, 0x2, 0x4f3b, 0x1}}, {0x6, 0x2, [0x6]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) 1.770356754s ago: executing program 2 (id=291): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/19, 0x13}, 0xc}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.725296339s ago: executing program 4 (id=292): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a400000000000000", @ANYRES32, @ANYBLOB="000000000000f9ffffff00200000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4, 0x1}, 0x20) recvmsg$can_bcm(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.666824384s ago: executing program 2 (id=293): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6c001}, 0x8020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) brk(0x800000000000) 1.629071868s ago: executing program 2 (id=294): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff01000000350000005600000225001f0019000a0010", 0x25}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x8000033fe3, 0x0) 1.593250461s ago: executing program 4 (id=296): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xfff9}, {0xffe0}}}, 0x24}}, 0x4) 1.153396933s ago: executing program 5 (id=298): getpid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x3) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2, 0x0, 0x6}, 0x18) r3 = socket$inet6(0xa, 0x3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = inotify_init() syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000001180)=ANY=[], 0x1, 0xa08, &(0x7f0000008280)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0xd0) openat(0xffffffffffffff9c, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80002, 0x0) r8 = inotify_add_watch(r7, &(0x7f0000000280)='.\x00', 0x25000001) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x81, "6232971d0ad1c25659d06a5096437817334955b76244ba60a8a3e72a7cc2c6ec4c530de8ef837808ad48ea63c2fe063162ebfcc5c3a2c708a3da9bd1756d634304b30f32ebc758a505001fa81d6fd39ddc60676cb73ee569d140bbca3bbaebb9afd9993906221ddfe07132a4888649336eef4c990887014416c4e76169bbe121a0"}, &(0x7f00000001c0)=0xa5) inotify_rm_watch(r7, r8) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 1.057141211s ago: executing program 0 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = syz_usbip_server_init(0x2) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x27, 0x0, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0) r4 = creat(&(0x7f0000010280)='./file0\x00', 0x182) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000012a5fcabc124de36df591c16cf770f568b0afacd7c4b53000048f71eabeba2fc447c4a252170af5c", @ANYRES8, @ANYBLOB="0000000000000000d8c600000000004a9e2a15a4ad4421e23b998ddbe69ccf0000000000", @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000009f59d26ff9a700a300"/36], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000053c480d9", @ANYRESDEC=r4, @ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) lsm_get_self_attr(0x69, &(0x7f0000000480)={0x0, 0x0, 0xbc, 0x9c, ""/156}, &(0x7f0000000140)=0xbc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfd44) mmap(&(0x7f00004a0000/0x2000)=nil, 0x2000, 0x0, 0x10, r7, 0x8b6fc000) mount(&(0x7f0000000280)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') fsmount(r4, 0x0, 0x70) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="0700000200000000000000000000000000000900", @ANYRES32=r9, @ANYRES32=r4, @ANYBLOB="00000000000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000180)={r3, 0x3, "f2896e"}, &(0x7f0000000040)=0xb) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree\x00', r11}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0d00004475360002060300000000000000800000"], 0x7}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) 1.028563964s ago: executing program 5 (id=300): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0x2}, 0x18) socket(0x40000000015, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff01000000350000005600000225001f0019000a0010", 0x25}], 0x1) splice(r1, 0x0, r2, 0x0, 0x8000033fe3, 0x0) 784.743257ms ago: executing program 2 (id=301): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x29000000, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz0\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x1, 'syz0\x00', 0xfe}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x542) 719.799683ms ago: executing program 2 (id=302): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xc1, 0x2, 0x400, 0x1f0, 0x1, 0x0, "a67e38b73af0aaca6fdd5083b58791b6c6e2b50d6780685548847c2cd076912b2340b88264c20eed32f8b7fa07884398d08b174b6649c3e74fcf981479bf4c9112e07c7e3d48f446c21f5b4786a527dc3f4ef7ff466a18bfa18330ccb0e61d10fd01618d91dfd72601784a27427f54706d3eee4e8a83ad91f7d220fa8d154fe779af00bfab98eb4db8b31f78c5ac9f5650b125496c06a7a6e58ecd43ecd02f16beb515fecb65cdd021eecd52118b2038af40c2bed0da862aaa486e6e69da45ab0e"}}, 0x1d9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000007a00)={@fallback, 0xffffffffffffffff, 0x6, 0x200c}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, 0x8) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000380), 0x8) sendto$inet6(r3, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x43, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x182, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4021}, 0x80) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) fchmod(0xffffffffffffffff, 0xe) 573.485667ms ago: executing program 1 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = syz_usbip_server_init(0x2) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x0, 0x27, 0x0, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0) r4 = creat(&(0x7f0000010280)='./file0\x00', 0x182) r5 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000000012a5fcabc124de36df591c16cf770f568b0afacd7c4b53000048f71eabeba2fc447c4a252170af5c", @ANYRES8, @ANYBLOB="0000000000000000d8c600000000004a9e2a15a4ad4421e23b998ddbe69ccf0000000000", @ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000009f59d26ff9a700a300"/36], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000053c480d9", @ANYRESDEC=r4, @ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) lsm_get_self_attr(0x69, &(0x7f0000000480)={0x0, 0x0, 0xbc, 0x9c, ""/156}, &(0x7f0000000140)=0xbc, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r5, &(0x7f0000000000)=ANY=[], 0xfd44) mmap(&(0x7f00004a0000/0x2000)=nil, 0x2000, 0x0, 0x10, r7, 0x8b6fc000) mount(&(0x7f0000000280)=@md0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000200)='9p\x00', 0x0, &(0x7f0000000900)='trans=tcp,') fsmount(r4, 0x0, 0x70) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="0700000200000000000000000000000000000900", @ANYRES32=r9, @ANYRES32=r4, @ANYBLOB="00000000000000000400"/28], 0x50) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000180)={r3, 0x3, "f2896e"}, &(0x7f0000000040)=0xb) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000100)='kfree\x00', r10}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r11, 0x0, 0x30, 0x0, 0x290) 266.445645ms ago: executing program 0 (id=304): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6c001}, 0x8020) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) brk(0x800000000000) 222.554349ms ago: executing program 0 (id=305): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f00000002c0)=0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/19, 0x13}, 0xc}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mbind(&(0x7f0000951000/0x2000)=nil, 0x2000, 0x1, &(0x7f0000000000)=0xd4fc, 0x8, 0x2) write$binfmt_script(r2, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) 172.049184ms ago: executing program 0 (id=306): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6367726f75705f743a7330202f7573722f6c69622f74656c6570617468792f6d697373698f6e2d636f6e74726f6c2d3520303030303030303030303030010030333237363700"], 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000c00)=ANY=[@ANYBLOB="280000d9", @ANYRES16=0x0, @ANYBLOB="000828bd7000fedbdf250800000004000280"], 0x18}, 0x1, 0x0, 0x0, 0x400c}, 0x0) sendfile(r0, r1, 0x0, 0x8000002b) futimesat(r1, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000200)="d8048479bdf38c944132cdfd62a3ccf8acf4ef673848942ae98f269e796522d61b2ed7450904682b331d2fc39be1e7db45121339e9d6b7205fdd679c776a0932757f863f4d268550a6755cc01d4d9b21a3be1d0e45d5cda267a2f297582f66447bb2b8e1d9bd9d46577dfbd7bcba6ea4dabed13564327123f002f9a4bf54570d411a1eccfc4fb26ae3b6c6963eccb165d9", 0x91) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x6c9c3, 0xf0) faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) 118.870199ms ago: executing program 5 (id=307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0xf0}}, 0x0) 118.512829ms ago: executing program 5 (id=308): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6367726f75705f743a7330202f7573722f6c69622f74656c6570617468792f6d697373698f6e2d636f6e74726f6c2d3520303030303030303030303030010030333237363700"], 0x58) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) futimesat(0xffffffffffffffff, 0x0, 0x0) 49.337296ms ago: executing program 5 (id=309): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r3, 0x2, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @multicast}, 0x10) socket$packet(0x11, 0x3, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) close(0xffffffffffffffff) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x409, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = socket$netlink(0x10, 0x3, 0xf) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r9 = syz_open_pts(r8, 0x141601) write(r9, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r7, 0xffffffffffffffff, 0x0) gettid() 0s ago: executing program 5 (id=310): ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000080)=0x10) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000000c0)={0x8, 0x0, 0x53}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() (async) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_emit_ethernet(0xf6, &(0x7f0000000d00)=ANY=[@ANYBLOB], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.249' (ED25519) to the list of known hosts. [ 35.938833][ T29] audit: type=1400 audit(1767511426.550:62): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 35.961981][ T29] audit: type=1400 audit(1767511426.580:63): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.964294][ T3311] cgroup: Unknown subsys name 'net' [ 35.989755][ T29] audit: type=1400 audit(1767511426.600:64): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.121938][ T3311] cgroup: Unknown subsys name 'cpuset' [ 36.128280][ T3311] cgroup: Unknown subsys name 'rlimit' [ 36.240677][ T29] audit: type=1400 audit(1767511426.850:65): avc: denied { setattr } for pid=3311 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.270825][ T29] audit: type=1400 audit(1767511426.860:66): avc: denied { create } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.291442][ T29] audit: type=1400 audit(1767511426.860:67): avc: denied { write } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.310991][ T3314] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.311965][ T29] audit: type=1400 audit(1767511426.860:68): avc: denied { read } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.340666][ T29] audit: type=1400 audit(1767511426.870:69): avc: denied { mounton } for pid=3311 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.346774][ T3311] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.365599][ T29] audit: type=1400 audit(1767511426.870:70): avc: denied { mount } for pid=3311 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.397597][ T29] audit: type=1400 audit(1767511426.880:71): avc: denied { read } for pid=3050 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 37.675014][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 37.692274][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 37.801074][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 37.810165][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 37.826265][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.833412][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.840715][ T3323] bridge_slave_0: entered allmulticast mode [ 37.847417][ T3323] bridge_slave_0: entered promiscuous mode [ 37.859906][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 37.873379][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.880507][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.887829][ T3323] bridge_slave_1: entered allmulticast mode [ 37.894397][ T3323] bridge_slave_1: entered promiscuous mode [ 37.915752][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.922959][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.930088][ T3321] bridge_slave_0: entered allmulticast mode [ 37.936528][ T3321] bridge_slave_0: entered promiscuous mode [ 37.961374][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.968494][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.975667][ T3321] bridge_slave_1: entered allmulticast mode [ 37.982088][ T3321] bridge_slave_1: entered promiscuous mode [ 38.010145][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.034894][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.054574][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.075970][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.083152][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.090276][ T3324] bridge_slave_0: entered allmulticast mode [ 38.096736][ T3324] bridge_slave_0: entered promiscuous mode [ 38.104786][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.128254][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.135526][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.142877][ T3324] bridge_slave_1: entered allmulticast mode [ 38.149240][ T3324] bridge_slave_1: entered promiscuous mode [ 38.160887][ T3323] team0: Port device team_slave_0 added [ 38.166592][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.173778][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.181017][ T3327] bridge_slave_0: entered allmulticast mode [ 38.187673][ T3327] bridge_slave_0: entered promiscuous mode [ 38.211361][ T3323] team0: Port device team_slave_1 added [ 38.217138][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.224353][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.231879][ T3327] bridge_slave_1: entered allmulticast mode [ 38.238369][ T3327] bridge_slave_1: entered promiscuous mode [ 38.244984][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.252172][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.259440][ T3322] bridge_slave_0: entered allmulticast mode [ 38.265983][ T3322] bridge_slave_0: entered promiscuous mode [ 38.279408][ T3321] team0: Port device team_slave_0 added [ 38.295022][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.302138][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.309298][ T3322] bridge_slave_1: entered allmulticast mode [ 38.316014][ T3322] bridge_slave_1: entered promiscuous mode [ 38.323403][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.333466][ T3321] team0: Port device team_slave_1 added [ 38.355277][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.369957][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.376985][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.402938][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.415468][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.441086][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.448269][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.474217][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.485970][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.496269][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.510928][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.517954][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.543910][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.564453][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.579951][ T3324] team0: Port device team_slave_0 added [ 38.586251][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.593291][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.619260][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.641027][ T3324] team0: Port device team_slave_1 added [ 38.651524][ T3327] team0: Port device team_slave_0 added [ 38.658212][ T3322] team0: Port device team_slave_0 added [ 38.664694][ T3327] team0: Port device team_slave_1 added [ 38.687550][ T3322] team0: Port device team_slave_1 added [ 38.706116][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.713143][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.739240][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.770829][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.777886][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.803843][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.819349][ T3323] hsr_slave_0: entered promiscuous mode [ 38.825628][ T3323] hsr_slave_1: entered promiscuous mode [ 38.842727][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.849726][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.875847][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.892656][ T3321] hsr_slave_0: entered promiscuous mode [ 38.898784][ T3321] hsr_slave_1: entered promiscuous mode [ 38.904906][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.910636][ T3321] Cannot create hsr debugfs directory [ 38.916845][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.923899][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.949899][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.960895][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.967873][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.993890][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.009054][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.016060][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.042009][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.098676][ T3324] hsr_slave_0: entered promiscuous mode [ 39.104765][ T3324] hsr_slave_1: entered promiscuous mode [ 39.110630][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 39.116564][ T3324] Cannot create hsr debugfs directory [ 39.142693][ T3327] hsr_slave_0: entered promiscuous mode [ 39.149124][ T3327] hsr_slave_1: entered promiscuous mode [ 39.155058][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 39.160800][ T3327] Cannot create hsr debugfs directory [ 39.168495][ T3322] hsr_slave_0: entered promiscuous mode [ 39.174649][ T3322] hsr_slave_1: entered promiscuous mode [ 39.180717][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 39.186507][ T3322] Cannot create hsr debugfs directory [ 39.389623][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 39.398644][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 39.407744][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 39.418911][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 39.443270][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 39.454993][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 39.464753][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 39.478048][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 39.511400][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 39.521042][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 39.531717][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 39.545388][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 39.575344][ T3324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 39.584546][ T3324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 39.600413][ T3324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 39.609538][ T3324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 39.645878][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.658414][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 39.671800][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 39.681481][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 39.692931][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 39.717204][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.730940][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.746270][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.753439][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.767744][ T909] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.774950][ T909] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.793105][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.811861][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.818966][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.837858][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.845045][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.862682][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.900608][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.911561][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.926544][ T909] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.933716][ T909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.958828][ T1670] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.965964][ T1670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.993703][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.014982][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.043910][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.052134][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.059366][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.077258][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.087393][ T1752] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.094544][ T1752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.115315][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.129829][ T1752] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.137012][ T1752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.161054][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.171898][ T1752] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.179030][ T1752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.222213][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 40.254947][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.309392][ T3323] veth0_vlan: entered promiscuous mode [ 40.328132][ T3323] veth1_vlan: entered promiscuous mode [ 40.372409][ T3323] veth0_macvtap: entered promiscuous mode [ 40.395580][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.404025][ T3323] veth1_macvtap: entered promiscuous mode [ 40.414107][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.452282][ T3322] veth0_vlan: entered promiscuous mode [ 40.460348][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.475769][ T3321] veth0_vlan: entered promiscuous mode [ 40.483845][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.501439][ T3322] veth1_vlan: entered promiscuous mode [ 40.516618][ T1752] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.534305][ T3321] veth1_vlan: entered promiscuous mode [ 40.549855][ T1752] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.576035][ T1752] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.597810][ T1752] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.612407][ T3322] veth0_macvtap: entered promiscuous mode [ 40.629025][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 40.635380][ T3322] veth1_macvtap: entered promiscuous mode [ 40.657463][ T3321] veth0_macvtap: entered promiscuous mode [ 40.679197][ T3321] veth1_macvtap: entered promiscuous mode [ 40.699232][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.721984][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.744959][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.759708][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.782562][ T3327] veth0_vlan: entered promiscuous mode [ 40.790733][ T3327] veth1_vlan: entered promiscuous mode [ 40.797814][ T1849] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.806653][ T1849] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.829458][ T1670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.838853][ T3324] veth0_vlan: entered promiscuous mode [ 40.852591][ T1670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.862755][ T3324] veth1_vlan: entered promiscuous mode [ 40.891234][ T1670] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.919301][ T1670] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.942632][ T3327] veth0_macvtap: entered promiscuous mode [ 40.950495][ T3324] veth0_macvtap: entered promiscuous mode [ 40.956422][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 40.956439][ T29] audit: type=1400 audit(1767511431.560:115): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.986790][ T29] audit: type=1400 audit(1767511431.560:116): avc: denied { open } for pid=3323 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.995470][ T1670] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.011384][ T29] audit: type=1400 audit(1767511431.560:117): avc: denied { ioctl } for pid=3323 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.033826][ T3324] veth1_macvtap: entered promiscuous mode [ 41.056333][ T3327] veth1_macvtap: entered promiscuous mode [ 41.075658][ T1670] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.094598][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.132834][ T29] audit: type=1400 audit(1767511431.750:118): avc: denied { map_read map_write } for pid=3507 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.157181][ T3513] FAULT_INJECTION: forcing a failure. [ 41.157181][ T3513] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 41.163614][ T29] audit: type=1400 audit(1767511431.750:119): avc: denied { open } for pid=3507 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.170676][ T3513] CPU: 1 UID: 0 PID: 3513 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.170762][ T3513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.170815][ T3513] Call Trace: [ 41.170837][ T3513] [ 41.170861][ T3513] __dump_stack+0x1d/0x30 [ 41.170913][ T3513] dump_stack_lvl+0x95/0xd0 [ 41.170987][ T3513] dump_stack+0x15/0x1b [ 41.171032][ T3513] should_fail_ex+0x265/0x280 [ 41.171119][ T3513] should_fail+0xb/0x20 [ 41.171199][ T3513] should_fail_usercopy+0x1a/0x20 [ 41.171345][ T3513] strncpy_from_user+0x27/0x260 [ 41.171452][ T3513] ? __fget_files+0x184/0x1c0 [ 41.171529][ T3513] __se_sys_add_key+0x86/0x350 [ 41.171648][ T3513] __x64_sys_add_key+0x67/0x80 [ 41.171765][ T3513] x64_sys_call+0x2ea3/0x3000 [ 41.171844][ T3513] do_syscall_64+0xca/0x2b0 [ 41.172014][ T3513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.172091][ T3513] RIP: 0033:0x7f7d8e86f749 [ 41.172143][ T3513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.172199][ T3513] RSP: 002b:00007f7d8d2cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 41.172280][ T3513] RAX: ffffffffffffffda RBX: 00007f7d8eac5fa0 RCX: 00007f7d8e86f749 [ 41.172330][ T3513] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 41.172375][ T3513] RBP: 00007f7d8d2cf090 R08: ffffffffffffffff R09: 0000000000000000 [ 41.172418][ T3513] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 41.172460][ T3513] R13: 00007f7d8eac6038 R14: 00007f7d8eac5fa0 R15: 00007ffcc6f28278 [ 41.172522][ T3513] [ 41.180954][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.189365][ T29] audit: type=1400 audit(1767511431.750:120): avc: denied { kernel } for pid=3507 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.230237][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.233111][ T29] audit: type=1400 audit(1767511431.750:121): avc: denied { prog_run } for pid=3509 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 41.247793][ T1752] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.252010][ T29] audit: type=1400 audit(1767511431.770:122): avc: denied { cpu } for pid=3507 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.256598][ T29] audit: type=1400 audit(1767511431.830:123): avc: denied { write } for pid=3507 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 41.284581][ T1752] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.464201][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.482461][ T29] audit: type=1400 audit(1767511432.100:124): avc: denied { create } for pid=3517 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 41.486830][ T3511] process 'syz.0.1' launched '/dev/fd/10' with NULL argv: empty string added [ 41.545213][ T3523] loop3: detected capacity change from 0 to 512 [ 41.553210][ T3523] EXT4-fs: Ignoring removed i_version option [ 41.569884][ T3523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.597853][ T1752] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.623575][ T3529] Illegal XDP return value 4291137520 on prog (id 5) dev syz_tun, expect packet loss! [ 41.686478][ T3535] smc: net device hsr0 applied user defined pnetid SYZ2 [ 41.693900][ T1752] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.709680][ T3523] Zero length message leads to an empty skb [ 41.723798][ T3535] smc: net device hsr0 erased user defined pnetid SYZ2 [ 41.733918][ T1752] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.759875][ T1752] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.795089][ T3535] loop4: detected capacity change from 0 to 2048 [ 41.805616][ T1752] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.844930][ T1752] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.862324][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.888819][ T3546] tipc: Started in network mode [ 41.893843][ T3546] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 41.902833][ T3546] tipc: Enabling of bearer rejected, failed to enable media [ 41.911708][ T3544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14'. [ 41.934860][ T3550] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 41.941431][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 41.949127][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.005796][ T3554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 42.023300][ T3554] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 42.029948][ T3554] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 42.037424][ T3554] vhci_hcd vhci_hcd.0: Device attached [ 42.073700][ T3550] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(6) [ 42.080267][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 42.088028][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.106060][ T3550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 42.113061][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 42.122490][ T3550] netlink: 256 bytes leftover after parsing attributes in process `syz.1.18'. [ 42.138381][ T3563] loop3: detected capacity change from 0 to 512 [ 42.147608][ T3562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.20'. [ 42.159425][ T3550] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(20) [ 42.166188][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.173878][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.208743][ T3550] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 42.222721][ T3550] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(25) [ 42.229366][ T3550] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 42.237066][ T3550] vhci_hcd vhci_hcd.0: Device attached [ 42.251345][ T3566] vhci_hcd: connection closed [ 42.251749][ T3564] vhci_hcd: connection closed [ 42.252428][ T3560] vhci_hcd: connection closed [ 42.261763][ T3555] vhci_hcd: connection closed [ 42.261829][ T12] vhci_hcd vhci_hcd.1: stop threads [ 42.276541][ T12] vhci_hcd vhci_hcd.1: release socket [ 42.282139][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 42.288194][ T3552] vhci_hcd: connection closed [ 42.311572][ T12] vhci_hcd vhci_hcd.1: stop threads [ 42.321666][ T12] vhci_hcd vhci_hcd.1: release socket [ 42.327087][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 42.340939][ T3570] netlink: 'syz.3.21': attribute type 12 has an invalid length. [ 42.351861][ T12] vhci_hcd vhci_hcd.1: stop threads [ 42.357154][ T12] vhci_hcd vhci_hcd.1: release socket [ 42.362894][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 42.368024][ T3570] loop3: detected capacity change from 0 to 512 [ 42.368645][ T3527] usb 3-1: new low-speed USB device number 2 using vhci_hcd [ 42.391047][ T3570] ------------[ cut here ]------------ [ 42.391371][ T3553] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 42.397046][ T3570] EA inode 11 i_nlink=2 [ 42.402501][ T3570] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#0: syz.3.21/3570 [ 42.411522][ T12] vhci_hcd vhci_hcd.1: stop threads [ 42.417433][ T3570] Modules linked in: [ 42.422680][ T12] vhci_hcd vhci_hcd.1: release socket [ 42.426588][ T3570] CPU: 0 UID: 0 PID: 3570 Comm: syz.3.21 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.431975][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 42.447283][ T3570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.457518][ T3570] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 42.464183][ T3570] Code: d1 e2 9c ff 4c 8d 2d 2a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 7c ac ba 03 66 66 66 2e 0f 1f 84 [ 42.483938][ T3570] RSP: 0018:ffffc9000205b5a0 EFLAGS: 00010246 [ 42.490060][ T3570] RAX: ffff888101cb3c10 RBX: ffff888107a82db8 RCX: ffffffff81bb1d9b [ 42.498101][ T3570] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 42.506147][ T3570] RBP: 000000000000000b R08: 0001888107a82d6b R09: 0000000000000000 [ 42.508344][ T12] vhci_hcd vhci_hcd.1: stop threads [ 42.514273][ T3570] R10: ffffc9000205b4d0 R11: 0001c9000205b4d0 R12: ffff888107a82d68 [ 42.514295][ T3570] R13: ffffffff86dc0db0 R14: ffff888107a82d20 R15: 0000000000000001 [ 42.519553][ T12] vhci_hcd vhci_hcd.1: release socket [ 42.527635][ T3570] FS: 00007f7d8d2cf6c0(0000) GS:ffff8882aedc5000(0000) knlGS:0000000000000000 [ 42.535839][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 42.541053][ T3570] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.562373][ T3570] CR2: 00007ff1415f6000 CR3: 000000011b7da000 CR4: 00000000003506f0 [ 42.570397][ T3570] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.578598][ T3570] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 42.586663][ T3570] Call Trace: [ 42.589975][ T3570] [ 42.592978][ T3570] ext4_xattr_set_entry+0x77f/0x1020 [ 42.598318][ T3570] ext4_xattr_ibody_set+0x184/0x3c0 [ 42.603608][ T3570] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 42.609495][ T3570] __ext4_expand_extra_isize+0x246/0x280 [ 42.615276][ T3570] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 42.620785][ T3570] ext4_evict_inode+0x7c4/0xd40 [ 42.625746][ T3570] ? __pfx_ext4_evict_inode+0x10/0x10 [ 42.631223][ T3570] evict+0x2af/0x510 [ 42.635272][ T3570] ? __dquot_initialize+0x146/0x7c0 [ 42.640952][ T3570] iput+0x4bd/0x650 [ 42.645068][ T3570] ext4_process_orphan+0x1a9/0x1c0 [ 42.650246][ T3570] ext4_orphan_cleanup+0x6a8/0xa00 [ 42.655499][ T3570] ext4_fill_super+0x3411/0x37a0 [ 42.660531][ T3570] ? set_blocksize+0x1a8/0x310 [ 42.665391][ T3570] ? sb_set_blocksize+0xfc/0x170 [ 42.670373][ T3570] ? setup_bdev_super+0x30e/0x370 [ 42.675480][ T3570] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.680807][ T3570] get_tree_bdev_flags+0x291/0x300 [ 42.686009][ T3570] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.691501][ T3570] get_tree_bdev+0x1f/0x30 [ 42.695984][ T3570] ext4_get_tree+0x1c/0x30 [ 42.700437][ T3570] vfs_get_tree+0x57/0x1d0 [ 42.709938][ T3570] do_new_mount+0x24d/0x6a0 [ 42.719464][ T3570] path_mount+0x4ab/0xb80 [ 42.728867][ T3570] ? user_path_at+0xbf/0x130 [ 42.736745][ T3570] __se_sys_mount+0x28c/0x2e0 [ 42.741565][ T3570] __x64_sys_mount+0x67/0x80 [ 42.746286][ T3570] x64_sys_call+0x2cca/0x3000 [ 42.751003][ T3570] do_syscall_64+0xca/0x2b0 [ 42.755613][ T3570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.761668][ T3570] RIP: 0033:0x7f7d8e870eea [ 42.766199][ T3570] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.785928][ T3570] RSP: 002b:00007f7d8d2cee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 42.794477][ T3570] RAX: ffffffffffffffda RBX: 00007f7d8d2ceef0 RCX: 00007f7d8e870eea [ 42.802525][ T3570] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f7d8d2ceeb0 [ 42.810560][ T3570] RBP: 0000200000000180 R08: 00007f7d8d2ceef0 R09: 0000000000800718 [ 42.818787][ T3570] R10: 0000000000800718 R11: 0000000000000246 R12: 00002000000001c0 [ 42.826902][ T3570] R13: 00007f7d8d2ceeb0 R14: 000000000000046f R15: 0000200000000200 [ 42.835033][ T3570] [ 42.838084][ T3570] ---[ end trace 0000000000000000 ]--- [ 42.845554][ T3572] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.20'. [ 42.850575][ T3570] EXT4-fs (loop3): 1 orphan inode deleted [ 42.861566][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.875053][ T3570] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.930794][ T3574] loop1: detected capacity change from 0 to 128 [ 42.959797][ T3574] FAULT_INJECTION: forcing a failure. [ 42.959797][ T3574] name failslab, interval 1, probability 0, space 0, times 1 [ 42.972513][ T3574] CPU: 0 UID: 0 PID: 3574 Comm: syz.1.22 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 42.972598][ T3574] Tainted: [W]=WARN [ 42.972607][ T3574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.972623][ T3574] Call Trace: [ 42.972631][ T3574] [ 42.972641][ T3574] __dump_stack+0x1d/0x30 [ 42.972706][ T3574] dump_stack_lvl+0x95/0xd0 [ 42.972730][ T3574] dump_stack+0x15/0x1b [ 42.972754][ T3574] should_fail_ex+0x265/0x280 [ 42.972783][ T3574] should_failslab+0x8c/0xb0 [ 42.972820][ T3574] kmem_cache_alloc_noprof+0x69/0x4b0 [ 42.972848][ T3574] ? skb_clone+0x151/0x1f0 [ 42.972963][ T3574] skb_clone+0x151/0x1f0 [ 42.973055][ T3574] __netlink_deliver_tap+0x2c9/0x500 [ 42.973173][ T3574] netlink_unicast+0x66b/0x690 [ 42.973213][ T3574] netlink_sendmsg+0x58b/0x6b0 [ 42.973277][ T3574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.973320][ T3574] __sock_sendmsg+0x145/0x180 [ 42.973345][ T3574] ____sys_sendmsg+0x31e/0x4a0 [ 42.973441][ T3574] ___sys_sendmsg+0x17b/0x1d0 [ 42.973492][ T3574] __x64_sys_sendmsg+0xd4/0x160 [ 42.973566][ T3574] x64_sys_call+0x17ba/0x3000 [ 42.973599][ T3574] do_syscall_64+0xca/0x2b0 [ 42.973647][ T3574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.973669][ T3574] RIP: 0033:0x7fd1647bf749 [ 42.973688][ T3574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.973728][ T3574] RSP: 002b:00007fd16321f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.973752][ T3574] RAX: ffffffffffffffda RBX: 00007fd164a15fa0 RCX: 00007fd1647bf749 [ 42.973768][ T3574] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000007 [ 42.973861][ T3574] RBP: 00007fd16321f090 R08: 0000000000000000 R09: 0000000000000000 [ 42.973878][ T3574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.973893][ T3574] R13: 00007fd164a16038 R14: 00007fd164a15fa0 R15: 00007ffda5d36ac8 [ 42.973912][ T3574] [ 43.205314][ T3581] loop3: detected capacity change from 0 to 512 [ 43.213040][ T3581] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.326421][ T3581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.364311][ T3600] capability: warning: `syz.0.28' uses 32-bit capabilities (legacy support in use) [ 43.381148][ C0] hrtimer: interrupt took 33319 ns [ 43.387389][ T3581] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.503020][ T3602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 43.543450][ T3604] GUP no longer grows the stack in syz.0.30 (3604): 200000004000-200000005000 (200000001000) [ 43.553746][ T3604] CPU: 1 UID: 0 PID: 3604 Comm: syz.0.30 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 43.553840][ T3604] Tainted: [W]=WARN [ 43.553847][ T3604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.553859][ T3604] Call Trace: [ 43.553865][ T3604] [ 43.553876][ T3604] __dump_stack+0x1d/0x30 [ 43.553907][ T3604] dump_stack_lvl+0x95/0xd0 [ 43.553980][ T3604] dump_stack+0x15/0x1b [ 43.554007][ T3604] __get_user_pages+0x1979/0x1ed0 [ 43.554045][ T3604] ? strncpy_from_user+0x183/0x260 [ 43.554127][ T3604] ? search_extable+0x53/0x80 [ 43.554152][ T3604] ? strncpy_from_user+0x183/0x260 [ 43.554239][ T3604] ? strncpy_from_user+0x183/0x260 [ 43.554277][ T3604] __gup_longterm_locked+0x8ef/0xe60 [ 43.554313][ T3604] ? __rcu_read_unlock+0x34/0x70 [ 43.554336][ T3604] ? try_get_folio+0x379/0x3c0 [ 43.554362][ T3604] ? try_grab_folio_fast+0xdc/0x370 [ 43.554387][ T3604] gup_fast_fallback+0x1f5/0x13f0 [ 43.554429][ T3604] get_user_pages_fast+0x5f/0x90 [ 43.554542][ T3604] __iov_iter_get_pages_alloc+0x250/0x730 [ 43.554587][ T3604] iov_iter_get_pages2+0x5e/0xa0 [ 43.554653][ T3604] __se_sys_vmsplice+0x4db/0xee0 [ 43.554677][ T3604] ? audit_log_end+0x23d/0x250 [ 43.554732][ T3604] ? __seccomp_filter+0x843/0x1260 [ 43.554780][ T3604] ? __secure_computing+0x82/0x150 [ 43.554812][ T3604] __x64_sys_vmsplice+0x55/0x70 [ 43.554844][ T3604] x64_sys_call+0x2344/0x3000 [ 43.554871][ T3604] do_syscall_64+0xca/0x2b0 [ 43.554909][ T3604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.554930][ T3604] RIP: 0033:0x7f6c43b3f749 [ 43.554946][ T3604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.554965][ T3604] RSP: 002b:00007f6c425a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 43.554983][ T3604] RAX: ffffffffffffffda RBX: 00007f6c43d95fa0 RCX: 00007f6c43b3f749 [ 43.554995][ T3604] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000007 [ 43.555014][ T3604] RBP: 00007f6c43bc3f91 R08: 0000000000000000 R09: 0000000000000000 [ 43.555031][ T3604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 43.555045][ T3604] R13: 00007f6c43d96038 R14: 00007f6c43d95fa0 R15: 00007ffeaed72d18 [ 43.555064][ T3604] [ 43.610821][ T3602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.25'. [ 43.844197][ T3598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 43.888186][ T3612] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 43.894778][ T3612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 43.902502][ T3612] vhci_hcd vhci_hcd.0: Device attached [ 43.927659][ T3615] netlink: 'syz.0.31': attribute type 10 has an invalid length. [ 43.943175][ T3615] veth0_vlan: left promiscuous mode [ 43.949952][ T3615] veth0_vlan: entered promiscuous mode [ 43.964690][ T3615] team0: Device veth0_vlan failed to register rx_handler [ 43.995458][ T3617] netlink: 28 bytes leftover after parsing attributes in process `syz.4.32'. [ 44.010817][ T3612] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(11) [ 44.017470][ T3612] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 44.025027][ T3612] vhci_hcd vhci_hcd.0: Device attached [ 44.031994][ T3612] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(13) [ 44.038636][ T3612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 44.046276][ T3612] vhci_hcd vhci_hcd.0: Device attached [ 44.052626][ T3612] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.062950][ T3612] netlink: 256 bytes leftover after parsing attributes in process `syz.4.32'. [ 44.085043][ T3612] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 44.091766][ T3612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.099430][ T3612] vhci_hcd vhci_hcd.0: Device attached [ 44.105756][ T3612] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.132915][ T3612] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(25) [ 44.139567][ T3612] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 44.147397][ T3612] vhci_hcd vhci_hcd.0: Device attached [ 44.148213][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.159761][ T3624] vhci_hcd: connection closed [ 44.162475][ T1849] vhci_hcd vhci_hcd.4: stop threads [ 44.172499][ T1849] vhci_hcd vhci_hcd.4: release socket [ 44.177960][ T1849] vhci_hcd vhci_hcd.4: disconnect device [ 44.184670][ T3620] vhci_hcd: connection closed [ 44.184695][ T3618] vhci_hcd: connection closed [ 44.189676][ T3613] vhci_hcd: connection closed [ 44.191297][ T3478] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 44.206643][ T3614] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 44.207453][ T3622] vhci_hcd: connection closed [ 44.216121][ T1849] vhci_hcd vhci_hcd.4: stop threads [ 44.226102][ T1849] vhci_hcd vhci_hcd.4: release socket [ 44.231536][ T1849] vhci_hcd vhci_hcd.4: disconnect device [ 44.237574][ T1849] vhci_hcd vhci_hcd.4: stop threads [ 44.242884][ T1849] vhci_hcd vhci_hcd.4: release socket [ 44.248287][ T1849] vhci_hcd vhci_hcd.4: disconnect device [ 44.254216][ T1849] vhci_hcd vhci_hcd.4: stop threads [ 44.259465][ T1849] vhci_hcd vhci_hcd.4: release socket [ 44.264930][ T1849] vhci_hcd vhci_hcd.4: disconnect device [ 44.278043][ T1849] vhci_hcd vhci_hcd.4: stop threads [ 44.283345][ T1849] vhci_hcd vhci_hcd.4: release socket [ 44.288837][ T1849] vhci_hcd vhci_hcd.4: disconnect device [ 44.296568][ T3629] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 44.297755][ T3627] loop1: detected capacity change from 0 to 1764 [ 44.375659][ T3631] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 44.452830][ T3641] FAULT_INJECTION: forcing a failure. [ 44.452830][ T3641] name failslab, interval 1, probability 0, space 0, times 0 [ 44.465606][ T3641] CPU: 1 UID: 0 PID: 3641 Comm: syz.1.39 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 44.465761][ T3641] Tainted: [W]=WARN [ 44.465768][ T3641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.465787][ T3641] Call Trace: [ 44.465796][ T3641] [ 44.465805][ T3641] __dump_stack+0x1d/0x30 [ 44.465876][ T3641] dump_stack_lvl+0x95/0xd0 [ 44.465905][ T3641] dump_stack+0x15/0x1b [ 44.465932][ T3641] should_fail_ex+0x265/0x280 [ 44.465983][ T3641] should_failslab+0x8c/0xb0 [ 44.466014][ T3641] __kmalloc_noprof+0xb9/0x5a0 [ 44.466109][ T3641] ? security_sk_alloc+0x52/0x120 [ 44.466143][ T3641] security_sk_alloc+0x52/0x120 [ 44.466174][ T3641] sk_prot_alloc+0xc2/0x190 [ 44.466204][ T3641] sk_alloc+0x34/0x3d0 [ 44.466265][ T3641] unix_create1+0xa5/0x400 [ 44.466300][ T3641] unix_stream_connect+0x196/0xa00 [ 44.466327][ T3641] ? selinux_netlbl_socket_connect+0x114/0x130 [ 44.466436][ T3641] ? selinux_socket_connect+0x57/0x70 [ 44.466570][ T3641] ? __pfx_unix_stream_connect+0x10/0x10 [ 44.466682][ T3641] __sys_connect+0x1f2/0x2b0 [ 44.466719][ T3641] __x64_sys_connect+0x3f/0x50 [ 44.466745][ T3641] x64_sys_call+0x2e09/0x3000 [ 44.466776][ T3641] do_syscall_64+0xca/0x2b0 [ 44.466849][ T3641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.466878][ T3641] RIP: 0033:0x7fd1647bf749 [ 44.466897][ T3641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.466924][ T3641] RSP: 002b:00007fd16321f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 44.466947][ T3641] RAX: ffffffffffffffda RBX: 00007fd164a15fa0 RCX: 00007fd1647bf749 [ 44.466959][ T3641] RDX: 000000000000006e RSI: 0000200000001340 RDI: 0000000000000004 [ 44.466988][ T3641] RBP: 00007fd16321f090 R08: 0000000000000000 R09: 0000000000000000 [ 44.467001][ T3641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.467013][ T3641] R13: 00007fd164a16038 R14: 00007fd164a15fa0 R15: 00007ffda5d36ac8 [ 44.467032][ T3641] [ 44.702646][ T3615] syz.0.31 (3615) used greatest stack depth: 9288 bytes left [ 44.933684][ T3662] loop0: detected capacity change from 0 to 1764 [ 45.071874][ T3668] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 45.190925][ T3676] loop1: detected capacity change from 0 to 512 [ 45.223437][ T3676] EXT4-fs: Ignoring removed orlov option [ 45.246871][ T3676] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.50: corrupted in-inode xattr: e_value size too large [ 45.310773][ T3676] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.50: couldn't read orphan inode 15 (err -117) [ 45.339397][ T3676] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.389841][ T3692] netlink: 'syz.4.53': attribute type 10 has an invalid length. [ 45.416687][ T3694] syz.0.54 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.426416][ T3692] veth0_vlan: left promiscuous mode [ 45.441782][ T3692] veth0_vlan: entered promiscuous mode [ 45.464027][ T3692] team0: Device veth0_vlan failed to register rx_handler [ 45.542984][ T3678] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 45.572097][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.623016][ T3702] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 45.629594][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 45.637250][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 45.649805][ T3701] ======================================================= [ 45.649805][ T3701] WARNING: The mand mount option has been deprecated and [ 45.649805][ T3701] and is ignored by this kernel. Remove the mand [ 45.649805][ T3701] option from the mount to silence this warning. [ 45.649805][ T3701] ======================================================= [ 45.698071][ T3702] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 45.704790][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 45.712314][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 45.734741][ T3702] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 45.741400][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 45.749255][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 45.757691][ T3702] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.770522][ T3702] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 45.777174][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 45.784994][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 45.791508][ T3702] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 45.810444][ T3702] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(24) [ 45.817104][ T3702] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 45.824945][ T3702] vhci_hcd vhci_hcd.0: Device attached [ 45.844818][ T3718] vhci_hcd: connection closed [ 45.845075][ T3716] vhci_hcd: connection closed [ 45.845843][ T1752] vhci_hcd vhci_hcd.1: stop threads [ 45.850586][ T3710] vhci_hcd: connection closed [ 45.854667][ T1752] vhci_hcd vhci_hcd.1: release socket [ 45.869968][ T1752] vhci_hcd vhci_hcd.1: disconnect device [ 45.875844][ T3703] vhci_hcd: connection closed [ 45.880702][ T3707] vhci_hcd: connection closed [ 45.889768][ T1752] vhci_hcd vhci_hcd.1: stop threads [ 45.900722][ T1752] vhci_hcd vhci_hcd.1: release socket [ 45.906237][ T1752] vhci_hcd vhci_hcd.1: disconnect device [ 45.914847][ T1752] vhci_hcd vhci_hcd.1: stop threads [ 45.920098][ T1752] vhci_hcd vhci_hcd.1: release socket [ 45.925584][ T1752] vhci_hcd vhci_hcd.1: disconnect device [ 45.931731][ T1752] vhci_hcd vhci_hcd.1: stop threads [ 45.936969][ T1752] vhci_hcd vhci_hcd.1: release socket [ 45.942442][ T1752] vhci_hcd vhci_hcd.1: disconnect device [ 45.950699][ T1752] vhci_hcd vhci_hcd.1: stop threads [ 45.956068][ T1752] vhci_hcd vhci_hcd.1: release socket [ 45.961505][ T1752] vhci_hcd vhci_hcd.1: disconnect device [ 45.980246][ T29] kauditd_printk_skb: 399 callbacks suppressed [ 45.980261][ T29] audit: type=1400 audit(1767511436.590:524): avc: denied { bind } for pid=3724 comm="+}[@" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.006267][ T29] audit: type=1400 audit(1767511436.590:525): avc: denied { name_bind } for pid=3724 comm="+}[@" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 46.026731][ T29] audit: type=1400 audit(1767511436.590:526): avc: denied { node_bind } for pid=3724 comm="+}[@" saddr=10.1.1.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 46.049981][ T29] audit: type=1400 audit(1767511436.640:527): avc: denied { listen } for pid=3724 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 46.083175][ T29] audit: type=1400 audit(1767511436.700:528): avc: denied { connect } for pid=3724 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.107730][ T3725] loop3: detected capacity change from 0 to 164 [ 46.115680][ T3725] ISOFS: unable to read i-node block [ 46.121215][ T3725] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 46.130870][ T29] audit: type=1400 audit(1767511436.720:529): avc: denied { shutdown } for pid=3724 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.197569][ T29] audit: type=1400 audit(1767511436.810:530): avc: denied { read } for pid=3730 comm="syz.3.64" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.232600][ T29] audit: type=1400 audit(1767511436.810:531): avc: denied { open } for pid=3730 comm="syz.3.64" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 46.255998][ T29] audit: type=1400 audit(1767511436.840:532): avc: denied { connect } for pid=3732 comm="syz.4.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.505657][ T3744] smc: net device bond0 applied user defined pnetid SYZ0 [ 46.699528][ T29] audit: type=1400 audit(1767511437.310:533): avc: denied { create } for pid=3746 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 47.096413][ T3782] loop4: detected capacity change from 0 to 2048 [ 47.158596][ T3782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 47.300073][ T3786] syz.3.80 (3786) used greatest stack depth: 9160 bytes left [ 47.308187][ T1752] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.399702][ T1752] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 298 with error 28 [ 47.412226][ T1752] EXT4-fs (loop4): This should not happen!! Data will be lost [ 47.412226][ T1752] [ 47.421947][ T1752] EXT4-fs (loop4): Total free blocks count 0 [ 47.423020][ T3527] usb 3-1: enqueue for inactive port 0 [ 47.427948][ T1752] EXT4-fs (loop4): Free/Dirty block details [ 47.439392][ T1752] EXT4-fs (loop4): free_blocks=2415919104 [ 47.445191][ T1752] EXT4-fs (loop4): dirty_blocks=304 [ 47.445286][ T3527] usb 3-1: enqueue for inactive port 0 [ 47.450491][ T1752] EXT4-fs (loop4): Block reservation details [ 47.462012][ T1752] EXT4-fs (loop4): i_reserved_data_blocks=19 [ 47.487639][ T3789] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 47.541242][ T3527] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 47.613868][ T3793] loop0: detected capacity change from 0 to 1764 [ 47.647153][ T3796] loop3: detected capacity change from 0 to 256 [ 47.682444][ T3796] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 47.695279][ T3787] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 190 with max blocks 54 with error 28 [ 47.782551][ T3802] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 47.879740][ T3806] __nla_validate_parse: 4 callbacks suppressed [ 47.879759][ T3806] netlink: 25 bytes leftover after parsing attributes in process `syz.1.87'. [ 48.287996][ T3818] netlink: 56 bytes leftover after parsing attributes in process `syz.4.91'. [ 48.338339][ T3826] netlink: 40 bytes leftover after parsing attributes in process `syz.3.94'. [ 49.065210][ T3845] loop1: detected capacity change from 0 to 2048 [ 49.096493][ T3845] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.251191][ T3478] usb 9-1: enqueue for inactive port 0 [ 49.257197][ T3478] usb 9-1: enqueue for inactive port 0 [ 49.285479][ T3844] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 49.331207][ T3478] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 49.361784][ T3849] loop3: detected capacity change from 0 to 1764 [ 49.387616][ T3851] loop2: detected capacity change from 0 to 512 [ 49.419106][ T3851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 49.454645][ T3851] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.521274][ T3851] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.608657][ T3861] netlink: 25 bytes leftover after parsing attributes in process `syz.3.106'. [ 49.695662][ T3863] netlink: 20 bytes leftover after parsing attributes in process `syz.2.104'. [ 49.768940][ T1849] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.806542][ T1849] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 84 with error 28 [ 49.819031][ T1849] EXT4-fs (loop1): This should not happen!! Data will be lost [ 49.819031][ T1849] [ 49.828781][ T1849] EXT4-fs (loop1): Total free blocks count 0 [ 49.834821][ T1849] EXT4-fs (loop1): Free/Dirty block details [ 49.840739][ T1849] EXT4-fs (loop1): free_blocks=2415919104 [ 49.846519][ T1849] EXT4-fs (loop1): dirty_blocks=96 [ 49.851814][ T1849] EXT4-fs (loop1): Block reservation details [ 49.857922][ T1849] EXT4-fs (loop1): i_reserved_data_blocks=6 [ 49.875039][ T909] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 84 with max blocks 36 with error 28 [ 49.982965][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.011802][ T3868] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 50.018485][ T3868] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 50.026205][ T3868] vhci_hcd vhci_hcd.0: Device attached [ 50.060572][ T3872] loop2: detected capacity change from 0 to 512 [ 50.105185][ T3872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.131570][ T3872] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.204157][ T3868] SELinux: failed to load policy [ 50.210916][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.292803][ T3869] vhci_hcd: connection closed [ 50.298331][ T37] vhci_hcd vhci_hcd.0: stop threads [ 50.308419][ T37] vhci_hcd vhci_hcd.0: release socket [ 50.313872][ T37] vhci_hcd vhci_hcd.0: disconnect device [ 50.363137][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.371773][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.391568][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 50.399302][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 50.407142][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.414866][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.422611][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.430284][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.438022][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.445719][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.453412][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.461190][ T3527] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 50.501347][ T3527] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 50.555791][ T3890] fido_id[3890]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.647025][ T3888] infiniband !yz!: set active [ 50.651962][ T3888] infiniband !yz!: added team_slave_0 [ 50.741417][ T3888] RDS/IB: !yz!: added [ 50.745592][ T3888] smc: adding ib device !yz! with port count 1 [ 50.756281][ T3888] smc: ib device !yz! port 1 has no pnetid [ 50.975167][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.115'. [ 51.383963][ T3903] loop3: detected capacity change from 0 to 1024 [ 51.407468][ T3903] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.459905][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 51.459921][ T29] audit: type=1400 audit(1767511442.070:825): avc: denied { remount } for pid=3902 comm="syz.3.117" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 51.487210][ T3903] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 51.522599][ T29] audit: type=1400 audit(1767511442.140:826): avc: denied { execute } for pid=3902 comm="syz.3.117" name="file2" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.552883][ T3903] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 51.588648][ T3903] tipc: Started in network mode [ 51.593781][ T3903] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 51.644304][ T3907] loop1: detected capacity change from 0 to 512 [ 51.652519][ T3903] tipc: Enabled bearer , priority 10 [ 51.671683][ T29] audit: type=1400 audit(1767511442.290:827): avc: denied { wake_alarm } for pid=3902 comm="syz.3.117" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.725971][ T3907] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.778109][ T3907] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.790772][ T3907] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.796021][ T29] audit: type=1400 audit(1767511442.410:828): avc: denied { remove_name } for pid=3323 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.824355][ T29] audit: type=1400 audit(1767511442.410:829): avc: denied { rmdir } for pid=3323 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.850100][ T3916] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 51.876704][ T3916] veth0_vlan: left promiscuous mode [ 51.890243][ T3916] veth0_vlan: entered promiscuous mode [ 51.899310][ T3916] team0: Device veth0_vlan failed to register rx_handler [ 51.922132][ T29] audit: type=1400 audit(1767511442.480:830): avc: denied { unlink } for pid=3323 comm="syz-executor" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.944621][ T29] audit: type=1400 audit(1767511442.480:831): avc: denied { unlink } for pid=3323 comm="syz-executor" name="file1" dev="loop3" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 51.971965][ T3920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.118'. [ 51.984107][ T29] audit: type=1326 audit(1767511442.540:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c43b3f749 code=0x7ffc0000 [ 52.007517][ T29] audit: type=1326 audit(1767511442.540:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c43b3f749 code=0x7ffc0000 [ 52.030902][ T29] audit: type=1326 audit(1767511442.540:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3915 comm="syz.0.121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c43b3f749 code=0x7ffc0000 [ 52.104241][ T3926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 52.110817][ T3926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.118375][ T3926] vhci_hcd vhci_hcd.0: Device attached [ 52.126081][ T3926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 52.136912][ T3926] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 52.143635][ T3926] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 52.151177][ T3926] vhci_hcd vhci_hcd.0: Device attached [ 52.169337][ T909] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.184656][ T3926] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 52.191326][ T3926] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 52.199043][ T3926] vhci_hcd vhci_hcd.0: Device attached [ 52.225218][ T3933] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.235820][ T3926] netlink: 256 bytes leftover after parsing attributes in process `syz.0.125'. [ 52.245795][ T3926] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(19) [ 52.252430][ T3926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.260252][ T3926] vhci_hcd vhci_hcd.0: Device attached [ 52.266453][ T3926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 52.275249][ T3926] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(24) [ 52.281868][ T3926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 52.289511][ T3926] vhci_hcd vhci_hcd.0: Device attached [ 52.299909][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.314960][ T909] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.331448][ T3936] vhci_hcd: connection closed [ 52.331722][ T3934] vhci_hcd: connection closed [ 52.331748][ T3931] vhci_hcd: connection closed [ 52.337146][ T52] vhci_hcd vhci_hcd.0: stop threads [ 52.351268][ T52] vhci_hcd vhci_hcd.0: release socket [ 52.356755][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 52.363616][ T3929] vhci_hcd: connection closed [ 52.364115][ T3927] vhci_hcd: connection closed [ 52.372840][ T3940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 52.386998][ T52] vhci_hcd vhci_hcd.0: stop threads [ 52.388211][ T909] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.392364][ T52] vhci_hcd vhci_hcd.0: release socket [ 52.408170][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 52.415054][ T52] vhci_hcd vhci_hcd.0: stop threads [ 52.420335][ T52] vhci_hcd vhci_hcd.0: release socket [ 52.425842][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 52.434080][ T52] vhci_hcd vhci_hcd.0: stop threads [ 52.439342][ T52] vhci_hcd vhci_hcd.0: release socket [ 52.444821][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 52.451262][ T52] vhci_hcd vhci_hcd.0: stop threads [ 52.456520][ T52] vhci_hcd vhci_hcd.0: release socket [ 52.462005][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 52.470587][ T909] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.546785][ T909] bridge_slave_1: left allmulticast mode [ 52.552680][ T909] bridge_slave_1: left promiscuous mode [ 52.558407][ T909] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.568826][ T909] bridge_slave_0: left allmulticast mode [ 52.574677][ T909] bridge_slave_0: left promiscuous mode [ 52.580524][ T909] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.724726][ T909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.736601][ T909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.746730][ T909] bond0 (unregistering): Released all slaves [ 52.759827][ T3975] netlink: 'syz.2.134': attribute type 10 has an invalid length. [ 52.772318][ T3975] team0: Port device dummy0 added [ 52.781637][ T3478] tipc: Node number set to 4269801494 [ 52.793979][ T909] tipc: Disabling bearer [ 52.799516][ T909] tipc: Left network mode [ 52.855521][ T3980] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 52.903928][ T909] hsr_slave_0: left promiscuous mode [ 52.912028][ T909] hsr_slave_1: left promiscuous mode [ 52.917876][ T909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.925334][ T909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.943593][ T909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.951059][ T909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.967922][ T909] veth1_macvtap: left promiscuous mode [ 52.975863][ T909] veth0_macvtap: left promiscuous mode [ 52.981760][ T909] veth1_vlan: left promiscuous mode [ 52.987876][ T909] veth0_vlan: left promiscuous mode [ 53.008548][ T3995] loop2: detected capacity change from 0 to 512 [ 53.032311][ T3995] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.065883][ T3995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.096148][ T3995] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.128203][ T909] team0 (unregistering): Port device team_slave_1 removed [ 53.139068][ T909] team0 (unregistering): Port device team_slave_0 removed [ 53.231568][ T4006] __nla_validate_parse: 3 callbacks suppressed [ 53.231590][ T4006] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 53.393370][ T3942] chnl_net:caif_netlink_parms(): no params data found [ 53.438150][ T4026] netlink: 56 bytes leftover after parsing attributes in process `syz.4.142'. [ 53.496317][ T4035] smc: net device bond0 erased user defined pnetid SYZ0 [ 53.548538][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.612030][ T4042] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 53.612407][ T3942] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.618590][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 53.625731][ T3942] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.633245][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 53.653726][ T3942] bridge_slave_0: entered allmulticast mode [ 53.660680][ T3942] bridge_slave_0: entered promiscuous mode [ 53.667648][ T3942] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.674833][ T3942] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.682966][ T3942] bridge_slave_1: entered allmulticast mode [ 53.689849][ T3942] bridge_slave_1: entered promiscuous mode [ 53.698614][ T4047] netlink: 'syz.4.142': attribute type 7 has an invalid length. [ 53.703273][ T4048] netlink: 28 bytes leftover after parsing attributes in process `syz.2.145'. [ 53.731586][ T4042] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(10) [ 53.738315][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 53.745831][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 53.758304][ T3942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.768871][ T3942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.810974][ T3942] team0: Port device team_slave_0 added [ 53.818015][ T3942] team0: Port device team_slave_1 added [ 53.832940][ T4048] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 53.868703][ T4048] netlink: 256 bytes leftover after parsing attributes in process `syz.2.145'. [ 53.903013][ T4042] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 53.909670][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 53.911360][ T3527] usb 5-1: new low-speed USB device number 2 using vhci_hcd [ 53.917434][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 53.931003][ T3942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.938069][ T3942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 53.964027][ T3942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.024787][ T3942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.031824][ T3942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.057888][ T3942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.069764][ T4042] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 54.110345][ T4059] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(14) [ 54.117018][ T4059] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.124739][ T4059] vhci_hcd vhci_hcd.0: Device attached [ 54.172064][ T4042] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(25) [ 54.178749][ T4042] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 54.186467][ T4042] vhci_hcd vhci_hcd.0: Device attached [ 54.242429][ T4069] vhci_hcd: connection closed [ 54.242552][ T909] vhci_hcd vhci_hcd.2: stop threads [ 54.243130][ T4052] vhci_hcd: connection closed [ 54.247364][ T909] vhci_hcd vhci_hcd.2: release socket [ 54.247390][ T909] vhci_hcd vhci_hcd.2: disconnect device [ 54.247530][ T4063] vhci_hcd: connection closed [ 54.271183][ T4049] vhci_hcd: connection closed [ 54.279180][ T909] vhci_hcd vhci_hcd.2: stop threads [ 54.282695][ T4043] vhci_hcd: connection reset by peer [ 54.284147][ T909] vhci_hcd vhci_hcd.2: release socket [ 54.300151][ T909] vhci_hcd vhci_hcd.2: disconnect device [ 54.312043][ T909] vhci_hcd vhci_hcd.2: stop threads [ 54.317449][ T909] vhci_hcd vhci_hcd.2: release socket [ 54.322950][ T909] vhci_hcd vhci_hcd.2: disconnect device [ 54.330127][ T909] vhci_hcd vhci_hcd.2: stop threads [ 54.335460][ T909] vhci_hcd vhci_hcd.2: release socket [ 54.340886][ T909] vhci_hcd vhci_hcd.2: disconnect device [ 54.349251][ T3942] hsr_slave_0: entered promiscuous mode [ 54.355712][ T3942] hsr_slave_1: entered promiscuous mode [ 54.402043][ T909] vhci_hcd vhci_hcd.2: stop threads [ 54.407324][ T909] vhci_hcd vhci_hcd.2: release socket [ 54.412851][ T909] vhci_hcd vhci_hcd.2: disconnect device [ 54.430260][ T4077] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.522701][ T3942] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 54.557547][ T3942] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 54.573681][ T3942] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 54.601393][ T3942] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 54.647099][ T4088] infiniband syz0: set active [ 54.651964][ T4088] infiniband syz0: added bond_slave_0 [ 54.679047][ T3942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.694409][ T3942] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.712383][ T4088] RDS/IB: syz0: added [ 54.716401][ T4088] smc: adding ib device syz0 with port count 1 [ 54.728088][ T2306] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.735243][ T2306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.747916][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.755043][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.763680][ T4088] smc: ib device syz0 port 1 has no pnetid [ 54.835390][ T4109] loop1: detected capacity change from 0 to 512 [ 54.844445][ T4109] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.869879][ T3478] hid (null): report_id 3804673681 is invalid [ 54.876156][ T3478] hid (null): global environment stack underflow [ 54.882596][ T3478] hid (null): report_id 0 is invalid [ 54.887920][ T3478] hid (null): invalid report_size 11153 [ 54.893558][ T3478] hid (null): unknown global tag 0xe [ 54.898884][ T3478] hid (null): unknown global tag 0xc2 [ 54.904330][ T3478] hid (null): unknown global tag 0xe [ 54.963254][ T3478] hid-generic 0002:0400:01F0.0002: report_id 3804673681 is invalid [ 54.964064][ T4109] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.971313][ T3478] hid-generic 0002:0400:01F0.0002: item 0 4 1 8 parsing failed [ 54.994113][ T4109] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.066851][ T3478] hid-generic 0002:0400:01F0.0002: probe with driver hid-generic failed with error -22 [ 55.093891][ T3942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.144239][ T4126] netlink: 20 bytes leftover after parsing attributes in process `syz.1.154'. [ 55.226435][ T4130] smc: net device bond0 applied user defined pnetid SYZ0 [ 55.245490][ T4130] smc: net device bond0 erased user defined pnetid SYZ0 [ 55.258196][ T4133] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 55.400815][ T3942] veth0_vlan: entered promiscuous mode [ 55.418740][ T3942] veth1_vlan: entered promiscuous mode [ 55.461899][ T4146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 55.487278][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.507490][ T3942] veth0_macvtap: entered promiscuous mode [ 55.520931][ T3942] veth1_macvtap: entered promiscuous mode [ 55.532929][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.544973][ T4148] loop1: detected capacity change from 0 to 512 [ 55.554665][ T4150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 55.565835][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.576919][ T4148] EXT4-fs: Ignoring removed i_version option [ 55.578722][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.598713][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.603831][ T4148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.642663][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.665336][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.756847][ T4156] smc: net device hsr0 applied user defined pnetid SYZ2 [ 55.764205][ T4156] smc: net device hsr0 erased user defined pnetid SYZ2 [ 55.798419][ T4159] netlink: 56 bytes leftover after parsing attributes in process `syz.0.165'. [ 55.815549][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.893563][ T4165] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 55.900143][ T4165] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.907766][ T4165] vhci_hcd vhci_hcd.0: Device attached [ 55.975625][ T4172] netlink: 28 bytes leftover after parsing attributes in process `syz.1.164'. [ 56.000110][ T4174] loop4: detected capacity change from 0 to 164 [ 56.014498][ T4165] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 56.021068][ T4165] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 56.028757][ T4165] vhci_hcd vhci_hcd.0: Device attached [ 56.034765][ T4174] ISOFS: unable to read i-node block [ 56.040096][ T4174] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 56.080103][ T4165] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 56.086774][ T4165] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 56.094427][ T4165] vhci_hcd vhci_hcd.0: Device attached [ 56.116249][ T4181] bridge0: port 3(batadv1) entered blocking state [ 56.122959][ T4181] bridge0: port 3(batadv1) entered disabled state [ 56.129601][ T4181] batadv1: entered allmulticast mode [ 56.132773][ T4172] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.137781][ T4181] batadv1: entered promiscuous mode [ 56.161251][ T3478] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 56.173841][ T4181] loop5: detected capacity change from 0 to 164 [ 56.200419][ T4185] loop4: detected capacity change from 0 to 512 [ 56.215317][ T4165] netlink: 256 bytes leftover after parsing attributes in process `syz.1.164'. [ 56.227227][ T4185] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.259434][ T4165] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(19) [ 56.266092][ T4165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 56.273835][ T4165] vhci_hcd vhci_hcd.0: Device attached [ 56.288983][ T4165] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 56.315812][ T4185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.356026][ T4165] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(24) [ 56.362709][ T4165] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 56.366950][ T4185] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.370566][ T4165] vhci_hcd vhci_hcd.0: Device attached [ 56.391994][ T4193] vhci_hcd: connection closed [ 56.392384][ T4187] vhci_hcd: connection closed [ 56.397556][ T4179] vhci_hcd: connection closed [ 56.411050][ T1849] vhci_hcd vhci_hcd.1: stop threads [ 56.421101][ T1849] vhci_hcd vhci_hcd.1: release socket [ 56.426547][ T1849] vhci_hcd vhci_hcd.1: disconnect device [ 56.432827][ T4175] vhci_hcd: connection closed [ 56.433456][ T4167] vhci_hcd: connection reset by peer [ 56.481443][ T1849] vhci_hcd vhci_hcd.1: stop threads [ 56.486811][ T1849] vhci_hcd vhci_hcd.1: release socket [ 56.492276][ T1849] vhci_hcd vhci_hcd.1: disconnect device [ 56.501405][ T1849] vhci_hcd vhci_hcd.1: stop threads [ 56.506669][ T1849] vhci_hcd vhci_hcd.1: release socket [ 56.512288][ T1849] vhci_hcd vhci_hcd.1: disconnect device [ 56.522262][ T29] kauditd_printk_skb: 163 callbacks suppressed [ 56.522278][ T29] audit: type=1326 audit(1767511447.140:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff858c9f749 code=0x7ffc0000 [ 56.560949][ T1849] vhci_hcd vhci_hcd.1: stop threads [ 56.566320][ T1849] vhci_hcd vhci_hcd.1: release socket [ 56.571855][ T1849] vhci_hcd vhci_hcd.1: disconnect device [ 56.588110][ T1849] vhci_hcd vhci_hcd.1: stop threads [ 56.593393][ T1849] vhci_hcd vhci_hcd.1: release socket [ 56.598853][ T1849] vhci_hcd vhci_hcd.1: disconnect device [ 56.599645][ T4199] loop5: detected capacity change from 0 to 1764 [ 56.611693][ T29] audit: type=1326 audit(1767511447.140:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7ff858c9f749 code=0x7ffc0000 [ 56.635020][ T29] audit: type=1326 audit(1767511447.140:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff858c9f749 code=0x7ffc0000 [ 56.637587][ T1022] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 56.658375][ T29] audit: type=1326 audit(1767511447.150:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff858c9f749 code=0x7ffc0000 [ 56.667974][ T1022] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 56.691354][ T29] audit: type=1326 audit(1767511447.150:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff858c9f783 code=0x7ffc0000 [ 56.691403][ T29] audit: type=1326 audit(1767511447.180:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff858c9e1ff code=0x7ffc0000 [ 56.691437][ T29] audit: type=1326 audit(1767511447.210:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff858c9f7d7 code=0x7ffc0000 [ 56.691470][ T29] audit: type=1326 audit(1767511447.210:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff858c9df90 code=0x7ffc0000 [ 56.793550][ T29] audit: type=1326 audit(1767511447.210:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff858c9f34b code=0x7ffc0000 [ 56.852995][ T29] audit: type=1326 audit(1767511447.290:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4198 comm="syz.5.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff858c9e3aa code=0x7ffc0000 [ 56.943698][ T4205] smc: net device bond0 applied user defined pnetid SYZ0 [ 56.981604][ T4205] smc: net device bond0 erased user defined pnetid SYZ0 [ 57.104689][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.169241][ T4220] loop1: detected capacity change from 0 to 164 [ 57.189447][ T4220] ISOFS: unable to read i-node block [ 57.224379][ T4220] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 57.303487][ T4232] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 57.310163][ T4232] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.317898][ T4232] vhci_hcd vhci_hcd.0: Device attached [ 57.401771][ T4232] SELinux: failed to load policy [ 57.410262][ T4233] vhci_hcd: connection closed [ 57.424937][ T52] vhci_hcd vhci_hcd.1: stop threads [ 57.435003][ T52] vhci_hcd vhci_hcd.1: release socket [ 57.440491][ T52] vhci_hcd vhci_hcd.1: disconnect device [ 57.477796][ T4244] smc: net device hsr0 applied user defined pnetid SYZ2 [ 57.490278][ T4244] smc: net device hsr0 erased user defined pnetid SYZ2 [ 57.526082][ T4247] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 57.974553][ T4268] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 57.981261][ T4268] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 57.988983][ T4268] vhci_hcd vhci_hcd.0: Device attached [ 58.027233][ T4268] SELinux: failed to load policy [ 58.037906][ T4269] vhci_hcd: connection closed [ 58.038127][ T909] vhci_hcd vhci_hcd.5: stop threads [ 58.048261][ T909] vhci_hcd vhci_hcd.5: release socket [ 58.054039][ T909] vhci_hcd vhci_hcd.5: disconnect device [ 58.091807][ T4272] loop2: detected capacity change from 0 to 2048 [ 58.126796][ T4272] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.269225][ T4277] smc: net device bond0 applied user defined pnetid SYZ0 [ 58.276701][ T4277] smc: net device bond0 erased user defined pnetid SYZ0 [ 58.469094][ T4264] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.501261][ T4264] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 392 with error 28 [ 58.513761][ T4264] EXT4-fs (loop2): This should not happen!! Data will be lost [ 58.513761][ T4264] [ 58.523475][ T4264] EXT4-fs (loop2): Total free blocks count 0 [ 58.529523][ T4264] EXT4-fs (loop2): Free/Dirty block details [ 58.535493][ T4264] EXT4-fs (loop2): free_blocks=2415919104 [ 58.541380][ T4264] EXT4-fs (loop2): dirty_blocks=400 [ 58.546608][ T4264] EXT4-fs (loop2): Block reservation details [ 58.552659][ T4264] EXT4-fs (loop2): i_reserved_data_blocks=25 [ 58.593832][ T4283] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 58.793799][ T1849] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 34 with error 28 [ 58.895645][ T4300] loop0: detected capacity change from 0 to 164 [ 58.916618][ T4300] ISOFS: unable to read i-node block [ 58.945907][ T4300] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 58.999905][ T4305] loop1: detected capacity change from 0 to 512 [ 59.011189][ T3527] usb 5-1: enqueue for inactive port 0 [ 59.016881][ T3527] usb 5-1: enqueue for inactive port 0 [ 59.022555][ T4305] EXT4-fs: Ignoring removed i_version option [ 59.047732][ T4305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.091213][ T3527] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 59.266912][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.300226][ T4310] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 59.323108][ T4310] SELinux: failed to load policy [ 59.611485][ T3322] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 59.622506][ T3322] CPU: 0 UID: 0 PID: 3322 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 59.622605][ T3322] Tainted: [W]=WARN [ 59.622614][ T3322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.622628][ T3322] Call Trace: [ 59.622635][ T3322] [ 59.622722][ T3322] __dump_stack+0x1d/0x30 [ 59.622748][ T3322] dump_stack_lvl+0x95/0xd0 [ 59.622770][ T3322] dump_stack+0x15/0x1b [ 59.622794][ T3322] dump_header+0x81/0x240 [ 59.622821][ T3322] oom_kill_process+0x295/0x350 [ 59.622921][ T3322] out_of_memory+0x97b/0xb80 [ 59.622952][ T3322] try_charge_memcg+0x610/0xa10 [ 59.623028][ T3322] charge_memcg+0x51/0xc0 [ 59.623086][ T3322] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 59.623133][ T3322] __read_swap_cache_async+0x17b/0x2d0 [ 59.623205][ T3322] swap_cluster_readahead+0x362/0x3c0 [ 59.623280][ T3322] swapin_readahead+0xde/0x820 [ 59.623319][ T3322] ? next_uptodate_folio+0x81c/0x890 [ 59.623351][ T3322] ? percpu_counter_add_batch+0xb6/0x130 [ 59.623375][ T3322] ? __rcu_read_unlock+0x4f/0x70 [ 59.623401][ T3322] ? swap_cache_get_folio+0x277/0x280 [ 59.623440][ T3322] do_swap_page+0x2b4/0x21e0 [ 59.623550][ T3322] ? __pfx_default_wake_function+0x10/0x10 [ 59.623596][ T3322] handle_mm_fault+0x9d8/0x2c60 [ 59.623690][ T3322] do_user_addr_fault+0x630/0x1080 [ 59.623768][ T3322] exc_page_fault+0x62/0xa0 [ 59.623806][ T3322] asm_exc_page_fault+0x26/0x30 [ 59.623906][ T3322] RIP: 0033:0x7f6173195fd7 [ 59.623923][ T3322] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 39 7c 24 [ 59.623945][ T3322] RSP: 002b:00007ffcfdf48200 EFLAGS: 00010206 [ 59.623961][ T3322] RAX: 0000001b34224000 RBX: 0000000000000047 RCX: 000000000000e678 [ 59.623973][ T3322] RDX: 000000000743cb1b RSI: 00007ffcfdf48290 RDI: 0000000000000019 [ 59.623985][ T3322] RBP: 00007ffcfdf4823c R08: 000000001bb68c7c R09: 7fffffffffffffff [ 59.624062][ T3322] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 59.624074][ T3322] R13: 00000000000927c0 R14: 000000000000e752 R15: 00007ffcfdf48290 [ 59.624094][ T3322] [ 59.624103][ T3322] memory: usage 307200kB, limit 307200kB, failcnt 8418 [ 59.845587][ T3322] memory+swap: usage 269312kB, limit 9007199254740988kB, failcnt 0 [ 59.853615][ T3322] kmem: usage 246656kB, limit 9007199254740988kB, failcnt 0 [ 59.860915][ T3322] Memory cgroup stats for /syz2: [ 59.877735][ T3322] cache 12288 [ 59.886131][ T3322] rss 20480 [ 59.889262][ T3322] shmem 0 [ 59.892568][ T3322] mapped_file 0 [ 59.896133][ T3322] dirty 0 [ 59.899139][ T3322] writeback 0 [ 59.902537][ T3322] workingset_refault_anon 76 [ 59.907142][ T3322] workingset_refault_file 1069 [ 59.911994][ T3322] swap 18178048 [ 59.915544][ T3322] swapcached 8192 [ 59.919192][ T3322] pgpgin 20906 [ 59.922599][ T3322] pgpgout 20898 [ 59.926070][ T3322] pgfault 22669 [ 59.929586][ T3322] pgmajfault 57 [ 59.933076][ T3322] inactive_anon 0 [ 59.936723][ T3322] active_anon 20480 [ 59.940547][ T3322] inactive_file 0 [ 59.944241][ T3322] active_file 12288 [ 59.948141][ T3322] unevictable 0 [ 59.951642][ T3322] hierarchical_memory_limit 314572800 [ 59.957030][ T3322] hierarchical_memsw_limit 9223372036854771712 [ 59.963321][ T3322] total_cache 12288 [ 59.967156][ T3322] total_rss 20480 [ 59.970810][ T3322] total_shmem 0 [ 59.974331][ T3322] total_mapped_file 0 [ 59.978387][ T3322] total_dirty 0 [ 59.981922][ T3322] total_writeback 0 [ 59.985738][ T3322] total_workingset_refault_anon 76 [ 59.990888][ T3322] total_workingset_refault_file 1069 [ 59.996276][ T3322] total_swap 18178048 [ 60.000287][ T3322] total_swapcached 8192 [ 60.004684][ T3322] total_pgpgin 20906 [ 60.008617][ T3322] total_pgpgout 20898 [ 60.012634][ T3322] total_pgfault 22669 [ 60.016632][ T3322] total_pgmajfault 57 [ 60.020708][ T3322] total_inactive_anon 0 [ 60.024910][ T3322] total_active_anon 20480 [ 60.029290][ T3322] total_inactive_file 0 [ 60.033492][ T3322] total_active_file 12288 [ 60.037849][ T3322] total_unevictable 0 [ 60.041882][ T3322] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.190,pid=4261,uid=0 [ 60.056642][ T3322] Memory cgroup out of memory: Killed process 4261 (syz.2.190) total-vm:96148kB, anon-rss:1264kB, file-rss:22664kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 60.061465][ T4264] syz.2.190 (4264) used greatest stack depth: 9152 bytes left [ 60.116000][ T4317] loop5: detected capacity change from 0 to 1764 [ 60.295242][ T4338] __nla_validate_parse: 3 callbacks suppressed [ 60.295315][ T4338] netlink: 56 bytes leftover after parsing attributes in process `syz.4.217'. [ 60.350161][ T4340] smc: net device hsr0 applied user defined pnetid SYZ2 [ 60.361487][ T4340] smc: net device hsr0 erased user defined pnetid SYZ2 [ 60.417558][ T4343] netlink: 'syz.4.217': attribute type 7 has an invalid length. [ 60.473088][ T4345] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.491471][ T4346] netlink: 'syz.0.221': attribute type 10 has an invalid length. [ 60.506454][ T4345] SELinux: failed to load policy [ 60.527237][ T4346] veth0_vlan: left promiscuous mode [ 60.542084][ T4346] veth0_vlan: entered promiscuous mode [ 60.556773][ T4346] team0: Device veth0_vlan failed to register rx_handler [ 60.565047][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.223'. [ 60.666215][ T4363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'. [ 61.175562][ T3478] usb 3-1: enqueue for inactive port 0 [ 61.181120][ T3478] usb 3-1: enqueue for inactive port 0 [ 61.251737][ T3478] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 61.412436][ T4378] smc: net device hsr0 applied user defined pnetid SYZ2 [ 61.454777][ T4378] smc: net device hsr0 erased user defined pnetid SYZ2 [ 61.544775][ T29] kauditd_printk_skb: 987 callbacks suppressed [ 61.544793][ T29] audit: type=1326 audit(1767511452.150:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61732bf749 code=0x7ffc0000 [ 61.574516][ T29] audit: type=1326 audit(1767511452.150:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f61732bf749 code=0x7ffc0000 [ 61.598131][ T29] audit: type=1326 audit(1767511452.150:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61732bf749 code=0x7ffc0000 [ 61.610371][ T4384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.234'. [ 61.621488][ T29] audit: type=1326 audit(1767511452.150:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f61732bf749 code=0x7ffc0000 [ 61.653993][ T29] audit: type=1326 audit(1767511452.150:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61732bf783 code=0x7ffc0000 [ 61.677224][ T29] audit: type=1326 audit(1767511452.150:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f61732be1ff code=0x7ffc0000 [ 61.703866][ T4380] loop2: detected capacity change from 0 to 1764 [ 61.711863][ T29] audit: type=1326 audit(1767511452.320:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f61732bf7d7 code=0x7ffc0000 [ 61.735183][ T29] audit: type=1326 audit(1767511452.320:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61732bdf90 code=0x7ffc0000 [ 61.758555][ T29] audit: type=1326 audit(1767511452.320:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61732bf34b code=0x7ffc0000 [ 61.781953][ T29] audit: type=1326 audit(1767511452.330:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.2.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f61732be3aa code=0x7ffc0000 [ 61.834612][ T4382] loop1: detected capacity change from 0 to 164 [ 61.848219][ T4382] ISOFS: unable to read i-node block [ 61.861315][ T4382] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 61.923929][ T4394] loop5: detected capacity change from 0 to 164 [ 61.963743][ T4394] ISOFS: unable to read i-node block [ 61.969183][ T4394] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 61.971881][ T4397] loop1: detected capacity change from 0 to 128 [ 62.035212][ T4397] SET target dimension over the limit! [ 62.042193][ T4397] syzkaller0: entered promiscuous mode [ 62.047727][ T4397] syzkaller0: entered allmulticast mode [ 62.352303][ T4417] loop0: detected capacity change from 0 to 512 [ 62.359123][ T4417] EXT4-fs: Ignoring removed i_version option [ 62.390416][ T4417] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.463481][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.163350][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.5.252'. [ 63.230414][ T4443] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.358116][ T4446] netlink: 60 bytes leftover after parsing attributes in process `syz.4.253'. [ 63.375665][ T4443] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.455042][ T4443] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.537744][ T4443] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.588412][ T4451] loop5: detected capacity change from 0 to 1764 [ 63.614756][ T1022] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.644331][ T52] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.667578][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.676508][ T52] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.776812][ T4468] FAULT_INJECTION: forcing a failure. [ 63.776812][ T4468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.790071][ T4468] CPU: 1 UID: 0 PID: 4468 Comm: syz.5.262 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 63.790102][ T4468] Tainted: [W]=WARN [ 63.790109][ T4468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.790121][ T4468] Call Trace: [ 63.790177][ T4468] [ 63.790188][ T4468] __dump_stack+0x1d/0x30 [ 63.790218][ T4468] dump_stack_lvl+0x95/0xd0 [ 63.790239][ T4468] dump_stack+0x15/0x1b [ 63.790259][ T4468] should_fail_ex+0x265/0x280 [ 63.790319][ T4468] should_fail+0xb/0x20 [ 63.790380][ T4468] should_fail_usercopy+0x1a/0x20 [ 63.790409][ T4468] _copy_from_iter+0xcf/0xe70 [ 63.790441][ T4468] ? __alloc_skb+0x396/0x4b0 [ 63.790465][ T4468] ? __alloc_skb+0x228/0x4b0 [ 63.790547][ T4468] netlink_sendmsg+0x471/0x6b0 [ 63.790583][ T4468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.790615][ T4468] __sock_sendmsg+0x145/0x180 [ 63.790704][ T4468] ____sys_sendmsg+0x31e/0x4a0 [ 63.790739][ T4468] ___sys_sendmsg+0x17b/0x1d0 [ 63.790783][ T4468] __x64_sys_sendmsg+0xd4/0x160 [ 63.790831][ T4468] x64_sys_call+0x17ba/0x3000 [ 63.790863][ T4468] do_syscall_64+0xca/0x2b0 [ 63.790906][ T4468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.790980][ T4468] RIP: 0033:0x7ff858c9f749 [ 63.790999][ T4468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.791023][ T4468] RSP: 002b:00007ff8576ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.791051][ T4468] RAX: ffffffffffffffda RBX: 00007ff858ef5fa0 RCX: 00007ff858c9f749 [ 63.791067][ T4468] RDX: 0000000000000004 RSI: 00002000000003c0 RDI: 0000000000000003 [ 63.791083][ T4468] RBP: 00007ff8576ff090 R08: 0000000000000000 R09: 0000000000000000 [ 63.791098][ T4468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 63.791189][ T4468] R13: 00007ff858ef6038 R14: 00007ff858ef5fa0 R15: 00007ffc851291f8 [ 63.791296][ T4468] [ 64.044797][ T4471] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 64.090346][ T4480] smc: net device hsr0 applied user defined pnetid SYZ2 [ 64.107208][ T4480] smc: net device hsr0 erased user defined pnetid SYZ2 [ 64.234111][ T4487] loop0: detected capacity change from 0 to 128 [ 64.242281][ T4487] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.258802][ T4487] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 64.276899][ T4492] loop4: detected capacity change from 0 to 1764 [ 64.394219][ T4501] smc: net device hsr0 applied user defined pnetid SYZ2 [ 64.406475][ T4501] smc: net device hsr0 erased user defined pnetid SYZ2 [ 64.526674][ T4514] netlink: 56 bytes leftover after parsing attributes in process `syz.4.274'. [ 64.559569][ T4518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 64.682054][ T4533] netlink: 'syz.4.274': attribute type 7 has an invalid length. [ 64.830212][ T3487] hid (null): report_id 0 is invalid [ 64.837012][ T3487] hid_parser_main: 11 callbacks suppressed [ 64.837030][ T3487] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 64.850349][ T3487] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 64.857836][ T3487] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 64.865352][ T3487] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 64.872785][ T3487] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 64.880201][ T3487] hid-generic 0003:0000:0000.0003: unknown main item tag 0x0 [ 64.887698][ T3487] hid-generic 0003:0000:0000.0003: report_id 0 is invalid [ 64.894874][ T3487] hid-generic 0003:0000:0000.0003: item 0 1 1 8 parsing failed [ 64.919485][ T3487] hid-generic 0003:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 65.082688][ T4546] 9p: Bad value for 'wfdno' [ 65.274004][ T4559] loop2: detected capacity change from 0 to 1764 [ 65.449151][ T4571] SELinux: Context system_u:object_r:public_content_t:s0 is not valid (left unmapped). [ 65.632676][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 65.656028][ T4588] netlink: 'syz.2.294': attribute type 10 has an invalid length. [ 65.670773][ T4588] veth0_vlan: left promiscuous mode [ 65.676877][ T4588] veth0_vlan: entered promiscuous mode [ 65.684091][ T4588] team0: Device veth0_vlan failed to register rx_handler [ 65.931414][ T4590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.297'. [ 66.058001][ T4598] loop5: detected capacity change from 0 to 1764 [ 66.181952][ T4609] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 66.188566][ T4609] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.196318][ T4609] vhci_hcd vhci_hcd.0: Device attached [ 66.259627][ T4609] SELinux: failed to load policy [ 66.294146][ T4611] vhci_hcd: connection closed [ 66.294384][ T2306] vhci_hcd vhci_hcd.0: stop threads [ 66.304544][ T2306] vhci_hcd vhci_hcd.0: release socket [ 66.310064][ T2306] vhci_hcd vhci_hcd.0: disconnect device [ 66.454048][ T36] hid (null): report_id 3804673681 is invalid [ 66.460212][ T36] hid (null): global environment stack underflow [ 66.466695][ T36] hid (null): report_id 0 is invalid [ 66.472052][ T36] hid (null): invalid report_size 11153 [ 66.477659][ T36] hid (null): unknown global tag 0xe [ 66.483175][ T36] hid (null): unknown global tag 0xc2 [ 66.488709][ T36] hid (null): unknown global tag 0xe [ 66.509121][ T36] hid-generic 0002:0400:01F0.0004: report_id 3804673681 is invalid [ 66.517196][ T36] hid-generic 0002:0400:01F0.0004: item 0 4 1 8 parsing failed [ 66.525303][ T36] hid-generic 0002:0400:01F0.0004: probe with driver hid-generic failed with error -22 [ 66.595428][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 66.595445][ T29] audit: type=1326 audit(1767511457.210:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4608 comm="syz.0.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6c43b72005 code=0x7ffc0000 [ 66.644772][ T4636] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 66.651325][ T4636] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 66.659016][ T4636] vhci_hcd vhci_hcd.0: Device attached [ 66.685889][ T29] audit: type=1326 audit(1767511457.300:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.710499][ T29] audit: type=1326 audit(1767511457.300:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.733943][ T29] audit: type=1326 audit(1767511457.300:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.734889][ T4636] SELinux: failed to load policy [ 66.757326][ T29] audit: type=1326 audit(1767511457.300:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.757365][ T29] audit: type=1326 audit(1767511457.300:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.809043][ T29] audit: type=1326 audit(1767511457.300:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.832444][ T29] audit: type=1326 audit(1767511457.300:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.855802][ T29] audit: type=1326 audit(1767511457.300:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.879370][ T29] audit: type=1326 audit(1767511457.300:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1647bf749 code=0x7ffc0000 [ 66.881440][ T36] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 66.919916][ T4637] vhci_hcd: connection closed [ 66.920026][ T1849] vhci_hcd vhci_hcd.1: stop threads [ 66.930135][ T1849] vhci_hcd vhci_hcd.1: release socket [ 66.935696][ T1849] vhci_hcd vhci_hcd.1: disconnect device [ 67.001281][ T36] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 67.009071][ T36] usb 3-1: enqueue for inactive port 0 [ 67.014822][ T36] usb 3-1: enqueue for inactive port 0 [ 67.020484][ T36] usb 3-1: enqueue for inactive port 0 [ 67.091842][ T36] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 67.262897][ T4659] ================================================================== [ 67.271053][ T4659] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 67.278501][ T4659] [ 67.280847][ T4659] write to 0xffff8881232dc000 of 4096 bytes by task 4660 on cpu 1: [ 67.288771][ T4659] _copy_from_iter+0x106/0xe70 [ 67.293576][ T4659] copy_page_from_iter+0x178/0x2a0 [ 67.298714][ T4659] process_vm_rw+0x659/0x960 [ 67.303323][ T4659] __x64_sys_process_vm_writev+0x78/0x90 [ 67.308970][ T4659] x64_sys_call+0x27ef/0x3000 [ 67.313674][ T4659] do_syscall_64+0xca/0x2b0 [ 67.318209][ T4659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.324125][ T4659] [ 67.326458][ T4659] write to 0xffff8881232dc000 of 4096 bytes by task 4659 on cpu 0: [ 67.334354][ T4659] _copy_from_iter+0x106/0xe70 [ 67.339139][ T4659] copy_page_from_iter+0x178/0x2a0 [ 67.344272][ T4659] process_vm_rw+0x659/0x960 [ 67.348885][ T4659] __x64_sys_process_vm_writev+0x78/0x90 [ 67.354535][ T4659] x64_sys_call+0x27ef/0x3000 [ 67.359239][ T4659] do_syscall_64+0xca/0x2b0 [ 67.363791][ T4659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.369709][ T4659] [ 67.372040][ T4659] Reported by Kernel Concurrency Sanitizer on: [ 67.378202][ T4659] CPU: 0 UID: 0 PID: 4659 Comm: syz.5.310 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 67.389414][ T4659] Tainted: [W]=WARN [ 67.393230][ T4659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.403311][ T4659] ==================================================================