last executing test programs: 1.488155843s ago: executing program 4 (id=7439): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000600, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0xfffffffc, 0x8, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000380)) syz_emit_ethernet(0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd60b80b0000262f00fc000000000000000000000000000000fe8000000000000000000000000000aa0420810000100000000008000000000086dd"], 0x0) 1.482362104s ago: executing program 2 (id=7440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) close(r0) 1.336817395s ago: executing program 4 (id=7441): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000001090001006d61726b000000000900020073797a32000000000900010073797a3100000000140005"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 1.165696679s ago: executing program 3 (id=7443): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 1.165358359s ago: executing program 4 (id=7444): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) getpid() stat(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file1\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone3(&(0x7f00000009c0)={0x2000, &(0x7f0000000740), 0x0, &(0x7f00000007c0), {0x2f}, &(0x7f0000001180)=""/249, 0xf9, &(0x7f0000000900)=""/111, &(0x7f0000000980)=[0xffffffffffffffff], 0x1, {r1}}, 0x58) lstat(0x0, &(0x7f0000000a80)) newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x0, 0x100) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x401, 0x3}, @mss={0x2, 0x4}, @sack_perm, @timestamp, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.132316391s ago: executing program 3 (id=7445): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 1.131547151s ago: executing program 2 (id=7446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) keyctl$unlink(0x9, r3, 0xfffffffffffffffc) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aa00000086dd604dd318001c0600fc010000000000000000000000000002fe8000001400d18d61a37841000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000c90780000"], 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0) 1.086465015s ago: executing program 3 (id=7447): r0 = socket$kcm(0x10, 0x2, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) membarrier(0x4, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r3, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xf0, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x76}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc8, 0x3, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0xc0, 0x2, "2c3271b74cdc5e37c06c1ecb716c12e6184e0a6f5e55341d257c0dfaa8cfa1d11d8b9fc9b0d5a798d9be22adf25e68ef154e9319e2b08665c18431c953e096f9aced1cc7dd1707f520f5bab76ea63c0302fc5c1156c58e9aba685115e2cbc5132990c8fe2e3ff3ce84b7c6be0e71b84e270db51701f5347c7321eb3b18df00f63de9391da28daf4797b15b244455e8d10a2b6530d953860ca4c756f045e405d42c05ca22d1d77cd805924372549562ede35e67ccc9cbc58f9acddc41"}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40084}, 0xc0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="5bc539fe6b8a"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x52}, @NL80211_ATTR_PMKID={0x14, 0x55, "1036013336fe80a6e43d5d7b9d152c3f"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x1) 984.985213ms ago: executing program 0 (id=7448): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b579"], 0x20}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xffffff71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r1}]}]}, 0x28}}, 0x0) 899.06598ms ago: executing program 2 (id=7450): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f00000005c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x40000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000680)) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) readv(r6, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 887.1249ms ago: executing program 0 (id=7451): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001714b579"], 0x20}}, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xffffff71}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r1}]}]}, 0x28}}, 0x0) 838.508314ms ago: executing program 0 (id=7452): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 791.715148ms ago: executing program 2 (id=7453): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 791.216528ms ago: executing program 2 (id=7454): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="d80100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8004}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c00"], 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002440)={0x0, @empty, @remote}, &(0x7f0000002480)=0xc) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030003130000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af05000600000000000a004e2400000004ff010000000000000000000000000001000000000000000002000100000000000000070c0100000005000500000000000a004e2400000009000000000000000000000000000000000600000000000000020013"], 0x98}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000024c0)={&(0x7f0000002500)='cq_alloc_error\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="406a3ee20000000000bc233ff119b581dfe498", @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000001000), &(0x7f0000002540)=0x6e) recvmsg$unix(r7, &(0x7f0000002400)={&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/71, 0x47}, {&(0x7f0000002280)=""/101, 0x65}], 0x3, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) 726.171573ms ago: executing program 0 (id=7455): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@xattr}]}) 710.837484ms ago: executing program 2 (id=7457): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x0, 0x41}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x75, 0x0, 0x0, 0x4859bd0f8653de88, 0x2}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001940)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x10000000, 0xfffffffc, 0xfffffffe}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local}]}, {0x4}, {0xc}, {0x2, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) creat(&(0x7f00000002c0)='./file0\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0) 697.578455ms ago: executing program 1 (id=7458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 549.759087ms ago: executing program 1 (id=7459): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket(0x2, 0x805, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) keyctl$unlink(0x9, r2, 0xfffffffffffffffc) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[], 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0) 525.656549ms ago: executing program 0 (id=7460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) keyctl$unlink(0x9, r3, 0xfffffffffffffffc) syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[@ANYBLOB="aa00000086dd604dd318001c0600fc010000000000000000000000000002fe8000001400d18d61a37841000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000c90780000"], 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000100)={r2, @in={{0x2, 0x4e21, @empty}}, 0xbdef, 0x1}, &(0x7f0000000000)=0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r7, 0x10c000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000780)={'syz', 0x0}, 0x0, 0x0) 297.045747ms ago: executing program 4 (id=7461): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x3, 0x2, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x8}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000380)=""/252, 0xfc}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000000140)=""/52, 0x34}, {&(0x7f0000001480)=""/233, 0xe9}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000001940)=""/157, 0x9d}, {&(0x7f0000001700)=""/194, 0xc2}], 0x8}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r3) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) r9 = syz_genetlink_get_family_id$tipc(0x0, r3) sendmsg$TIPC_CMD_GET_NODES(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x4, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a6ff}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 254.49237ms ago: executing program 1 (id=7462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x20880}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2e, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 179.447306ms ago: executing program 1 (id=7463): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f00000005c0)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x2}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x40000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000680)) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r5, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x1) readv(r6, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 179.132746ms ago: executing program 3 (id=7464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, r3, 0x1, 0x0, 0x25dfdbfd, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) 147.253089ms ago: executing program 1 (id=7465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 113.835731ms ago: executing program 0 (id=7466): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$qrtr(r0, &(0x7f0000000000)={0x2a, 0x0, 0x2}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="406a3ee20000000000bc233ff119b581dfe498", @ANYRES32=0x0, @ANYBLOB="c14d0000000000002000128008000100687372001400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = accept$unix(0xffffffffffffffff, &(0x7f0000001000), &(0x7f0000002540)=0x6e) recvmsg$unix(r7, &(0x7f0000002400)={&(0x7f00000010c0)=@abs, 0x6e, &(0x7f0000002300)=[{&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f0000002140)=""/71, 0x47}, {&(0x7f0000002280)=""/101, 0x65}], 0x3, &(0x7f0000002340)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r10}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x85, &(0x7f00000061c0)={0x0, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b512e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f98676e592103c268225b716a73e48c8c8f8ec21e15e7a5d6743243dfde8a664"}, &(0x7f0000000500)=0x90) 54.444576ms ago: executing program 4 (id=7468): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x4}, 0x94) 35.639967ms ago: executing program 4 (id=7469): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80109}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, r2, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4d56a4403a94973d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000840) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 20.882888ms ago: executing program 3 (id=7470): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@xattr}]}) 0s ago: executing program 1 (id=7471): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1bf4f5ffffffffffff8f8ecd7b647106000180000000006200", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x49) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) splice(r3, &(0x7f0000000040)=0x80, r2, 0x0, 0x5, 0x2) unlink(&(0x7f0000000200)='./file0/../file0\x00') r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x8) sendmsg(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40005) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x20900, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x100010, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="f139108500000007000000aa"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000300)="d88b9593204eeb", 0x7}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x6], 0x0, 0x0, 0x1}}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r6}, 0x18) r11 = socket(0x2, 0x80000, 0x800103) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f00000001c0)='macvlan1\x00', 0x10) setsockopt$inet_int(r11, 0x0, 0x3, 0x0, 0x0) sendmmsg$inet(r11, &(0x7f0000003680)=[{{&(0x7f0000000800)={0x2, 0x4e34, @multicast1}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000980)="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", 0x5a1}], 0x1, &(0x7f0000000940)=ANY=[@ANYBLOB="ac000000000000000000000007"], 0xb0}}], 0x1, 0x4) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) connect$rxrpc(r11, &(0x7f0000000280)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24) kernel console output (not intermixed with test programs): " scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 407.744046][ T29] audit: type=1400 audit(1765712218.330:61482): avc: denied { ioctl } for pid=21427 comm="syz.4.5979" path="socket:[80626]" dev="sockfs" ino=80626 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 407.749243][T21424] veth4: entered allmulticast mode [ 407.769903][ T29] audit: type=1400 audit(1765712218.340:61483): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 407.988559][ T29] audit: type=1400 audit(1765712218.500:61484): avc: denied { listen } for pid=21427 comm="syz.4.5979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.003831][T21447] SELinux: failed to load policy [ 408.008431][ T29] audit: type=1400 audit(1765712218.500:61485): avc: denied { write } for pid=21427 comm="syz.4.5979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.034125][ T29] audit: type=1400 audit(1765712218.500:61486): avc: denied { accept } for pid=21427 comm="syz.4.5979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.060281][T21432] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 408.070332][T21432] vhci_hcd vhci_hcd.2: invalid port number 96 [ 408.076558][T21432] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 408.095224][T21448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.111191][T21448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.157443][T21442] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5984'. [ 408.238334][T21457] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.289149][T21460] tipc: New replicast peer: 255.255.255.255 [ 408.295503][T21460] tipc: Enabled bearer , priority 10 [ 408.304912][T21457] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.317163][T21460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5986'. [ 408.326320][T21460] tipc: Disabling bearer [ 408.367813][T21457] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.408805][T21464] new mount options do not match the existing superblock, will be ignored [ 408.421171][T21457] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.475471][T12207] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.491693][T12207] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.511093][T12207] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.538877][T12207] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.776531][T21483] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 408.825268][T21488] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 408.900101][T21485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5997'. [ 409.002173][T21506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6004'. [ 409.066824][T21510] lo speed is unknown, defaulting to 1000 [ 409.183535][T21523] lo speed is unknown, defaulting to 1000 [ 409.431480][T21534] net_ratelimit: 14 callbacks suppressed [ 409.431536][T21534] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.454833][T21535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9226 sclass=netlink_route_socket pid=21535 comm=syz.3.6013 [ 409.494817][T21538] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6014'. [ 409.653769][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6018'. [ 409.801377][T21552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6017'. [ 409.812582][T21564] lo speed is unknown, defaulting to 1000 [ 409.882125][T21533] syz.3.6013 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 409.896447][T21533] CPU: 1 UID: 0 PID: 21533 Comm: syz.3.6013 Not tainted syzkaller #0 PREEMPT(voluntary) [ 409.896476][T21533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 409.896490][T21533] Call Trace: [ 409.896498][T21533] [ 409.896509][T21533] __dump_stack+0x1d/0x30 [ 409.896589][T21533] dump_stack_lvl+0xe8/0x140 [ 409.896618][T21533] dump_stack+0x15/0x1b [ 409.896723][T21533] dump_header+0x81/0x240 [ 409.896816][T21533] oom_kill_process+0x295/0x350 [ 409.896844][T21533] out_of_memory+0x97b/0xb80 [ 409.896873][T21533] try_charge_memcg+0x610/0xa10 [ 409.896900][T21533] obj_cgroup_charge_pages+0xa6/0x150 [ 409.896927][T21533] __memcg_kmem_charge_page+0x9f/0x170 [ 409.896991][T21533] __alloc_frozen_pages_noprof+0x18f/0x360 [ 409.897029][T21533] alloc_pages_mpol+0xb3/0x260 [ 409.897063][T21533] ? alloc_pages_noprof+0xf4/0x130 [ 409.897151][T21533] alloc_pages_noprof+0x90/0x130 [ 409.897183][T21533] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 409.897278][T21533] __kvmalloc_node_noprof+0x492/0x6b0 [ 409.897303][T21533] ? ip_set_alloc+0x24/0x30 [ 409.897338][T21533] ? ip_set_alloc+0x24/0x30 [ 409.897390][T21533] ? __kmalloc_cache_noprof+0x3e5/0x4c0 [ 409.897449][T21533] ip_set_alloc+0x24/0x30 [ 409.897478][T21533] hash_netiface_create+0x282/0x740 [ 409.897516][T21533] ? __pfx_hash_netiface_create+0x10/0x10 [ 409.897550][T21533] ip_set_create+0x3cc/0x970 [ 409.897625][T21533] ? __nla_parse+0x40/0x60 [ 409.897695][T21533] nfnetlink_rcv_msg+0x4c6/0x590 [ 409.897743][T21533] netlink_rcv_skb+0x123/0x220 [ 409.897818][T21533] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 409.897846][T21533] nfnetlink_rcv+0x167/0x16c0 [ 409.897869][T21533] ? kmem_cache_free+0xe3/0x3a0 [ 409.897908][T21533] ? __kfree_skb+0x109/0x150 [ 409.898016][T21533] ? nlmon_xmit+0x4f/0x60 [ 409.898038][T21533] ? consume_skb+0x49/0x150 [ 409.898066][T21533] ? nlmon_xmit+0x4f/0x60 [ 409.898089][T21533] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 409.898118][T21533] ? __dev_queue_xmit+0x138d/0x1ec0 [ 409.898185][T21533] ? __dev_queue_xmit+0x148/0x1ec0 [ 409.898211][T21533] ? ref_tracker_free+0x37d/0x3e0 [ 409.898237][T21533] ? __netlink_deliver_tap+0x4dc/0x500 [ 409.898274][T21533] netlink_unicast+0x5c0/0x690 [ 409.898376][T21533] netlink_sendmsg+0x58b/0x6b0 [ 409.898425][T21533] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.898525][T21533] __sock_sendmsg+0x145/0x180 [ 409.898544][T21533] ____sys_sendmsg+0x31e/0x4a0 [ 409.898574][T21533] ___sys_sendmsg+0x17b/0x1d0 [ 409.898613][T21533] __x64_sys_sendmsg+0xd4/0x160 [ 409.898724][T21533] x64_sys_call+0x17ba/0x3000 [ 409.898755][T21533] do_syscall_64+0xd8/0x2c0 [ 409.898791][T21533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.898816][T21533] RIP: 0033:0x7f7cf304f749 [ 409.898835][T21533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.898870][T21533] RSP: 002b:00007f7cf1ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.898895][T21533] RAX: ffffffffffffffda RBX: 00007f7cf32a5fa0 RCX: 00007f7cf304f749 [ 409.898910][T21533] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 409.898982][T21533] RBP: 00007f7cf30d3f91 R08: 0000000000000000 R09: 0000000000000000 [ 409.898997][T21533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.899010][T21533] R13: 00007f7cf32a6038 R14: 00007f7cf32a5fa0 R15: 00007ffd11ad9868 [ 409.899028][T21533] [ 409.899035][T21533] memory: usage 305120kB, limit 307200kB, failcnt 790 [ 410.250569][T21533] memory+swap: usage 87620kB, limit 9007199254740988kB, failcnt 0 [ 410.258526][T21533] kmem: usage 86304kB, limit 9007199254740988kB, failcnt 0 [ 410.265836][T21533] Memory cgroup stats for /syz3: [ 410.271482][T21533] cache 1048576 [ 410.280186][T21533] rss 81920 [ 410.283437][T21533] shmem 0 [ 410.286617][T21533] mapped_file 69632 [ 410.290651][T21533] dirty 4096 [ 410.293899][T21533] writeback 0 [ 410.297309][T21533] workingset_refault_anon 122 [ 410.302038][T21533] workingset_refault_file 2648 [ 410.306942][T21533] swap 106496 [ 410.310295][T21533] swapcached 102400 [ 410.314136][T21533] pgpgin 727747 [ 410.317719][T21533] pgpgout 727466 [ 410.321277][T21533] pgfault 677045 [ 410.324895][T21533] pgmajfault 98 [ 410.328566][T21533] inactive_anon 0 [ 410.332310][T21533] active_anon 86016 [ 410.336263][T21533] inactive_file 0 [ 410.340009][T21533] active_file 1032192 [ 410.344033][T21533] unevictable 0 [ 410.347927][T21533] hierarchical_memory_limit 314572800 [ 410.353492][T21533] hierarchical_memsw_limit 9223372036854771712 [ 410.359784][T21533] total_cache 1048576 [ 410.363996][T21533] total_rss 81920 [ 410.367677][T21533] total_shmem 0 [ 410.371150][T21533] total_mapped_file 69632 [ 410.375618][T21533] total_dirty 4096 [ 410.379555][T21533] total_writeback 0 [ 410.383462][T21533] total_workingset_refault_anon 122 [ 410.388695][T21533] total_workingset_refault_file 2648 [ 410.394186][T21533] total_swap 106496 [ 410.398390][T21533] total_swapcached 102400 [ 410.402792][T21533] total_pgpgin 727747 [ 410.406792][T21533] total_pgpgout 727466 [ 410.411070][T21533] total_pgfault 677045 [ 410.415315][T21533] total_pgmajfault 98 [ 410.419365][T21533] total_inactive_anon 0 [ 410.423989][T21533] total_active_anon 86016 [ 410.428392][T21533] total_inactive_file 0 [ 410.432832][T21533] total_active_file 1032192 [ 410.437621][T21533] total_unevictable 0 [ 410.441818][T21533] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6013,pid=21532,uid=0 [ 410.457149][T21533] Memory cgroup out of memory: Killed process 21533 (syz.3.6013) total-vm:96148kB, anon-rss:1136kB, file-rss:22472kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 410.511648][T21533] syz.3.6013 (21533) used greatest stack depth: 7232 bytes left [ 410.566634][T21578] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 410.687693][T21586] new mount options do not match the existing superblock, will be ignored [ 410.716906][T21588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6029'. [ 410.789402][T21594] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6031'. [ 411.085559][T21608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6035'. [ 411.330306][T21634] netlink: zone id is out of range [ 411.335671][T21634] netlink: zone id is out of range [ 411.358440][T21634] netlink: set zone limit has 8 unknown bytes [ 411.389827][T21647] new mount options do not match the existing superblock, will be ignored [ 411.446583][T21648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.455811][T21648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.347876][T21686] new mount options do not match the existing superblock, will be ignored [ 412.565844][T21698] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 412.694276][ T29] kauditd_printk_skb: 851 callbacks suppressed [ 412.694294][ T29] audit: type=1400 audit(1765712223.310:62338): avc: denied { create } for pid=21704 comm="syz.4.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 412.741840][ T29] audit: type=1400 audit(1765712223.350:62339): avc: denied { write } for pid=21704 comm="syz.4.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 412.761867][ T29] audit: type=1400 audit(1765712223.350:62340): avc: denied { read } for pid=21704 comm="syz.4.6067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 412.782132][ T29] audit: type=1326 audit(1765712223.400:62341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.3.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 412.806774][ T29] audit: type=1326 audit(1765712223.400:62342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.3.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 412.830978][ T29] audit: type=1326 audit(1765712223.400:62343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.3.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 412.854796][ T29] audit: type=1326 audit(1765712223.400:62344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.3.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 412.879016][ T29] audit: type=1326 audit(1765712223.400:62345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.3.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 412.903454][ T29] audit: type=1326 audit(1765712223.400:62346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.3.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 412.927738][ T29] audit: type=1326 audit(1765712223.400:62347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21710 comm="syz.3.6070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 413.250303][T21724] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.258049][T21724] vhci_hcd vhci_hcd.2: invalid port number 96 [ 413.264203][T21724] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 413.594919][T21735] new mount options do not match the existing superblock, will be ignored [ 413.829699][T21744] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2 [ 413.887912][T21738] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 413.895564][T21738] vhci_hcd vhci_hcd.2: invalid port number 96 [ 413.901739][T21738] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 414.004016][T21750] __nla_validate_parse: 8 callbacks suppressed [ 414.004035][T21750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6083'. [ 414.139721][T21757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6081'. [ 414.149120][T21757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6081'. [ 414.672706][T21786] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6095'. [ 414.769053][T21789] lo speed is unknown, defaulting to 1000 [ 415.116072][T21809] netlink: 'syz.4.6104': attribute type 1 has an invalid length. [ 415.218179][T21808] lo speed is unknown, defaulting to 1000 [ 415.261882][T21822] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6106'. [ 415.323280][T21827] SELinux: failed to load policy [ 415.341077][T21808] chnl_net:caif_netlink_parms(): no params data found [ 415.563482][T21825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6107'. [ 415.576576][T21808] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.585811][T21808] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.616225][T21808] bridge_slave_0: entered allmulticast mode [ 415.626726][T21808] bridge_slave_0: entered promiscuous mode [ 415.640489][T21808] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.648306][T21808] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.658320][T21854] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 415.675700][T21808] bridge_slave_1: entered allmulticast mode [ 415.707228][T21808] bridge_slave_1: entered promiscuous mode [ 415.770848][T21808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.798400][T21862] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 415.798400][T21862] program syz.3.6118 not setting count and/or reply_len properly [ 415.810663][T21854] lo speed is unknown, defaulting to 1000 [ 415.837786][T21808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.870477][T21864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6119'. [ 415.880716][T12208] bridge_slave_1: left allmulticast mode [ 415.886615][T12208] bridge_slave_1: left promiscuous mode [ 415.893219][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.901801][T12208] bridge_slave_0: left allmulticast mode [ 415.907944][T12208] bridge_slave_0: left promiscuous mode [ 415.914530][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.099414][T12208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.110467][T12208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.121362][T12208] bond0 (unregistering): Released all slaves [ 416.177783][T21808] team0: Port device team_slave_0 added [ 416.183640][T12208] tipc: Left network mode [ 416.190912][T21808] team0: Port device team_slave_1 added [ 416.204299][T12208] hsr_slave_0: left promiscuous mode [ 416.216779][T12208] hsr_slave_1: left promiscuous mode [ 416.230176][T12208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.256324][T12208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.375404][T12208] team0 (unregistering): Port device team_slave_1 removed [ 416.410056][T12208] team0 (unregistering): Port device team_slave_0 removed [ 416.440992][T21903] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6128'. [ 416.518339][T21907] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 416.518339][T21907] program syz.4.6129 not setting count and/or reply_len properly [ 416.559087][T21808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.566394][T21808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.593255][T21808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.616899][T21905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6127'. [ 416.650735][T21808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.658274][T21808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.685625][T21808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.696910][T21911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6130'. [ 416.719312][T21913] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 416.733168][T21808] hsr_slave_0: entered promiscuous mode [ 416.739459][T21808] hsr_slave_1: entered promiscuous mode [ 416.746632][T21808] debugfs: 'hsr0' already exists in 'hsr' [ 416.752955][T21808] Cannot create hsr debugfs directory [ 417.067968][T21949] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 417.067968][T21949] program syz.0.6141 not setting count and/or reply_len properly [ 417.131540][T21953] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 417.334282][T21808] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 417.350936][T21978] netlink: zone id is out of range [ 417.356170][T21978] netlink: zone id is out of range [ 417.364031][T21808] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 417.392749][T21808] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 417.409593][T21808] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 417.446586][T21978] netlink: set zone limit has 8 unknown bytes [ 417.499920][T21808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.531234][T21808] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.567772][T12166] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.575330][T12166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.610502][T12166] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.618440][T12166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.706808][T21808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.829178][ T29] kauditd_printk_skb: 1263 callbacks suppressed [ 417.829195][ T29] audit: type=1326 audit(1765712228.450:63611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 417.903504][ T29] audit: type=1326 audit(1765712228.470:63612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 417.928816][ T29] audit: type=1326 audit(1765712228.470:63613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 417.954238][ T29] audit: type=1326 audit(1765712228.470:63614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 417.971843][T21808] veth0_vlan: entered promiscuous mode [ 418.019820][ T29] audit: type=1326 audit(1765712228.530:63615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 418.044762][ T29] audit: type=1326 audit(1765712228.530:63616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 418.069105][ T29] audit: type=1326 audit(1765712228.530:63617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 418.101935][ T29] audit: type=1326 audit(1765712228.530:63618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 418.126628][ T29] audit: type=1326 audit(1765712228.530:63619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 418.151016][ T29] audit: type=1326 audit(1765712228.530:63620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22008 comm="syz.4.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 418.194828][T21808] veth1_vlan: entered promiscuous mode [ 418.237799][T21808] veth0_macvtap: entered promiscuous mode [ 418.250692][T22027] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 418.262370][T21808] veth1_macvtap: entered promiscuous mode [ 418.282421][T21808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.310405][T21808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.322660][ T408] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.353195][ T408] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.364523][ T408] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.385716][ T408] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.423814][T22036] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 418.486289][T22039] SELinux: failed to load policy [ 418.571099][T22045] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 418.809200][T22058] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 418.821500][T22060] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 418.892776][T22062] tipc: New replicast peer: 255.255.255.255 [ 418.899193][T22062] tipc: Enabled bearer , priority 10 [ 418.907310][T22062] tipc: Disabling bearer [ 419.310805][T22079] __nla_validate_parse: 7 callbacks suppressed [ 419.310867][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6167'. [ 419.326469][T22079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6167'. [ 419.472901][T22082] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 419.589279][T22091] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 419.658353][T22095] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 419.704486][T22094] netlink: 'syz.4.6175': attribute type 4 has an invalid length. [ 420.059403][T22111] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 420.059403][T22111] program syz.3.6180 not setting count and/or reply_len properly [ 420.175898][T22121] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 420.425248][T22128] ip6erspan0: entered promiscuous mode [ 420.483207][T22147] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 420.537978][T22153] netlink: 'syz.0.6195': attribute type 10 has an invalid length. [ 420.546191][T22153] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6195'. [ 420.606510][T22154] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 421.034002][T22160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6198'. [ 421.142328][T22174] Cannot find add_set index 0 as target [ 421.275413][T22178] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 421.466222][T22191] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 421.534478][T22194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6208'. [ 421.603345][T22209] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 421.719824][T22220] tipc: Started in network mode [ 421.724901][T22220] tipc: Node identity ac14140f, cluster identity 4711 [ 421.749282][T22220] tipc: New replicast peer: 255.255.255.255 [ 421.755748][T22220] tipc: Enabled bearer , priority 10 [ 421.770385][T22222] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6217'. [ 421.779689][T22222] tipc: Disabling bearer [ 421.953260][T22229] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 422.380607][T22237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6223'. [ 422.471559][T22240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.481048][T22240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.011372][T22303] ipvlan1: entered allmulticast mode [ 423.017074][T22303] veth0_vlan: entered allmulticast mode [ 423.802173][ T29] kauditd_printk_skb: 970 callbacks suppressed [ 423.802191][ T29] audit: type=1400 audit(1765712234.420:64591): avc: denied { relabelfrom } for pid=22366 comm="syz.1.6283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 423.829198][ T29] audit: type=1400 audit(1765712234.420:64592): avc: denied { relabelto } for pid=22366 comm="syz.1.6283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 425.034903][ T29] audit: type=1326 audit(1765712235.650:64593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4045e8f749 code=0x7ffc0000 [ 425.080350][ T29] audit: type=1326 audit(1765712235.660:64594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f4045e8f749 code=0x7ffc0000 [ 425.105917][ T29] audit: type=1326 audit(1765712235.660:64595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4045e8f749 code=0x7ffc0000 [ 425.130806][ T29] audit: type=1326 audit(1765712235.660:64596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f4045e915dc code=0x7ffc0000 [ 425.155111][ T29] audit: type=1326 audit(1765712235.660:64597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4045e91514 code=0x7ffc0000 [ 425.179575][ T29] audit: type=1326 audit(1765712235.660:64598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f4045e91514 code=0x7ffc0000 [ 425.203936][ T29] audit: type=1326 audit(1765712235.660:64599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4045e8f749 code=0x7ffc0000 [ 425.228440][ T29] audit: type=1326 audit(1765712235.660:64600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22561 comm="syz.2.6380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4045e8f749 code=0x7ffc0000 [ 425.762832][T22642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6414'. [ 426.875150][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6486'. [ 426.884636][T22793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6486'. [ 440.925507][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 440.925525][ T29] audit: type=1400 audit(1765712251.540:64862): avc: denied { write } for pid=22837 comm="syz.2.6505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 441.218062][ T29] audit: type=1400 audit(1765712251.820:64863): avc: denied { write } for pid=22838 comm="syz.4.6506" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 441.251224][ T29] audit: type=1400 audit(1765712251.870:64864): avc: denied { map } for pid=22837 comm="syz.2.6505" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 441.277715][T22857] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 441.292367][ T29] audit: type=1400 audit(1765712251.900:64865): avc: denied { mounton } for pid=22848 comm="syz.0.6510" path="/593" dev="tmpfs" ino=3161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 441.316871][T22860] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6512'. [ 441.326580][T22860] netlink: zone id is out of range [ 441.331892][T22860] netlink: zone id is out of range [ 441.347869][T22860] netlink: zone id is out of range [ 441.353225][T22860] netlink: zone id is out of range [ 441.366468][T22839] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 441.388552][ T29] audit: type=1400 audit(1765712252.010:64866): avc: denied { ioctl } for pid=22853 comm="syz.1.6512" path="socket:[86616]" dev="sockfs" ino=86616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 441.416544][T22839] vhci_hcd vhci_hcd.2: invalid port number 96 [ 441.417098][T22860] netlink: set zone limit has 8 unknown bytes [ 441.422991][T22839] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 441.475658][ T29] audit: type=1400 audit(1765712252.080:64867): avc: denied { sys_module } for pid=22853 comm="syz.1.6512" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 441.602482][ T29] audit: type=1400 audit(1765712252.220:64868): avc: denied { create } for pid=22889 comm="syz.4.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 441.625388][ T29] audit: type=1400 audit(1765712252.240:64869): avc: denied { create } for pid=22889 comm="syz.4.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 441.646635][T22890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6525'. [ 441.677258][ T29] audit: type=1400 audit(1765712252.270:64870): avc: denied { write } for pid=22889 comm="syz.4.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 441.698373][ T29] audit: type=1400 audit(1765712252.270:64871): avc: denied { nlmsg_write } for pid=22889 comm="syz.4.6525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 441.700077][T22904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6532'. [ 441.990930][T22939] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 442.002996][T22944] new mount options do not match the existing superblock, will be ignored [ 442.075337][T22913] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 442.086135][T22913] vhci_hcd vhci_hcd.2: invalid port number 96 [ 442.092560][T22913] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 442.189481][T22965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.198530][T22965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.276320][T22980] netlink: 'syz.4.6563': attribute type 29 has an invalid length. [ 442.316127][T22990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6567'. [ 442.403070][T23003] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 442.481785][T23019] netlink: 'syz.0.6580': attribute type 29 has an invalid length. [ 442.505672][T23021] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 442.505672][T23021] program syz.1.6581 not setting count and/or reply_len properly [ 442.770324][T23063] netlink: 'syz.2.6597': attribute type 29 has an invalid length. [ 442.958297][T23052] chnl_net:caif_netlink_parms(): no params data found [ 442.969193][T23075] tipc: New replicast peer: 255.255.255.255 [ 442.975553][T23075] tipc: Enabled bearer , priority 10 [ 443.006490][T23075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6600'. [ 443.016720][T23075] tipc: Disabling bearer [ 443.056978][T23052] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.064592][T23052] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.073013][T23052] bridge_slave_0: entered allmulticast mode [ 443.081674][T23052] bridge_slave_0: entered promiscuous mode [ 443.090003][T23052] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.097584][T23052] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.105583][T23052] bridge_slave_1: entered allmulticast mode [ 443.112563][T23052] bridge_slave_1: entered promiscuous mode [ 443.339949][T23052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.383423][T23052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.426600][T23052] team0: Port device team_slave_0 added [ 443.445928][T23052] team0: Port device team_slave_1 added [ 443.515318][T12179] bridge_slave_1: left allmulticast mode [ 443.521331][T12179] bridge_slave_1: left promiscuous mode [ 443.527308][T12179] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.666037][T12179] bridge_slave_0: left allmulticast mode [ 443.671902][T12179] bridge_slave_0: left promiscuous mode [ 443.677627][T12179] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.838204][T12179] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.854742][T12179] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.874602][T12179] bond0 (unregistering): Released all slaves [ 443.894815][T23052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.902286][T23052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.929596][T23052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.941942][T23052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.949214][T23052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.975676][T23052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.987227][T23109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6606'. [ 443.997207][T23109] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6606'. [ 444.030950][T12179] tipc: Left network mode [ 444.043861][T12179] hsr_slave_0: left promiscuous mode [ 444.049903][T12179] hsr_slave_1: left promiscuous mode [ 444.055875][T12179] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.064813][T12179] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.074086][T12179] pimreg (unregistering): left allmulticast mode [ 444.120223][T12179] team0 (unregistering): Port device team_slave_1 removed [ 444.130946][T12179] team0 (unregistering): Port device team_slave_0 removed [ 444.172132][T23123] tipc: Started in network mode [ 444.177261][T23123] tipc: Node identity ac14140f, cluster identity 4711 [ 444.184407][T23123] tipc: New replicast peer: 255.255.255.255 [ 444.190760][T23123] tipc: Enabled bearer , priority 10 [ 444.197343][T23124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6610'. [ 444.206452][T23124] tipc: Disabling bearer [ 444.228420][T23052] hsr_slave_0: entered promiscuous mode [ 444.235254][T23052] hsr_slave_1: entered promiscuous mode [ 444.241768][T23052] debugfs: 'hsr0' already exists in 'hsr' [ 444.247565][T23052] Cannot create hsr debugfs directory [ 444.440001][T23145] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 444.440001][T23145] program syz.1.6614 not setting count and/or reply_len properly [ 444.759549][T23052] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.770357][T23168] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.6620'. [ 444.780598][T23168] netlink: zone id is out of range [ 444.786376][T23168] netlink: zone id is out of range [ 444.792158][T23168] netlink: zone id is out of range [ 444.794149][T23052] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.797594][T23168] netlink: zone id is out of range [ 444.817767][T23052] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.828073][T23168] netlink: set zone limit has 8 unknown bytes [ 444.846979][T23052] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 444.902631][T23203] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 444.902631][T23203] program syz.4.6627 not setting count and/or reply_len properly [ 444.953654][T23052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.975642][T23052] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.992008][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.999383][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.019634][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.026891][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.035741][T23216] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6630'. [ 445.235351][T23052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.368771][T23052] veth0_vlan: entered promiscuous mode [ 445.381832][T23052] veth1_vlan: entered promiscuous mode [ 445.408823][T23052] veth0_macvtap: entered promiscuous mode [ 445.423898][T23052] veth1_macvtap: entered promiscuous mode [ 445.461754][T23052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.508466][T23052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.524936][T12194] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.554217][T12194] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.602982][T12194] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.645569][T12194] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.197535][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 446.197556][ T29] audit: type=1326 audit(1765712256.820:65047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23340 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 446.274831][T23344] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 446.274831][T23344] program syz.0.6663 not setting count and/or reply_len properly [ 446.293664][ T29] audit: type=1326 audit(1765712256.860:65048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23340 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 446.318201][ T29] audit: type=1326 audit(1765712256.860:65049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23340 comm="syz.0.6662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 446.608853][ T29] audit: type=1400 audit(1765712257.230:65050): avc: denied { unmount } for pid=20805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 446.651230][T23368] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 446.718675][T23370] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 446.718675][T23370] program syz.1.6675 not setting count and/or reply_len properly [ 446.791490][T23380] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 446.828938][ T29] audit: type=1400 audit(1765712257.450:65051): avc: denied { tracepoint } for pid=23381 comm="syz.2.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 446.989392][T23395] tipc: New replicast peer: 255.255.255.255 [ 446.995876][T23395] tipc: Enabled bearer , priority 10 [ 447.003532][T23396] new mount options do not match the existing superblock, will be ignored [ 447.023029][ T29] audit: type=1400 audit(1765712257.640:65052): avc: denied { bind } for pid=23381 comm="syz.2.6679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 447.047162][T23395] __nla_validate_parse: 4 callbacks suppressed [ 447.047223][T23395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6684'. [ 447.062731][T23395] tipc: Disabling bearer [ 447.146230][T23398] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 447.208681][T23400] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 447.514668][ T29] audit: type=1326 audit(1765712258.130:65053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23420 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 447.576073][ T29] audit: type=1326 audit(1765712258.160:65054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23420 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 447.600240][T23423] tipc: Started in network mode [ 447.601242][ T29] audit: type=1326 audit(1765712258.160:65055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23420 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 447.606437][T23423] tipc: Node identity ac14140f, cluster identity 4711 [ 447.617553][T23423] tipc: New replicast peer: 255.255.255.255 [ 447.630839][ T29] audit: type=1326 audit(1765712258.160:65056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23420 comm="syz.4.6696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 447.637808][T23423] tipc: Enabled bearer , priority 10 [ 447.681769][T23427] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 447.706220][T23428] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6697'. [ 447.715581][T23428] tipc: Disabling bearer [ 447.875111][T23442] tipc: New replicast peer: 255.255.255.255 [ 447.881309][T23442] tipc: Enabled bearer , priority 10 [ 447.906550][T23442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6705'. [ 447.915734][T23442] tipc: Disabling bearer [ 447.958719][T23453] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 447.993258][T23459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6711'. [ 448.078707][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6720'. [ 448.210379][T23491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6728'. [ 448.375029][T23511] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 448.428142][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6739'. [ 448.623214][T23545] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 448.623214][T23545] program syz.2.6751 not setting count and/or reply_len properly [ 448.651513][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6755'. [ 448.664576][T23551] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 448.664576][T23551] program syz.0.6754 not setting count and/or reply_len properly [ 449.051168][T23559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6758'. [ 449.082719][T23578] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 449.210412][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6775'. [ 449.225912][T23605] new mount options do not match the existing superblock, will be ignored [ 450.621701][T23732] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 450.797784][T23764] tipc: New replicast peer: 255.255.255.255 [ 450.804396][T23764] tipc: Enabled bearer , priority 10 [ 450.862353][T23777] tipc: Disabling bearer [ 450.869393][T23774] tipc: New replicast peer: 255.255.255.255 [ 450.875651][T23774] tipc: Enabled bearer , priority 10 [ 450.892604][T23774] tipc: Disabling bearer [ 450.957979][T23791] new mount options do not match the existing superblock, will be ignored [ 451.262306][T23814] netlink: 'syz.1.6862': attribute type 1 has an invalid length. [ 451.294616][ T29] kauditd_printk_skb: 372 callbacks suppressed [ 451.294644][ T29] audit: type=1400 audit(1765712261.910:65429): avc: denied { create } for pid=23816 comm="syz.4.6864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 451.323662][ T29] audit: type=1400 audit(1765712261.950:65430): avc: denied { write } for pid=23816 comm="syz.4.6864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 451.379844][T23824] netlink: 'syz.4.6864': attribute type 1 has an invalid length. [ 451.408975][T23814] bond1: entered promiscuous mode [ 451.414166][T23814] bond1: entered allmulticast mode [ 451.431554][T23814] 8021q: adding VLAN 0 to HW filter on device bond1 [ 451.439890][T23817] lo speed is unknown, defaulting to 1000 [ 451.445901][T23817] lo speed is unknown, defaulting to 1000 [ 451.448999][T23819] macvlan2: entered promiscuous mode [ 451.457266][T23819] macvlan2: entered allmulticast mode [ 451.464479][T23819] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 451.554418][T23833] new mount options do not match the existing superblock, will be ignored [ 451.687519][T23817] lo speed is unknown, defaulting to 1000 [ 451.694841][T23817] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 451.718498][T23817] lo speed is unknown, defaulting to 1000 [ 451.728510][T23817] lo speed is unknown, defaulting to 1000 [ 451.743171][T23817] lo speed is unknown, defaulting to 1000 [ 451.786451][T23817] lo speed is unknown, defaulting to 1000 [ 451.798517][T23817] lo speed is unknown, defaulting to 1000 [ 451.877505][ T29] audit: type=1326 audit(1765712262.500:65431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.4.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 451.942474][T23859] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 451.942474][T23859] program syz.1.6880 not setting count and/or reply_len properly [ 451.964994][ T29] audit: type=1400 audit(1765712262.530:65432): avc: denied { watch } for pid=23847 comm="syz.1.6876" path="/newroot/242" dev="tmpfs" ino=1257 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 451.988482][ T29] audit: type=1326 audit(1765712262.530:65433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.4.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 452.012174][ T29] audit: type=1326 audit(1765712262.530:65434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23844 comm="syz.4.6875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 452.036469][ T29] audit: type=1400 audit(1765712262.580:65435): avc: denied { execute_no_trans } for pid=23860 comm="syz.3.6882" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1973 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 452.134799][ T29] audit: type=1326 audit(1765712262.750:65436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.4.6889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 452.159035][ T29] audit: type=1326 audit(1765712262.750:65437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.4.6889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 452.248892][T23892] netlink: 'syz.0.6895': attribute type 16 has an invalid length. [ 452.256879][T23892] __nla_validate_parse: 5 callbacks suppressed [ 452.256897][T23892] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6895'. [ 452.257489][ T29] audit: type=1326 audit(1765712262.750:65438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23877 comm="syz.4.6889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f99fcf3f749 code=0x7ffc0000 [ 452.300652][T23897] netlink: 399 bytes leftover after parsing attributes in process `syz.1.6898'. [ 452.310121][T23897] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 452.319218][T23897] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 452.484508][T23925] FAULT_INJECTION: forcing a failure. [ 452.484508][T23925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.498165][T23925] CPU: 0 UID: 0 PID: 23925 Comm: syz.4.6908 Not tainted syzkaller #0 PREEMPT(voluntary) [ 452.498198][T23925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.498273][T23925] Call Trace: [ 452.498283][T23925] [ 452.498294][T23925] __dump_stack+0x1d/0x30 [ 452.498351][T23925] dump_stack_lvl+0xe8/0x140 [ 452.498413][T23925] dump_stack+0x15/0x1b [ 452.498434][T23925] should_fail_ex+0x265/0x280 [ 452.498456][T23925] should_fail+0xb/0x20 [ 452.498476][T23925] should_fail_usercopy+0x1a/0x20 [ 452.498540][T23925] _copy_from_user+0x1c/0xb0 [ 452.498567][T23925] __x64_sys_setrlimit+0x5e/0xc0 [ 452.498591][T23925] x64_sys_call+0x2e14/0x3000 [ 452.498696][T23925] do_syscall_64+0xd8/0x2c0 [ 452.498729][T23925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.498751][T23925] RIP: 0033:0x7f99fcf3f749 [ 452.498825][T23925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.498845][T23925] RSP: 002b:00007f99fb9a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 452.498909][T23925] RAX: ffffffffffffffda RBX: 00007f99fd195fa0 RCX: 00007f99fcf3f749 [ 452.498925][T23925] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000009 [ 452.498940][T23925] RBP: 00007f99fb9a7090 R08: 0000000000000000 R09: 0000000000000000 [ 452.499020][T23925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.499032][T23925] R13: 00007f99fd196038 R14: 00007f99fd195fa0 R15: 00007ffec9815578 [ 452.499052][T23925] [ 452.758450][T23932] new mount options do not match the existing superblock, will be ignored [ 453.044742][T23951] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 453.100767][T23956] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2 [ 453.160123][T23962] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 453.388770][T23996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6926'. [ 453.397947][T23996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6926'. [ 453.573988][T24005] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.625207][T24007] SELinux: policydb version 666358988 does not match my version range 15-35 [ 453.645123][T24005] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.682841][T24008] loop0: detected capacity change from 0 to 1024 [ 453.716164][T24007] SELinux: failed to load policy [ 453.880867][T24008] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 453.892193][T24008] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 453.942201][T24005] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.021239][T24008] JBD2: no valid journal superblock found [ 454.027193][T24008] EXT4-fs (loop0): Could not load journal inode [ 454.047984][T24005] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.123499][T24008] loop0: detected capacity change from 0 to 512 [ 454.156751][T12171] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.192309][T24008] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 454.199928][T12171] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.226163][T24008] EXT4-fs (loop0): orphan cleanup on readonly fs [ 454.232606][T12166] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.241281][T12166] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.251586][T24008] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.6941: corrupted inode contents [ 454.264206][T24008] EXT4-fs (loop0): Remounting filesystem read-only [ 454.271638][T24008] EXT4-fs (loop0): 1 truncate cleaned up [ 454.340173][T12171] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 454.351381][T12171] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 454.422220][T12171] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 454.437553][T24008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.468119][T24008] lo speed is unknown, defaulting to 1000 [ 454.637053][T24053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6961'. [ 454.759534][T24048] lo speed is unknown, defaulting to 1000 [ 454.790359][T24068] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 454.796924][T24068] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 454.804773][T24068] vhci_hcd vhci_hcd.0: Device attached [ 454.857113][T24075] Cannot find add_set index 0 as target [ 454.995997][ T3579] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 455.066360][ T3579] usb 7-1: new full-speed USB device number 3 using vhci_hcd [ 455.304120][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6975'. [ 455.313403][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6975'. [ 455.517135][T23052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.566664][T24069] vhci_hcd: connection reset by peer [ 455.574665][T12166] vhci_hcd vhci_hcd.3: stop threads [ 455.580362][T12166] vhci_hcd vhci_hcd.3: release socket [ 455.586043][T12166] vhci_hcd vhci_hcd.3: disconnect device [ 455.913510][T24130] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24130 comm=syz.0.6985 [ 455.950622][T24117] lo speed is unknown, defaulting to 1000 [ 456.000455][T24134] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2 [ 456.042537][T24117] chnl_net:caif_netlink_parms(): no params data found [ 456.091964][T24117] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.099759][T24117] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.183014][T24117] bridge_slave_0: entered allmulticast mode [ 456.203903][T24117] bridge_slave_0: entered promiscuous mode [ 456.229925][T24155] new mount options do not match the existing superblock, will be ignored [ 456.239229][T24117] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.246614][T24117] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.265917][T24157] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 456.291975][T24117] bridge_slave_1: entered allmulticast mode [ 456.306775][T24117] bridge_slave_1: entered promiscuous mode [ 456.357408][T24117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.383096][T24117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.433702][T24117] team0: Port device team_slave_0 added [ 456.444221][T24117] team0: Port device team_slave_1 added [ 456.474597][T24171] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 456.496493][T24117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.503929][T24117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.530610][T24117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.552112][T24174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7002'. [ 456.583841][T24117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.591165][T24117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 456.618442][T24117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.630085][T24177] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 456.651667][T24117] hsr_slave_0: entered promiscuous mode [ 456.658710][T24117] hsr_slave_1: entered promiscuous mode [ 456.664980][T24117] debugfs: 'hsr0' already exists in 'hsr' [ 456.671112][T24117] Cannot create hsr debugfs directory [ 456.703157][T24165] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 456.737240][T24165] vhci_hcd vhci_hcd.2: invalid port number 96 [ 456.743490][T24165] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 456.759239][T24184] FAULT_INJECTION: forcing a failure. [ 456.759239][T24184] name failslab, interval 1, probability 0, space 0, times 0 [ 456.772385][T24184] CPU: 1 UID: 0 PID: 24184 Comm: syz.0.7007 Not tainted syzkaller #0 PREEMPT(voluntary) [ 456.772416][T24184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.772430][T24184] Call Trace: [ 456.772439][T24184] [ 456.772450][T24184] __dump_stack+0x1d/0x30 [ 456.772485][T24184] dump_stack_lvl+0xe8/0x140 [ 456.772511][T24184] dump_stack+0x15/0x1b [ 456.772534][T24184] should_fail_ex+0x265/0x280 [ 456.772556][T24184] should_failslab+0x8c/0xb0 [ 456.772591][T24184] kmem_cache_alloc_noprof+0x69/0x4b0 [ 456.772611][T24184] ? alloc_empty_file+0x76/0x200 [ 456.772643][T24184] alloc_empty_file+0x76/0x200 [ 456.772673][T24184] path_openat+0x63/0x23b0 [ 456.772761][T24184] ? __bpf_get_stack+0x238/0x650 [ 456.772794][T24184] do_filp_open+0x109/0x230 [ 456.772837][T24184] do_sys_openat2+0xa6/0x150 [ 456.772953][T24184] __x64_sys_openat+0xf2/0x120 [ 456.772983][T24184] x64_sys_call+0x2b07/0x3000 [ 456.773006][T24184] do_syscall_64+0xd8/0x2c0 [ 456.773035][T24184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.773073][T24184] RIP: 0033:0x7efdbf47df90 [ 456.773089][T24184] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 456.773106][T24184] RSP: 002b:00007efdbdee6f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 456.773128][T24184] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007efdbf47df90 [ 456.773144][T24184] RDX: 0000000000000002 RSI: 00007efdbdee6fa0 RDI: 00000000ffffff9c [ 456.773160][T24184] RBP: 00007efdbdee6fa0 R08: 0000000000000000 R09: 0000000000000000 [ 456.773175][T24184] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 456.773242][T24184] R13: 00007efdbf6d6038 R14: 00007efdbf6d5fa0 R15: 00007ffc3f6a4fa8 [ 456.773305][T24184] [ 457.114502][T24117] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.120544][T24200] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 457.136523][T24201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7012'. [ 457.147525][T24203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7014'. [ 457.188659][T24117] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.227976][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 457.227993][ T29] audit: type=1326 audit(1765712267.850:65470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.261306][T24210] FAULT_INJECTION: forcing a failure. [ 457.261306][T24210] name failslab, interval 1, probability 0, space 0, times 0 [ 457.274376][T24210] CPU: 1 UID: 0 PID: 24210 Comm: syz.3.7018 Not tainted syzkaller #0 PREEMPT(voluntary) [ 457.274410][T24210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 457.274478][T24210] Call Trace: [ 457.274562][T24210] [ 457.274570][T24210] __dump_stack+0x1d/0x30 [ 457.274597][T24210] dump_stack_lvl+0xe8/0x140 [ 457.274625][T24210] dump_stack+0x15/0x1b [ 457.274646][T24210] should_fail_ex+0x265/0x280 [ 457.274669][T24210] should_failslab+0x8c/0xb0 [ 457.274701][T24210] kmem_cache_alloc_noprof+0x69/0x4b0 [ 457.274727][T24210] ? audit_log_start+0x342/0x720 [ 457.274754][T24210] audit_log_start+0x342/0x720 [ 457.274797][T24210] ? kstrtouint+0x76/0xc0 [ 457.274821][T24210] audit_seccomp+0x48/0x100 [ 457.274856][T24210] ? __seccomp_filter+0x832/0x1260 [ 457.274921][T24210] __seccomp_filter+0x843/0x1260 [ 457.274949][T24210] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 457.274980][T24210] ? vfs_write+0x7e8/0x960 [ 457.275018][T24210] ? __rcu_read_unlock+0x4f/0x70 [ 457.275043][T24210] ? __fget_files+0x184/0x1c0 [ 457.275075][T24210] __secure_computing+0x82/0x150 [ 457.275140][T24210] syscall_trace_enter+0xcf/0x1e0 [ 457.275189][T24210] do_syscall_64+0xb2/0x2c0 [ 457.275257][T24210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.275278][T24210] RIP: 0033:0x7f7cf304f749 [ 457.275294][T24210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.275311][T24210] RSP: 002b:00007f7cf1ab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 457.275354][T24210] RAX: ffffffffffffffda RBX: 00007f7cf32a5fa0 RCX: 00007f7cf304f749 [ 457.275367][T24210] RDX: 0000200000000380 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 457.275380][T24210] RBP: 00007f7cf1ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 457.275394][T24210] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 457.275410][T24210] R13: 00007f7cf32a6038 R14: 00007f7cf32a5fa0 R15: 00007ffd11ad9868 [ 457.275429][T24210] [ 457.275441][T24210] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 457.447969][T24218] loop0: detected capacity change from 0 to 512 [ 457.453806][T24210] audit: out of memory in audit_log_start [ 457.503267][ T29] audit: type=1326 audit(1765712267.880:65471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.527246][ T29] audit: type=1326 audit(1765712267.880:65472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.551539][ T29] audit: type=1326 audit(1765712267.880:65473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.575534][ T29] audit: type=1326 audit(1765712267.880:65474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.599601][ T29] audit: type=1326 audit(1765712267.880:65475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.607568][T24218] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 457.623891][ T29] audit: type=1326 audit(1765712267.880:65476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.623924][ T29] audit: type=1326 audit(1765712267.880:65477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24209 comm="syz.3.7018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f7cf304f749 code=0x7ffc0000 [ 457.681049][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7009'. [ 457.690254][T24216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7009'. [ 457.709314][T24218] EXT4-fs (loop0): orphan cleanup on readonly fs [ 457.717200][T24217] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 457.727501][T24117] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.739478][T24218] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm +}[@: corrupted inode contents [ 457.791333][T24117] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.829728][T24218] EXT4-fs (loop0): Remounting filesystem read-only [ 457.856132][T24218] EXT4-fs (loop0): 1 truncate cleaned up [ 457.975601][T12208] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 457.986600][T12208] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 458.003201][T12208] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 458.027839][T24218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.085858][T24244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7030'. [ 458.117781][T24218] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.174365][T24249] lo speed is unknown, defaulting to 1000 [ 458.404954][T24262] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 458.562163][T24117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.733149][T24117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.918880][ T850] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.930086][ T850] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.951098][ T850] bond0 (unregistering): Released all slaves [ 458.972112][T24117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 459.012028][ T850] tipc: Left network mode [ 459.016568][T24117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 459.035126][ T850] hsr_slave_0: left promiscuous mode [ 459.067815][ T850] hsr_slave_1: left promiscuous mode [ 459.073807][ T850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.081405][ T850] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.091938][ T850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.099670][ T850] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.130985][ T850] veth1_vlan: left promiscuous mode [ 459.136917][ T850] veth0_vlan: left promiscuous mode [ 459.163410][T24270] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7037'. [ 459.223624][ T850] team0 (unregistering): Port device team_slave_1 removed [ 459.233904][ T850] team0 (unregistering): Port device team_slave_0 removed [ 459.288245][T24290] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2 [ 459.367807][T24117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.396400][T24117] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.441066][T12171] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.448503][T12171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.477306][T24317] new mount options do not match the existing superblock, will be ignored [ 459.538534][T12179] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.545842][T12179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.593143][T24117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.684066][T24334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7050'. [ 459.693484][T24334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7050'. [ 459.810888][T24117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.891940][T24350] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 460.026326][T24117] veth0_vlan: entered promiscuous mode [ 460.037452][T24117] veth1_vlan: entered promiscuous mode [ 460.059177][T24117] veth0_macvtap: entered promiscuous mode [ 460.070625][T24117] veth1_macvtap: entered promiscuous mode [ 460.091227][T24330] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 460.107600][T24330] vhci_hcd vhci_hcd.2: invalid port number 96 [ 460.114160][T24330] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 460.124183][T24117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.136570][T24117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.155906][T12179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.311437][ T3579] usb 7-1: enqueue for inactive port 0 [ 460.321036][T12179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.326327][ T3579] usb 7-1: enqueue for inactive port 0 [ 460.341710][T12179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.351813][T12171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.409663][T24382] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 460.421928][ T3579] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 460.463527][T24387] new mount options do not match the existing superblock, will be ignored [ 460.494514][T24390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7073'. [ 460.568129][T24390] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 460.873812][T24420] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 460.893947][T24420] vhci_hcd vhci_hcd.2: invalid port number 96 [ 460.900870][T24420] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 460.929799][T24392] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 460.952864][T24392] vhci_hcd vhci_hcd.2: invalid port number 96 [ 460.959503][T24392] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 460.959684][T24430] FAULT_INJECTION: forcing a failure. [ 460.959684][T24430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.981261][T24430] CPU: 0 UID: 0 PID: 24430 Comm: syz.2.7087 Not tainted syzkaller #0 PREEMPT(voluntary) [ 460.981293][T24430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.981305][T24430] Call Trace: [ 460.981311][T24430] [ 460.981319][T24430] __dump_stack+0x1d/0x30 [ 460.981354][T24430] dump_stack_lvl+0xe8/0x140 [ 460.981380][T24430] dump_stack+0x15/0x1b [ 460.981443][T24430] should_fail_ex+0x265/0x280 [ 460.981468][T24430] should_fail+0xb/0x20 [ 460.981491][T24430] should_fail_usercopy+0x1a/0x20 [ 460.981513][T24430] _copy_from_user+0x1c/0xb0 [ 460.981676][T24430] __sys_bpf+0x183/0x7c0 [ 460.981717][T24430] __x64_sys_bpf+0x41/0x50 [ 460.981757][T24430] x64_sys_call+0x28e1/0x3000 [ 460.981781][T24430] do_syscall_64+0xd8/0x2c0 [ 460.981890][T24430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.981914][T24430] RIP: 0033:0x7f4045e8f749 [ 460.981934][T24430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.981956][T24430] RSP: 002b:00007f40448f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.981981][T24430] RAX: ffffffffffffffda RBX: 00007f40460e5fa0 RCX: 00007f4045e8f749 [ 460.982058][T24430] RDX: 0000000000000090 RSI: 0000200000000000 RDI: 0000000000000005 [ 460.982073][T24430] RBP: 00007f40448f7090 R08: 0000000000000000 R09: 0000000000000000 [ 460.982088][T24430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.982103][T24430] R13: 00007f40460e6038 R14: 00007f40460e5fa0 R15: 00007ffc984e7f38 [ 460.982125][T24430] [ 461.266680][T24450] new mount options do not match the existing superblock, will be ignored [ 461.345364][T24456] new mount options do not match the existing superblock, will be ignored [ 461.467331][T24449] FAULT_INJECTION: forcing a failure. [ 461.467331][T24449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.480975][T24449] CPU: 1 UID: 0 PID: 24449 Comm: syz.4.7096 Not tainted syzkaller #0 PREEMPT(voluntary) [ 461.481061][T24449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.481076][T24449] Call Trace: [ 461.481085][T24449] [ 461.481095][T24449] __dump_stack+0x1d/0x30 [ 461.481125][T24449] dump_stack_lvl+0xe8/0x140 [ 461.481173][T24449] dump_stack+0x15/0x1b [ 461.481193][T24449] should_fail_ex+0x265/0x280 [ 461.481281][T24449] should_fail+0xb/0x20 [ 461.481305][T24449] should_fail_usercopy+0x1a/0x20 [ 461.481355][T24449] _copy_to_user+0x20/0xa0 [ 461.481385][T24449] copy_siginfo_to_user+0x22/0xb0 [ 461.481479][T24449] x64_setup_rt_frame+0x2b5/0x580 [ 461.481509][T24449] arch_do_signal_or_restart+0x24c/0x450 [ 461.481542][T24449] exit_to_user_mode_loop+0x6a/0x740 [ 461.481655][T24449] ? __se_sys_ioctl+0x13a/0x140 [ 461.481683][T24449] do_syscall_64+0x1ef/0x2c0 [ 461.481714][T24449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.481818][T24449] RIP: 0033:0x7f1f49f2f747 [ 461.481838][T24449] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 461.481877][T24449] RSP: 002b:00007f1f4896e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.481902][T24449] RAX: 0000000000000010 RBX: 00007f1f4a186090 RCX: 00007f1f49f2f749 [ 461.481915][T24449] RDX: 0000200000000540 RSI: 0000000000005408 RDI: 0000000000000003 [ 461.481986][T24449] RBP: 00007f1f4896e090 R08: 0000000000000000 R09: 0000000000000000 [ 461.482001][T24449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.482016][T24449] R13: 00007f1f4a186128 R14: 00007f1f4a186090 R15: 00007ffc9bdbccb8 [ 461.482034][T24449] [ 461.752658][T24468] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=24468 comm=syz.3.7106 [ 461.793143][T24466] FAULT_INJECTION: forcing a failure. [ 461.793143][T24466] name failslab, interval 1, probability 0, space 0, times 0 [ 461.806528][T24466] CPU: 0 UID: 0 PID: 24466 Comm: syz.4.7105 Not tainted syzkaller #0 PREEMPT(voluntary) [ 461.806579][T24466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 461.806594][T24466] Call Trace: [ 461.806602][T24466] [ 461.806667][T24466] __dump_stack+0x1d/0x30 [ 461.806696][T24466] dump_stack_lvl+0xe8/0x140 [ 461.806721][T24466] dump_stack+0x15/0x1b [ 461.806743][T24466] should_fail_ex+0x265/0x280 [ 461.806769][T24466] should_failslab+0x8c/0xb0 [ 461.806845][T24466] kmem_cache_alloc_noprof+0x69/0x4b0 [ 461.806868][T24466] ? getname_flags+0x80/0x3b0 [ 461.806892][T24466] ? fput+0x8f/0xc0 [ 461.806918][T24466] getname_flags+0x80/0x3b0 [ 461.806944][T24466] __x64_sys_mkdirat+0x40/0x60 [ 461.806963][T24466] x64_sys_call+0x30c/0x3000 [ 461.806986][T24466] do_syscall_64+0xd8/0x2c0 [ 461.807035][T24466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.807069][T24466] RIP: 0033:0x7f1f49f2de97 [ 461.807085][T24466] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.807115][T24466] RSP: 002b:00007f1f4898ee68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 461.807139][T24466] RAX: ffffffffffffffda RBX: 00007f1f4898eef0 RCX: 00007f1f49f2de97 [ 461.807154][T24466] RDX: 00000000000001ff RSI: 0000200000000f00 RDI: 00000000ffffff9c [ 461.807168][T24466] RBP: 0000200000000f40 R08: 0000200000000000 R09: 0000000000000000 [ 461.807182][T24466] R10: 0000200000000f40 R11: 0000000000000246 R12: 0000200000000f00 [ 461.807197][T24466] R13: 00007f1f4898eeb0 R14: 0000000000000000 R15: 00002000000008c0 [ 461.807219][T24466] [ 462.102646][T24488] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 462.264119][T24496] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 462.278719][T24499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7116'. [ 462.397018][T24506] loop0: detected capacity change from 0 to 512 [ 462.410520][T24506] EXT4-fs: Ignoring removed i_version option [ 462.416698][T24506] EXT4-fs: Ignoring removed bh option [ 462.437331][T24515] new mount options do not match the existing superblock, will be ignored [ 462.466922][T24506] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.480352][T24506] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 462.492697][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 462.492780][ T29] audit: type=1400 audit(1765712273.110:65728): avc: denied { add_name } for pid=24503 comm="syz.0.7119" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.753060][ T29] audit: type=1400 audit(1765712273.110:65729): avc: denied { create } for pid=24503 comm="syz.0.7119" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 462.774069][ T29] audit: type=1400 audit(1765712273.110:65730): avc: denied { read write } for pid=24503 comm="syz.0.7119" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 462.797174][ T29] audit: type=1400 audit(1765712273.110:65731): avc: denied { open } for pid=24503 comm="syz.0.7119" path="/94/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 462.847166][T23052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.910623][ T29] audit: type=1326 audit(1765712273.520:65732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 462.935251][ T29] audit: type=1326 audit(1765712273.520:65733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 462.959547][ T29] audit: type=1326 audit(1765712273.520:65734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 462.983879][ T29] audit: type=1326 audit(1765712273.520:65735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 463.009608][ T29] audit: type=1326 audit(1765712273.520:65736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 463.034134][ T29] audit: type=1326 audit(1765712273.520:65737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24532 comm="syz.0.7123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 463.179822][T24538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7126'. [ 463.198688][T24533] loop0: detected capacity change from 0 to 512 [ 463.200179][T24540] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2 [ 463.215196][T24533] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.7123: inode has both inline data and extents flags [ 463.236345][T24533] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7123: couldn't read orphan inode 15 (err -117) [ 463.249553][T24533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.277957][T24538] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24538 comm=syz.4.7126 [ 463.291843][T23052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.316685][T24543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7129'. [ 463.500471][T24562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.510168][T24562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.547207][T24568] new mount options do not match the existing superblock, will be ignored [ 463.562564][T24572] x_tables: duplicate underflow at hook 2 [ 463.569431][T24572] tmpfs: Unknown parameter 'ÿ' [ 463.600090][T24576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7141'. [ 463.622553][T24580] FAULT_INJECTION: forcing a failure. [ 463.622553][T24580] name failslab, interval 1, probability 0, space 0, times 0 [ 463.636620][T24580] CPU: 1 UID: 0 PID: 24580 Comm: syz.2.7143 Not tainted syzkaller #0 PREEMPT(voluntary) [ 463.636771][T24580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.636786][T24580] Call Trace: [ 463.636794][T24580] [ 463.636803][T24580] __dump_stack+0x1d/0x30 [ 463.636827][T24580] dump_stack_lvl+0xe8/0x140 [ 463.636924][T24580] dump_stack+0x15/0x1b [ 463.636985][T24580] should_fail_ex+0x265/0x280 [ 463.637013][T24580] should_failslab+0x8c/0xb0 [ 463.637060][T24580] kmem_cache_alloc_noprof+0x69/0x4b0 [ 463.637088][T24580] ? prepare_creds+0x39/0x550 [ 463.637113][T24580] prepare_creds+0x39/0x550 [ 463.637133][T24580] __sys_setfsuid+0x90/0x1f0 [ 463.637166][T24580] __x64_sys_setfsuid+0x1e/0x30 [ 463.637195][T24580] x64_sys_call+0x7fc/0x3000 [ 463.637257][T24580] do_syscall_64+0xd8/0x2c0 [ 463.637288][T24580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.637308][T24580] RIP: 0033:0x7f4045e8f749 [ 463.637325][T24580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.637409][T24580] RSP: 002b:00007f40448f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 463.637433][T24580] RAX: ffffffffffffffda RBX: 00007f40460e5fa0 RCX: 00007f4045e8f749 [ 463.637448][T24580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.637522][T24580] RBP: 00007f40448f7090 R08: 0000000000000000 R09: 0000000000000000 [ 463.637535][T24580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.637547][T24580] R13: 00007f40460e6038 R14: 00007f40460e5fa0 R15: 00007ffc984e7f38 [ 463.637642][T24580] [ 463.931750][T24595] FAULT_INJECTION: forcing a failure. [ 463.931750][T24595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.945281][T24595] CPU: 1 UID: 0 PID: 24595 Comm: syz.4.7151 Not tainted syzkaller #0 PREEMPT(voluntary) [ 463.945372][T24595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.945386][T24595] Call Trace: [ 463.945392][T24595] [ 463.945399][T24595] __dump_stack+0x1d/0x30 [ 463.945423][T24595] dump_stack_lvl+0xe8/0x140 [ 463.945449][T24595] dump_stack+0x15/0x1b [ 463.945471][T24595] should_fail_ex+0x265/0x280 [ 463.945507][T24595] should_fail+0xb/0x20 [ 463.945571][T24595] should_fail_usercopy+0x1a/0x20 [ 463.945668][T24595] _copy_from_user+0x1c/0xb0 [ 463.945698][T24595] bpf_prog_create_from_user+0xb0/0x260 [ 463.945767][T24595] ? do_seccomp+0x5ac/0xa30 [ 463.945796][T24595] ? __pfx_seccomp_check_filter+0x10/0x10 [ 463.945927][T24595] do_seccomp+0x5e1/0xa30 [ 463.945960][T24595] ? fput+0x8f/0xc0 [ 463.946068][T24595] ? ksys_write+0x192/0x1a0 [ 463.946094][T24595] __x64_sys_seccomp+0x40/0x50 [ 463.946136][T24595] x64_sys_call+0x28d6/0x3000 [ 463.946162][T24595] do_syscall_64+0xd8/0x2c0 [ 463.946255][T24595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.946281][T24595] RIP: 0033:0x7f1f49f2f749 [ 463.946299][T24595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.946318][T24595] RSP: 002b:00007f1f4898f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 463.946340][T24595] RAX: ffffffffffffffda RBX: 00007f1f4a185fa0 RCX: 00007f1f49f2f749 [ 463.946354][T24595] RDX: 0000200000000340 RSI: 0000000000000000 RDI: 0000000000000001 [ 463.946425][T24595] RBP: 00007f1f4898f090 R08: 0000000000000000 R09: 0000000000000000 [ 463.946440][T24595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.946454][T24595] R13: 00007f1f4a186038 R14: 00007f1f4a185fa0 R15: 00007ffc9bdbccb8 [ 463.946474][T24595] [ 464.175067][T24604] netlink: 'syz.3.7154': attribute type 4 has an invalid length. [ 464.326566][T24622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7162'. [ 464.338248][T24623] new mount options do not match the existing superblock, will be ignored [ 464.433925][T24630] FAULT_INJECTION: forcing a failure. [ 464.433925][T24630] name failslab, interval 1, probability 0, space 0, times 0 [ 464.447018][T24630] CPU: 0 UID: 0 PID: 24630 Comm: syz.3.7164 Not tainted syzkaller #0 PREEMPT(voluntary) [ 464.447049][T24630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.447065][T24630] Call Trace: [ 464.447096][T24630] [ 464.447107][T24630] __dump_stack+0x1d/0x30 [ 464.447137][T24630] dump_stack_lvl+0xe8/0x140 [ 464.447240][T24630] dump_stack+0x15/0x1b [ 464.447263][T24630] should_fail_ex+0x265/0x280 [ 464.447289][T24630] should_failslab+0x8c/0xb0 [ 464.447315][T24630] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 464.447344][T24630] ? sidtab_sid2str_get+0xa0/0x130 [ 464.447412][T24630] kmemdup_noprof+0x2b/0x70 [ 464.447435][T24630] sidtab_sid2str_get+0xa0/0x130 [ 464.447468][T24630] security_sid_to_context_core+0x1eb/0x2e0 [ 464.447519][T24630] security_sid_to_context+0x27/0x40 [ 464.447551][T24630] selinux_lsmprop_to_secctx+0x67/0xf0 [ 464.447615][T24630] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 464.447639][T24630] audit_log_subj_ctx+0xa4/0x3e0 [ 464.447659][T24630] ? skb_put+0xa9/0xf0 [ 464.447797][T24630] audit_log_task_context+0x48/0x70 [ 464.447820][T24630] audit_log_task+0xf4/0x250 [ 464.447850][T24630] ? kstrtouint+0x76/0xc0 [ 464.447881][T24630] audit_seccomp+0x61/0x100 [ 464.447978][T24630] ? __seccomp_filter+0x832/0x1260 [ 464.448075][T24630] __seccomp_filter+0x843/0x1260 [ 464.448101][T24630] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 464.448126][T24630] ? vfs_write+0x7e8/0x960 [ 464.448221][T24630] ? __cond_resched+0x4e/0x90 [ 464.448251][T24630] __secure_computing+0x82/0x150 [ 464.448289][T24630] syscall_trace_enter+0xcf/0x1e0 [ 464.448330][T24630] do_syscall_64+0xb2/0x2c0 [ 464.448375][T24630] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.448400][T24630] RIP: 0033:0x7f7cf304f749 [ 464.448417][T24630] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.448433][T24630] RSP: 002b:00007f7cf1ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000007f [ 464.448464][T24630] RAX: ffffffffffffffda RBX: 00007f7cf32a5fa0 RCX: 00007f7cf304f749 [ 464.448521][T24630] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.448534][T24630] RBP: 00007f7cf1ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 464.448545][T24630] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.448558][T24630] R13: 00007f7cf32a6038 R14: 00007f7cf32a5fa0 R15: 00007ffd11ad9868 [ 464.448580][T24630] [ 464.805482][T24633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7166'. [ 464.836736][T24633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7166'. [ 464.948915][T24652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7171'. [ 464.995737][T24652] bridge_slave_1: left allmulticast mode [ 465.001502][T24652] bridge_slave_1: left promiscuous mode [ 465.003885][T24661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7175'. [ 465.007423][T24652] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.031871][T24652] bridge_slave_0: left allmulticast mode [ 465.037868][T24652] bridge_slave_0: left promiscuous mode [ 465.043833][T24652] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.078303][T24666] FAULT_INJECTION: forcing a failure. [ 465.078303][T24666] name failslab, interval 1, probability 0, space 0, times 0 [ 465.091764][T24666] CPU: 1 UID: 0 PID: 24666 Comm: syz.1.7177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 465.091793][T24666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.091808][T24666] Call Trace: [ 465.091815][T24666] [ 465.091824][T24666] __dump_stack+0x1d/0x30 [ 465.091858][T24666] dump_stack_lvl+0xe8/0x140 [ 465.091941][T24666] dump_stack+0x15/0x1b [ 465.091961][T24666] should_fail_ex+0x265/0x280 [ 465.091987][T24666] should_failslab+0x8c/0xb0 [ 465.092016][T24666] kmem_cache_alloc_noprof+0x69/0x4b0 [ 465.092042][T24666] ? getname_flags+0x80/0x3b0 [ 465.092087][T24666] getname_flags+0x80/0x3b0 [ 465.092115][T24666] do_mq_open+0xbd/0x4c0 [ 465.092152][T24666] ? __fget_files+0x184/0x1c0 [ 465.092177][T24666] __x64_sys_mq_open+0xcb/0x100 [ 465.092229][T24666] x64_sys_call+0x843/0x3000 [ 465.092258][T24666] do_syscall_64+0xd8/0x2c0 [ 465.092349][T24666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.092376][T24666] RIP: 0033:0x7f51c908f749 [ 465.092395][T24666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.092412][T24666] RSP: 002b:00007f51c7aef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 465.092452][T24666] RAX: ffffffffffffffda RBX: 00007f51c92e5fa0 RCX: 00007f51c908f749 [ 465.092466][T24666] RDX: 0000000000000000 RSI: 0000000000000042 RDI: 0000000000000000 [ 465.092482][T24666] RBP: 00007f51c7aef090 R08: 0000000000000000 R09: 0000000000000000 [ 465.092498][T24666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.092513][T24666] R13: 00007f51c92e6038 R14: 00007f51c92e5fa0 R15: 00007ffd80e34dc8 [ 465.092561][T24666] [ 465.335754][T24677] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvtap0, syncid = 5, id = 0 [ 465.336388][T24652] IPVS: stopping backup sync thread 24677 ... [ 465.460437][T24686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7182'. [ 465.662773][T24701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7188'. [ 466.297350][T24740] vlan2: entered allmulticast mode [ 466.464962][T24744] infiniband syz0: set active [ 466.470149][T24744] infiniband syz0: added bond_slave_0 [ 466.515222][T24744] RDS/IB: syz0: added [ 466.535567][T24744] smc: adding ib device syz0 with port count 1 [ 466.585408][T24744] smc: ib device syz0 port 1 has no pnetid [ 466.650534][T24759] netlink: zone id is out of range [ 466.655930][T24759] netlink: zone id is out of range [ 466.756379][T24759] netlink: zone id is out of range [ 466.761559][T24759] netlink: zone id is out of range [ 466.800425][T24759] netlink: zone id is out of range [ 466.858370][T24759] netlink: set zone limit has 8 unknown bytes [ 466.981997][T24773] 9p: Bad value for 'wfdno' [ 467.003703][T24773] netlink: 'syz.4.7210': attribute type 13 has an invalid length. [ 467.060954][T24773] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 467.062287][T24776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.132775][T24776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.338784][T24793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.348463][T24793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.496055][ T29] kauditd_printk_skb: 891 callbacks suppressed [ 467.496075][ T29] audit: type=1326 audit(1765712278.110:66628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.541692][ T29] audit: type=1326 audit(1765712278.110:66629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.566472][ T29] audit: type=1326 audit(1765712278.120:66630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.590903][ T29] audit: type=1326 audit(1765712278.120:66631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.615192][ T29] audit: type=1326 audit(1765712278.120:66632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.639266][ T29] audit: type=1326 audit(1765712278.120:66633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.664250][ T29] audit: type=1326 audit(1765712278.120:66634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.689610][ T29] audit: type=1326 audit(1765712278.120:66635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.713800][ T29] audit: type=1326 audit(1765712278.120:66636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 467.737968][ T29] audit: type=1326 audit(1765712278.120:66637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24812 comm="syz.4.7223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 468.188788][T24854] __nla_validate_parse: 7 callbacks suppressed [ 468.188819][T24854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7238'. [ 468.204112][T24854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7238'. [ 468.213190][T24854] netlink: 'syz.2.7238': attribute type 12 has an invalid length. [ 468.554496][T24867] tipc: New replicast peer: 255.255.255.255 [ 468.560785][T24867] tipc: Enabled bearer , priority 10 [ 469.015920][T24882] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2 [ 469.273843][T24896] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7256'. [ 469.380235][T24901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7258'. [ 469.596792][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7259'. [ 469.606042][T24905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7259'. [ 469.686001][ T3493] tipc: Node number set to 2886997007 [ 470.239595][T24927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7269'. [ 470.306588][T24913] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 470.326110][T24913] vhci_hcd vhci_hcd.2: invalid port number 96 [ 470.332478][T24913] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 470.357903][T24936] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 470.385239][T24921] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7267'. [ 470.443261][T24940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7275'. [ 470.465326][T24950] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 470.483158][T24946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7277'. [ 470.563557][T24962] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2 [ 470.707680][T24973] geneve2: entered promiscuous mode [ 470.841782][ T3493] hid_parser_main: 8 callbacks suppressed [ 470.841803][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.856796][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.864305][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.872122][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.879864][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.887835][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.888428][T24986] FAULT_INJECTION: forcing a failure. [ 470.888428][T24986] name failslab, interval 1, probability 0, space 0, times 0 [ 470.895245][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.908410][T24986] CPU: 0 UID: 0 PID: 24986 Comm: syz.2.7291 Not tainted syzkaller #0 PREEMPT(voluntary) [ 470.908439][T24986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.908452][T24986] Call Trace: [ 470.908460][T24986] [ 470.908469][T24986] __dump_stack+0x1d/0x30 [ 470.908571][T24986] dump_stack_lvl+0xe8/0x140 [ 470.908594][T24986] dump_stack+0x15/0x1b [ 470.908614][T24986] should_fail_ex+0x265/0x280 [ 470.908646][T24986] should_failslab+0x8c/0xb0 [ 470.908685][T24986] kmem_cache_alloc_noprof+0x69/0x4b0 [ 470.908707][T24986] ? create_new_namespaces+0x3c/0x400 [ 470.908731][T24986] ? __rcu_read_unlock+0x4f/0x70 [ 470.908831][T24986] create_new_namespaces+0x3c/0x400 [ 470.908900][T24986] __se_sys_setns+0x199/0xee0 [ 470.908925][T24986] ? fput+0x8f/0xc0 [ 470.909008][T24986] __x64_sys_setns+0x31/0x40 [ 470.909031][T24986] x64_sys_call+0x2760/0x3000 [ 470.909055][T24986] do_syscall_64+0xd8/0x2c0 [ 470.909148][T24986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.909170][T24986] RIP: 0033:0x7f4045e8f749 [ 470.909187][T24986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.909209][T24986] RSP: 002b:00007f40448f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 470.909230][T24986] RAX: ffffffffffffffda RBX: 00007f40460e5fa0 RCX: 00007f4045e8f749 [ 470.909252][T24986] RDX: 0000000000000000 RSI: 0000000034020000 RDI: 0000000000000003 [ 470.909265][T24986] RBP: 00007f40448f7090 R08: 0000000000000000 R09: 0000000000000000 [ 470.909278][T24986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.909291][T24986] R13: 00007f40460e6038 R14: 00007f40460e5fa0 R15: 00007ffc984e7f38 [ 470.909310][T24986] [ 470.942234][T24971] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 470.942752][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.949943][T24971] vhci_hcd vhci_hcd.2: invalid port number 96 [ 470.951895][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 470.956121][T24971] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 470.960869][ T3493] hid-generic 0003:0004:0000.005F: unknown main item tag 0x0 [ 471.228926][ T3493] hid-generic 0003:0004:0000.005F: hidraw0: USB HID v100.02 Device [syz0] on syz1 [ 471.369992][T24995] fido_id[24995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 471.520999][T25010] bridge_slave_1: left allmulticast mode [ 471.527039][T25010] bridge_slave_1: left promiscuous mode [ 471.532864][T25010] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.556159][T25010] bridge_slave_0: left allmulticast mode [ 471.561966][T25010] bridge_slave_0: left promiscuous mode [ 471.567906][T25010] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.747390][T25032] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 471.986457][T25046] netdevsim netdevsim4: Direct firmware load for ./file1 failed with error -2 [ 472.103338][T25036] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 472.121078][T25036] vhci_hcd vhci_hcd.2: invalid port number 96 [ 472.127596][T25036] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 472.278116][T25055] 9p: Bad value for 'wfdno' [ 472.415284][T25074] 9p: Bad value for 'wfdno' [ 472.566015][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 472.566036][ T29] audit: type=1400 audit(1765712283.170:66794): avc: denied { getopt } for pid=25076 comm="syz.4.7322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 472.731458][T25093] FAULT_INJECTION: forcing a failure. [ 472.731458][T25093] name failslab, interval 1, probability 0, space 0, times 0 [ 472.744394][T25093] CPU: 0 UID: 0 PID: 25093 Comm: syz.2.7328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 472.744495][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 472.744506][T25093] Call Trace: [ 472.744514][T25093] [ 472.744521][T25093] __dump_stack+0x1d/0x30 [ 472.744547][T25093] dump_stack_lvl+0xe8/0x140 [ 472.744646][T25093] dump_stack+0x15/0x1b [ 472.744663][T25093] should_fail_ex+0x265/0x280 [ 472.744738][T25093] should_failslab+0x8c/0xb0 [ 472.744759][T25093] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 472.744792][T25093] ? alloc_vmap_area+0x241/0xea0 [ 472.744813][T25093] alloc_vmap_area+0x241/0xea0 [ 472.744843][T25093] ? should_fail_ex+0xdb/0x280 [ 472.744865][T25093] ? __kmalloc_cache_node_noprof+0x2b3/0x4d0 [ 472.744888][T25093] __get_vm_area_node+0x173/0x1d0 [ 472.744910][T25093] __vmalloc_node_range_noprof+0x28e/0x1310 [ 472.745016][T25093] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 472.745039][T25093] ? __rcu_read_unlock+0x4f/0x70 [ 472.745060][T25093] ? avc_has_perm_noaudit+0xab/0x130 [ 472.745083][T25093] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 472.745109][T25093] __vmalloc_noprof+0xa4/0xf0 [ 472.745135][T25093] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 472.745157][T25093] bpf_prog_alloc_no_stats+0x47/0x390 [ 472.745222][T25093] ? bpf_prog_alloc+0x2a/0x150 [ 472.745243][T25093] bpf_prog_alloc+0x3c/0x150 [ 472.745263][T25093] bpf_prog_load+0x506/0x1140 [ 472.745334][T25093] ? security_bpf+0x2b/0x90 [ 472.745408][T25093] __sys_bpf+0x469/0x7c0 [ 472.745436][T25093] __x64_sys_bpf+0x41/0x50 [ 472.745505][T25093] x64_sys_call+0x28e1/0x3000 [ 472.745531][T25093] do_syscall_64+0xd8/0x2c0 [ 472.745574][T25093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.745599][T25093] RIP: 0033:0x7f4045e8f749 [ 472.745616][T25093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.745635][T25093] RSP: 002b:00007f40448f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 472.745657][T25093] RAX: ffffffffffffffda RBX: 00007f40460e5fa0 RCX: 00007f4045e8f749 [ 472.745671][T25093] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 472.745769][T25093] RBP: 00007f40448f7090 R08: 0000000000000000 R09: 0000000000000000 [ 472.745789][T25093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.745803][T25093] R13: 00007f40460e6038 R14: 00007f40460e5fa0 R15: 00007ffc984e7f38 [ 472.745898][T25093] [ 472.745920][T25093] syz.2.7328: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 473.009074][T25093] CPU: 0 UID: 0 PID: 25093 Comm: syz.2.7328 Not tainted syzkaller #0 PREEMPT(voluntary) [ 473.009106][T25093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 473.009184][T25093] Call Trace: [ 473.009193][T25093] [ 473.009202][T25093] __dump_stack+0x1d/0x30 [ 473.009230][T25093] dump_stack_lvl+0xe8/0x140 [ 473.009254][T25093] dump_stack+0x15/0x1b [ 473.009276][T25093] warn_alloc+0x12b/0x1a0 [ 473.009385][T25093] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 473.009417][T25093] ? __rcu_read_unlock+0x4f/0x70 [ 473.009439][T25093] ? avc_has_perm_noaudit+0xab/0x130 [ 473.009475][T25093] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 473.009499][T25093] __vmalloc_noprof+0xa4/0xf0 [ 473.009593][T25093] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 473.009615][T25093] bpf_prog_alloc_no_stats+0x47/0x390 [ 473.009636][T25093] ? bpf_prog_alloc+0x2a/0x150 [ 473.009656][T25093] bpf_prog_alloc+0x3c/0x150 [ 473.009741][T25093] bpf_prog_load+0x506/0x1140 [ 473.009778][T25093] ? security_bpf+0x2b/0x90 [ 473.009819][T25093] __sys_bpf+0x469/0x7c0 [ 473.009848][T25093] __x64_sys_bpf+0x41/0x50 [ 473.009882][T25093] x64_sys_call+0x28e1/0x3000 [ 473.009926][T25093] do_syscall_64+0xd8/0x2c0 [ 473.010042][T25093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.010066][T25093] RIP: 0033:0x7f4045e8f749 [ 473.010083][T25093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.010103][T25093] RSP: 002b:00007f40448f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.010125][T25093] RAX: ffffffffffffffda RBX: 00007f40460e5fa0 RCX: 00007f4045e8f749 [ 473.010185][T25093] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 473.010199][T25093] RBP: 00007f40448f7090 R08: 0000000000000000 R09: 0000000000000000 [ 473.010212][T25093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.010261][T25093] R13: 00007f40460e6038 R14: 00007f40460e5fa0 R15: 00007ffc984e7f38 [ 473.010282][T25093] [ 473.010290][T25093] Mem-Info: [ 473.016805][T25081] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 473.020927][T25093] active_anon:11716 inactive_anon:6 isolated_anon:0 [ 473.020927][T25093] active_file:25067 inactive_file:2439 isolated_file:0 [ 473.020927][T25093] unevictable:0 dirty:569 writeback:0 [ 473.020927][T25093] slab_reclaimable:3188 slab_unreclaimable:29990 [ 473.020927][T25093] mapped:34542 shmem:5881 pagetables:1210 [ 473.020927][T25093] sec_pagetables:0 bounce:0 [ 473.020927][T25093] kernel_misc_reclaimable:0 [ 473.020927][T25093] free:1837519 free_pcp:32554 free_cma:0 [ 473.034063][T25081] vhci_hcd vhci_hcd.2: invalid port number 96 [ 473.035074][T25093] Node 0 active_anon:46864kB inactive_anon:24kB active_file:100268kB inactive_file:9756kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138168kB dirty:2276kB writeback:0kB shmem:23524kB kernel_stack:4304kB pagetables:4840kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 473.038381][T25081] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 473.042820][T25093] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 473.152045][ T29] audit: type=1326 audit(1765712283.760:66795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.165337][T25093] lowmem_reserve[]: 0 [ 473.174229][ T29] audit: type=1326 audit(1765712283.760:66796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.174271][ T29] audit: type=1326 audit(1765712283.760:66797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.174364][ T29] audit: type=1326 audit(1765712283.760:66798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.174397][ T29] audit: type=1326 audit(1765712283.760:66799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.174428][ T29] audit: type=1326 audit(1765712283.760:66800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.174507][ T29] audit: type=1326 audit(1765712283.760:66802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.182852][T25093] 2880 [ 473.190971][ T29] audit: type=1326 audit(1765712283.760:66803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.191001][ T29] audit: type=1326 audit(1765712283.760:66801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25098 comm="syz.0.7331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdbf47f749 code=0x7ffc0000 [ 473.199196][T25093] 7859 [ 473.235804][T25100] loop0: detected capacity change from 0 to 512 [ 473.277627][T25093] 7859 [ 473.277651][T25093] Node 0 DMA32 free:2945864kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949496kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:104kB free_cma:0kB [ 473.341705][T25100] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.7331: inode has both inline data and extents flags [ 473.350990][T25093] lowmem_reserve[]: 0 0 4978 4978 [ 473.376335][T25100] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.7331: couldn't read orphan inode 15 (err -117) [ 473.379453][T25093] [ 473.407807][T25100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.429427][T25093] Node 0 Normal free:4392692kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35728kB inactive_anon:24kB active_file:100268kB inactive_file:9756kB unevictable:0kB writepending:2276kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:137284kB local_pcp:38888kB free_cma:0kB [ 473.527916][T25093] lowmem_reserve[]: 0 0 0 0 [ 473.709997][T25093] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 473.723082][T25093] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945864kB [ 473.739325][T25093] Node 0 Normal: 35*4kB (UE) 495*8kB (UME) 909*16kB (UME) 323*32kB (UME) 204*64kB (UME) 392*128kB (UME) 215*256kB (UM) 166*512kB (UM) 129*1024kB (UM) 35*2048kB (UME) 966*4096kB (UM) = 4392756kB [ 473.758785][T25093] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 473.768107][T25093] 30577 total pagecache pages [ 473.772895][T25093] 7 pages in swap cache [ 473.777277][T25093] Free swap = 124968kB [ 473.781522][T25093] Total swap = 124996kB [ 473.785779][T25093] 2097051 pages RAM [ 473.789835][T25093] 0 pages HighMem/MovableOnly [ 473.794521][T25093] 81277 pages reserved [ 473.824426][T25095] __nla_validate_parse: 7 callbacks suppressed [ 473.824501][T25095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7327'. [ 473.839969][T25095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7327'. [ 473.853650][T23052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.081001][T25126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.089743][T25126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.090908][T25128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.106798][T25128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.132750][T25135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7343'. [ 474.144926][T25136] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.7336'. [ 474.154848][T25136] netlink: zone id is out of range [ 474.160118][T25136] netlink: zone id is out of range [ 474.170288][T25136] netlink: zone id is out of range [ 474.172564][T25135] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25135 comm=syz.3.7343 [ 474.175567][T25136] netlink: zone id is out of range [ 474.177593][T25136] netlink: zone id is out of range [ 474.229044][T25136] netlink: set zone limit has 8 unknown bytes [ 474.264220][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7347'. [ 474.273689][T25149] bridge_slave_1: left allmulticast mode [ 474.279873][T25149] bridge_slave_1: left promiscuous mode [ 474.285600][T25149] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.295240][T25149] bridge_slave_0: left promiscuous mode [ 474.301116][T25149] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.410050][T25155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7348'. [ 474.532527][T25174] netdevsim netdevsim0: Direct firmware load for ./file1 failed with error -2 [ 474.549815][T25176] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 474.683598][T25190] loop0: detected capacity change from 0 to 4096 [ 474.699667][T25190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.831303][T25194] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7367'. [ 475.011967][T25225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7379'. [ 475.106015][ T3411] hid-generic 0000:3000000:0000.0060: hidraw0: HID v0.00 Device [sy] on syz0 [ 475.182818][T25238] fido_id[25238]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 475.215731][T25223] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7378'. [ 475.467983][T25250] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 475.476284][T25250] vhci_hcd vhci_hcd.2: invalid port number 96 [ 475.482911][T25250] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 475.517494][T23052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.630831][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7398'. [ 475.871565][T25313] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25313 comm=syz.2.7409 [ 476.325377][T25318] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 476.368034][T25318] vhci_hcd vhci_hcd.2: invalid port number 96 [ 476.374366][T25318] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 476.596420][T25336] loop0: detected capacity change from 0 to 256 [ 477.109705][T25372] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 477.297462][T25374] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 477.305373][T25374] vhci_hcd vhci_hcd.2: invalid port number 96 [ 477.311962][T25374] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 477.454855][T25357] netlink: 'syz.3.7425': attribute type 4 has an invalid length. [ 477.468699][T25357] .`: renamed from bond0 (while UP) [ 477.523109][T25389] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 477.754089][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 477.754106][ T29] audit: type=1326 audit(1765712288.370:67143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.796097][ T29] audit: type=1326 audit(1765712288.370:67144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.820633][ T29] audit: type=1326 audit(1765712288.370:67145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.846148][ T29] audit: type=1326 audit(1765712288.420:67146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.871102][ T29] audit: type=1326 audit(1765712288.420:67147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.896046][ T29] audit: type=1326 audit(1765712288.420:67148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.921516][ T29] audit: type=1326 audit(1765712288.420:67149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.946528][ T29] audit: type=1326 audit(1765712288.420:67150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.972211][ T29] audit: type=1326 audit(1765712288.420:67151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 477.997158][ T29] audit: type=1326 audit(1765712288.420:67152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25402 comm="syz.4.7439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f49f2f749 code=0x7ffc0000 [ 478.237031][T25418] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 478.244748][T25418] vhci_hcd vhci_hcd.2: invalid port number 96 [ 478.251239][T25418] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 478.330904][T25428] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 478.349380][T25426] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 478.460067][T25440] tipc: New replicast peer: 255.255.255.255 [ 478.466603][T25440] tipc: Enabled bearer , priority 10 [ 478.925218][T25454] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 478.943088][T25454] vhci_hcd vhci_hcd.2: invalid port number 96 [ 478.949509][T25454] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 478.973621][T25459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25459 comm=syz.4.7461 [ 479.014035][T25463] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 479.084423][T25468] tipc: New replicast peer: 255.255.255.255 [ 479.091248][T25468] tipc: Enabled bearer , priority 10 [ 479.131950][T25474] __nla_validate_parse: 13 callbacks suppressed [ 479.132008][T25474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7467'. [ 479.239498][T25470] loop0: detected capacity change from 0 to 1024 [ 479.246656][T25470] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 479.258609][T25470] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 479.268444][T25470] JBD2: no valid journal superblock found [ 479.274179][T25470] EXT4-fs (loop0): Could not load journal inode [ 479.281599][ T3005] ================================================================== [ 479.289893][ T3005] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 479.296690][ T3005] [ 479.299020][ T3005] write to 0xffff888131a4aa18 of 8 bytes by task 25470 on cpu 1: [ 479.307099][ T3005] inc_diskseq+0x2d/0x40 [ 479.311629][ T3005] disk_force_media_change+0x9e/0xe0 [ 479.317029][ T3005] lo_release+0x2cb/0x400 [ 479.321635][ T3005] bdev_release+0x373/0x3d0 [ 479.326163][ T3005] blkdev_release+0x15/0x20 [ 479.330719][ T3005] __fput+0x29b/0x650 [ 479.334765][ T3005] fput_close_sync+0xad/0x190 [ 479.339983][ T3005] __x64_sys_close+0x56/0xf0 [ 479.343660][T25485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7471'. [ 479.344697][ T3005] x64_sys_call+0x2c25/0x3000 [ 479.354260][T25485] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7471'. [ 479.358414][ T3005] do_syscall_64+0xd8/0x2c0 [ 479.358456][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.358477][ T3005] [ 479.358484][ T3005] read to 0xffff888131a4aa18 of 8 bytes by task 3005 on cpu 0: [ 479.377488][T25470] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 479.378034][ T3005] block_uevent+0x31/0x50 [ 479.383657][T25470] loop0: detected capacity change from 0 to 512 [ 479.388276][ T3005] dev_uevent+0x375/0x400 [ 479.388318][ T3005] uevent_show+0x11a/0x200 [ 479.418844][ T3005] dev_attr_show+0x3f/0xa0 [ 479.423563][ T3005] sysfs_kf_seq_show+0x1a3/0x280 [ 479.428906][ T3005] kernfs_seq_show+0x82/0xa0 [ 479.433587][ T3005] seq_read_iter+0x31e/0x950 [ 479.438457][ T3005] kernfs_fop_read_iter+0xc1/0x330 [ 479.443685][ T3005] vfs_read+0x64c/0x770 [ 479.447838][ T3005] ksys_read+0xda/0x1a0 [ 479.451989][ T3005] __x64_sys_read+0x40/0x50 [ 479.456843][ T3005] x64_sys_call+0x2889/0x3000 [ 479.462164][ T3005] do_syscall_64+0xd8/0x2c0 [ 479.466864][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.472936][ T3005] [ 479.475355][ T3005] value changed: 0x00000000000000d7 -> 0x00000000000000d8 [ 479.482731][ T3005] [ 479.485232][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 479.491903][ T3005] CPU: 0 UID: 0 PID: 3005 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 479.501971][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.512204][ T3005] ================================================================== [ 479.523601][ T3397] tipc: Node number set to 2886997007 [ 479.563000][T25470] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 479.571265][T25470] EXT4-fs (loop0): orphan cleanup on readonly fs [ 479.606423][T25470] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.7466: corrupted inode contents [ 479.620029][T25470] EXT4-fs (loop0): Remounting filesystem read-only [ 479.627314][T25470] EXT4-fs (loop0): 1 truncate cleaned up [ 479.633530][T12208] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 479.644664][T12208] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 479.676352][T12208] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 479.696608][T25470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.833910][T23052] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.116034][ T3424] tipc: Node number set to 2886997007