last executing test programs: 5.429046636s ago: executing program 3 (id=7916): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, r3, 0x10}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000380)={0x80}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {r3, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x81, {"1fb73f99648108f1f040ffd0f9d41a34"}, 0x0, 0x1, 0x9}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) 5.030730269s ago: executing program 3 (id=7920): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x343c83f25fdf456a}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x854) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESOCT=r2], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="0000fe00f85f1405950960c3603642266b", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) ioctl$SIOCPNENABLEPIPE(r3, 0x89ed, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x10, &(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRESOCT=r2, @ANYRESHEX=r7, @ANYRES32=0x0, @ANYBLOB="a788b4d86ac511108da0449ab46409796d", @ANYBLOB='\x00'/28], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c636865636b3d7374726963742c756d61736b3d30303030303030303030303030303030303133363033302c756e695f786c6174653d312c756e695f786c6174653d302c666d61736b3d30303030303030303030303030303030303030303034302c757466383d302c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c74696d655f6f66667365743d3078303030303030303030303030303166622c666c7573682c756e695f786c6174653d302c73686f72746e616d653d77696e39352c00208893fdd4787adad4209069"], 0x6, 0x2b0, &(0x7f0000000280)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x4, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x4) r10 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000280)={'\x00', 0x7e, 0x1000, 0x5c8, 0x80000003, 0x6}) 4.996973952s ago: executing program 3 (id=7922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000640)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) utimes(&(0x7f0000000080)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newlink={0x28, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x0, 0x3114}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x6}]}, 0x28}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r8, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549f22c1ac3a5d5", @ANYRES32=r8, @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 4.105417385s ago: executing program 3 (id=7941): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (fail_nth: 1) 3.868034074s ago: executing program 3 (id=7943): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r0, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r4, &(0x7f00000001c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0xa) 3.755695703s ago: executing program 3 (id=7946): sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = accept$unix(r2, &(0x7f0000000780)=@abs, &(0x7f0000000800)=0x6e) connect$unix(r4, &(0x7f0000000840)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r7 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) syz_usb_disconnect(r7) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0xe, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/keycreate\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 2.385901815s ago: executing program 1 (id=7958): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x59) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000200), &(0x7f0000000300)) 2.371642037s ago: executing program 4 (id=7960): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000deffffff0000000000000018110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.262398245s ago: executing program 4 (id=7962): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, r3, 0x10}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000380)={0x80}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {r3, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x81, {"1fb73f99648108f1f040ffd0f9d41a34"}, 0x0, 0x1, 0x9}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) 2.049319723s ago: executing program 2 (id=7965): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) 1.96180037s ago: executing program 2 (id=7966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x40041, 0x8000, &(0x7f0000000a40)="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", 0x1dd) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet6(r2, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r3, &(0x7f00000002c0)=[{&(0x7f0000004c00)=""/4090, 0xffa}, {&(0x7f0000000040)=""/169, 0xa9}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioperm(0xc, 0x1ff, 0x8) 1.885737986s ago: executing program 4 (id=7967): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000db71f7768500000021000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1.689436612s ago: executing program 0 (id=7971): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='net_dev_start_xmit\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) 1.638657756s ago: executing program 0 (id=7972): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000deffffff0000000000000018110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 1.541611544s ago: executing program 0 (id=7973): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 1.541283454s ago: executing program 1 (id=7974): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0b00000007000000020000000400000005", @ANYRES16=r0], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1, @ANYBLOB="ada64409a0e0e46e73113a416644385393de2ff8cd881f307ec5159c387962d9083170b5148cc9104c09ee2fd35c1d68cb40847e5c81d9604f186f3403288aa412fe90cf3a668a2cd46893e5b90c8dfefe4d09ff704829c61e479229a03d16a9c504b2e03ab9848c4478b6fa17876575ee2f92557a304f92e665f305e226c5398a281a6aad1c2116e2242c38d0a9ea78445fff04cfb40d637879a4812d9752626dcc918003c6002d1772e0827871659194542fd24b6d7dedf7fa708af974397fbeb6cb257408ddaa4efef9d750"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r9}, &(0x7f0000001c00), &(0x7f0000001c40)=r10}, 0x20) unshare(0x64000600) eventfd2(0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100fe0f00000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4], 0xb4}}, 0x4050) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000200)=0x1, 0x4) 1.431513473s ago: executing program 0 (id=7975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="08000000000000000000a008ebe0c0fa9a0522a49a28cd00000000000000000000000000000039c648ee7fe01ed70000000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095", @ANYRES16=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000100000000000c000300686173683a6970000500040000000000090800000000000200000005000100060000000000ac"], 0x44}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, 0x0, 0x0) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) r10 = syz_io_uring_setup(0x23a, &(0x7f0000000780)={0x0, 0x1, 0x8000}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r13 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) ioctl$TIOCGPTPEER(r13, 0x5441, 0x7) r14 = io_uring_register$IORING_REGISTER_PERSONALITY(r10, 0x9, 0x0, 0x0) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x2, 0x0, 0x0, 0x0, {0xf003}, 0x1, {0x0, r14}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) io_uring_enter(r10, 0x7f5f, 0x8000, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) 1.128607788s ago: executing program 2 (id=7976): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000deffffff0000000000000018110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x6, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 945.878673ms ago: executing program 4 (id=7977): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) 932.548584ms ago: executing program 4 (id=7978): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xfffffff8, @empty, 0xfffffff9}, {0xa, 0x4e20, 0x3fa7, @local, 0x9}, r3, 0x10}}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0xfffffffe, @local, 0x4}, 0x1c) ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000380)={0x80}) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000640)={0x15, 0x110, 0xfa00, {r3, 0x3, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x81, {"1fb73f99648108f1f040ffd0f9d41a34"}, 0x0, 0x1, 0x9}, @in={0x2, 0x4e24, @multicast1}}}, 0x118) 871.870539ms ago: executing program 0 (id=7979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 838.609692ms ago: executing program 0 (id=7980): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x3}) r2 = fsmount(0xffffffffffffffff, 0x0, 0x8) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x6, 0x7}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x5, 0x100) ioctl$BLKGETDISKSEQ(r4, 0x80081280, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r3, @ANYBLOB="f2f60f12498d06cd5604474f3fa00ff0f496344b58518fff58c46bcffb2ecbc590e0d5e272b126275eef7b2527c6c3474ebe6e2d6c0aabfacab2a9f59565903194ebf387592815af7d08d90072b8f8f2c1f57e982e460edba4fa369866517e4e8f4e43a77eda184ad910a9f48ce9441c2585e45f4c618c9666a03d308160a9b98bce57618d74246a31f64effba0d356eff017672c88891dfbe128c151d5a8cc46682bb824f995ba46d23788d4eb08b23439022e9b2f01ca7679a4f2d71e8d783f04760bd157c6fa6695d619d"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x12, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xe9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00106d4800"/14], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x800}, 0x18) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000d95c883f00000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r10}, 0x10) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 771.361077ms ago: executing program 2 (id=7981): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) 642.511308ms ago: executing program 1 (id=7982): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x4e, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000, &(0x7f0000000000)="e2", &(0x7f00000002c0)="605d2a5de8c22c301d05c189d58a7514e67c7ec8e92ff58edc6a54d36fe4717af1adaaff852107929146f653ac43b6df49db674372d2a62ffde6c3246c330ea3cee19f08b56a4d6147", 0x2}, 0x2c) 608.157631ms ago: executing program 2 (id=7983): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000deffffff0000000000000018110010", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 594.188972ms ago: executing program 1 (id=7984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100003040000000000000000008446e9", @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001"], 0x44}}, 0x8000) (fail_nth: 2) 587.504862ms ago: executing program 4 (id=7985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = msgget$private(0x0, 0x790) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000000c0)=0x1) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0x3f}], 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f0000000040)=[{0x80, 0x4, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x2}, @raw32={[0x9, 0x7]}}, {0x0, 0x81, 0xfd, 0x4, @tick=0xf1f, {0x6, 0x4}, {0x20}, @quote={{0xe8, 0x48}, 0x7}}], 0x38) msgsnd(r0, &(0x7f0000000680)=ANY=[@ANYRES8, @ANYRES16=r2, @ANYRESOCT=r1, @ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYRESOCT], 0x401, 0x0) msgctl$IPC_RMID(r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000020000000100000000000000a523b5e2163fa3e96e96ed", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYRES32, @ANYBLOB="0000000000000000c5e44ba5aa94d65c11b4fd8276b3e900"/35, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000094fe000000000000000b440000000000bc33e66c13001801000020646c2100040000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000072", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffff0f) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r10, 0x1, 0x1) 277.665347ms ago: executing program 1 (id=7986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) move_pages(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0xb, 0x518, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a3c0)=@newtaction={0x488, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x10000, 0x325, 0x81, 0x5, 0x7, 0x5, 0x6, 0x599ff518, 0x5, 0x6, 0x2, 0x8, 0x400, 0xff, 0x1, 0x1, 0xff, 0xbd, 0x7, 0xffff, 0x200, 0x0, 0x7fff, 0x5, 0x0, 0xd, 0x3, 0x3, 0x6, 0x80000001, 0x3477, 0x800, 0x0, 0x8, 0x3db, 0x0, 0x1, 0x7f, 0x56, 0x40, 0x4, 0x1000, 0x5, 0x5, 0xcc5, 0x400, 0x1, 0x64f3, 0x7999, 0x401, 0xe, 0x1, 0xfffffffb, 0x428a0562, 0xd7, 0xd, 0xb1, 0xa23, 0x2768, 0x200, 0x1, 0x7fffffff, 0x1, 0x81, 0x3, 0x5, 0x8, 0x9, 0x4, 0x3, 0x5, 0xffff0001, 0x9, 0x6, 0xe9a, 0x7, 0x9, 0x5, 0x3, 0x4, 0xff, 0x8000, 0x3c, 0x1ff, 0xffff, 0x6, 0xffff8001, 0x1, 0x6, 0x1, 0x48275caf, 0x7, 0x5, 0x100, 0x3ff, 0x9, 0x9, 0xffffffff, 0x4, 0x1a, 0x101, 0x8000, 0xff, 0xef6f, 0x1, 0x7, 0xccd, 0x7, 0xc6, 0x3, 0x3, 0x401, 0x7, 0x4, 0x612, 0x2, 0x1, 0x2, 0x1, 0x0, 0x5, 0x3, 0x4956198f, 0x401, 0x3c, 0x7, 0x6, 0x8, 0x101, 0x1, 0x3, 0x6, 0x3320, 0x5, 0x4, 0x6, 0x2, 0xa, 0x2, 0xec6e, 0x1, 0x4, 0xff, 0x1876, 0x4, 0xfe, 0x8, 0x100, 0x5, 0x6, 0x2e80, 0x6, 0x4, 0x9, 0x0, 0xffffffab, 0x3, 0x1000, 0x3ff, 0x1, 0x3, 0x2e70, 0x8, 0xf3d6, 0xb3f, 0xfffffc00, 0x7, 0x0, 0xff, 0x0, 0x8000, 0x12d00, 0x9, 0xd, 0x8, 0x7f, 0x7, 0x2, 0x4, 0x4, 0xf26, 0x3, 0x1, 0xffffffff, 0x6, 0x1, 0x7, 0x3, 0x3, 0x5, 0x3, 0x60a, 0x1000, 0x100, 0x2, 0x1, 0x0, 0x470121f0, 0x93d0, 0x9, 0x3, 0xfffffff9, 0x3, 0x8, 0xf935, 0x7, 0x8, 0x8000, 0x40, 0x4, 0x4, 0x400004, 0x80, 0x8, 0x3, 0x2, 0x5, 0x1, 0x3b05, 0x6, 0x6, 0x3, 0xfffffffd, 0x7fffffff, 0x1, 0x0, 0x38, 0x4, 0x30a6, 0x7fffffff, 0x3, 0x80, 0x3, 0x1, 0x8, 0xfffffff9, 0x6, 0x480, 0x5, 0x0, 0x80000001, 0x1, 0x0, 0x1000, 0x2, 0x1, 0x5, 0x10, 0x4, 0x10, 0x2, 0x2, 0x38000, 0x2, 0x460, 0xffff5824]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xb, 0x10000000, 0xc6d, 0x101, 0x6, {0x4, 0x0, 0x2, 0x6, 0x9, 0x10001}, {0x3, 0x0, 0x703, 0x2, 0x1}, 0x0, 0x2a6, 0x4}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x40014}, 0x2400c800) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003804e2d"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) utime(&(0x7f0000000100)='./file0\x00', 0x0) request_key(0x0, &(0x7f0000000400)={'syz', 0x1}, 0x0, 0xffffffffffffffff) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r7, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f00000002c0)='2', 0x1}], 0x2, 0x0, 0x0) 244.1352ms ago: executing program 2 (id=7987): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000db71f7768500000021000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 0s ago: executing program 1 (id=7988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe935"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) kernel console output (not intermixed with test programs): own, defaulting to 1000 [ 586.234066][ T1243] lo speed is unknown, defaulting to 1000 [ 586.349703][ T1250] siw: device registration error -23 [ 587.257013][ T1263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.265714][ T1263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.475277][ T1263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.483764][ T1263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.667023][ T1254] lo speed is unknown, defaulting to 1000 [ 587.906746][ T1278] __nla_validate_parse: 25 callbacks suppressed [ 587.906766][ T1278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6866'. [ 587.939029][ T1286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6867'. [ 587.957263][ T1278] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6866'. [ 588.177855][ T1291] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6868'. [ 588.233160][ T1293] lo speed is unknown, defaulting to 1000 [ 588.349026][ T1302] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6871'. [ 588.974428][ T1332] siw: device registration error -23 [ 588.980445][ T1331] lo speed is unknown, defaulting to 1000 [ 589.254572][ T1341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6886'. [ 589.285626][ T1341] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6886'. [ 589.337972][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 589.337990][ T29] audit: type=1326 audit(2000000410.730:12780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.367881][ T29] audit: type=1326 audit(2000000410.730:12781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.392179][ T29] audit: type=1326 audit(2000000410.780:12782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.415821][ T29] audit: type=1326 audit(2000000410.780:12783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.439425][ T29] audit: type=1326 audit(2000000410.780:12784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.468477][ T29] audit: type=1326 audit(2000000410.860:12785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.491950][ T29] audit: type=1326 audit(2000000410.860:12786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.515689][ T29] audit: type=1326 audit(2000000410.860:12787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1352 comm="syz.3.6891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 589.577195][ T29] audit: type=1326 audit(2000000410.970:12788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 589.601046][ T29] audit: type=1326 audit(2000000410.970:12789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1356 comm="syz.2.6893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 589.734239][ T1369] siw: device registration error -23 [ 590.063593][ T1381] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6903'. [ 590.082621][ T1381] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6903'. [ 590.183859][ T1402] siw: device registration error -23 [ 590.675586][ T1408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.684250][ T1408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.694143][ T1408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.702823][ T1408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.912445][ T1408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.921194][ T1408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.387778][ T1431] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6921'. [ 591.759895][ T1442] lo speed is unknown, defaulting to 1000 [ 592.074883][ T1447] lo speed is unknown, defaulting to 1000 [ 592.548145][ T1454] 9pnet_fd: Insufficient options for proto=fd [ 592.565737][ T1454] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 592.582617][ T1454] SELinux: failed to load policy [ 592.600388][ T1454] netlink: 'syz.2.6929': attribute type 4 has an invalid length. [ 592.637628][ T1454] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 592.853182][ T1473] loop2: detected capacity change from 0 to 512 [ 592.892415][ T1473] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 592.945504][ T1473] EXT4-fs (loop2): orphan cleanup on readonly fs [ 592.989957][ T1473] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.6936: Block bitmap for bg 0 marked uninitialized [ 593.084085][ T1473] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 593.133523][ T1473] EXT4-fs (loop2): 1 orphan inode deleted [ 593.151534][ T1473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 593.200071][ T1473] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 593.223951][ T1473] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 593.257707][ T1489] siw: device registration error -23 [ 593.264440][ T1473] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.391344][ T1491] lo speed is unknown, defaulting to 1000 [ 593.554111][ T1502] __nla_validate_parse: 2 callbacks suppressed [ 593.554139][ T1502] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6945'. [ 593.575508][ T1503] siw: device registration error -23 [ 593.630083][ T1505] 9pnet_fd: Insufficient options for proto=fd [ 593.636183][ T1506] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6945'. [ 593.647834][ T1506] IPv6: NLM_F_CREATE should be specified when creating new route [ 593.686345][ T1505] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 593.708851][ T1505] SELinux: failed to load policy [ 593.735290][ T1505] netlink: 'syz.4.6946': attribute type 4 has an invalid length. [ 593.743079][ T1505] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6946'. [ 593.788812][ T1505] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 594.166601][ T1522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.175309][ T1522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.183961][ T1522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.192414][ T1522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.401017][ T1522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.409619][ T1522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 594.699720][ T1541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6956'. [ 594.946959][ T1550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6958'. [ 594.956027][ T1550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6958'. [ 595.064779][ T1550] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6958'. [ 595.389882][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 595.389900][ T29] audit: type=1326 audit(2000000416.780:12828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.549777][ T1551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.612082][ T29] audit: type=1326 audit(2000000416.820:12829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.635702][ T29] audit: type=1326 audit(2000000416.820:12830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.659261][ T29] audit: type=1326 audit(2000000416.820:12831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.682829][ T29] audit: type=1326 audit(2000000416.820:12832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.706541][ T29] audit: type=1326 audit(2000000416.820:12833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.730537][ T29] audit: type=1326 audit(2000000416.820:12834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.754233][ T29] audit: type=1326 audit(2000000416.830:12835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.777817][ T29] audit: type=1326 audit(2000000416.830:12836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.801394][ T29] audit: type=1326 audit(2000000416.830:12837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1555 comm="syz.0.6960" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 595.843483][ T1551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.994075][ T1551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.051417][ T1551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.221559][ T1562] 9pnet_fd: Insufficient options for proto=fd [ 596.330186][ T1551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.349508][ T1562] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 596.379559][ T1551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.394198][ T1562] SELinux: failed to load policy [ 596.435999][ T1562] netlink: 'syz.0.6962': attribute type 4 has an invalid length. [ 596.443825][ T1562] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6962'. [ 596.496962][ T1562] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 596.617586][ T1569] siw: device registration error -23 [ 596.632872][ T1573] netlink: 300 bytes leftover after parsing attributes in process `syz.2.6965'. [ 596.755690][ T1576] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6965'. [ 596.977444][ T1582] siw: device registration error -23 [ 597.626174][ T1602] 9pnet_fd: Insufficient options for proto=fd [ 597.665738][ T1602] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 597.690239][ T1602] SELinux: failed to load policy [ 597.717354][ T1602] netlink: 'syz.4.6975': attribute type 4 has an invalid length. [ 597.755474][ T1602] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 598.593502][ T1644] 9pnet_fd: Insufficient options for proto=fd [ 598.614761][ T1644] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 598.652772][ T1644] SELinux: failed to load policy [ 598.683938][ T1644] netlink: 'syz.4.6991': attribute type 4 has an invalid length. [ 598.691714][ T1644] __nla_validate_parse: 8 callbacks suppressed [ 598.691729][ T1644] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6991'. [ 598.743431][ T1644] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 599.089924][ T1651] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6993'. [ 599.114706][ T1651] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6993'. [ 599.381913][ T1665] lo speed is unknown, defaulting to 1000 [ 599.432782][ T1670] siw: device registration error -23 [ 599.732724][ T1674] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7002'. [ 599.792196][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7004'. [ 599.801286][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7004'. [ 599.870271][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7004'. [ 600.094634][ T1691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7008'. [ 600.141062][ T1691] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7008'. [ 600.371360][ T1700] lo speed is unknown, defaulting to 1000 [ 600.394495][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 600.394549][ T29] audit: type=1326 audit(2000000421.790:13043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.424296][ T29] audit: type=1326 audit(2000000421.790:13044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.447910][ T29] audit: type=1326 audit(2000000421.790:13045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.805981][ T29] audit: type=1326 audit(2000000421.910:13046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.829743][ T29] audit: type=1326 audit(2000000421.920:13047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.853404][ T29] audit: type=1326 audit(2000000421.920:13048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.877009][ T29] audit: type=1326 audit(2000000421.930:13049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.900640][ T29] audit: type=1326 audit(2000000421.930:13050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.924196][ T29] audit: type=1326 audit(2000000421.930:13051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 600.947848][ T29] audit: type=1326 audit(2000000421.930:13052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1701 comm="syz.0.7013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 601.101364][ T1709] siw: device registration error -23 [ 601.272415][ T1715] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7017'. [ 601.312936][ T1709] loop2: detected capacity change from 0 to 1024 [ 601.378410][ T1709] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 601.389944][ T1709] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 601.477387][ T1709] JBD2: no valid journal superblock found [ 601.492230][ T1709] EXT4-fs (loop2): Could not load journal inode [ 601.673742][ T1724] siw: device registration error -23 [ 602.031335][ T1737] lo speed is unknown, defaulting to 1000 [ 602.079194][ T1744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=1744 comm=syz.2.7028 [ 602.271776][ T1751] vlan2: entered allmulticast mode [ 602.281124][ T1744] lo speed is unknown, defaulting to 1000 [ 603.711619][ T1775] __nla_validate_parse: 9 callbacks suppressed [ 603.711638][ T1775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7038'. [ 603.764851][ T1773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.773641][ T1773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.783134][ T1773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.791834][ T1773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.866985][ T1776] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7038'. [ 604.001487][ T1773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 604.010332][ T1773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.339842][ T1781] lo speed is unknown, defaulting to 1000 [ 604.484966][ T1787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7036'. [ 604.494052][ T1787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7036'. [ 605.231983][ T1797] lo speed is unknown, defaulting to 1000 [ 605.277699][ T1799] siw: device registration error -23 [ 605.315919][ T1799] loop2: detected capacity change from 0 to 1024 [ 605.339759][ T1799] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 605.350770][ T1799] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 605.434656][ T1799] JBD2: no valid journal superblock found [ 605.440469][ T1799] EXT4-fs (loop2): Could not load journal inode [ 606.288519][ T1819] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7051'. [ 606.347398][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 606.347414][ T29] audit: type=1326 audit(2000000427.740:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.398143][ T29] audit: type=1326 audit(2000000427.770:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.422062][ T29] audit: type=1326 audit(2000000427.770:13286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.445854][ T29] audit: type=1326 audit(2000000427.790:13287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.469543][ T29] audit: type=1326 audit(2000000427.790:13288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.493174][ T29] audit: type=1326 audit(2000000427.790:13289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.516964][ T29] audit: type=1326 audit(2000000427.790:13290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.540859][ T29] audit: type=1326 audit(2000000427.790:13291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.564718][ T29] audit: type=1326 audit(2000000427.790:13292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.575857][ T1824] lo speed is unknown, defaulting to 1000 [ 606.588278][ T29] audit: type=1326 audit(2000000427.790:13293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1821 comm="syz.0.7052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 606.776703][ T1834] siw: device registration error -23 [ 606.834970][ T1834] loop2: detected capacity change from 0 to 1024 [ 606.880341][ T1834] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 606.891315][ T1834] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 606.935270][ T1834] JBD2: no valid journal superblock found [ 606.941049][ T1834] EXT4-fs (loop2): Could not load journal inode [ 607.217269][ T1858] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7066'. [ 607.371245][ T1865] lo speed is unknown, defaulting to 1000 [ 607.374398][ T1871] 9pnet_fd: Insufficient options for proto=fd [ 607.389003][ T1871] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 607.400047][ T1871] SELinux: failed to load policy [ 607.405084][ T1867] lo speed is unknown, defaulting to 1000 [ 607.422276][ T1871] netlink: 'syz.3.7072': attribute type 4 has an invalid length. [ 607.430088][ T1871] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7072'. [ 607.444181][ T1871] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 607.504013][ T1884] netlink: 300 bytes leftover after parsing attributes in process `syz.3.7075'. [ 607.573977][ T1886] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7075'. [ 607.676216][ T1890] lo speed is unknown, defaulting to 1000 [ 607.708782][ T1891] siw: device registration error -23 [ 607.808493][ T1897] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7079'. [ 607.866515][ T1901] loop2: detected capacity change from 0 to 512 [ 607.888440][ T1901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.903717][ T1901] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.058093][ T573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.149603][ T1916] lo speed is unknown, defaulting to 1000 [ 608.184718][ T1918] lo speed is unknown, defaulting to 1000 [ 608.374667][ T1929] siw: device registration error -23 [ 608.467212][ T1934] lo speed is unknown, defaulting to 1000 [ 609.016490][ T1955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.025300][ T1955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.034326][ T1955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.042840][ T1955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.183116][ T1962] siw: device registration error -23 [ 609.251830][ T1955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.260521][ T1955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.357628][ T1966] lo speed is unknown, defaulting to 1000 [ 609.518773][ T1962] loop2: detected capacity change from 0 to 1024 [ 609.565182][ T1962] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 609.576452][ T1962] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 609.696868][ T1975] siw: device registration error -23 [ 609.740339][ T1962] JBD2: no valid journal superblock found [ 609.748312][ T1962] EXT4-fs (loop2): Could not load journal inode [ 609.801124][ T1978] 9pnet_fd: Insufficient options for proto=fd [ 609.838259][ T1978] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 609.871502][ T1978] SELinux: failed to load policy [ 609.892048][ T1978] netlink: 'syz.1.7105': attribute type 4 has an invalid length. [ 609.899962][ T1978] __nla_validate_parse: 2 callbacks suppressed [ 609.900031][ T1978] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7105'. [ 609.943702][ T1982] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7106'. [ 609.988954][ T1980] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7106'. [ 610.001815][ T1978] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 610.166095][ T1985] lo speed is unknown, defaulting to 1000 [ 610.243114][ T1994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7109'. [ 610.430362][ T2000] loop2: detected capacity change from 0 to 512 [ 610.475667][ T2000] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.498624][ T2000] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.660931][ T2000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7112'. [ 610.669980][ T2000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7112'. [ 610.746041][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.778494][ T573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.785090][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.837292][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.890888][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.995535][ T2026] siw: device registration error -23 [ 611.075815][ T2027] loop2: detected capacity change from 0 to 512 [ 611.104530][ T2027] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 611.143435][ T2006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.156292][ T2027] EXT4-fs (loop2): orphan cleanup on readonly fs [ 611.171427][ T2027] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.7120: Block bitmap for bg 0 marked uninitialized [ 611.197880][ T2006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.207071][ T2027] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 611.237730][ T2027] EXT4-fs (loop2): 1 orphan inode deleted [ 611.251404][ T2027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 611.333898][ T2027] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 611.393374][ T2027] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 611.463566][ T2027] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.540642][ T2036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7122'. [ 611.677799][ T2039] lo speed is unknown, defaulting to 1000 [ 611.830462][ T2046] lo speed is unknown, defaulting to 1000 [ 611.974172][ T2054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7129'. [ 611.983217][ T2054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7129'. [ 612.101151][ T2052] lo speed is unknown, defaulting to 1000 [ 612.492989][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 612.493008][ T29] audit: type=1326 audit(2000000433.880:13382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.615973][ T29] audit: type=1326 audit(2000000433.880:13383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.639737][ T29] audit: type=1326 audit(2000000433.880:13384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.663393][ T29] audit: type=1326 audit(2000000433.940:13385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.687235][ T29] audit: type=1326 audit(2000000433.940:13386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.920088][ T29] audit: type=1326 audit(2000000434.040:13387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.943729][ T29] audit: type=1326 audit(2000000434.040:13388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.959620][ T2090] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7142'. [ 612.967466][ T29] audit: type=1326 audit(2000000434.040:13389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.967504][ T29] audit: type=1326 audit(2000000434.040:13390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 612.967538][ T29] audit: type=1326 audit(2000000434.040:13391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2076 comm="syz.3.7138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 613.857591][ T2128] siw: device registration error -23 [ 614.420056][ T2142] lo speed is unknown, defaulting to 1000 [ 614.532505][ T2147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2147 comm=syz.2.7165 [ 614.789768][ T2152] lo speed is unknown, defaulting to 1000 [ 615.227393][ T2158] __nla_validate_parse: 4 callbacks suppressed [ 615.227476][ T2158] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7167'. [ 615.346830][ T2166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7171'. [ 615.601765][ T2175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7175'. [ 615.610958][ T2175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7175'. [ 615.712295][ T2184] lo speed is unknown, defaulting to 1000 [ 615.741592][ T2180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7178'. [ 615.765060][ T2180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7178'. [ 615.830364][ T2195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2195 comm=syz.1.7183 [ 615.845879][ T2196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7181'. [ 616.076701][ T2200] lo speed is unknown, defaulting to 1000 [ 616.842017][ T2233] loop2: detected capacity change from 0 to 512 [ 616.865543][ T2233] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 616.905338][ T2233] EXT4-fs (loop2): orphan cleanup on readonly fs [ 616.952545][ T2233] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.7197: Block bitmap for bg 0 marked uninitialized [ 617.023422][ T2240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7196'. [ 617.032452][ T2240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7196'. [ 617.062620][ T2239] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7199'. [ 617.071809][ T2233] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 617.105729][ T2233] EXT4-fs (loop2): 1 orphan inode deleted [ 617.111850][ T2233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 617.158351][ T2233] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 617.201879][ T2233] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 617.244823][ T2233] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.281493][ T2247] lo speed is unknown, defaulting to 1000 [ 617.342096][ T2250] loop2: detected capacity change from 0 to 512 [ 617.406424][ T2250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.477777][ T2250] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.748618][ T2259] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2259 comm=syz.1.7204 [ 617.877171][ T573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.993110][ T2263] lo speed is unknown, defaulting to 1000 [ 618.701555][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 618.701617][ T29] audit: type=1326 audit(2000000440.090:13485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.744463][ T29] audit: type=1326 audit(2000000440.090:13486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.768610][ T29] audit: type=1326 audit(2000000440.160:13487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.792278][ T29] audit: type=1326 audit(2000000440.160:13488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.872090][ T29] audit: type=1326 audit(2000000440.240:13489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.895707][ T29] audit: type=1326 audit(2000000440.240:13490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.919319][ T29] audit: type=1326 audit(2000000440.240:13491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.942930][ T29] audit: type=1326 audit(2000000440.240:13492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.966393][ T29] audit: type=1326 audit(2000000440.240:13493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 618.989983][ T29] audit: type=1326 audit(2000000440.240:13494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2277 comm="syz.4.7212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 619.437076][ T2317] 9pnet_fd: Insufficient options for proto=fd [ 619.485975][ T2317] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 619.503931][ T2317] SELinux: failed to load policy [ 619.531126][ T2317] netlink: 'syz.3.7226': attribute type 4 has an invalid length. [ 619.553750][ T2317] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 619.767672][ T2335] lo speed is unknown, defaulting to 1000 [ 620.352459][ T2362] __nla_validate_parse: 17 callbacks suppressed [ 620.352477][ T2362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7242'. [ 620.443770][ T2364] 9pnet_fd: Insufficient options for proto=fd [ 620.455809][ T2364] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 620.481323][ T2369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7241'. [ 620.490381][ T2369] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7241'. [ 620.513695][ T2364] SELinux: failed to load policy [ 620.553591][ T2364] netlink: 'syz.1.7243': attribute type 4 has an invalid length. [ 620.561445][ T2364] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7243'. [ 620.633548][ T2364] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 620.801890][ T2379] siw: device registration error -23 [ 620.869507][ T2381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7247'. [ 621.566180][ T2397] loop2: detected capacity change from 0 to 512 [ 621.577005][ T2403] 9pnet_fd: Insufficient options for proto=fd [ 621.624214][ T2403] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 621.625142][ T2397] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 621.674087][ T2405] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2405 comm=syz.3.7258 [ 621.686730][ T2403] SELinux: failed to load policy [ 621.716683][ T2397] EXT4-fs (loop2): orphan cleanup on readonly fs [ 621.717147][ T2403] netlink: 'syz.1.7257': attribute type 4 has an invalid length. [ 621.730936][ T2403] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7257'. [ 621.764914][ T2397] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.7255: Block bitmap for bg 0 marked uninitialized [ 621.903367][ T2403] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 621.919445][ T2397] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 621.966257][ T2397] EXT4-fs (loop2): 1 orphan inode deleted [ 621.972446][ T2397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 622.001667][ T2414] lo speed is unknown, defaulting to 1000 [ 622.028340][ T2414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7258'. [ 622.117322][ T2397] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 622.155037][ T2419] siw: device registration error -23 [ 622.191175][ T2397] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 622.330762][ T2397] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.449013][ T2429] FAULT_INJECTION: forcing a failure. [ 622.449013][ T2429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.462241][ T2429] CPU: 1 UID: 0 PID: 2429 Comm: syz.2.7264 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 622.462341][ T2429] Tainted: [W]=WARN [ 622.462350][ T2429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 622.462367][ T2429] Call Trace: [ 622.462375][ T2429] [ 622.462384][ T2429] __dump_stack+0x1d/0x30 [ 622.462412][ T2429] dump_stack_lvl+0xe8/0x140 [ 622.462436][ T2429] dump_stack+0x15/0x1b [ 622.462464][ T2429] should_fail_ex+0x265/0x280 [ 622.462497][ T2429] should_fail+0xb/0x20 [ 622.462519][ T2429] should_fail_usercopy+0x1a/0x20 [ 622.462548][ T2429] strncpy_from_user+0x25/0x230 [ 622.462582][ T2429] ? __fget_files+0x184/0x1c0 [ 622.462667][ T2429] __se_sys_request_key+0x57/0x290 [ 622.462713][ T2429] ? fput+0x8f/0xc0 [ 622.462818][ T2429] __x64_sys_request_key+0x55/0x70 [ 622.462847][ T2429] x64_sys_call+0x1d98/0x2ff0 [ 622.462935][ T2429] do_syscall_64+0xd2/0x200 [ 622.462968][ T2429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 622.463001][ T2429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 622.463078][ T2429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.463106][ T2429] RIP: 0033:0x7f1c5d57ebe9 [ 622.463125][ T2429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.463222][ T2429] RSP: 002b:00007f1c5bfdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 622.463256][ T2429] RAX: ffffffffffffffda RBX: 00007f1c5d7a5fa0 RCX: 00007f1c5d57ebe9 [ 622.463272][ T2429] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000000 [ 622.463288][ T2429] RBP: 00007f1c5bfdf090 R08: 0000000000000000 R09: 0000000000000000 [ 622.463308][ T2429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.463323][ T2429] R13: 00007f1c5d7a6038 R14: 00007f1c5d7a5fa0 R15: 00007ffd9ce14bc8 [ 622.463423][ T2429] [ 622.735714][ T2427] lo speed is unknown, defaulting to 1000 [ 623.368168][ T2434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.433567][ T2434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.563300][ T2449] 9pnet_fd: Insufficient options for proto=fd [ 623.607133][ T2449] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 623.648114][ T2449] SELinux: failed to load policy [ 623.660148][ T2434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.705277][ T29] kauditd_printk_skb: 452 callbacks suppressed [ 623.705295][ T29] audit: type=1326 audit(2000000445.100:13947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 623.709383][ T2434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 623.711506][ T29] audit: type=1326 audit(2000000445.100:13948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 623.763971][ T2449] netlink: 'syz.1.7271': attribute type 4 has an invalid length. [ 623.766389][ T29] audit: type=1326 audit(2000000445.100:13949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 623.774152][ T2449] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7271'. [ 623.901039][ T2451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 623.966139][ T2451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.028208][ T2451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.049088][ T2449] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 624.092667][ T2451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.217063][ T2458] loop2: detected capacity change from 0 to 512 [ 624.325291][ T2458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.347122][ T2451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 624.356733][ T29] audit: type=1326 audit(2000000445.130:13950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 624.371840][ T2451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 624.380316][ T29] audit: type=1326 audit(2000000445.130:13951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 624.411515][ T29] audit: type=1326 audit(2000000445.130:13952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 624.435163][ T29] audit: type=1326 audit(2000000445.130:13953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 624.458699][ T29] audit: type=1326 audit(2000000445.130:13954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 624.482267][ T29] audit: type=1326 audit(2000000445.130:13955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 624.483415][ T2458] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.506332][ T29] audit: type=1326 audit(2000000445.130:13956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2448 comm="syz.1.7271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 624.785792][ T2460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7274'. [ 624.795216][ T2460] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7274'. [ 625.203826][ T573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.909301][ T2490] __nla_validate_parse: 4 callbacks suppressed [ 625.909321][ T2490] netlink: 300 bytes leftover after parsing attributes in process `syz.1.7284'. [ 626.029316][ T2490] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7284'. [ 626.121344][ T2495] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7286'. [ 626.227636][ T2500] lo speed is unknown, defaulting to 1000 [ 626.636631][ T2512] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7291'. [ 626.665210][ T2509] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7291'. [ 627.159882][ T2522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7295'. [ 627.188861][ T2526] lo speed is unknown, defaulting to 1000 [ 627.203782][ T2522] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7295'. [ 627.446333][ T2542] netlink: 300 bytes leftover after parsing attributes in process `syz.2.7303'. [ 627.554144][ T2544] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7303'. [ 627.575659][ T2546] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2546 comm=syz.3.7304 [ 627.610907][ T2548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7305'. [ 627.841005][ T2555] lo speed is unknown, defaulting to 1000 [ 628.549032][ T2570] 9pnet_fd: Insufficient options for proto=fd [ 628.571485][ T2568] lo speed is unknown, defaulting to 1000 [ 628.578751][ T2570] netlink: 'syz.3.7312': attribute type 4 has an invalid length. [ 628.586778][ T2570] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 628.718407][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 628.718502][ T29] audit: type=1326 audit(2000000450.110:14177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.2.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 628.772266][ T29] audit: type=1326 audit(2000000450.140:14178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.2.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 628.796136][ T29] audit: type=1326 audit(2000000450.140:14179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.2.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 628.819743][ T29] audit: type=1326 audit(2000000450.140:14180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.2.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 628.843357][ T29] audit: type=1326 audit(2000000450.140:14181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.2.7317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 628.887948][ T2588] loop2: detected capacity change from 0 to 512 [ 628.896202][ T29] audit: type=1326 audit(2000000450.280:14182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.1.7315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 628.919869][ T29] audit: type=1326 audit(2000000450.280:14183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.1.7315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 628.943384][ T29] audit: type=1326 audit(2000000450.280:14184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.1.7315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 628.967009][ T29] audit: type=1326 audit(2000000450.280:14185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.1.7315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 628.990767][ T29] audit: type=1326 audit(2000000450.280:14186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2578 comm="syz.1.7315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 629.025265][ T2588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.060455][ T2588] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.124136][ T2596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2596 comm=syz.4.7320 [ 629.376612][ T2599] lo speed is unknown, defaulting to 1000 [ 630.207184][ T573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.314635][ T2616] loop2: detected capacity change from 0 to 512 [ 630.330525][ T2618] 9pnet_fd: Insufficient options for proto=fd [ 630.362666][ T2618] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 630.485521][ T2621] netlink: 'syz.1.7327': attribute type 4 has an invalid length. [ 630.498368][ T2616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.520016][ T2618] SELinux: failed to load policy [ 630.528246][ T2621] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 630.549318][ T2616] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.821632][ T573] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.308599][ T2667] __nla_validate_parse: 18 callbacks suppressed [ 631.308619][ T2667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7343'. [ 631.536491][ T2678] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7349'. [ 631.830603][ T2693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7356'. [ 632.277743][ T2715] 9pnet_fd: Insufficient options for proto=fd [ 632.974442][ T2728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7368'. [ 633.140094][ T2734] lo speed is unknown, defaulting to 1000 [ 633.390626][ T2749] 9pnet_fd: Insufficient options for proto=fd [ 633.588347][ T2753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7377'. [ 633.625945][ T2753] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7377'. [ 633.940530][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 633.940560][ T29] audit: type=1326 audit(2000000455.330:14210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 633.959648][ T2780] 9pnet_fd: Insufficient options for proto=fd [ 633.987072][ T2775] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7387'. [ 634.001835][ T29] audit: type=1326 audit(2000000455.370:14211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 634.025568][ T29] audit: type=1326 audit(2000000455.370:14212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 634.049673][ T29] audit: type=1326 audit(2000000455.370:14213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 634.073357][ T29] audit: type=1326 audit(2000000455.370:14214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 634.096949][ T29] audit: type=1326 audit(2000000455.370:14215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 634.120549][ T29] audit: type=1326 audit(2000000455.370:14216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2773 comm="syz.0.7386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 634.165004][ T29] audit: type=1326 audit(2000000455.560:14217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2782 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 634.188635][ T29] audit: type=1326 audit(2000000455.560:14218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2782 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 634.238058][ T29] audit: type=1326 audit(2000000455.610:14219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2782 comm="syz.3.7389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 634.321885][ T2788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7390'. [ 634.338585][ T2788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7390'. [ 634.542909][ T2795] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7394'. [ 634.555076][ T2797] 9pnet_fd: Insufficient options for proto=fd [ 634.577486][ T2797] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 634.596265][ T2797] SELinux: failed to load policy [ 634.616958][ T2797] netlink: 'syz.2.7395': attribute type 4 has an invalid length. [ 634.641222][ T2797] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 635.001693][ T2821] lo speed is unknown, defaulting to 1000 [ 635.082955][ T2817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.134130][ T2817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.169921][ T2817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.205642][ T2817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.429432][ T2843] FAULT_INJECTION: forcing a failure. [ 635.429432][ T2843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.438346][ T2817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.442697][ T2843] CPU: 0 UID: 0 PID: 2843 Comm: syz.0.7411 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 635.442746][ T2843] Tainted: [W]=WARN [ 635.442754][ T2843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 635.442772][ T2843] Call Trace: [ 635.442783][ T2843] [ 635.442794][ T2843] __dump_stack+0x1d/0x30 [ 635.442861][ T2843] dump_stack_lvl+0xe8/0x140 [ 635.442889][ T2843] dump_stack+0x15/0x1b [ 635.442912][ T2843] should_fail_ex+0x265/0x280 [ 635.443002][ T2843] should_fail+0xb/0x20 [ 635.443026][ T2843] should_fail_usercopy+0x1a/0x20 [ 635.443057][ T2843] _copy_to_user+0x20/0xa0 [ 635.443099][ T2843] simple_read_from_buffer+0xb5/0x130 [ 635.443192][ T2843] proc_fail_nth_read+0x10e/0x150 [ 635.443232][ T2843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 635.443305][ T2843] vfs_read+0x1a8/0x770 [ 635.443335][ T2843] ? __rcu_read_unlock+0x4f/0x70 [ 635.443365][ T2843] ? __fget_files+0x184/0x1c0 [ 635.443448][ T2843] ksys_read+0xda/0x1a0 [ 635.443479][ T2843] __x64_sys_read+0x40/0x50 [ 635.443511][ T2843] x64_sys_call+0x27bc/0x2ff0 [ 635.443542][ T2843] do_syscall_64+0xd2/0x200 [ 635.443572][ T2843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 635.443600][ T2843] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 635.443674][ T2843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.443704][ T2843] RIP: 0033:0x7f2fcc8ed5fc [ 635.443727][ T2843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 635.443752][ T2843] RSP: 002b:00007f2fcb357030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 635.443824][ T2843] RAX: ffffffffffffffda RBX: 00007f2fccb15fa0 RCX: 00007f2fcc8ed5fc [ 635.443842][ T2843] RDX: 000000000000000f RSI: 00007f2fcb3570a0 RDI: 0000000000000004 [ 635.443860][ T2843] RBP: 00007f2fcb357090 R08: 0000000000000000 R09: 0000000000000000 [ 635.443877][ T2843] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 635.443895][ T2843] R13: 00007f2fccb16038 R14: 00007f2fccb15fa0 R15: 00007ffc7cddbb88 [ 635.443922][ T2843] [ 635.580575][ T2847] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 635.586416][ T2817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.607913][ T2847] SELinux: failed to load policy [ 635.696566][ T2846] netlink: 'syz.0.7412': attribute type 4 has an invalid length. [ 635.714030][ T2846] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 636.170059][ T2862] FAULT_INJECTION: forcing a failure. [ 636.170059][ T2862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.183226][ T2862] CPU: 0 UID: 0 PID: 2862 Comm: syz.1.7416 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 636.183319][ T2862] Tainted: [W]=WARN [ 636.183328][ T2862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 636.183345][ T2862] Call Trace: [ 636.183352][ T2862] [ 636.183437][ T2862] __dump_stack+0x1d/0x30 [ 636.183464][ T2862] dump_stack_lvl+0xe8/0x140 [ 636.183484][ T2862] dump_stack+0x15/0x1b [ 636.183548][ T2862] should_fail_ex+0x265/0x280 [ 636.183568][ T2862] should_fail+0xb/0x20 [ 636.183627][ T2862] should_fail_usercopy+0x1a/0x20 [ 636.183674][ T2862] _copy_to_user+0x20/0xa0 [ 636.183706][ T2862] simple_read_from_buffer+0xb5/0x130 [ 636.183728][ T2862] proc_fail_nth_read+0x10e/0x150 [ 636.183803][ T2862] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 636.183871][ T2862] vfs_read+0x1a8/0x770 [ 636.183894][ T2862] ? __rcu_read_unlock+0x4f/0x70 [ 636.183921][ T2862] ? __fget_files+0x184/0x1c0 [ 636.183965][ T2862] ksys_read+0xda/0x1a0 [ 636.184048][ T2862] __x64_sys_read+0x40/0x50 [ 636.184077][ T2862] x64_sys_call+0x27bc/0x2ff0 [ 636.184116][ T2862] do_syscall_64+0xd2/0x200 [ 636.184148][ T2862] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 636.184196][ T2862] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 636.184267][ T2862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.184293][ T2862] RIP: 0033:0x7fce3532d5fc [ 636.184307][ T2862] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 636.184401][ T2862] RSP: 002b:00007fce33d6e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 636.184425][ T2862] RAX: ffffffffffffffda RBX: 00007fce35556090 RCX: 00007fce3532d5fc [ 636.184438][ T2862] RDX: 000000000000000f RSI: 00007fce33d6e0a0 RDI: 0000000000000014 [ 636.184485][ T2862] RBP: 00007fce33d6e090 R08: 0000000000000000 R09: 0000000000000000 [ 636.184497][ T2862] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 636.184533][ T2862] R13: 00007fce35556128 R14: 00007fce35556090 R15: 00007ffc8adec6d8 [ 636.184559][ T2862] [ 636.422476][ T2868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=2868 comm=syz.2.7421 [ 636.601143][ T2871] __nla_validate_parse: 7 callbacks suppressed [ 636.601164][ T2871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7422'. [ 636.676647][ T2873] lo speed is unknown, defaulting to 1000 [ 636.727621][ T2873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7421'. [ 637.284267][ T2888] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7428'. [ 637.316158][ T2889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7420'. [ 637.697508][ T2907] FAULT_INJECTION: forcing a failure. [ 637.697508][ T2907] name failslab, interval 1, probability 0, space 0, times 0 [ 637.710552][ T2907] CPU: 0 UID: 0 PID: 2907 Comm: syz.2.7429 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 637.710596][ T2907] Tainted: [W]=WARN [ 637.710611][ T2907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 637.710623][ T2907] Call Trace: [ 637.710630][ T2907] [ 637.710638][ T2907] __dump_stack+0x1d/0x30 [ 637.710663][ T2907] dump_stack_lvl+0xe8/0x140 [ 637.710718][ T2907] dump_stack+0x15/0x1b [ 637.710739][ T2907] should_fail_ex+0x265/0x280 [ 637.710811][ T2907] should_failslab+0x8c/0xb0 [ 637.710846][ T2907] kmem_cache_alloc_noprof+0x50/0x310 [ 637.710883][ T2907] ? security_inode_alloc+0x37/0x100 [ 637.710991][ T2907] security_inode_alloc+0x37/0x100 [ 637.711095][ T2907] inode_init_always_gfp+0x4b7/0x500 [ 637.711124][ T2907] ? __pfx_sock_alloc_inode+0x10/0x10 [ 637.711152][ T2907] alloc_inode+0x58/0x170 [ 637.711207][ T2907] __sock_create+0x122/0x5b0 [ 637.711242][ T2907] ? fput+0x8f/0xc0 [ 637.711272][ T2907] __sys_socket+0xb0/0x180 [ 637.711324][ T2907] __x64_sys_socket+0x3f/0x50 [ 637.711416][ T2907] x64_sys_call+0x1147/0x2ff0 [ 637.711437][ T2907] do_syscall_64+0xd2/0x200 [ 637.711512][ T2907] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 637.711540][ T2907] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 637.711572][ T2907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.711600][ T2907] RIP: 0033:0x7f1c5d57ebe9 [ 637.711619][ T2907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.711671][ T2907] RSP: 002b:00007f1c5bf9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 637.711690][ T2907] RAX: ffffffffffffffda RBX: 00007f1c5d7a6180 RCX: 00007f1c5d57ebe9 [ 637.711702][ T2907] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000002c [ 637.711717][ T2907] RBP: 00007f1c5bf9d090 R08: 0000000000000000 R09: 0000000000000000 [ 637.711733][ T2907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 637.711749][ T2907] R13: 00007f1c5d7a6218 R14: 00007f1c5d7a6180 R15: 00007ffd9ce14bc8 [ 637.711783][ T2907] [ 637.711854][ T2907] socket: no more sockets [ 637.903781][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7434'. [ 638.145183][ T2911] lo speed is unknown, defaulting to 1000 [ 638.452340][ T2932] siw: device registration error -23 [ 638.614935][ T2935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7445'. [ 638.871897][ T2947] lo speed is unknown, defaulting to 1000 [ 639.630967][ T2966] loop2: detected capacity change from 0 to 512 [ 639.662937][ T2966] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 639.696879][ T2966] EXT4-fs (loop2): orphan cleanup on readonly fs [ 639.720372][ T2966] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.7454: Block bitmap for bg 0 marked uninitialized [ 639.765677][ T2966] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 639.808855][ T2976] siw: device registration error -23 [ 639.822318][ T2966] EXT4-fs (loop2): 1 orphan inode deleted [ 639.852603][ T2966] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 639.867305][ T2966] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 639.885889][ T2966] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 639.931740][ T2966] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.050842][ T2999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7457'. [ 640.081139][ T2996] lo speed is unknown, defaulting to 1000 [ 640.391146][ T3010] lo speed is unknown, defaulting to 1000 [ 640.565623][ T3019] loop2: detected capacity change from 0 to 256 [ 640.921157][ T3028] siw: device registration error -23 [ 641.399856][ T3044] 9pnet_fd: Insufficient options for proto=fd [ 641.424520][ T3040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7471'. [ 641.454998][ T3044] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 641.502684][ T3040] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7471'. [ 641.522081][ T3044] SELinux: failed to load policy [ 641.531954][ T3049] netlink: 'syz.0.7473': attribute type 4 has an invalid length. [ 641.539893][ T3049] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7473'. [ 641.550518][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 641.550588][ T29] audit: type=1326 audit(2000000462.920:14580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.580370][ T29] audit: type=1326 audit(2000000462.920:14581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.603963][ T29] audit: type=1326 audit(2000000462.920:14582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.627526][ T29] audit: type=1326 audit(2000000462.920:14583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.651260][ T29] audit: type=1326 audit(2000000462.920:14584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.674858][ T29] audit: type=1326 audit(2000000462.920:14585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.698346][ T29] audit: type=1326 audit(2000000462.920:14586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.722127][ T29] audit: type=1326 audit(2000000462.920:14587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.745653][ T29] audit: type=1326 audit(2000000462.920:14588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.769091][ T29] audit: type=1326 audit(2000000462.920:14589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3043 comm="syz.0.7473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2fcc8eebe9 code=0x7ffc0000 [ 641.845010][ T3049] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 641.994543][ T3053] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7476'. [ 642.130592][ T3062] lo speed is unknown, defaulting to 1000 [ 642.456343][ T3087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=3087 comm=syz.0.7489 [ 642.470187][ T3078] lo speed is unknown, defaulting to 1000 [ 642.627026][ T3085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.647825][ T3085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.730388][ T3085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.763570][ T3099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7489'. [ 642.841873][ T3098] lo speed is unknown, defaulting to 1000 [ 642.884341][ T3099] vlan2: entered allmulticast mode [ 642.998417][ T3085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.228869][ T3102] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7492'. [ 643.411478][ T3085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.453480][ T3085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.595582][ T3114] lo speed is unknown, defaulting to 1000 [ 643.869160][ T3135] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7502'. [ 643.900371][ T3128] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7502'. [ 643.986877][ T3143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7504'. [ 643.995928][ T3143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7504'. [ 644.292471][ T3154] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7508'. [ 644.727431][ T3170] lo speed is unknown, defaulting to 1000 [ 644.765836][ T3171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7515'. [ 644.812917][ T3171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7515'. [ 645.315504][ T3202] lo speed is unknown, defaulting to 1000 [ 646.366789][ T3240] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=98 sclass=netlink_route_socket pid=3240 comm=syz.0.7541 [ 646.385949][ T3238] lo speed is unknown, defaulting to 1000 [ 646.611809][ T3250] lo speed is unknown, defaulting to 1000 [ 647.376204][ T3267] FAULT_INJECTION: forcing a failure. [ 647.376204][ T3267] name failslab, interval 1, probability 0, space 0, times 0 [ 647.389192][ T3267] CPU: 1 UID: 0 PID: 3267 Comm: syz.3.7547 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 647.389260][ T3267] Tainted: [W]=WARN [ 647.389267][ T3267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.389284][ T3267] Call Trace: [ 647.389293][ T3267] [ 647.389303][ T3267] __dump_stack+0x1d/0x30 [ 647.389327][ T3267] dump_stack_lvl+0xe8/0x140 [ 647.389394][ T3267] dump_stack+0x15/0x1b [ 647.389456][ T3267] should_fail_ex+0x265/0x280 [ 647.389481][ T3267] should_failslab+0x8c/0xb0 [ 647.389543][ T3267] __kmalloc_cache_node_noprof+0x54/0x320 [ 647.389584][ T3267] ? __get_vm_area_node+0x106/0x1d0 [ 647.389625][ T3267] __get_vm_area_node+0x106/0x1d0 [ 647.389724][ T3267] __vmalloc_node_range_noprof+0x273/0xe00 [ 647.389768][ T3267] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 647.389807][ T3267] ? avc_has_perm_noaudit+0x1b1/0x200 [ 647.389843][ T3267] ? cred_has_capability+0x210/0x280 [ 647.389968][ T3267] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 647.390002][ T3267] __vmalloc_noprof+0x83/0xc0 [ 647.390042][ T3267] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 647.390069][ T3267] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 647.390180][ T3267] ? bpf_prog_alloc+0x2a/0x150 [ 647.390219][ T3267] bpf_prog_alloc+0x3c/0x150 [ 647.390246][ T3267] bpf_prog_load+0x514/0x1070 [ 647.390293][ T3267] ? security_bpf+0x2b/0x90 [ 647.390345][ T3267] __sys_bpf+0x462/0x7b0 [ 647.390381][ T3267] __x64_sys_bpf+0x41/0x50 [ 647.390407][ T3267] x64_sys_call+0x2aea/0x2ff0 [ 647.390436][ T3267] do_syscall_64+0xd2/0x200 [ 647.390504][ T3267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 647.390535][ T3267] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 647.390614][ T3267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.390786][ T3267] RIP: 0033:0x7f95b48debe9 [ 647.390802][ T3267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.390901][ T3267] RSP: 002b:00007f95b3305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.390939][ T3267] RAX: ffffffffffffffda RBX: 00007f95b4b06180 RCX: 00007f95b48debe9 [ 647.390955][ T3267] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 647.390967][ T3267] RBP: 00007f95b3305090 R08: 0000000000000000 R09: 0000000000000000 [ 647.390978][ T3267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.390993][ T3267] R13: 00007f95b4b06218 R14: 00007f95b4b06180 R15: 00007ffc8fdeb398 [ 647.391018][ T3267] [ 647.391028][ T3267] syz.3.7547: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 647.652877][ T3267] CPU: 1 UID: 0 PID: 3267 Comm: syz.3.7547 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 647.652959][ T3267] Tainted: [W]=WARN [ 647.652992][ T3267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.653005][ T3267] Call Trace: [ 647.653013][ T3267] [ 647.653024][ T3267] __dump_stack+0x1d/0x30 [ 647.653049][ T3267] dump_stack_lvl+0xe8/0x140 [ 647.653070][ T3267] dump_stack+0x15/0x1b [ 647.653086][ T3267] warn_alloc+0x12b/0x1a0 [ 647.653181][ T3267] __vmalloc_node_range_noprof+0x297/0xe00 [ 647.653263][ T3267] ? avc_has_perm_noaudit+0x1b1/0x200 [ 647.653297][ T3267] ? cred_has_capability+0x210/0x280 [ 647.653339][ T3267] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 647.653374][ T3267] __vmalloc_noprof+0x83/0xc0 [ 647.653413][ T3267] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 647.653443][ T3267] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 647.653524][ T3267] ? bpf_prog_alloc+0x2a/0x150 [ 647.653693][ T3267] bpf_prog_alloc+0x3c/0x150 [ 647.653752][ T3267] bpf_prog_load+0x514/0x1070 [ 647.653814][ T3267] ? security_bpf+0x2b/0x90 [ 647.653877][ T3267] __sys_bpf+0x462/0x7b0 [ 647.653986][ T3267] __x64_sys_bpf+0x41/0x50 [ 647.654086][ T3267] x64_sys_call+0x2aea/0x2ff0 [ 647.654114][ T3267] do_syscall_64+0xd2/0x200 [ 647.654141][ T3267] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 647.654202][ T3267] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 647.654229][ T3267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.654254][ T3267] RIP: 0033:0x7f95b48debe9 [ 647.654270][ T3267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.654325][ T3267] RSP: 002b:00007f95b3305038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 647.654349][ T3267] RAX: ffffffffffffffda RBX: 00007f95b4b06180 RCX: 00007f95b48debe9 [ 647.654366][ T3267] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 647.654382][ T3267] RBP: 00007f95b3305090 R08: 0000000000000000 R09: 0000000000000000 [ 647.654398][ T3267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.654414][ T3267] R13: 00007f95b4b06218 R14: 00007f95b4b06180 R15: 00007ffc8fdeb398 [ 647.654487][ T3267] [ 647.873708][ T3267] Mem-Info: [ 647.876897][ T3267] active_anon:15104 inactive_anon:30 isolated_anon:0 [ 647.876897][ T3267] active_file:27834 inactive_file:2842 isolated_file:0 [ 647.876897][ T3267] unevictable:0 dirty:287 writeback:0 [ 647.876897][ T3267] slab_reclaimable:3544 slab_unreclaimable:16609 [ 647.876897][ T3267] mapped:36443 shmem:6841 pagetables:1338 [ 647.876897][ T3267] sec_pagetables:0 bounce:0 [ 647.876897][ T3267] kernel_misc_reclaimable:0 [ 647.876897][ T3267] free:1857024 free_pcp:17532 free_cma:0 [ 647.922149][ T3267] Node 0 active_anon:51716kB inactive_anon:120kB active_file:111336kB inactive_file:11368kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132316kB dirty:1148kB writeback:0kB shmem:23536kB kernel_stack:4912kB pagetables:5352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 647.949965][ T3267] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 647.978584][ T3267] lowmem_reserve[]: 0 2883 7862 7862 [ 647.984050][ T3267] Node 0 DMA32 free:2949316kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952848kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 648.014178][ T3267] lowmem_reserve[]: 0 0 4978 4978 [ 648.019277][ T3267] Node 0 Normal free:4480588kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44060kB inactive_anon:120kB active_file:111336kB inactive_file:11368kB unevictable:0kB writepending:1148kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:65884kB local_pcp:10936kB free_cma:0kB [ 648.051645][ T3267] lowmem_reserve[]: 0 0 0 0 [ 648.056253][ T3267] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 648.060321][ T3268] siw: device registration error -23 [ 648.069084][ T3267] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 3*16kB (M) 3*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949316kB [ 648.090478][ T3267] Node 0 Normal: 1873*4kB (UME) 1588*8kB (UME) 1940*16kB (UM) 1594*32kB (UME) 733*64kB (UM) 649*128kB (UME) 329*256kB (UME) 118*512kB (UM) 59*1024kB (UME) 22*2048kB (UME) 976*4096kB (UM) = 4480036kB [ 648.110404][ T3267] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 648.119879][ T3267] 34571 total pagecache pages [ 648.124788][ T3267] 64 pages in swap cache [ 648.129048][ T3267] Free swap = 124740kB [ 648.133223][ T3267] Total swap = 124996kB [ 648.137444][ T3267] 2097051 pages RAM [ 648.141261][ T3267] 0 pages HighMem/MovableOnly [ 648.145995][ T3267] 80439 pages reserved [ 648.255683][ T3272] __nla_validate_parse: 6 callbacks suppressed [ 648.255702][ T3272] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7550'. [ 648.286907][ T3272] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7550'. [ 648.304338][ T3274] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7551'. [ 648.400720][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 648.400736][ T29] audit: type=1326 audit(2000000469.790:14871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.437181][ T29] audit: type=1326 audit(2000000469.820:14872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.461009][ T29] audit: type=1326 audit(2000000469.820:14873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.485029][ T29] audit: type=1326 audit(2000000469.820:14874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.508703][ T29] audit: type=1326 audit(2000000469.820:14875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.532406][ T29] audit: type=1326 audit(2000000469.820:14876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.556023][ T29] audit: type=1326 audit(2000000469.820:14877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.579654][ T29] audit: type=1326 audit(2000000469.820:14878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.603258][ T29] audit: type=1326 audit(2000000469.820:14879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.626824][ T29] audit: type=1326 audit(2000000469.820:14880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3296 comm="syz.3.7558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95b48debe9 code=0x7ffc0000 [ 648.649410][ T3301] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7559'. [ 648.789903][ T3305] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7560'. [ 648.827327][ T3305] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7560'. [ 648.844229][ T3313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7562'. [ 648.853344][ T3313] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7562'. [ 648.993885][ T3321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7565'. [ 649.034327][ T3325] FAULT_INJECTION: forcing a failure. [ 649.034327][ T3325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.035580][ T3321] vlan3: entered promiscuous mode [ 649.047690][ T3325] CPU: 1 UID: 0 PID: 3325 Comm: syz.4.7568 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 649.047739][ T3325] Tainted: [W]=WARN [ 649.047749][ T3325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 649.047838][ T3325] Call Trace: [ 649.047848][ T3325] [ 649.047861][ T3325] __dump_stack+0x1d/0x30 [ 649.047891][ T3325] dump_stack_lvl+0xe8/0x140 [ 649.047918][ T3325] dump_stack+0x15/0x1b [ 649.048003][ T3325] should_fail_ex+0x265/0x280 [ 649.048033][ T3325] should_fail+0xb/0x20 [ 649.048058][ T3325] should_fail_usercopy+0x1a/0x20 [ 649.048089][ T3325] _copy_from_user+0x1c/0xb0 [ 649.048209][ T3325] ___sys_sendmsg+0xc1/0x1d0 [ 649.048260][ T3325] __x64_sys_sendmsg+0xd4/0x160 [ 649.048343][ T3325] x64_sys_call+0x191e/0x2ff0 [ 649.048419][ T3325] do_syscall_64+0xd2/0x200 [ 649.048485][ T3325] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 649.048560][ T3325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.048592][ T3325] RIP: 0033:0x7f479298ebe9 [ 649.048613][ T3325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.048638][ T3325] RSP: 002b:00007f47913ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.048665][ T3325] RAX: ffffffffffffffda RBX: 00007f4792bb5fa0 RCX: 00007f479298ebe9 [ 649.048684][ T3325] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000011 [ 649.048770][ T3325] RBP: 00007f47913ef090 R08: 0000000000000000 R09: 0000000000000000 [ 649.048788][ T3325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.048805][ T3325] R13: 00007f4792bb6038 R14: 00007f4792bb5fa0 R15: 00007ffc0ade31c8 [ 649.048833][ T3325] [ 649.225180][ T3321] team0: entered promiscuous mode [ 649.230226][ T3321] team_slave_0: entered promiscuous mode [ 649.236142][ T3321] team_slave_1: entered promiscuous mode [ 649.343829][ T3332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7570'. [ 649.696829][ T3359] lo speed is unknown, defaulting to 1000 [ 649.847755][ T3370] lo speed is unknown, defaulting to 1000 [ 650.422727][ T3414] FAULT_INJECTION: forcing a failure. [ 650.422727][ T3414] name failslab, interval 1, probability 0, space 0, times 0 [ 650.435522][ T3414] CPU: 1 UID: 0 PID: 3414 Comm: syz.3.7599 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 650.435568][ T3414] Tainted: [W]=WARN [ 650.435577][ T3414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 650.435592][ T3414] Call Trace: [ 650.435599][ T3414] [ 650.435608][ T3414] __dump_stack+0x1d/0x30 [ 650.435634][ T3414] dump_stack_lvl+0xe8/0x140 [ 650.435656][ T3414] dump_stack+0x15/0x1b [ 650.435675][ T3414] should_fail_ex+0x265/0x280 [ 650.435697][ T3414] ? __pfx_cgroup_show_path+0x10/0x10 [ 650.435745][ T3414] ? cgroup_show_path+0x6a/0x2b0 [ 650.435774][ T3414] should_failslab+0x8c/0xb0 [ 650.435801][ T3414] __kmalloc_cache_noprof+0x4c/0x320 [ 650.435834][ T3414] ? __pfx_cgroup_show_path+0x10/0x10 [ 650.435934][ T3414] cgroup_show_path+0x6a/0x2b0 [ 650.436023][ T3414] ? kernfs_sop_show_path+0xa4/0xf0 [ 650.436046][ T3414] ? __pfx_cgroup_show_path+0x10/0x10 [ 650.436102][ T3414] kernfs_sop_show_path+0xb6/0xf0 [ 650.436126][ T3414] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 650.436148][ T3414] show_path+0x5a/0x80 [ 650.436174][ T3414] show_mountinfo+0xd8/0x600 [ 650.436232][ T3414] m_show+0x3e/0x50 [ 650.436265][ T3414] traverse+0x141/0x3a0 [ 650.436299][ T3414] seq_lseek+0xb5/0x170 [ 650.436389][ T3414] __x64_sys_lseek+0xe5/0x160 [ 650.436412][ T3414] x64_sys_call+0x2814/0x2ff0 [ 650.436436][ T3414] do_syscall_64+0xd2/0x200 [ 650.436464][ T3414] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 650.436557][ T3414] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 650.436583][ T3414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.436610][ T3414] RIP: 0033:0x7f95b48debe9 [ 650.436627][ T3414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.436648][ T3414] RSP: 002b:00007f95b3347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 650.436702][ T3414] RAX: ffffffffffffffda RBX: 00007f95b4b05fa0 RCX: 00007f95b48debe9 [ 650.436716][ T3414] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 000000000000000a [ 650.436729][ T3414] RBP: 00007f95b3347090 R08: 0000000000000000 R09: 0000000000000000 [ 650.436742][ T3414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.436756][ T3414] R13: 00007f95b4b06038 R14: 00007f95b4b05fa0 R15: 00007ffc8fdeb398 [ 650.436776][ T3414] [ 650.742817][ T3419] lo speed is unknown, defaulting to 1000 [ 651.412892][ T3458] netem: incorrect gi model size [ 651.418001][ T3458] netem: change failed [ 651.462583][ T3460] lo speed is unknown, defaulting to 1000 [ 651.781107][ T3475] lo speed is unknown, defaulting to 1000 [ 653.065173][ T3512] lo speed is unknown, defaulting to 1000 [ 653.144775][ T3515] 9pnet_fd: Insufficient options for proto=fd [ 653.154123][ T3515] netlink: 'syz.3.7635': attribute type 4 has an invalid length. [ 653.161891][ T3515] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 653.427437][ T3532] __nla_validate_parse: 17 callbacks suppressed [ 653.427457][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7641'. [ 653.480559][ T3530] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7640'. [ 653.493213][ T3539] lo speed is unknown, defaulting to 1000 [ 653.500079][ T3543] 9pnet_fd: Insufficient options for proto=fd [ 653.514399][ T3543] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 653.533981][ T3543] SELinux: failed to load policy [ 653.540616][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 653.540632][ T29] audit: type=1326 audit(2000000474.930:15159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.541972][ T3543] netlink: 'syz.4.7646': attribute type 4 has an invalid length. [ 653.560773][ T29] audit: type=1326 audit(2000000474.930:15160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.570501][ T3543] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7646'. [ 653.597653][ T3543] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 653.601772][ T29] audit: type=1326 audit(2000000474.930:15161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.650375][ T29] audit: type=1326 audit(2000000474.930:15162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.674023][ T29] audit: type=1326 audit(2000000474.930:15163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.697594][ T29] audit: type=1326 audit(2000000474.930:15164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.721109][ T29] audit: type=1326 audit(2000000474.930:15165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.745049][ T29] audit: type=1326 audit(2000000474.930:15166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.768472][ T29] audit: type=1326 audit(2000000474.930:15167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.770401][ T3553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7645'. [ 653.792098][ T29] audit: type=1326 audit(2000000474.930:15168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3542 comm="syz.4.7646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 653.801117][ T3553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7645'. [ 654.048899][ T3576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7656'. [ 654.068731][ T3577] lo speed is unknown, defaulting to 1000 [ 654.142473][ T3582] 9pnet_fd: Insufficient options for proto=fd [ 654.150993][ T3582] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 654.161082][ T3582] SELinux: failed to load policy [ 654.168976][ T3582] netlink: 'syz.2.7659': attribute type 4 has an invalid length. [ 654.176789][ T3582] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7659'. [ 654.186259][ T3582] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 654.676129][ T3612] 9pnet_fd: Insufficient options for proto=fd [ 654.700428][ T3613] lo speed is unknown, defaulting to 1000 [ 654.750099][ T3613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7665'. [ 654.767320][ T3612] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 654.778664][ T3612] SELinux: failed to load policy [ 654.794954][ T3612] netlink: 'syz.2.7671': attribute type 4 has an invalid length. [ 654.802812][ T3612] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7671'. [ 654.911808][ T3612] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 655.021943][ T3622] netem: incorrect gi model size [ 655.027010][ T3622] netem: change failed [ 655.130951][ T3625] lo speed is unknown, defaulting to 1000 [ 655.601928][ T3638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.610612][ T3638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.620496][ T3638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.629048][ T3638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.510098][ T3661] 9pnet_fd: Insufficient options for proto=fd [ 656.542636][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.549973][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.587558][ T3661] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 656.608062][ T3661] SELinux: failed to load policy [ 656.631312][ T3661] netlink: 'syz.0.7688': attribute type 4 has an invalid length. [ 656.639368][ T3661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7688'. [ 656.691535][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.705953][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.767662][ T3664] netem: incorrect gi model size [ 656.772732][ T3664] netem: change failed [ 656.780029][ T3661] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 656.796225][T26437] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.808422][T26437] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.886985][T26437] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.118070][T26437] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.614721][ T3684] lo speed is unknown, defaulting to 1000 [ 658.260866][ T3708] lo speed is unknown, defaulting to 1000 [ 658.386655][ T3714] lo speed is unknown, defaulting to 1000 [ 658.559789][ T3730] lo speed is unknown, defaulting to 1000 [ 658.962380][ T3742] __nla_validate_parse: 2 callbacks suppressed [ 658.962406][ T3742] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7716'. [ 658.990640][ T3742] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7716'. [ 659.097980][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 659.097998][ T29] audit: type=1326 audit(2000000480.490:15348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.128001][ T29] audit: type=1326 audit(2000000480.490:15349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.151588][ T29] audit: type=1326 audit(2000000480.490:15350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.175283][ T29] audit: type=1326 audit(2000000480.490:15351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.199050][ T29] audit: type=1326 audit(2000000480.490:15352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.229124][ T29] audit: type=1326 audit(2000000480.490:15353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.252911][ T29] audit: type=1326 audit(2000000480.490:15354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.276469][ T29] audit: type=1326 audit(2000000480.490:15355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.300062][ T29] audit: type=1326 audit(2000000480.490:15356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.323598][ T29] audit: type=1326 audit(2000000480.490:15357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.2.7720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5d57ebe9 code=0x7ffc0000 [ 659.407664][ T3751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7722'. [ 659.551971][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.561068][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.570191][ T3748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.579267][ T3748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.952515][ T3791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7737'. [ 660.005871][ T3788] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7737'. [ 660.270941][ T3799] netem: incorrect gi model size [ 660.276029][ T3799] netem: change failed [ 660.804347][ T3830] infiniband syz!: set active [ 660.809132][ T3830] infiniband syz!: added team_slave_0 [ 660.840457][ T3830] RDS/IB: syz!: added [ 660.855265][ T3830] smc: adding ib device syz! with port count 1 [ 660.861477][ T3830] smc: ib device syz! port 1 has pnetid [ 660.973288][ T3841] netem: incorrect gi model size [ 660.978380][ T3843] 9pnet_fd: Insufficient options for proto=fd [ 660.978447][ T3841] netem: change failed [ 660.988431][ T3843] SELinux: policydb magic number 0x118 does not match expected magic number 0xf97cff8c [ 660.999112][ T3843] SELinux: failed to load policy [ 661.009023][ T3843] netlink: 'syz.4.7761': attribute type 4 has an invalid length. [ 661.016902][ T3843] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7761'. [ 661.028723][ T3843] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 661.182739][ T3850] 9pnet_fd: Insufficient options for proto=fd [ 661.255155][ T3851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7763'. [ 661.266124][ T3851] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7763'. [ 662.212927][ T3875] 9pnet_fd: Insufficient options for proto=fd [ 662.318694][ T3880] lo speed is unknown, defaulting to 1000 [ 662.392956][ T3894] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7783'. [ 662.610902][ T3909] 9pnet_fd: Insufficient options for proto=fd [ 662.680894][ T3913] netem: incorrect gi model size [ 662.685958][ T3913] netem: change failed [ 663.022711][ T3927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7796'. [ 663.080831][ T3935] 9pnet_fd: Insufficient options for proto=fd [ 663.088864][ T3935] SELinux: policydb string SE Li does not match my string SE Linux [ 663.098544][ T3935] SELinux: failed to load policy [ 663.105936][ T3935] netlink: 'syz.3.7800': attribute type 4 has an invalid length. [ 663.114136][ T3935] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 663.275258][ T3946] lo speed is unknown, defaulting to 1000 [ 663.497012][ T3971] 9pnet_fd: Insufficient options for proto=fd [ 663.504465][ T3971] SELinux: policydb string SE Li does not match my string SE Linux [ 663.512721][ T3971] SELinux: failed to load policy [ 663.522553][ T3971] netlink: 'syz.4.7814': attribute type 4 has an invalid length. [ 663.530624][ T3971] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 663.716832][ T3979] lo speed is unknown, defaulting to 1000 [ 664.063656][ T3979] __nla_validate_parse: 5 callbacks suppressed [ 664.063673][ T3979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7813'. [ 664.563233][ T3974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7816'. [ 664.565167][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 664.565221][ T29] audit: type=1326 audit(2000000485.950:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.602325][ T29] audit: type=1326 audit(2000000485.950:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.625889][ T29] audit: type=1326 audit(2000000485.950:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.649929][ T29] audit: type=1326 audit(2000000485.950:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.673408][ T29] audit: type=1326 audit(2000000485.950:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.697200][ T29] audit: type=1326 audit(2000000485.950:16151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.720816][ T29] audit: type=1326 audit(2000000485.950:16152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.744403][ T29] audit: type=1326 audit(2000000485.950:16153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.767977][ T29] audit: type=1326 audit(2000000485.950:16154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 664.791532][ T29] audit: type=1326 audit(2000000485.950:16155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.4.7816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 665.216163][ T3990] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7821'. [ 665.336633][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7823'. [ 665.425071][ T3998] $H: renamed from bond0 [ 665.431327][ T3998] $H: entered promiscuous mode [ 665.436505][ T3998] bond_slave_0: entered promiscuous mode [ 665.441006][ T4003] 9pnet_fd: Insufficient options for proto=fd [ 665.442352][ T3998] bond_slave_1: entered promiscuous mode [ 665.466307][ T4005] lo speed is unknown, defaulting to 1000 [ 665.471295][ T4003] SELinux: policydb string SE Li does not match my string SE Linux [ 665.511301][ T4003] SELinux: failed to load policy [ 665.531850][ T4003] netlink: 'syz.1.7826': attribute type 4 has an invalid length. [ 665.539736][ T4003] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7826'. [ 665.569236][ T4003] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 665.961783][ T4042] loop2: detected capacity change from 0 to 256 [ 666.522720][ T4049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7841'. [ 666.533937][ T4049] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7841'. [ 666.625911][ T4059] 9pnet_fd: Insufficient options for proto=fd [ 666.653407][ T4059] SELinux: policydb string SE Linu does not match my string SE Linux [ 666.661692][ T4059] SELinux: failed to load policy [ 666.679399][ T4059] netlink: 'syz.2.7846': attribute type 4 has an invalid length. [ 666.687505][ T4059] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7846'. [ 666.700301][ T4059] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 666.849418][ T4077] siw: device registration error -23 [ 666.902912][ T4077] loop2: detected capacity change from 0 to 1024 [ 666.995930][ T4077] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 667.006990][ T4077] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 667.034857][ T4077] JBD2: no valid journal superblock found [ 667.040735][ T4077] EXT4-fs (loop2): Could not load journal inode [ 667.210014][ T4102] 9pnet_fd: Insufficient options for proto=fd [ 667.269903][ T4102] SELinux: policydb string SE Linu does not match my string SE Linux [ 667.300088][ T4102] SELinux: failed to load policy [ 667.312754][ T4102] netlink: 'syz.4.7860': attribute type 4 has an invalid length. [ 667.320673][ T4102] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7860'. [ 667.354929][ T4102] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 668.164155][ T4124] lo speed is unknown, defaulting to 1000 [ 668.272371][ T4136] 9pnet_fd: Insufficient options for proto=fd [ 668.294086][ T4136] SELinux: policydb string SE Linu does not match my string SE Linux [ 668.313952][ T4136] SELinux: failed to load policy [ 668.333873][ T4136] netlink: 'syz.2.7872': attribute type 4 has an invalid length. [ 668.341746][ T4136] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7872'. [ 668.356120][ T4136] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 668.545204][ T4158] netem: incorrect gi model size [ 668.550177][ T4158] netem: change failed [ 668.650419][ T4168] 9pnet_fd: Insufficient options for proto=fd [ 668.657899][ T4168] SELinux: policydb version 133 does not match my version range 15-35 [ 668.666827][ T4168] SELinux: failed to load policy [ 668.674026][ T4168] netlink: 'syz.2.7888': attribute type 4 has an invalid length. [ 668.681965][ T4168] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 668.734116][ T4171] lo speed is unknown, defaulting to 1000 [ 669.017140][ T4194] netem: incorrect gi model size [ 669.022257][ T4194] netem: change failed [ 669.251644][ T4202] 9pnet_fd: Insufficient options for proto=fd [ 669.304604][ T4202] SELinux: policydb version 133 does not match my version range 15-35 [ 669.333579][ T4202] SELinux: failed to load policy [ 669.372856][ T4202] netlink: 'syz.2.7900': attribute type 4 has an invalid length. [ 669.380695][ T4202] __nla_validate_parse: 3 callbacks suppressed [ 669.380708][ T4202] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7900'. [ 669.575093][ T4202] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 669.768469][ T4218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7907'. [ 669.788285][ T4218] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7907'. [ 669.813595][ T4226] netlink: 536 bytes leftover after parsing attributes in process `syz.1.7910'. [ 669.864411][ T4228] lo speed is unknown, defaulting to 1000 [ 669.990242][ T4240] 9pnet_fd: Insufficient options for proto=fd [ 670.008667][ T4240] SELinux: policydb version 133 does not match my version range 15-35 [ 670.020368][ T4238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7914'. [ 670.029552][ T4240] SELinux: failed to load policy [ 670.036355][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 670.036367][ T29] audit: type=1326 audit(2000000491.430:16525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.044280][ T4238] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7914'. [ 670.070741][ T4240] netlink: 'syz.4.7915': attribute type 4 has an invalid length. [ 670.078287][ T4242] lo speed is unknown, defaulting to 1000 [ 670.082882][ T4240] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7915'. [ 670.098378][ T29] audit: type=1326 audit(2000000491.460:16526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.122003][ T29] audit: type=1326 audit(2000000491.460:16527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.145546][ T29] audit: type=1326 audit(2000000491.460:16528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.169061][ T29] audit: type=1326 audit(2000000491.460:16529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.192609][ T29] audit: type=1326 audit(2000000491.460:16530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.216118][ T29] audit: type=1326 audit(2000000491.460:16531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.239812][ T29] audit: type=1326 audit(2000000491.460:16532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.263325][ T29] audit: type=1326 audit(2000000491.460:16533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.286852][ T29] audit: type=1326 audit(2000000491.460:16534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4239 comm="syz.4.7915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479298ebe9 code=0x7ffc0000 [ 670.317463][ T4240] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 670.456397][ T4264] netlink: 300 bytes leftover after parsing attributes in process `syz.3.7922'. [ 670.565918][ T4267] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7922'. [ 670.791503][ T4273] lo speed is unknown, defaulting to 1000 [ 670.888746][ T4277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7928'. [ 670.984953][ T4287] lo speed is unknown, defaulting to 1000 [ 671.153519][ T4300] netem: incorrect gi model size [ 671.158544][ T4300] netem: change failed [ 671.320344][ T4310] FAULT_INJECTION: forcing a failure. [ 671.320344][ T4310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.333632][ T4310] CPU: 0 UID: 0 PID: 4310 Comm: syz.3.7941 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 671.333684][ T4310] Tainted: [W]=WARN [ 671.333693][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 671.333802][ T4310] Call Trace: [ 671.333811][ T4310] [ 671.333821][ T4310] __dump_stack+0x1d/0x30 [ 671.333844][ T4310] dump_stack_lvl+0xe8/0x140 [ 671.333863][ T4310] dump_stack+0x15/0x1b [ 671.333886][ T4310] should_fail_ex+0x265/0x280 [ 671.333965][ T4310] should_fail+0xb/0x20 [ 671.333989][ T4310] should_fail_usercopy+0x1a/0x20 [ 671.334018][ T4310] _copy_from_user+0x1c/0xb0 [ 671.334122][ T4310] ___sys_sendmsg+0xc1/0x1d0 [ 671.334166][ T4310] __x64_sys_sendmsg+0xd4/0x160 [ 671.334192][ T4310] x64_sys_call+0x191e/0x2ff0 [ 671.334244][ T4310] do_syscall_64+0xd2/0x200 [ 671.334280][ T4310] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 671.334309][ T4310] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 671.334334][ T4310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.334435][ T4310] RIP: 0033:0x7f95b48debe9 [ 671.334493][ T4310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.334518][ T4310] RSP: 002b:00007f95b3347038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 671.334543][ T4310] RAX: ffffffffffffffda RBX: 00007f95b4b05fa0 RCX: 00007f95b48debe9 [ 671.334556][ T4310] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 671.334611][ T4310] RBP: 00007f95b3347090 R08: 0000000000000000 R09: 0000000000000000 [ 671.334627][ T4310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 671.334640][ T4310] R13: 00007f95b4b06038 R14: 00007f95b4b05fa0 R15: 00007ffc8fdeb398 [ 671.334659][ T4310] [ 672.177877][ T4342] loop2: detected capacity change from 0 to 256 [ 672.199040][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.207828][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.217451][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.226970][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.436351][ T4338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.449306][ T4338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.552037][ T4347] lo speed is unknown, defaulting to 1000 [ 673.107338][ T4359] netem: incorrect gi model size [ 673.112343][ T4359] netem: change failed [ 673.210820][ T4363] lo speed is unknown, defaulting to 1000 [ 673.649362][ T4381] 9pnet_fd: Insufficient options for proto=fd [ 673.658389][ T4381] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 673.675642][ T4381] SELinux: failed to load policy [ 673.681685][ T4381] netlink: 'syz.0.7970': attribute type 4 has an invalid length. [ 673.689855][ T4381] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 674.092514][ T4395] lo speed is unknown, defaulting to 1000 [ 674.443247][ T4400] 9pnet_fd: Insufficient options for proto=fd [ 674.528542][ T4402] lo speed is unknown, defaulting to 1000 [ 674.674362][ T4410] 9pnet_fd: Insufficient options for proto=fd [ 674.847499][ T4418] FAULT_INJECTION: forcing a failure. [ 674.847499][ T4418] name failslab, interval 1, probability 0, space 0, times 0 [ 674.860252][ T4418] CPU: 1 UID: 0 PID: 4418 Comm: syz.1.7984 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 674.860373][ T4418] Tainted: [W]=WARN [ 674.860381][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 674.860432][ T4418] Call Trace: [ 674.860440][ T4418] [ 674.860523][ T4418] __dump_stack+0x1d/0x30 [ 674.860550][ T4418] dump_stack_lvl+0xe8/0x140 [ 674.860627][ T4418] dump_stack+0x15/0x1b [ 674.860644][ T4418] should_fail_ex+0x265/0x280 [ 674.860671][ T4418] should_failslab+0x8c/0xb0 [ 674.860775][ T4418] kmem_cache_alloc_node_noprof+0x57/0x320 [ 674.860954][ T4418] ? __alloc_skb+0x101/0x320 [ 674.860987][ T4418] __alloc_skb+0x101/0x320 [ 674.861028][ T4418] netlink_alloc_large_skb+0xba/0xf0 [ 674.861075][ T4418] netlink_sendmsg+0x3cf/0x6b0 [ 674.861132][ T4418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.861161][ T4418] __sock_sendmsg+0x145/0x180 [ 674.861214][ T4418] ____sys_sendmsg+0x31e/0x4e0 [ 674.861265][ T4418] ___sys_sendmsg+0x17b/0x1d0 [ 674.861305][ T4418] __x64_sys_sendmsg+0xd4/0x160 [ 674.861340][ T4418] x64_sys_call+0x191e/0x2ff0 [ 674.861381][ T4418] do_syscall_64+0xd2/0x200 [ 674.861414][ T4418] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 674.861438][ T4418] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 674.861504][ T4418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.861532][ T4418] RIP: 0033:0x7fce3532ebe9 [ 674.861551][ T4418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.861580][ T4418] RSP: 002b:00007fce33d8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.861648][ T4418] RAX: ffffffffffffffda RBX: 00007fce35555fa0 RCX: 00007fce3532ebe9 [ 674.861664][ T4418] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 674.861680][ T4418] RBP: 00007fce33d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 674.861744][ T4418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.861756][ T4418] R13: 00007fce35556038 R14: 00007fce35555fa0 R15: 00007ffc8adec6d8 [ 674.861779][ T4418] [ 675.104250][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 675.104281][ T29] audit: type=1326 audit(2000000496.500:16766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.189924][ T29] audit: type=1326 audit(2000000496.500:16767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.213527][ T29] audit: type=1326 audit(2000000496.500:16768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.237068][ T29] audit: type=1326 audit(2000000496.540:16769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.260754][ T29] audit: type=1326 audit(2000000496.540:16770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.284328][ T29] audit: type=1326 audit(2000000496.540:16771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.307828][ T29] audit: type=1326 audit(2000000496.540:16772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.331369][ T29] audit: type=1326 audit(2000000496.540:16773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.354951][ T29] audit: type=1326 audit(2000000496.540:16774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.378519][ T29] audit: type=1326 audit(2000000496.540:16775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4421 comm="syz.1.7986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce3532ebe9 code=0x7ffc0000 [ 675.465256][ T4427] 9pnet_fd: Insufficient options for proto=fd [ 675.471515][ T4333] ================================================================== [ 675.479732][ T4333] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 675.487496][ T4333] [ 675.489842][ T4333] write to 0xffff888110f43678 of 4 bytes by task 4427 on cpu 1: [ 675.497488][ T4333] __bpf_get_stackid+0x76b/0x800 [ 675.502465][ T4333] bpf_get_stackid+0xee/0x120 [ 675.507191][ T4333] bpf_get_stackid_raw_tp+0xf6/0x120 [ 675.512511][ T4333] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 675.517985][ T4333] bpf_trace_run2+0x104/0x1c0 [ 675.522670][ T4333] __traceiter_kfree+0x2b/0x50 [ 675.527449][ T4333] kfree+0x27b/0x320 [ 675.531367][ T4333] v9fs_mount+0x254/0x5c0 [ 675.535706][ T4333] legacy_get_tree+0x75/0xd0 [ 675.540302][ T4333] vfs_get_tree+0x54/0x1d0 [ 675.544723][ T4333] do_new_mount+0x207/0x5e0 [ 675.549226][ T4333] path_mount+0x4a4/0xb20 [ 675.553584][ T4333] __se_sys_mount+0x28f/0x2e0 [ 675.558311][ T4333] __x64_sys_mount+0x67/0x80 [ 675.562904][ T4333] x64_sys_call+0x2b4d/0x2ff0 [ 675.567600][ T4333] do_syscall_64+0xd2/0x200 [ 675.572111][ T4333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.578010][ T4333] [ 675.580333][ T4333] read to 0xffff888110f43678 of 4 bytes by task 4333 on cpu 0: [ 675.587871][ T4333] __bpf_get_stackid+0x287/0x800 [ 675.592819][ T4333] bpf_get_stackid+0xee/0x120 [ 675.597512][ T4333] bpf_get_stackid_raw_tp+0xf6/0x120 [ 675.602816][ T4333] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 675.608328][ T4333] bpf_trace_run2+0x104/0x1c0 [ 675.613010][ T4333] __traceiter_kfree+0x2b/0x50 [ 675.617777][ T4333] kfree+0x27b/0x320 [ 675.621677][ T4333] ___sys_recvmsg+0x135/0x370 [ 675.626364][ T4333] do_recvmmsg+0x1ef/0x540 [ 675.630811][ T4333] __x64_sys_recvmmsg+0xe5/0x170 [ 675.635760][ T4333] x64_sys_call+0x27a6/0x2ff0 [ 675.640442][ T4333] do_syscall_64+0xd2/0x200 [ 675.644955][ T4333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.650853][ T4333] [ 675.653177][ T4333] value changed: 0x89a37db4 -> 0xc0bde4d8 [ 675.658888][ T4333] [ 675.661211][ T4333] Reported by Kernel Concurrency Sanitizer on: [ 675.667359][ T4333] CPU: 0 UID: 0 PID: 4333 Comm: syz.3.7946 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 675.681345][ T4333] Tainted: [W]=WARN [ 675.685162][ T4333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 675.695227][ T4333] ==================================================================