last executing test programs: 1m26.236823008s ago: executing program 3 (id=2344): r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x8000, 0x0) readv(r0, &(0x7f0000001e00)=[{0x0}, {&(0x7f0000001a40)=""/229, 0xe5}], 0x2) 1m26.163841805s ago: executing program 3 (id=2346): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m25.555805036s ago: executing program 3 (id=2358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) 1m25.497847082s ago: executing program 3 (id=2359): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) 1m25.466215385s ago: executing program 3 (id=2360): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0xfffffffffffffd2b) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, 0x0) 1m25.195972542s ago: executing program 3 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) recvfrom$inet(r3, 0x0, 0xffffffffffffff9d, 0xc9110160, 0x0, 0x0) 1m25.195861152s ago: executing program 32 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) recvfrom$inet(r3, 0x0, 0xffffffffffffff9d, 0xc9110160, 0x0, 0x0) 10.26790502s ago: executing program 2 (id=4094): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$inet6(0xa, 0x3, 0x3c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000000c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 10.26762816s ago: executing program 2 (id=4095): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 10.243260612s ago: executing program 2 (id=4096): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0xffff, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10.242734242s ago: executing program 2 (id=4098): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 10.225682724s ago: executing program 2 (id=4099): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x10}], 0x1, 0x2100, 0x0) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000009c0)="eeea", 0x2}], 0x1}}], 0x1, 0x9200000000000080) 10.031121684s ago: executing program 2 (id=4106): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)="170916825ced51800594a51d7d0a9afabb0c374d6929c53b5986e18923cce23dceb254586c6e456716888955ad06be80cf151b25155ec5db5181d45669afb87376d4a8f4ff95dff422d4b47ab78df4d2be29db8c9dfb53556e7ab7fbed81e68803ef7723bd292954a92ccad710413c247df476fe76f8412759665ad8e99825965c98ffd4dae803b2c10f248b7b1a7c4d2da6bbee945d7f010998af0245b43d652f29161d0d4dfbd23aa8a30c16fcfaa6e5282b5d81e0f711aa542cb3667b1ddd67427a33c2bb213d3af9af8bbd76d2aaa1715f407ded0bbbfea55be73d57ac01e89024a28f4d88c369d37480310c8732ad21fca8dc235a12336a5e1614296602e6baf13e9961ea105eb522ab410592a73a73e58a35230ee73c290628e6687066f1f952e37d0cc96c3688430c76aa442fd870f9ba8c276819c385b9665b73945109009811007396ade188d04a1bff467ad5b45ee9678cde582a44aa419b9b7d293c2493c0b04eff6b26ca76ee60f11880fec0097bf92abd13cdd663bedfdabb30d34f078d3dc046e3e5a922415f20bd4f634b40c6a48b01bc8a4dd1316842a7654950d5d32fb823cd0f5ddec844f9b072a6636b5a9fa62a2ccb5e6ff3d1dbaf3e04236d85c12dfdde0bb214b982b6d4b49e2a7a78616ae99774fb1da823666ea30c10e73e96ad24d52e33fd7f1914f93ea65fc17303a7cc79590e98a1bb54f2e3a87a005cd50b976c3e0fb150a40055b94e4f2634c69296f43077f0a7096aa4fb2f92adc39f091de03daca5f6dc90821724c3f2e0f7a0d8ccc7fd159df3fc390c945ca817b51ef827a086d439098e91242053daaaf6124966f74677ec9968f65d83ec37bbd7b80de4edcf62284b359638367372fce9768a58f2075399bb432ee732521876ea3f91d49c572b10c59e5b8b46ee741ceb029b9764b9008bf0179433230b3f3f5c848023903ec788be5d14668f24dd73cf830d9148c758cc492a81b462", 0x2c1}], 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}, {'+'}}}}}}, 0x0) 10.030967074s ago: executing program 33 (id=4106): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x2c1}], 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x43, &(0x7f0000000500)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000009}]}}, {'+'}}}}}}, 0x0) 3.464661142s ago: executing program 0 (id=4201): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x2, 0x4}, {0x2}, {0x9, 0x2}, {0x5, 0x3}, {0x8, 0x4}, {0x4, 0x4}]}, @var={0xf, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000001080)=""/200, 0x71, 0xc8, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, '\x00', r3, r4, 0x3, 0x2, 0x2}, 0x50) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) fcntl$setlease(r10, 0x400, 0x0) io_uring_enter(r7, 0x3498, 0x3b01, 0xffff000000000000, 0x0, 0x0) dup3(r2, r5, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 2.605938418s ago: executing program 0 (id=4213): syz_clone3(&(0x7f0000000740)={0x89801300, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280), {0x2a}, &(0x7f0000000300)=""/229, 0xe5, &(0x7f00000004c0)=""/195, &(0x7f0000000400)}, 0x58) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x50) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) 2.38911339s ago: executing program 5 (id=4217): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 2.371093182s ago: executing program 5 (id=4218): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r3 = semget$private(0x0, 0x5, 0x144) semtimedop(r3, &(0x7f0000000480)=[{0x4, 0xfff6}], 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060300000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000000021c05000500020000000500010006"], 0x6c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x7}, 0x0) semctl$IPC_RMID(r3, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="eb5617bcf6840ee9cd99fe9b300c6c1dc06eec1712ba3785207c4d3af67f7a671891d56931241a77267e2aadd3db5e7f8d74965febc12a658a3fce206eac71ed716198c47a7e657435348425135fb179490533a29ec92d19a38bc22199f64df72728ed5256250f180af736b26ed043ca54d0e6127b783999a2991cf7a2749dce538e832410a8f3820309ced3a5370cdac424a78bcd67b1842d88a4d89a4f60af6bc94d43fa5e824274aa134c2f89", 0xae}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/808], 0x328}, 0x400c085) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000)={0x4, 0x0, 0x0, 0x3}, 0x10}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f0000003680)=[{{&(0x7f0000000340)=@sco, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)=""/179}, {&(0x7f0000000640)=""/186}]}, 0x7}, {{&(0x7f0000000700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x0, &(0x7f00000007c0), 0x0, &(0x7f00000009c0)=""/82}, 0x2}, {{&(0x7f0000000e80)=@generic, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000800)}, {&(0x7f0000000f80)=""/4096}, {&(0x7f0000001f80)=""/55}], 0x0, &(0x7f0000002000)=""/124}, 0xfffffffe}, {{&(0x7f0000002080)=@isdn, 0x0, &(0x7f00000021c0)=[{&(0x7f0000002100)=""/47}, {&(0x7f0000002140)=""/93}], 0x0, &(0x7f0000002200)=""/244}, 0x47}, {{&(0x7f0000002300)=@l2tp={0x2, 0x0, @loopback}, 0x0, &(0x7f0000002480)=[{&(0x7f00000008c0)=""/251}], 0x0, &(0x7f00000024c0)=""/82}, 0x6}, {{&(0x7f0000002540)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x0, &(0x7f0000003640)}, 0xc7}], 0x2, 0x60010000, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r7}, &(0x7f0000000740), &(0x7f0000000780)='%-010d \x00'}, 0x20) 2.243301795s ago: executing program 5 (id=4219): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @loopback, 0xc8000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) 2.206709709s ago: executing program 5 (id=4221): socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) open$dir(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r7, &(0x7f00000006c0)}, 0x20) 2.096774629s ago: executing program 6 (id=4224): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x300000000000000, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 2.081827431s ago: executing program 6 (id=4225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x18, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x2000000) 1.714465758s ago: executing program 0 (id=4226): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(0x3) 1.668732392s ago: executing program 0 (id=4228): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) 1.601739069s ago: executing program 0 (id=4230): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3a33, 0x4) sendto(r0, &(0x7f0000000540)='P', 0x1, 0x8052, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f801006e004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 1.217201388s ago: executing program 5 (id=4237): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x80, &(0x7f0000000140), 0x1, 0x4dd, &(0x7f0000000240)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = msgget$private(0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) msgsnd(r2, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) msgrcv(r2, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(r2, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) 1.059513793s ago: executing program 6 (id=4239): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff03", 0x2c}], 0x1) 729.300206ms ago: executing program 0 (id=4243): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x11000) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f00000001c0)={0xcc2}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r5, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x1, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x800, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x5, 0x0, 0x9}, @hopopts={0x8}]}}}}}}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x29a83a768e447add) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x20000000, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {}, {0x5, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x0, 0x1}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 710.004669ms ago: executing program 4 (id=4245): close(0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e2000001400"], 0x1e8}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r1, 0x900) r3 = dup3(r2, r1, 0x80000) read(r3, &(0x7f00000000c0)=""/226, 0xe2) 695.92483ms ago: executing program 5 (id=4247): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000300)=0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x5, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xf, 0x1}, {0x2, 0x4}, {0x2}, {0x9, 0x2}, {0x5, 0x3}, {0x8, 0x4}, {0x4, 0x4}]}, @var={0xf, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x2e, 0x5f, 0x30]}}, &(0x7f0000001080)=""/200, 0x71, 0xc8, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0xd, 0x0, 0x1, 0x0, '\x00', r3, r4, 0x3, 0x2, 0x2}, 0x50) socket$tipc(0x1e, 0x5, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r7 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x40289}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r6, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12}, 0x10) fcntl$setlease(r10, 0x400, 0x0) io_uring_enter(r7, 0x3498, 0x3b01, 0xffff000000000000, 0x0, 0x0) dup3(r2, r5, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 367.660063ms ago: executing program 4 (id=4250): socket(0x28, 0x5, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x4}}, 0x20) r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x0, 0x34f}, 0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 275.256362ms ago: executing program 4 (id=4253): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00@\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008"], 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r4}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) 174.825323ms ago: executing program 6 (id=4255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}}, 0x24) sendmsg$inet(r1, 0x0, 0x0) 134.963706ms ago: executing program 6 (id=4256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x170b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 133.617256ms ago: executing program 1 (id=4257): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas', 0x5) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f00000001c0)="ffbc", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)}, {0x0}], 0x2}}], 0x2, 0x40408e0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 121.639778ms ago: executing program 1 (id=4258): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/'], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20) 62.424463ms ago: executing program 1 (id=4259): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) setpgid(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/269], 0x2, 0x6b1, &(0x7f0000001100)="$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") r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r6 = signalfd4(r5, &(0x7f0000000080)={[0x7]}, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='iocost_ioc_vrate_adj\x00', r6, 0x0, 0xfffffffffffffff9}, 0x18) 62.006113ms ago: executing program 1 (id=4260): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000004000000080000000a00000000000000", @ANYRES32, @ANYBLOB="0d000000000000002000007980d723f131a1a256f7a165e6ba0ef2e20c643b6134dc3d6d644a15bdefaf1fa170d9572529ffbc8dac89231167f105c9cf898c2de97608229308000000000000008a3c2c19fe12243339007d35c5b71d34baf5990b3d0028cec9c23f007f79cbaa0e18cae604928aa76f44d1cbd5bffe985fcbfd81e5215e5d1461ff483caacc7b755ba544424cbf8a47644589f612a1efb014e9f8aebf18b5028ff42ee1b53512bd351f3f13ca0c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x14, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES16=0x0, @ANYRES64=r0, @ANYBLOB="d838d8953a3192dcaf40e5ed7e79795f2f267901b5e26a36586678a8d379c356ed8b93127ebf"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) 48.832975ms ago: executing program 4 (id=4261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d40)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @loopback, 0xc8000000}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) 41.201116ms ago: executing program 6 (id=4262): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[], 0x28}}, 0x0) 31.286297ms ago: executing program 1 (id=4263): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x3a33, 0x4) sendto(r0, &(0x7f0000000540)='P', 0x1, 0x8052, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f801006e004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x52, 0x0, 0x0) 22.732098ms ago: executing program 4 (id=4264): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x200002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r7, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 777.77µs ago: executing program 1 (id=4265): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c561e067f0202ff000000020000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300", 0x42}], 0x1) 0s ago: executing program 4 (id=4266): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) kernel console output (not intermixed with test programs): Quota mode: writeback. [ 125.940304][T11207] hsr_slave_0: entered promiscuous mode [ 125.946360][T11207] hsr_slave_1: entered promiscuous mode [ 125.952483][T11207] debugfs: 'hsr0' already exists in 'hsr' [ 125.958212][T11207] Cannot create hsr debugfs directory [ 125.961236][T11268] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2385: corrupted inode contents [ 125.976059][T11268] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.2385: mark_inode_dirty error [ 125.987671][T11268] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2385: corrupted inode contents [ 125.999873][T11268] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.2385: mark_inode_dirty error [ 126.080353][T11268] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2385: corrupted inode contents [ 126.130416][T11207] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.146634][T11207] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.161452][T11207] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 126.168931][T11268] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.2385: mark_inode_dirty error [ 126.186753][T11268] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2385: corrupted inode contents [ 126.188375][T11207] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 126.206200][T11268] EXT4-fs error (device loop0): ext4_truncate:4637: inode #15: comm syz.0.2385: mark_inode_dirty error [ 126.217624][T11268] EXT4-fs error (device loop0) in ext4_setattr:6050: Corrupt filesystem [ 126.226777][T11275] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.2385: corrupted inode contents [ 126.364919][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.490667][T11207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.877946][T11207] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.910011][ T2078] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.917152][ T2078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.041453][T11301] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 127.069790][T11207] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.080212][T11207] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.160187][T11306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.168690][T11306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.199373][ T2078] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.206484][ T2078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.247882][T11207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.261716][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 127.261729][ T29] audit: type=1400 audit(1763107847.047:7610): avc: denied { setopt } for pid=11315 comm="syz.0.2397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 127.605068][T11340] netlink: 'syz.0.2400': attribute type 10 has an invalid length. [ 127.612994][T11340] __nla_validate_parse: 10 callbacks suppressed [ 127.613004][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2400'. [ 127.663509][ T29] audit: type=1400 audit(1763107847.427:7611): avc: denied { name_bind } for pid=11342 comm="syz.1.2401" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 127.716209][T11340] team0: Port device geneve1 added [ 127.733888][T11346] loop1: detected capacity change from 0 to 512 [ 127.749151][T11340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'. [ 127.777936][T11346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.785196][T11207] veth0_vlan: entered promiscuous mode [ 127.790623][T11346] ext4 filesystem being mounted at /517/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.797918][T11207] veth1_vlan: entered promiscuous mode [ 127.813148][T11346] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2402: corrupted inode contents [ 127.819250][T11207] veth0_macvtap: entered promiscuous mode [ 127.830926][T11346] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2402: mark_inode_dirty error [ 127.835001][T11207] veth1_macvtap: entered promiscuous mode [ 127.842558][T11346] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2402: corrupted inode contents [ 127.852976][T11207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.866976][T11346] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2402: mark_inode_dirty error [ 127.870744][T11207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.890081][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.899847][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.908131][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.923569][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.944358][ T29] audit: type=1400 audit(1763107847.727:7612): avc: denied { mounton } for pid=11207 comm="syz-executor" path="/root/syzkaller.FHkppR/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 128.000794][T11359] syz_tun: entered allmulticast mode [ 128.017557][T11357] syz_tun: left allmulticast mode [ 128.023004][ T29] audit: type=1400 audit(1763107847.767:7613): avc: denied { mount } for pid=11207 comm="syz-executor" name="/" dev="gadgetfs" ino=4011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 128.045582][ T29] audit: type=1400 audit(1763107847.777:7614): avc: denied { unlink } for pid=3319 comm="syz-executor" name="file0" dev="tmpfs" ino=2560 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 128.076369][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.118567][T11368] loop0: detected capacity change from 0 to 4096 [ 128.128235][T11368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.177819][ T29] audit: type=1400 audit(1763107847.937:7615): avc: denied { add_name } for pid=11207 comm="syz-executor" name="syz5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 128.202550][ T29] audit: type=1400 audit(1763107847.937:7616): avc: denied { associate } for pid=11207 comm="syz-executor" name="syz5" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 128.227668][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.243207][T11376] loop1: detected capacity change from 0 to 512 [ 128.270255][T11376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.342498][ T29] audit: type=1326 audit(1763107848.117:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11360 comm="syz.2.2408" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f70a412f6c9 code=0x0 [ 129.116769][T11376] ext4 filesystem being mounted at /520/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.187790][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.197544][T11388] loop5: detected capacity change from 0 to 128 [ 129.204987][T11376] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2413: corrupted inode contents [ 129.208964][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.219694][T11393] loop2: detected capacity change from 0 to 128 [ 129.230972][T11376] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2413: mark_inode_dirty error [ 129.246703][T11376] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2413: corrupted inode contents [ 129.258617][T11376] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2413: mark_inode_dirty error [ 129.271371][T11388] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.283567][T11388] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.334082][T11207] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.347646][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.458703][ T29] audit: type=1400 audit(1763107849.217:7618): avc: denied { create } for pid=11402 comm="syz.2.2420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 129.553670][T11407] loop1: detected capacity change from 0 to 4096 [ 129.670749][T11407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.686949][T11411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.738744][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.750546][T11411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.858948][T11420] loop2: detected capacity change from 0 to 128 [ 129.871061][T11422] loop4: detected capacity change from 0 to 128 [ 129.893195][T11422] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.898537][ T29] audit: type=1400 audit(1763107849.677:7619): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 129.929194][T11422] ext4 filesystem being mounted at /475/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.962739][T11425] loop2: detected capacity change from 0 to 512 [ 130.001434][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.017588][T11441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.026058][T11441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.035336][T11425] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.048264][T11425] ext4 filesystem being mounted at /455/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.048398][T11439] loop0: detected capacity change from 0 to 1024 [ 130.060704][T11425] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2431: corrupted inode contents [ 130.077222][T11425] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.2431: mark_inode_dirty error [ 130.078395][T11439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.088612][T11425] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2431: corrupted inode contents [ 130.112613][T11425] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2431: mark_inode_dirty error [ 130.126880][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.157050][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.177411][T11452] loop0: detected capacity change from 0 to 1024 [ 130.193163][T11452] EXT4-fs: inline encryption not supported [ 130.212127][T11452] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.256858][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.325589][T11472] loop1: detected capacity change from 0 to 512 [ 130.349714][T11472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.362693][T11477] 9pnet_fd: Insufficient options for proto=fd [ 130.371921][T11478] loop0: detected capacity change from 0 to 1024 [ 130.379334][T11472] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.391838][T11472] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2450: corrupted inode contents [ 130.490152][T11472] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2450: mark_inode_dirty error [ 130.503565][T11478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.518507][T11472] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2450: corrupted inode contents [ 130.543191][T11472] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2450: mark_inode_dirty error [ 130.581581][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.667910][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.774731][T11500] loop4: detected capacity change from 0 to 1024 [ 130.781636][T11500] EXT4-fs: inline encryption not supported [ 130.789922][T11500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.835978][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.850435][T11508] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2460'. [ 130.859654][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 130.868513][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 131.017616][T11534] loop1: detected capacity change from 0 to 512 [ 131.029728][T11534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.042261][T11534] ext4 filesystem being mounted at /535/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.054901][T11534] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2469: corrupted inode contents [ 131.066768][T11534] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2469: mark_inode_dirty error [ 131.078987][T11534] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2469: corrupted inode contents [ 131.090927][T11534] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2469: mark_inode_dirty error [ 131.114872][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.153302][T11541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.161802][T11541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.172051][T11545] tipc: Started in network mode [ 131.176912][T11545] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 131.184035][T11545] tipc: Enabled bearer , priority 10 [ 131.262517][T11559] netlink: 'syz.5.2480': attribute type 13 has an invalid length. [ 131.311957][T11559] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.319140][T11559] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.360068][T11559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.370497][T11559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.429867][ T52] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.438979][ T52] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.448076][ T52] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.457279][ T52] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.458076][ T4742] tipc: Node number set to 10136234 [ 132.478546][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 132.478557][ T29] audit: type=1400 audit(1763107852.247:7629): avc: denied { read open } for pid=11612 comm="syz.4.2504" path="/" dev="configfs" ino=934 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 132.806843][T11634] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.086884][T11646] loop4: detected capacity change from 0 to 128 [ 133.552719][T11677] loop4: detected capacity change from 0 to 512 [ 133.603667][T11677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.692319][T11677] ext4 filesystem being mounted at /494/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 133.712363][T11685] loop1: detected capacity change from 0 to 128 [ 133.745644][T11677] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2525: corrupted inode contents [ 133.763594][T11677] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #2: comm syz.4.2525: mark_inode_dirty error [ 133.786423][T11677] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #2: comm syz.4.2525: corrupted inode contents [ 133.803323][T11677] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.2525: mark_inode_dirty error [ 133.834917][T11677] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 21: comm syz.4.2525: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=19, rec_len=1, size=2048 fake=0 [ 133.866523][T11698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.866571][T11677] EXT4-fs error (device loop4) in ext4_resetent:3678: Corrupt filesystem [ 133.883931][T11677] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2967: inode #19: comm syz.4.2525: corrupted xattr block 21: invalid header [ 133.890553][T11698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.897799][T11677] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 133.917023][T11700] tipc: Started in network mode [ 133.921943][T11700] tipc: Node identity ac1414aa, cluster identity 4711 [ 133.929056][T11700] tipc: Enabled bearer , priority 10 [ 133.988066][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.031476][T11714] loop4: detected capacity change from 0 to 1024 [ 134.038344][T11714] EXT4-fs: Ignoring removed bh option [ 134.060588][T11714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.084804][T11721] loop5: detected capacity change from 0 to 4096 [ 134.096180][T11721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.129459][T11721] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2546: corrupted inode contents [ 134.159496][T11721] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.2546: mark_inode_dirty error [ 134.178386][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.187484][T11721] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2546: corrupted inode contents [ 134.199574][T11721] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.2546: mark_inode_dirty error [ 134.210956][T11721] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2546: corrupted inode contents [ 134.211256][T11721] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #15: comm syz.5.2546: mark_inode_dirty error [ 134.223240][T11721] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.2546: corrupted inode contents [ 134.223407][T11721] EXT4-fs error (device loop5): ext4_truncate:4637: inode #15: comm syz.5.2546: mark_inode_dirty error [ 134.272819][T11721] EXT4-fs error (device loop5) in ext4_setattr:6050: Corrupt filesystem [ 134.330457][T11207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.356541][ T29] audit: type=1400 audit(1763107854.137:7630): avc: denied { write } for pid=11760 comm="syz.1.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 134.377551][T11768] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.472539][T11786] loop4: detected capacity change from 0 to 4096 [ 134.483874][T11786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.505176][T11786] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2574: corrupted inode contents [ 134.518612][T11786] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #15: comm syz.4.2574: mark_inode_dirty error [ 134.530773][T11786] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2574: corrupted inode contents [ 134.544562][T11786] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.2574: mark_inode_dirty error [ 134.557247][T11786] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2574: corrupted inode contents [ 134.575680][T11786] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.2574: mark_inode_dirty error [ 134.587730][T11786] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #15: comm syz.4.2574: corrupted inode contents [ 134.600395][T11786] EXT4-fs error (device loop4): ext4_truncate:4637: inode #15: comm syz.4.2574: mark_inode_dirty error [ 134.614103][T11786] EXT4-fs error (device loop4) in ext4_setattr:6050: Corrupt filesystem [ 134.634926][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.780553][T11818] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2583'. [ 134.910540][T11826] loop5: detected capacity change from 0 to 1024 [ 134.934974][T11826] EXT4-fs: inline encryption not supported [ 135.040698][T11826] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.128168][T11207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.136553][ T3399] tipc: Node number set to 2886997162 [ 135.159541][T11845] loop5: detected capacity change from 0 to 128 [ 135.167529][T11845] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 135.179824][T11845] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 135.233045][T11207] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.255613][T11856] loop5: detected capacity change from 0 to 1024 [ 135.269503][T11856] EXT4-fs: Ignoring removed orlov option [ 135.279969][T11856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.292292][T11856] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.325806][T11207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.502723][T11894] loop0: detected capacity change from 0 to 1024 [ 135.510036][T11894] EXT4-fs: Ignoring removed orlov option [ 135.539151][T11894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 135.552261][T11894] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.566303][T11894] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.2622: lblock 0 mapped to illegal pblock 0 (length 4) [ 135.580922][T11894] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.2622: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 135.614621][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 135.638844][T11916] loop2: detected capacity change from 0 to 128 [ 135.816591][T11950] loop2: detected capacity change from 0 to 128 [ 135.852879][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 135.883641][T11960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 135.913472][T11973] 9p: Unknown Cache mode or invalid value r [ 135.985763][T11981] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2662'. [ 136.047348][T11989] loop4: detected capacity change from 0 to 1024 [ 136.059453][T11989] EXT4-fs: inline encryption not supported [ 136.112014][T11989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.168870][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.192293][T12008] netlink: 'syz.0.2675': attribute type 13 has an invalid length. [ 136.259008][T12008] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.266239][T12008] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.320063][T12008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.329705][T12008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.391771][ T2078] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.400849][ T2078] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.410097][ T2078] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.436771][ T2078] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.527547][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.536263][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.554497][T12055] loop2: detected capacity change from 0 to 1024 [ 136.561116][T12055] EXT4-fs: Ignoring removed orlov option [ 136.587720][T12060] tipc: Enabled bearer , priority 10 [ 136.587713][T12055] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.587808][T12055] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.621196][T12055] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.2695: lblock 0 mapped to illegal pblock 0 (length 4) [ 136.634728][T12055] EXT4-fs error (device loop2): ext4_ext_remove_space:2955: inode #15: comm syz.2.2695: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 136.673972][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 136.773071][T12074] loop1: detected capacity change from 0 to 512 [ 136.820248][T12074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.836746][T12074] ext4 filesystem being mounted at /589/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.851098][T12074] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2702: corrupted inode contents [ 136.863298][T12074] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.2702: mark_inode_dirty error [ 136.875153][T12074] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.2702: corrupted inode contents [ 136.887304][T12074] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.2702: mark_inode_dirty error [ 136.924025][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.130755][T12099] loop4: detected capacity change from 0 to 1024 [ 137.138318][T12102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.138591][T12099] EXT4-fs: Ignoring removed orlov option [ 137.147025][T12102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.169840][T12099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.181920][T12099] ext4 filesystem being mounted at /543/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.195665][T12099] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.2711: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.209232][T12099] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2711: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 137.239459][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.286226][ T29] audit: type=1400 audit(1763107857.067:7631): avc: denied { read } for pid=12116 comm="syz.2.2719" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 137.383589][T12129] loop4: detected capacity change from 0 to 1024 [ 137.390620][T12129] EXT4-fs: Ignoring removed orlov option [ 137.412938][T12129] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.424546][T12138] tipc: Started in network mode [ 137.425929][T12129] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.429909][T12138] tipc: Node identity 22c29bcd9486, cluster identity 4711 [ 137.447423][T12138] tipc: Enabled bearer , priority 0 [ 137.467118][T12129] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.2725: lblock 0 mapped to illegal pblock 0 (length 4) [ 137.481772][T12138] syzkaller0: entered promiscuous mode [ 137.487244][T12138] syzkaller0: entered allmulticast mode [ 137.496198][T12138] tipc: Resetting bearer [ 137.498696][T12129] EXT4-fs error (device loop4): ext4_ext_remove_space:2955: inode #15: comm syz.4.2725: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 137.520119][T12136] tipc: Resetting bearer [ 137.526699][T12136] tipc: Disabling bearer [ 137.535554][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.562150][T12148] loop5: detected capacity change from 0 to 1024 [ 137.579989][T12148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.609591][T11207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.659882][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2742'. [ 137.671756][ T29] audit: type=1400 audit(1763107857.457:7632): avc: denied { bind } for pid=12171 comm="syz.5.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.695319][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2742'. [ 137.706225][ T29] audit: type=1400 audit(1763107857.457:7633): avc: denied { listen } for pid=12171 comm="syz.5.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.725928][ T29] audit: type=1400 audit(1763107857.487:7634): avc: denied { write } for pid=12171 comm="syz.5.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 137.750919][T12182] syz.5.2749 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 137.830452][T12200] syz_tun: entered allmulticast mode [ 137.854785][T12198] syz_tun: left allmulticast mode [ 137.863764][T12204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.874295][T12204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.905978][ T29] audit: type=1400 audit(1763107857.687:7635): avc: denied { write } for pid=12212 comm="syz.2.2765" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 138.026149][T12241] loop4: detected capacity change from 0 to 128 [ 138.035273][T12241] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.048565][T12241] ext4 filesystem being mounted at /562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.092414][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.232835][T12271] loop4: detected capacity change from 0 to 128 [ 138.241013][T12271] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.253421][T12271] ext4 filesystem being mounted at /569/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 138.412064][ T3321] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.528049][T12285] loop1: detected capacity change from 0 to 1024 [ 138.574905][T12285] EXT4-fs: Ignoring removed orlov option [ 138.640061][T12285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 138.705451][T12285] ext4 filesystem being mounted at /598/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.726724][T12285] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: comm syz.1.2799: lblock 0 mapped to illegal pblock 0 (length 4) [ 138.751779][T12305] loop4: detected capacity change from 0 to 128 [ 138.756471][T12285] EXT4-fs error (device loop1): ext4_ext_remove_space:2955: inode #15: comm syz.1.2799: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 138.777787][T12305] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.799091][T12305] ext4 filesystem being mounted at /571/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 139.106214][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 139.123246][T12341] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2818'. [ 139.166911][ T52] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.195419][T12323] chnl_net:caif_netlink_parms(): no params data found [ 139.227051][T12323] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.234172][T12323] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.241473][T12323] bridge_slave_0: entered allmulticast mode [ 139.247892][T12323] bridge_slave_0: entered promiscuous mode [ 139.256125][ T52] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.268612][T12323] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.275799][T12323] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.283117][T12323] bridge_slave_1: entered allmulticast mode [ 139.289596][T12323] bridge_slave_1: entered promiscuous mode [ 139.307501][T12323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.317582][T12323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.327729][ T52] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.350342][T12323] team0: Port device team_slave_0 added [ 139.356897][T12323] team0: Port device team_slave_1 added [ 139.374030][T12323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.381077][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.407103][T12323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.419067][ T52] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.430094][T12323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.437026][T12323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.462941][T12323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.489974][T12323] hsr_slave_0: entered promiscuous mode [ 139.495942][T12323] hsr_slave_1: entered promiscuous mode [ 139.501789][T12323] debugfs: 'hsr0' already exists in 'hsr' [ 139.507487][T12323] Cannot create hsr debugfs directory [ 139.572176][ T52] bridge_slave_1: left allmulticast mode [ 139.577848][ T52] bridge_slave_1: left promiscuous mode [ 139.583640][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.591253][ T52] bridge_slave_0: left allmulticast mode [ 139.596948][ T52] bridge_slave_0: left promiscuous mode [ 139.602676][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.050937][ T52] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.065965][ T52] bond_slave_0: left promiscuous mode [ 140.073577][ T52] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.082498][ T52] bond_slave_1: left promiscuous mode [ 140.088745][ T52] $Hÿ (unregistering): Released all slaves [ 140.130636][ T52] tipc: Disabling bearer [ 140.136163][ T52] tipc: Disabling bearer [ 140.141467][ T52] tipc: Left network mode [ 140.147872][ T52] hsr_slave_0: left promiscuous mode [ 140.154457][ T52] hsr_slave_1: left promiscuous mode [ 140.160173][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.167580][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.175367][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.182853][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.192917][ T52] veth1_vlan: left promiscuous mode [ 140.198202][ T52] veth0_vlan: left promiscuous mode [ 140.267513][ T52] team0 (unregistering): Port device team_slave_1 removed [ 140.279520][ T52] team0 (unregistering): Port device team_slave_0 removed [ 140.287859][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 140.346737][T12398] loop2: detected capacity change from 0 to 1024 [ 140.357150][T12398] EXT4-fs: inline encryption not supported [ 140.493133][T12429] loop2: detected capacity change from 0 to 512 [ 140.512927][T12429] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.525504][T12429] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2856: corrupted inode contents [ 140.537580][T12429] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.2856: mark_inode_dirty error [ 140.549282][T12429] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.2856: corrupted inode contents [ 140.561884][T12429] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.2856: mark_inode_dirty error [ 140.612537][T12445] loop2: detected capacity change from 0 to 1024 [ 140.614106][T12323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.627411][T12323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.636411][T12323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.645288][T12323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 140.689249][T12323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.702840][T12323] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.720489][ T2078] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.727641][ T2078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.739136][ T2078] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.746179][ T2078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.765893][T12323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 140.776283][T12323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 140.820982][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.824611][T12323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.830081][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.882564][T12323] veth0_vlan: entered promiscuous mode [ 140.890200][T12323] veth1_vlan: entered promiscuous mode [ 140.903260][T12323] veth0_macvtap: entered promiscuous mode [ 140.910638][T12323] veth1_macvtap: entered promiscuous mode [ 140.920659][T12323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.930786][T12323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.941414][ T2078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.950324][ T2078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.960811][ T2078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.969777][ T2078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.006093][T12487] loop1: detected capacity change from 0 to 128 [ 141.014191][T12487] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.052864][ T29] audit: type=1400 audit(1763107860.837:7636): avc: denied { write } for pid=12489 comm="syz.0.2873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 141.144229][ T29] audit: type=1400 audit(1763107860.927:7637): avc: denied { ioctl } for pid=12493 comm="syz.1.2875" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 141.334317][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2879'. [ 141.349043][T12510] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2879'. [ 141.470032][T12519] netlink: 'syz.5.2883': attribute type 13 has an invalid length. [ 141.495040][T12523] loop5: detected capacity change from 0 to 128 [ 141.503086][T12523] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.610474][T12548] tipc: Started in network mode [ 141.615367][T12548] tipc: Node identity c6c8f03e469c, cluster identity 4711 [ 141.622573][T12548] tipc: Enabled bearer , priority 0 [ 141.625240][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2895'. [ 141.629596][T12548] syzkaller0: entered promiscuous mode [ 141.643681][T12548] syzkaller0: entered allmulticast mode [ 141.655286][T12548] tipc: Resetting bearer [ 141.661541][T12551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2895'. [ 141.670523][T12546] tipc: Resetting bearer [ 141.676843][T12546] tipc: Disabling bearer [ 141.749300][T12553] netlink: 'syz.5.2896': attribute type 13 has an invalid length. [ 141.850687][T12561] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2900'. [ 141.859848][T12561] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2900'. [ 141.868936][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2900'. [ 141.898536][ T29] audit: type=1400 audit(1763107861.677:7638): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 142.009940][ T29] audit: type=1400 audit(1763107861.797:7639): avc: denied { setopt } for pid=12575 comm="syz.2.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.030796][ T29] audit: type=1400 audit(1763107861.797:7640): avc: denied { connect } for pid=12575 comm="syz.2.2905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.050622][ T29] audit: type=1400 audit(1763107861.797:7641): avc: denied { write } for pid=12575 comm="syz.2.2905" lport=16427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 142.104920][T12569] chnl_net:caif_netlink_parms(): no params data found [ 142.139658][T12569] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.146724][T12569] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.153933][T12569] bridge_slave_0: entered allmulticast mode [ 142.160430][T12569] bridge_slave_0: entered promiscuous mode [ 142.166936][T12569] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.174055][T12569] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.181239][T12569] bridge_slave_1: entered allmulticast mode [ 142.187496][T12569] bridge_slave_1: entered promiscuous mode [ 142.205691][T12569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.216418][T12569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.251938][T12569] team0: Port device team_slave_0 added [ 142.258607][T12569] team0: Port device team_slave_1 added [ 142.259755][T12590] netlink: 'syz.1.2907': attribute type 13 has an invalid length. [ 142.272054][T12590] netlink: 'syz.1.2907': attribute type 27 has an invalid length. [ 142.287180][T12569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.294152][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.320059][T12569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.331205][T12569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.338172][T12569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 142.364084][T12569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.396861][T12569] hsr_slave_0: entered promiscuous mode [ 142.409066][T12569] hsr_slave_1: entered promiscuous mode [ 142.414925][T12569] debugfs: 'hsr0' already exists in 'hsr' [ 142.420682][T12569] Cannot create hsr debugfs directory [ 142.433349][T12598] loop4: detected capacity change from 0 to 128 [ 142.458794][ T31] bridge_slave_1: left allmulticast mode [ 142.464445][ T31] bridge_slave_1: left promiscuous mode [ 142.470122][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.478206][ T31] bridge_slave_0: left allmulticast mode [ 142.483881][ T31] bridge_slave_0: left promiscuous mode [ 142.489586][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.491136][T12598] ext4 filesystem being mounted at /599/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 142.545808][ T31] team0: Port device geneve1 removed [ 142.840207][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.851973][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.861040][ T31] bond0 (unregistering): Released all slaves [ 142.869248][T12619] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2917'. [ 142.893752][ T31] tipc: Disabling bearer [ 142.899022][ T31] tipc: Left network mode [ 142.909887][T12614] tipc: Enabled bearer , priority 0 [ 142.916702][T12615] syzkaller0: entered promiscuous mode [ 142.922211][T12615] syzkaller0: entered allmulticast mode [ 142.944568][T12620] tipc: Resetting bearer [ 142.951544][ T31] hsr_slave_0: left promiscuous mode [ 142.957240][ T31] hsr_slave_1: left promiscuous mode [ 142.963719][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.971617][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.998162][ T31] team0 (unregistering): Port device team_slave_1 removed [ 143.007484][ T31] team0 (unregistering): Port device team_slave_0 removed [ 143.049428][T12611] tipc: Resetting bearer [ 143.057187][T12611] tipc: Disabling bearer [ 143.312468][T12640] loop5: detected capacity change from 0 to 128 [ 143.321573][T12640] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 143.502093][T12569] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.510779][T12569] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.523394][T12569] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.533507][T12569] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.576521][T12569] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.590030][T12569] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.600524][ T2352] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.607640][ T2352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.618253][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.625320][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.688831][T12569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.715605][T12674] netlink: 'syz.4.2934': attribute type 13 has an invalid length. [ 143.723586][T12674] netlink: 'syz.4.2934': attribute type 27 has an invalid length. [ 143.771509][T12569] veth0_vlan: entered promiscuous mode [ 143.794510][T12569] veth1_vlan: entered promiscuous mode [ 143.804880][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 143.804893][ T29] audit: type=1326 audit(1763107863.587:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e069f6c9 code=0x7ffc0000 [ 143.817337][T12569] veth0_macvtap: entered promiscuous mode [ 143.847565][ T29] audit: type=1326 audit(1763107863.617:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e069f6c9 code=0x7ffc0000 [ 143.871212][ T29] audit: type=1326 audit(1763107863.617:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fb7e069f6c9 code=0x7ffc0000 [ 143.877441][T12569] veth1_macvtap: entered promiscuous mode [ 143.894737][ T29] audit: type=1326 audit(1763107863.617:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e069f6c9 code=0x7ffc0000 [ 143.923979][ T29] audit: type=1326 audit(1763107863.617:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12688 comm="syz.4.2939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e069f6c9 code=0x7ffc0000 [ 143.924994][T12693] loop1: detected capacity change from 0 to 1024 [ 143.963219][T12569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.973104][T12569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.976429][T12693] EXT4-fs: inline encryption not supported [ 143.983493][ T2078] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.997943][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.007144][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.022418][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.155605][T12722] tipc: Started in network mode [ 144.160568][T12722] tipc: Node identity f6bb877b60c8, cluster identity 4711 [ 144.167850][T12722] tipc: Enabled bearer , priority 0 [ 144.185211][T12722] syzkaller0: entered promiscuous mode [ 144.190899][T12722] syzkaller0: entered allmulticast mode [ 144.250571][T12722] tipc: Resetting bearer [ 144.261402][T12720] tipc: Resetting bearer [ 144.268582][T12720] tipc: Disabling bearer [ 144.324805][T12724] chnl_net:caif_netlink_parms(): no params data found [ 144.356685][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.369015][T12745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.380865][T12745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.397479][T12724] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.404740][T12724] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.413749][T12724] bridge_slave_0: entered allmulticast mode [ 144.436642][T12724] bridge_slave_0: entered promiscuous mode [ 144.450583][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.473466][T12724] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.480649][T12724] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.502988][T12724] bridge_slave_1: entered allmulticast mode [ 144.510818][T12724] bridge_slave_1: entered promiscuous mode [ 144.525140][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.543319][T12724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.553734][T12724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.574429][T12724] team0: Port device team_slave_0 added [ 144.583042][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.595118][T12724] team0: Port device team_slave_1 added [ 144.612522][T12724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.619500][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.645517][T12724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.656979][T12724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.663959][T12724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 144.689998][T12724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.719352][T12724] hsr_slave_0: entered promiscuous mode [ 144.725682][T12724] hsr_slave_1: entered promiscuous mode [ 144.731507][T12724] debugfs: 'hsr0' already exists in 'hsr' [ 144.737228][T12724] Cannot create hsr debugfs directory [ 144.756742][ T31] bridge_slave_1: left allmulticast mode [ 144.762504][ T31] bridge_slave_1: left promiscuous mode [ 144.768182][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.776039][ T31] bridge_slave_0: left allmulticast mode [ 144.781704][ T31] bridge_slave_0: left promiscuous mode [ 144.787320][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.110175][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.119749][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.129025][ T31] bond0 (unregistering): Released all slaves [ 145.231771][T12782] tipc: Started in network mode [ 145.236767][T12782] tipc: Node identity 4a1f7e493efb, cluster identity 4711 [ 145.243998][T12782] tipc: Enabled bearer , priority 0 [ 145.251430][T12782] syzkaller0: entered promiscuous mode [ 145.256909][T12782] syzkaller0: entered allmulticast mode [ 145.265817][T12782] tipc: Resetting bearer [ 145.271841][ T31] hsr_slave_0: left promiscuous mode [ 145.277482][ T31] hsr_slave_1: left promiscuous mode [ 145.283068][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.290468][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.297877][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.305291][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.347828][ T31] team0 (unregistering): Port device team_slave_1 removed [ 145.360983][ T31] team0 (unregistering): Port device team_slave_0 removed [ 145.426936][T12781] tipc: Resetting bearer [ 145.438047][T12781] tipc: Disabling bearer [ 145.833116][T12724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.841649][T12724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.850247][T12724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.858472][T12724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.147259][T12724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.176290][T12724] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.187275][ T2352] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.194431][ T2352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.211096][T12724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 146.221504][T12724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.234081][ T2352] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.241174][ T2352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.284952][T12724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.310597][T12828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.319359][T12828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.387450][T12724] veth0_vlan: entered promiscuous mode [ 146.394883][T12724] veth1_vlan: entered promiscuous mode [ 146.407904][T12724] veth0_macvtap: entered promiscuous mode [ 146.415483][T12724] veth1_macvtap: entered promiscuous mode [ 146.425768][T12724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.436068][T12724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.446063][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.455060][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.464471][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.474400][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.540734][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 146.550307][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2987'. [ 146.576968][T12848] tipc: Enabling of bearer rejected, failed to enable media [ 146.618842][T12854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2991'. [ 146.628024][T12854] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2991'. [ 146.631180][T12856] batman_adv: batadv0: Adding interface: dummy0 [ 146.643282][T12856] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.669500][T12856] batman_adv: batadv0: Interface activated: dummy0 [ 146.684507][ T29] audit: type=1400 audit(1763107866.467:7648): avc: denied { ioctl } for pid=12855 comm="syz.0.2992" path="socket:[35128]" dev="sockfs" ino=35128 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 146.711424][T12856] batadv0: mtu less than device minimum [ 146.714053][T12860] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2994'. [ 146.717298][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.728728][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 146.736703][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.745246][T12860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2994'. [ 146.755914][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.756499][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.785965][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.796665][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.807338][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.814413][T12867] loop3: detected capacity change from 0 to 7 [ 146.818063][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 146.834527][T12856] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 147.492527][ T29] audit: type=1400 audit(1763107866.867:7649): avc: denied { read write } for pid=12874 comm="syz.5.3001" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 147.516458][ T29] audit: type=1400 audit(1763107866.867:7650): avc: denied { open } for pid=12874 comm="syz.5.3001" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 148.141085][T12927] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3022'. [ 148.188161][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 148.197093][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 148.769065][T12967] batman_adv: batadv0: Adding interface: dummy0 [ 148.775327][T12967] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.800610][T12967] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 148.805308][ T29] audit: type=1400 audit(1763107868.587:7651): avc: denied { listen } for pid=12968 comm="syz.1.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 148.852738][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.861411][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.234543][ T29] audit: type=1400 audit(1763107869.017:7652): avc: denied { accept } for pid=12968 comm="syz.1.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 149.314172][ T29] audit: type=1400 audit(1763107869.097:7653): avc: denied { execute_no_trans } for pid=12985 comm="syz.0.3048" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 149.901878][T13027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.910423][T13027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.223975][ T29] audit: type=1326 audit(1763107870.007:7654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13050 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 150.247559][ T29] audit: type=1326 audit(1763107870.007:7655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13050 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 150.282582][ T29] audit: type=1326 audit(1763107870.067:7656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13050 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 150.306298][ T29] audit: type=1326 audit(1763107870.087:7657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13050 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 150.329999][ T29] audit: type=1326 audit(1763107870.087:7658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13050 comm="syz.4.3078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 150.504013][T13072] tipc: Enabled bearer , priority 0 [ 150.511093][T13072] syzkaller0: entered promiscuous mode [ 150.516566][T13072] syzkaller0: entered allmulticast mode [ 150.528335][T13071] tipc: Resetting bearer [ 150.539384][T13071] tipc: Disabling bearer [ 150.545776][ T29] audit: type=1400 audit(1763107870.327:7659): avc: denied { setopt } for pid=13064 comm="syz.4.3085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 151.053146][T13088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.061635][T13088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.557816][T13104] tipc: Started in network mode [ 151.562777][T13104] tipc: Node identity 06ccebce9fa4, cluster identity 4711 [ 151.570057][T13104] tipc: Enabled bearer , priority 0 [ 151.576980][T13104] syzkaller0: entered promiscuous mode [ 151.582477][T13104] syzkaller0: entered allmulticast mode [ 151.591758][T13103] tipc: Resetting bearer [ 151.599759][T13103] tipc: Disabling bearer [ 151.673473][T13116] __nla_validate_parse: 4 callbacks suppressed [ 151.673489][T13116] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3107'. [ 151.699507][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3108'. [ 151.742963][T13127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.751666][T13127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.788741][T13135] tipc: Enabled bearer , priority 0 [ 151.813658][T13135] tipc: Resetting bearer [ 151.824141][T13134] tipc: Disabling bearer [ 151.851813][T13141] netlink: 200 bytes leftover after parsing attributes in process `syz.0.3119'. [ 152.472911][T13171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.481506][T13171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.970113][T13189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.019742][T13189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.041957][T13191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3140'. [ 153.129902][ T29] audit: type=1400 audit(1763107872.917:7660): avc: denied { ioctl } for pid=13196 comm="syz.4.3143" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 153.213197][T13211] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3150'. [ 153.222412][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3151'. [ 153.248800][T13217] syzkaller0: entered promiscuous mode [ 153.254294][T13217] syzkaller0: entered allmulticast mode [ 153.269772][ T29] audit: type=1326 audit(1763107873.057:7661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13218 comm="syz.0.3154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c9d6f6c9 code=0x7ffc0000 [ 153.391848][T13232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3161'. [ 153.400885][T13232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3161'. [ 153.427775][T13235] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3162'. [ 153.439394][T13237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3163'. [ 154.093206][T13287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.101654][T13287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.726470][T13327] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.733746][T13327] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.778437][T13333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.788800][T13333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.349719][T13345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.358184][T13345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.366873][T13345] mmap: syz.1.3209 (13345) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 155.748565][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 155.748580][ T29] audit: type=1400 audit(1763107875.507:7671): avc: denied { setopt } for pid=13360 comm="syz.0.3217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 155.788990][T13366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.798216][T13366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.243180][ T29] audit: type=1400 audit(1763107876.027:7672): avc: denied { bind } for pid=13395 comm="syz.1.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 156.272271][T13400] netlink: 'syz.2.3234': attribute type 1 has an invalid length. [ 156.292031][T13400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 156.327998][T13400] vlan2: entered allmulticast mode [ 156.333145][T13400] bond1: entered allmulticast mode [ 156.401003][T13400] bond1: (slave gretap1): making interface the new active one [ 156.408477][T13400] gretap1: entered allmulticast mode [ 156.414496][T13400] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 156.424778][T13400] syz.2.3234 (13400) used greatest stack depth: 9344 bytes left [ 156.450730][ T29] audit: type=1400 audit(1763107876.177:7673): avc: denied { create } for pid=13398 comm="syz.2.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 156.471233][ T29] audit: type=1400 audit(1763107876.177:7674): avc: denied { write } for pid=13398 comm="syz.2.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 156.884950][T13438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.908782][T13438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.937753][T13440] syzkaller0: entered promiscuous mode [ 156.943244][T13440] syzkaller0: entered allmulticast mode [ 157.529820][ T29] audit: type=1400 audit(1763107877.007:7675): avc: denied { connect } for pid=13443 comm="syz.0.3252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 157.620845][T13465] netlink: 'syz.4.3260': attribute type 12 has an invalid length. [ 158.069685][T13468] chnl_net:caif_netlink_parms(): no params data found [ 158.082682][T13485] __nla_validate_parse: 3 callbacks suppressed [ 158.082697][T13485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3265'. [ 158.122610][ T2078] bridge_slave_1: left allmulticast mode [ 158.128339][ T2078] bridge_slave_1: left promiscuous mode [ 158.134076][ T2078] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.147000][T13486] FAT-fs (loop1): unable to read boot sector [ 158.155318][ T29] audit: type=1400 audit(1763107877.927:7676): avc: denied { connect } for pid=13477 comm="syz.0.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.176166][ T29] audit: type=1400 audit(1763107877.927:7677): avc: denied { mounton } for pid=13477 comm="syz.0.3262" path="/78/file0" dev="tmpfs" ino=414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 158.209165][ T2078] bridge_slave_0: left promiscuous mode [ 158.214798][ T2078] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.252455][ T2078] bond1 (unregistering): (slave gretap1): Releasing active interface [ 158.261435][ T2078] gretap1 (unregistering): left allmulticast mode [ 158.721375][ T2078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.731281][ T2078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.740559][ T2078] bond0 (unregistering): Released all slaves [ 158.849211][ T2078] bond1 (unregistering): Released all slaves [ 158.910664][ T2078] tipc: Left network mode [ 158.910697][T13468] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.922224][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.929440][T13468] bridge_slave_0: entered allmulticast mode [ 158.937522][T13468] bridge_slave_0: entered promiscuous mode [ 158.944382][T13468] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.951462][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.958886][T13468] bridge_slave_1: entered allmulticast mode [ 158.965558][T13468] bridge_slave_1: entered promiscuous mode [ 159.006355][ T2078] hsr_slave_0: left promiscuous mode [ 159.012804][ T2078] hsr_slave_1: left promiscuous mode [ 159.024922][ T2078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.025284][ T2078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.044393][ T2078] batman_adv: batadv0: Removing interface: dummy0 [ 159.096651][ T2078] team0 (unregistering): Port device team_slave_1 removed [ 159.110578][ T2078] team0 (unregistering): Port device team_slave_0 removed [ 159.196711][T13468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.210885][T13468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.232294][T13468] team0: Port device team_slave_0 added [ 159.513150][T13542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3281'. [ 159.591061][T13468] team0: Port device team_slave_1 added [ 159.618880][T13468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.625884][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.652116][T13468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.663420][T13468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.670457][T13468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.696371][T13468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.765994][T13468] hsr_slave_0: entered promiscuous mode [ 159.773522][T13468] hsr_slave_1: entered promiscuous mode [ 159.800543][ T2078] ------------[ cut here ]------------ [ 159.806014][ T2078] WARNING: CPU: 1 PID: 2078 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x91/0x100 [ 159.816200][ T2078] Modules linked in: [ 159.820135][ T2078] CPU: 1 UID: 0 PID: 2078 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.830113][ T2078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 159.840174][ T2078] Workqueue: netns cleanup_net [ 159.844968][ T2078] RIP: 0010:xfrm6_tunnel_net_exit+0x91/0x100 [ 159.851018][ T2078] Code: a5 14 a5 fc 4b 83 3c 3e 00 75 19 e8 99 a7 89 fc 49 81 ff f8 07 00 00 74 1d e8 8b a7 89 fc 49 83 c7 08 eb d7 e8 80 a7 89 fc 90 <0f> 0b 90 49 81 ff f8 07 00 00 75 e3 49 81 c6 00 08 00 00 31 db 49 [ 159.870691][ T2078] RSP: 0018:ffffc900024dfc78 EFLAGS: 00010293 [ 159.876752][ T2078] RAX: ffffffff84cda320 RBX: ffff88810caa0000 RCX: ffff888102439080 [ 159.884734][ T2078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109914000 [ 159.892727][ T2078] RBP: ffffffff86c99390 R08: 0001ffff8684810f R09: 0000000000000000 [ 159.900736][ T2078] R10: 0000000000000000 R11: 0000000000000800 R12: ffffffff86c993b0 [ 159.908740][ T2078] R13: ffff88810caa0028 R14: ffff888109914000 R15: 0000000000000000 [ 159.916708][ T2078] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 159.925728][ T2078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.932341][ T2078] CR2: 00007fbec322df98 CR3: 00000001185ae000 CR4: 00000000003506f0 [ 159.940391][ T2078] Call Trace: [ 159.943666][ T2078] [ 159.946614][ T2078] ops_undo_list+0x27b/0x410 [ 159.951264][ T2078] cleanup_net+0x2f4/0x4f0 [ 159.955712][ T2078] process_scheduled_works+0x4ce/0x9d0 [ 159.961316][ T2078] worker_thread+0x582/0x770 [ 159.965950][ T2078] kthread+0x489/0x510 [ 159.970147][ T2078] ? finish_task_switch+0xad/0x2b0 [ 159.975298][ T2078] ? __pfx_worker_thread+0x10/0x10 [ 159.980433][ T2078] ? __pfx_kthread+0x10/0x10 [ 159.985103][ T2078] ret_from_fork+0x122/0x1b0 [ 159.989710][ T2078] ? __pfx_kthread+0x10/0x10 [ 159.994353][ T2078] ret_from_fork_asm+0x1a/0x30 [ 159.999225][ T2078] [ 160.002241][ T2078] ---[ end trace 0000000000000000 ]--- [ 160.008288][ T2078] ------------[ cut here ]------------ [ 160.013745][ T2078] WARNING: CPU: 1 PID: 2078 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0xd5/0x100 [ 160.023839][ T2078] Modules linked in: [ 160.027729][ T2078] CPU: 1 UID: 0 PID: 2078 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.039227][ T2078] Tainted: [W]=WARN [ 160.043028][ T2078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.053149][ T2078] Workqueue: netns cleanup_net [ 160.057920][ T2078] RIP: 0010:xfrm6_tunnel_net_exit+0xd5/0x100 [ 160.063983][ T2078] Code: 61 14 a5 fc 49 83 3c 1e 00 75 19 e8 55 a7 89 fc 48 81 fb f8 07 00 00 74 1d e8 47 a7 89 fc 48 83 c3 08 eb d7 e8 3c a7 89 fc 90 <0f> 0b 90 48 81 fb f8 07 00 00 75 e3 e8 2a a7 89 fc 5b 41 5e 41 5f [ 160.083619][ T2078] RSP: 0018:ffffc900024dfc78 EFLAGS: 00010293 [ 160.089713][ T2078] RAX: ffffffff84cda364 RBX: 0000000000000010 RCX: ffff888102439080 [ 160.097822][ T2078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff888109914810 [ 160.105852][ T2078] RBP: ffffffff86c99390 R08: 0001ffff8684810f R09: 0000000000000000 [ 160.113953][ T2078] R10: 0000000000000000 R11: 0000000000000800 R12: ffffffff86c993b0 [ 160.113966][ T2078] R13: ffff88810caa0028 R14: ffff888109914800 R15: 00000000000007f8 [ 160.114056][ T2078] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 160.114098][ T2078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.114112][ T2078] CR2: 00007fbec322df98 CR3: 00000001185ae000 CR4: 00000000003506f0 [ 160.114129][ T2078] Call Trace: [ 160.114135][ T2078] [ 160.114169][ T2078] ops_undo_list+0x27b/0x410 [ 160.114197][ T2078] cleanup_net+0x2f4/0x4f0 [ 160.114221][ T2078] process_scheduled_works+0x4ce/0x9d0 [ 160.114270][ T2078] worker_thread+0x582/0x770 [ 160.114295][ T2078] kthread+0x489/0x510 [ 160.114314][ T2078] ? finish_task_switch+0xad/0x2b0 [ 160.114391][ T2078] ? __pfx_worker_thread+0x10/0x10 [ 160.114447][ T2078] ? __pfx_kthread+0x10/0x10 [ 160.114468][ T2078] ret_from_fork+0x122/0x1b0 [ 160.114509][ T2078] ? __pfx_kthread+0x10/0x10 [ 160.114530][ T2078] ret_from_fork_asm+0x1a/0x30 [ 160.114555][ T2078] [ 160.114561][ T2078] ---[ end trace 0000000000000000 ]--- [ 160.167610][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3288'. [ 160.167669][T13567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3288'. [ 160.345875][ T2078] ------------[ cut here ]------------ [ 160.351386][ T2078] WARNING: CPU: 0 PID: 2078 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 160.361043][ T2078] Modules linked in: [ 160.362636][T13576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.364931][ T2078] CPU: 0 UID: 0 PID: 2078 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.373401][T13576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.384706][ T2078] Tainted: [W]=WARN [ 160.384713][ T2078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 160.384725][ T2078] Workqueue: netns cleanup_net [ 160.411454][ T2078] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 160.417004][ T2078] Code: 48 8d bb 70 0e 00 00 e8 85 3d b7 fc 48 8b bb 70 0e 00 00 e8 89 ec c3 fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 18 e4 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 0a e4 9b fc 90 0f 0b 90 4c 89 f7 e8 4e [ 160.436697][ T2078] RSP: 0018:ffffc900024dfc60 EFLAGS: 00010293 [ 160.442916][ T2078] RAX: ffffffff84bb6688 RBX: ffff88810caa0000 RCX: ffff888102439080 [ 160.450922][ T2078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810caa0e40 [ 160.459020][ T2078] RBP: ffffffff86c91080 R08: 0001ffff8684810f R09: 0000000000000000 [ 160.467094][ T2078] R10: ffffc900024dfbe8 R11: 0001c900024dfbe8 R12: ffffffff86c910a0 [ 160.475117][ T2078] R13: ffff88810caa0028 R14: ffff88810caa0e40 R15: ffff88810caa0000 [ 160.483101][ T2078] FS: 0000000000000000(0000) GS:ffff8882aee11000(0000) knlGS:0000000000000000 [ 160.492342][ T2078] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.498963][ T2078] CR2: 00007fbec55756c0 CR3: 000000010d102000 CR4: 00000000003506f0 [ 160.506925][ T2078] Call Trace: [ 160.510337][ T2078] [ 160.513302][ T2078] xfrm_net_exit+0x2d/0x60 [ 160.517717][ T2078] ops_undo_list+0x27b/0x410 [ 160.522364][ T2078] cleanup_net+0x2f4/0x4f0 [ 160.526833][ T2078] process_scheduled_works+0x4ce/0x9d0 [ 160.532322][ T2078] worker_thread+0x582/0x770 [ 160.536902][ T2078] kthread+0x489/0x510 [ 160.540984][ T2078] ? finish_task_switch+0xad/0x2b0 [ 160.546093][ T2078] ? __pfx_worker_thread+0x10/0x10 [ 160.551208][ T2078] ? __pfx_kthread+0x10/0x10 [ 160.555859][ T2078] ret_from_fork+0x122/0x1b0 [ 160.560500][ T2078] ? __pfx_kthread+0x10/0x10 [ 160.565094][ T2078] ret_from_fork_asm+0x1a/0x30 [ 160.569873][ T2078] [ 160.572879][ T2078] ---[ end trace 0000000000000000 ]--- [ 161.264602][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'. [ 161.424019][T13468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 161.440567][T13468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 161.453445][T13468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.471019][T13468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.488261][ T29] audit: type=1400 audit(1763107881.267:7678): avc: denied { append } for pid=13604 comm="syz.1.3305" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 161.577236][T13620] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3310'. [ 161.588161][T13468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.597450][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3311'. [ 161.609693][T13468] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.618938][ T2078] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.625999][ T2078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.645690][T13468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.656083][T13468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.667367][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 161.676283][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3312'. [ 161.686533][ T2078] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.693681][ T2078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.713610][T13630] syzkaller0: entered promiscuous mode [ 161.719105][T13630] syzkaller0: entered allmulticast mode [ 161.768255][T13468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.803797][T13648] 9pnet_fd: Insufficient options for proto=fd [ 161.861002][T13660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3323'. [ 161.882034][T13468] veth0_vlan: entered promiscuous mode [ 161.893890][T13468] veth1_vlan: entered promiscuous mode [ 161.913291][T13468] veth0_macvtap: entered promiscuous mode [ 161.920733][T13468] veth1_macvtap: entered promiscuous mode [ 161.931470][T13468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.942624][T13468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.959221][ T2146] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.996563][ T2146] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.020232][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.030778][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.042052][T13680] 9pnet_fd: Insufficient options for proto=fd [ 162.245083][T13710] 9pnet_fd: Insufficient options for proto=fd [ 162.288823][ T29] audit: type=1400 audit(1763107882.067:7679): avc: denied { write } for pid=13712 comm="syz.2.3344" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 162.380127][ T29] audit: type=1400 audit(1763107882.167:7680): avc: denied { read append } for pid=13712 comm="syz.2.3344" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.404969][ T29] audit: type=1400 audit(1763107882.167:7681): avc: denied { open } for pid=13712 comm="syz.2.3344" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 162.430531][T13715] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 162.522350][ T29] audit: type=1400 audit(1763107882.307:7682): avc: denied { cmd } for pid=13718 comm="syz.2.3346" path="socket:[38977]" dev="sockfs" ino=38977 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 162.649927][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.658433][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.042602][ T29] audit: type=1400 audit(1763107882.827:7683): avc: denied { read } for pid=13758 comm="syz.1.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.112914][T13774] netlink: 'syz.1.3372': attribute type 12 has an invalid length. [ 163.301215][ T29] audit: type=1400 audit(1763107883.087:7684): avc: denied { create } for pid=13775 comm="syz.0.3373" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 164.007247][T13797] __nla_validate_parse: 4 callbacks suppressed [ 164.007261][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3380'. [ 164.150733][T13821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3391'. [ 164.487620][T13837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3398'. [ 164.589988][T13847] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3403'. [ 164.632096][T13853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.640540][T13853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.142435][T13894] 9pnet_fd: Insufficient options for proto=fd [ 166.243469][T13914] loop2: detected capacity change from 0 to 7 [ 166.319413][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.326669][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.347096][T13920] batman_adv: batadv0: Interface deactivated: dummy0 [ 166.414808][T13920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.425348][T13920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.646682][T13942] 9pnet_fd: Insufficient options for proto=fd [ 166.758963][ T31] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.794895][ T31] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.806268][ T31] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.815427][ T31] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.992005][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 167.001057][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3447'. [ 167.157604][ T29] audit: type=1400 audit(1763107886.937:7685): avc: denied { accept } for pid=13978 comm="syz.2.3452" lport=34976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 167.204000][ T29] audit: type=1400 audit(1763107886.987:7686): avc: denied { connect } for pid=13981 comm="syz.5.3453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 167.949526][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3460'. [ 167.958427][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3460'. [ 168.151322][T14013] 9pnet_fd: Insufficient options for proto=fd [ 168.175424][T14015] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 168.273410][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.281851][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.399955][T14026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3468'. [ 168.419546][T14026] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3468'. [ 168.854922][T14061] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 168.881197][T14066] tipc: Enabling of bearer rejected, failed to enable media [ 169.797502][ T29] audit: type=1400 audit(1763107889.577:7687): avc: denied { read } for pid=14097 comm="syz.5.3495" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 169.819400][ T29] audit: type=1400 audit(1763107889.577:7688): avc: denied { open } for pid=14097 comm="syz.5.3495" path="/177/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 169.866749][T14102] tipc: Enabling of bearer rejected, failed to enable media [ 169.877444][T14100] 9pnet_fd: Insufficient options for proto=fd [ 170.049916][T14118] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 170.431412][T14139] 9pnet_fd: Insufficient options for proto=fd [ 170.490403][T14147] tipc: Enabling of bearer rejected, failed to enable media [ 170.727357][ T29] audit: type=1400 audit(1763107890.507:7689): avc: denied { block_suspend } for pid=14169 comm="syz.4.3519" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 170.788129][T14178] tipc: Enabling of bearer rejected, failed to enable media [ 170.815552][T14181] __nla_validate_parse: 3 callbacks suppressed [ 170.815566][T14181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3525'. [ 171.314141][T14216] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3537'. [ 171.368894][T14220] tipc: Enabling of bearer rejected, failed to enable media [ 171.896622][T14247] syzkaller0: entered promiscuous mode [ 171.902215][T14247] syzkaller0: entered allmulticast mode [ 171.922288][ T29] audit: type=1400 audit(1763107891.707:7690): avc: denied { mount } for pid=14248 comm="syz.4.3548" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 171.960311][ T29] audit: type=1400 audit(1763107891.747:7691): avc: denied { unmount } for pid=12724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 171.984804][T14253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3549'. [ 172.165949][T14258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'. [ 172.492981][T14283] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3561'. [ 172.572380][T14288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3563'. [ 173.801656][T14363] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.983715][T14383] 9pnet: Could not find request transport: fd0x0000000000000004 [ 174.170309][T14407] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3613'. [ 174.233854][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3606'. [ 174.245846][T14410] veth1_to_hsr: entered promiscuous mode [ 174.251657][T14410] macvlan2: entered allmulticast mode [ 174.257028][T14410] veth1_to_hsr: entered allmulticast mode [ 175.137464][T14441] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3626'. [ 175.212667][T14446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.221094][T14446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.321456][T14459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.330061][T14459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.488410][T14470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.556158][T14470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.086572][ T29] audit: type=1400 audit(1763107895.867:7692): avc: denied { bind } for pid=14480 comm="syz.2.3643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 176.201353][T14489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3646'. [ 176.232714][T14491] syzkaller0: entered promiscuous mode [ 176.238202][T14491] syzkaller0: entered allmulticast mode [ 177.150808][T14507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.159593][T14507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.217399][T14517] syzkaller0: entered promiscuous mode [ 177.222934][T14517] syzkaller0: entered allmulticast mode [ 177.716379][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3662'. [ 177.725259][T14530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3662'. [ 177.832579][T14534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3665'. [ 177.895173][T14542] syzkaller0: entered promiscuous mode [ 177.900768][T14542] syzkaller0: entered allmulticast mode [ 178.709583][T14595] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3693'. [ 178.811328][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'. [ 178.820256][T14602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'. [ 179.802090][T14648] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3715'. [ 179.827215][T14650] syzkaller0: entered promiscuous mode [ 179.832727][T14650] syzkaller0: entered allmulticast mode [ 180.005664][T14668] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.012820][T14668] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.051866][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 180.060814][T14671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3726'. [ 180.843751][T14701] tipc: Started in network mode [ 180.848735][T14701] tipc: Node identity c6ab1863b7f1, cluster identity 4711 [ 180.855856][T14701] tipc: Enabled bearer , priority 0 [ 180.867180][T14701] syzkaller0: entered promiscuous mode [ 180.872761][T14701] syzkaller0: entered allmulticast mode [ 181.084246][T14706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.116000][T14706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.170014][T14701] tipc: Resetting bearer [ 181.197956][T14698] tipc: Resetting bearer [ 181.222698][T14698] tipc: Disabling bearer [ 181.242852][T14720] netlink: 'syz.1.3747': attribute type 32 has an invalid length. [ 181.333855][T14722] syzkaller0: entered promiscuous mode [ 181.339455][T14722] syzkaller0: entered allmulticast mode [ 181.347476][T14722] tipc: Enabled bearer , priority 0 [ 181.355000][T14721] tipc: Resetting bearer [ 181.363103][T14721] tipc: Disabling bearer [ 181.442745][T14726] __nla_validate_parse: 2 callbacks suppressed [ 181.442760][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 181.457923][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3750'. [ 181.641268][T14737] syzkaller0: entered promiscuous mode [ 181.646808][T14737] syzkaller0: entered allmulticast mode [ 181.913300][T14744] ieee802154 phy0 wpan0: encryption failed: -22 [ 181.993430][T14751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.001979][T14751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.101151][T14781] netlink: 'syz.1.3773': attribute type 32 has an invalid length. [ 184.037275][T14817] syzkaller0: entered promiscuous mode [ 184.042827][T14817] syzkaller0: entered allmulticast mode [ 184.049859][T14817] tipc: Enabled bearer , priority 0 [ 184.056910][T14816] tipc: Resetting bearer [ 184.069680][T14816] tipc: Disabling bearer [ 184.509576][T14821] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3788'. [ 185.362249][T14866] 9pnet_fd: Insufficient options for proto=fd [ 185.718622][T14877] tmpfs: Unknown parameter 'usrquota' [ 185.977350][T14898] tipc: Enabled bearer , priority 0 [ 185.996329][T14898] syzkaller0: entered promiscuous mode [ 186.001853][T14898] syzkaller0: entered allmulticast mode [ 186.045191][T14898] tipc: Resetting bearer [ 186.054468][T14897] tipc: Resetting bearer [ 186.067591][T14897] tipc: Disabling bearer [ 186.317113][T14916] FAT-fs (loop1): unable to read boot sector [ 186.441343][T14919] syzkaller0: entered promiscuous mode [ 186.446912][T14919] syzkaller0: entered allmulticast mode [ 186.561630][ T29] audit: type=1400 audit(1763107906.347:7693): avc: denied { read } for pid=14920 comm="syz.1.3831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 187.722182][T14957] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3846'. [ 187.892185][T14978] 9pnet_fd: Insufficient options for proto=fd [ 189.212134][T15051] 9pnet_fd: Insufficient options for proto=fd [ 189.307149][T15067] tipc: Enabled bearer , priority 0 [ 189.329852][T15066] tipc: Disabling bearer [ 189.441002][T15079] 9pnet_fd: Insufficient options for proto=fd [ 189.530627][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3906'. [ 189.815645][T15110] 9pnet_fd: Insufficient options for proto=fd [ 191.311467][T15183] syzkaller0: entered promiscuous mode [ 191.316959][T15183] syzkaller0: entered allmulticast mode [ 192.221815][T15226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3954'. [ 192.282500][T15226] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3954'. [ 192.421154][T15241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.429757][T15241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.714380][T15249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.722849][T15249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.079960][T15262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3969'. [ 193.089803][T15262] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3969'. [ 193.110206][T15263] tipc: Enabling of bearer rejected, failed to enable media [ 193.122017][T15269] tipc: Enabled bearer , priority 0 [ 193.129599][T15269] syzkaller0: entered promiscuous mode [ 193.135074][T15269] syzkaller0: entered allmulticast mode [ 193.144233][T15269] tipc: Resetting bearer [ 193.162536][T15268] tipc: Resetting bearer [ 193.176690][T15268] tipc: Disabling bearer [ 193.187852][T15273] syzkaller0: entered promiscuous mode [ 193.193517][T15273] syzkaller0: entered allmulticast mode [ 193.690133][T15295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3981'. [ 193.699803][T15295] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3981'. [ 193.772283][T15309] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.779395][T15309] bridge0: port 2(bridge_slave_1) entered listening state [ 193.786547][T15309] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.793654][T15309] bridge0: port 1(bridge_slave_0) entered listening state [ 193.803188][T15297] tipc: Enabling of bearer rejected, failed to enable media [ 193.925340][T15334] tipc: Enabled bearer , priority 0 [ 193.932569][T15334] syzkaller0: entered promiscuous mode [ 193.938040][T15334] syzkaller0: entered allmulticast mode [ 193.952970][T15334] tipc: Resetting bearer [ 193.959603][T15333] tipc: Resetting bearer [ 194.022189][T15333] tipc: Disabling bearer [ 194.127493][T15346] tipc: Enabling of bearer rejected, failed to enable media [ 194.129620][T15357] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4003'. [ 194.136362][ T29] audit: type=1326 audit(1763107913.907:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.168794][ T29] audit: type=1326 audit(1763107913.907:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.192322][ T29] audit: type=1326 audit(1763107913.907:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.215844][ T29] audit: type=1326 audit(1763107913.907:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.239227][ T29] audit: type=1326 audit(1763107913.907:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.239256][ T29] audit: type=1326 audit(1763107913.907:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.239282][ T29] audit: type=1326 audit(1763107913.907:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.239335][ T29] audit: type=1326 audit(1763107913.907:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.239418][ T29] audit: type=1326 audit(1763107913.907:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.239443][ T29] audit: type=1326 audit(1763107913.907:7703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15356 comm="syz.2.4003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f441e00f6c9 code=0x7ffc0000 [ 194.796332][T15383] tipc: Enabled bearer , priority 0 [ 194.803924][T15383] syzkaller0: entered promiscuous mode [ 194.809431][T15383] syzkaller0: entered allmulticast mode [ 194.829294][T15383] tipc: Resetting bearer [ 194.885245][T15382] tipc: Resetting bearer [ 194.902706][T15382] tipc: Disabling bearer [ 195.374354][T15413] tipc: Enabling of bearer rejected, failed to enable media [ 195.466776][T15423] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 195.859038][T15443] FAT-fs (loop1): unable to read boot sector [ 196.202704][T15453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.211177][T15453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.261378][T15455] tipc: Enabling of bearer rejected, failed to enable media [ 196.521645][T15480] tipc: Enabling of bearer rejected, failed to enable media [ 196.530490][T15480] syzkaller0: entered promiscuous mode [ 196.535953][T15480] syzkaller0: entered allmulticast mode [ 196.935663][T15506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.944254][T15506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.535829][T15553] tipc: Enabling of bearer rejected, failed to enable media [ 198.544862][T15553] syzkaller0: entered promiscuous mode [ 198.550410][T15553] syzkaller0: entered allmulticast mode [ 198.657244][T15557] tipc: Enabled bearer , priority 0 [ 198.669926][T15556] tipc: Disabling bearer [ 198.965658][T15600] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 199.128889][T15612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.137421][T15612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.149955][ T2078] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.212062][ T2078] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.262004][ T2078] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.307212][T15614] chnl_net:caif_netlink_parms(): no params data found [ 199.317937][ T2078] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.353358][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.360482][T15614] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.367572][T15614] bridge_slave_0: entered allmulticast mode [ 199.373944][T15614] bridge_slave_0: entered promiscuous mode [ 199.380596][T15614] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.387611][T15614] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.394766][T15614] bridge_slave_1: entered allmulticast mode [ 199.401253][T15614] bridge_slave_1: entered promiscuous mode [ 199.418101][T15614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.428479][T15614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.454028][T15614] team0: Port device team_slave_0 added [ 199.462568][T15614] team0: Port device team_slave_1 added [ 199.472261][ T2078] bridge_slave_1: left allmulticast mode [ 199.477933][ T2078] bridge_slave_1: left promiscuous mode [ 199.483707][ T2078] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.491327][ T2078] bridge_slave_0: left allmulticast mode [ 199.496938][ T2078] bridge_slave_0: left promiscuous mode [ 199.502613][ T2078] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.620308][ T2078] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.630724][ T2078] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.640063][ T2078] bond0 (unregistering): Released all slaves [ 199.655493][T15635] tipc: Enabled bearer , priority 0 [ 199.665884][T15614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.672872][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.698767][T15614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.709521][ T2078] tipc: Left network mode [ 199.709960][T15614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.720877][T15614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.746901][T15614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.758483][T15635] syzkaller0: entered promiscuous mode [ 199.764133][T15635] syzkaller0: entered allmulticast mode [ 199.764472][T15640] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 199.837039][ T2078] hsr_slave_0: left promiscuous mode [ 199.844777][ T2078] hsr_slave_1: left promiscuous mode [ 199.850467][ T2078] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.857985][ T2078] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.865573][ T2078] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.873023][ T2078] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.883896][ T2078] veth1_to_hsr: left allmulticast mode [ 199.889391][ T2078] veth1_to_hsr: left promiscuous mode [ 199.895298][ T2078] veth1_macvtap: left promiscuous mode [ 199.901134][ T2078] veth0_macvtap: left promiscuous mode [ 199.906676][ T2078] veth1_vlan: left promiscuous mode [ 199.911922][ T2078] veth0_vlan: left promiscuous mode [ 199.992941][ T2078] team0 (unregistering): Port device team_slave_1 removed [ 200.002268][ T2078] team0 (unregistering): Port device team_slave_0 removed [ 200.031008][T15634] tipc: Resetting bearer [ 200.042622][T15634] tipc: Disabling bearer [ 200.062824][T15614] hsr_slave_0: entered promiscuous mode [ 200.068936][T15614] hsr_slave_1: entered promiscuous mode [ 200.133135][T15614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 200.141877][T15614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 200.150625][T15614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 200.159521][T15614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 200.214127][T15614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.229938][T15614] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.249233][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.256373][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.281512][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.288661][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.595295][T15614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.686299][T15614] veth0_vlan: entered promiscuous mode [ 200.693778][T15614] veth1_vlan: entered promiscuous mode [ 200.707511][T15614] veth0_macvtap: entered promiscuous mode [ 200.746179][T15614] veth1_macvtap: entered promiscuous mode [ 200.756087][T15614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.766570][T15614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.777879][ T41] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.791184][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.802093][ T2078] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.813122][ T2078] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.881510][T15701] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4126'. [ 200.909667][T15704] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 201.041315][T15716] sctp: [Deprecated]: syz.0.4133 (pid 15716) Use of int in max_burst socket option deprecated. [ 201.041315][T15716] Use struct sctp_assoc_value instead [ 201.131095][T15731] tipc: Started in network mode [ 201.135972][T15731] tipc: Node identity dac4aa0431e4, cluster identity 4711 [ 201.143161][T15731] tipc: Enabled bearer , priority 0 [ 201.151234][T15731] syzkaller0: entered promiscuous mode [ 201.156693][T15731] syzkaller0: entered allmulticast mode [ 201.164527][T15730] tipc: Resetting bearer [ 201.171913][T15730] tipc: Disabling bearer [ 201.582941][T15743] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 201.782100][T15751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.791045][T15751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.887856][T15757] tipc: Enabled bearer , priority 0 [ 201.896668][T15756] tipc: Disabling bearer [ 202.601629][T15789] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4160'. [ 202.675188][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 202.675201][ T29] audit: type=1326 audit(1763107922.457:7723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.675352][T15797] loop1: detected capacity change from 0 to 2048 [ 202.681380][ T29] audit: type=1326 audit(1763107922.457:7724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.705864][ T29] audit: type=1326 audit(1763107922.467:7725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.758161][ T29] audit: type=1326 audit(1763107922.467:7726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.769358][T15797] EXT4-fs mount: 18 callbacks suppressed [ 202.769372][T15797] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.781730][ T29] audit: type=1326 audit(1763107922.467:7727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.788084][T15797] ext4 filesystem being mounted at /312/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.799354][ T29] audit: type=1326 audit(1763107922.467:7728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.830257][T15797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.833349][ T29] audit: type=1326 audit(1763107922.467:7729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.864348][T15797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.865015][ T29] audit: type=1326 audit(1763107922.467:7730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.919661][ T29] audit: type=1326 audit(1763107922.467:7731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 202.952904][ T29] audit: type=1326 audit(1763107922.547:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.5.4166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c576f6c9 code=0x7ffc0000 [ 203.055169][T15808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4167'. [ 203.205635][T15824] syzkaller0: entered promiscuous mode [ 203.211199][T15824] syzkaller0: entered allmulticast mode [ 203.536226][T12323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.858263][T15840] loop4: detected capacity change from 0 to 512 [ 203.870252][T15840] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4178: couldn't read orphan inode 26 (err -116) [ 203.882741][T15840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.895400][T15840] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.025578][T12724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.113089][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4180'. [ 205.331963][T15883] syzkaller0: entered promiscuous mode [ 205.337458][T15883] syzkaller0: entered allmulticast mode [ 205.353944][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4194'. [ 205.386236][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.393337][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.522163][T15930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4209'. [ 206.531890][T15930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4209'. [ 207.613782][T15977] syzkaller0: entered promiscuous mode [ 207.619304][T15977] syzkaller0: entered allmulticast mode [ 207.635998][T15977] tipc: Enabled bearer , priority 0 [ 207.649737][T15976] tipc: Resetting bearer [ 207.668267][T15976] tipc: Disabling bearer [ 207.909572][T15993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4236'. [ 207.919335][T15993] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4236'. [ 207.928659][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 207.928670][ T29] audit: type=1326 audit(1763107927.707:7790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 207.958194][ T29] audit: type=1326 audit(1763107927.707:7791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 207.998979][ T29] audit: type=1326 audit(1763107927.777:7792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.022548][ T29] audit: type=1326 audit(1763107927.777:7793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.046027][ T29] audit: type=1326 audit(1763107927.777:7794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.069519][ T29] audit: type=1326 audit(1763107927.777:7795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.093047][ T29] audit: type=1326 audit(1763107927.777:7796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.116720][ T29] audit: type=1326 audit(1763107927.777:7797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.188574][ T29] audit: type=1326 audit(1763107927.787:7798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.197072][T15999] tipc: Enabled bearer , priority 0 [ 208.212089][ T29] audit: type=1326 audit(1763107927.897:7799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15988 comm="syz.4.4235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc24803f6c9 code=0x7ffc0000 [ 208.251159][T15999] tipc: Resetting bearer [ 208.272754][T16002] loop5: detected capacity change from 0 to 512 [ 208.280534][T15998] tipc: Disabling bearer [ 208.293172][T16004] syzkaller0: entered promiscuous mode [ 208.298780][T16004] syzkaller0: entered allmulticast mode [ 208.304756][T16002] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4237: couldn't read orphan inode 26 (err -116) [ 208.318894][T16004] tipc: Enabled bearer , priority 0 [ 208.323213][T16002] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.337965][T16002] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.338068][T16003] tipc: Resetting bearer [ 208.366922][T16003] tipc: Disabling bearer [ 208.504387][T11207] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.545290][T16024] loop1: detected capacity change from 0 to 164 [ 208.563071][T16024] Unable to read rock-ridge attributes [ 208.873588][T16037] sctp: [Deprecated]: syz.1.4252 (pid 16037) Use of int in max_burst socket option deprecated. [ 208.873588][T16037] Use struct sctp_assoc_value instead [ 208.969193][T16041] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4254'. [ 209.011591][T16042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4253'. [ 209.044266][T16049] syzkaller0: entered promiscuous mode [ 209.049815][T16049] syzkaller0: entered allmulticast mode [ 209.087208][T16049] tipc: Enabled bearer , priority 0 [ 209.095848][T16048] tipc: Resetting bearer [ 209.104839][T16048] tipc: Disabling bearer [ 209.113587][T16055] loop1: detected capacity change from 0 to 164 [ 209.121942][T16055] Unable to read rock-ridge attributes [ 209.549157][T13932] ================================================================== [ 209.557248][T13932] BUG: KCSAN: data-race in wg_socket_send_skb_to_peer / wg_socket_send_skb_to_peer [ 209.566512][T13932] [ 209.568818][T13932] read-write to 0xffff88810cc443b8 of 8 bytes by task 31 on cpu 1: [ 209.576679][T13932] wg_socket_send_skb_to_peer+0xe8/0x130 [ 209.582294][T13932] wg_socket_send_buffer_to_peer+0xf1/0x120 [ 209.588166][T13932] wg_packet_handshake_send_worker+0x10d/0x160 [ 209.594296][T13932] process_scheduled_works+0x4ce/0x9d0 [ 209.599740][T13932] worker_thread+0x582/0x770 [ 209.604326][T13932] kthread+0x489/0x510 [ 209.608373][T13932] ret_from_fork+0x122/0x1b0 [ 209.612937][T13932] ret_from_fork_asm+0x1a/0x30 [ 209.617678][T13932] [ 209.619977][T13932] read-write to 0xffff88810cc443b8 of 8 bytes by task 13932 on cpu 0: [ 209.628103][T13932] wg_socket_send_skb_to_peer+0xe8/0x130 [ 209.633711][T13932] wg_packet_tx_worker+0x12d/0x330 [ 209.638885][T13932] process_scheduled_works+0x4ce/0x9d0 [ 209.644325][T13932] worker_thread+0x582/0x770 [ 209.648889][T13932] kthread+0x489/0x510 [ 209.652933][T13932] ret_from_fork+0x122/0x1b0 [ 209.657497][T13932] ret_from_fork_asm+0x1a/0x30 [ 209.662237][T13932] [ 209.664534][T13932] value changed: 0x00000000000006a0 -> 0x0000000000000734 [ 209.671611][T13932] [ 209.673909][T13932] Reported by Kernel Concurrency Sanitizer on: [ 209.680036][T13932] CPU: 0 UID: 0 PID: 13932 Comm: kworker/0:14 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 209.691550][T13932] Tainted: [W]=WARN [ 209.695326][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 209.705358][T13932] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 209.711410][T13932] ==================================================================