last executing test programs: 1m33.401047947s ago: executing program 4 (id=37): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x50028, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x18) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) listen(0xffffffffffffffff, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 1m32.547748116s ago: executing program 4 (id=46): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r4, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m32.49387696s ago: executing program 4 (id=49): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000080)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@noquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) unlink(&(0x7f0000000180)='./file1\x00') 1m32.314818875s ago: executing program 4 (id=51): socket(0x11, 0x3, 0x2) (async) r0 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x2, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r4, 0x3, {0x1, 0xf0, 0x4}, 0x2}, 0x18, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async) sendmsg$can_j1939(r7, &(0x7f00000003c0)={&(0x7f0000000140)={0x1d, r4, 0x3, {0x1, 0xf0, 0x4}, 0x2}, 0x18, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8040) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000300)={[{@errors_remount}, {@noload}, {@nogrpid}, {@usrquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) (async) mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) r8 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r8, &(0x7f0000000740)=""/384, 0x200008ca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f0000000080)={0x0, 0x7fffffff, 0x0, 'queue0\x00', 0x400}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff12850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='virtio_transport_alloc_pkt\x00', r9}, 0x10) r11 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x358, 0x0) (async) ptrace$pokeuser(0x6, r11, 0x358, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000700)=0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x5, 0x3, 0x1, 0x1f9, 0x8, 0xf49, r11, r12}) (async) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000880)={{0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x5, 0x3, 0x1, 0x1f9, 0x8, 0xf49, r11, r12}) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x2, 0x6, 0x3, 0x0, 0x630, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3000000, 0x4b89934279053887, @perf_config_ext={0x8c, 0xffffffffffffffff}, 0x400c, 0x9, 0x5, 0x8, 0x2, 0x0, 0x3, 0x0, 0xe7ef, 0x0, 0x5}, r12, 0x1, r10, 0x0) (async) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x2, 0x6, 0x3, 0x0, 0x630, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3000000, 0x4b89934279053887, @perf_config_ext={0x8c, 0xffffffffffffffff}, 0x400c, 0x9, 0x5, 0x8, 0x2, 0x0, 0x3, 0x0, 0xe7ef, 0x0, 0x5}, r12, 0x1, r10, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) 1m31.391481819s ago: executing program 4 (id=67): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_POLICE={0x4}]}}]}, 0x38}}, 0x20000050) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0xfffffffffffffe0e, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80), 0x2002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='unlock i'], 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r7 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 1m31.172638596s ago: executing program 4 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.137027369s ago: executing program 32 (id=70): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 1.194134663s ago: executing program 2 (id=3339): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40001000) 972.086531ms ago: executing program 1 (id=3347): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a86372"], 0x12) 817.951063ms ago: executing program 1 (id=3353): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000097000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 758.077248ms ago: executing program 5 (id=3354): syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}, {@permit_directio}, {@hash}]}, 0x1, 0x56f, &(0x7f00000004c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000001c00)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000f8ff00000000bfa200000000000007020000f8ffffffb703000008000047cbf018c32f5bc3f73f95016ccd732487fcf1936dab217840f2468bd3e20bb7f1b17368af949a20068d6ff2cbff363548fb55c70209e32db842ff57ac8ddfa2b47484e85b508293c116ac09d86f0af9c2ecf9beeb5f7004e95088d1c9a2be6bb421d2f47ac4747fc5df8753a32737531499c5d48d5b4ef356fda6e1ca659de96b18e755ce3990ace8d11bb0"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00\x00 \x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kvm_unmap_hva_range\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x80) fcntl$notify(r5, 0x402, 0x8000001f) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=G']) fcntl$notify(r6, 0x402, 0x8000003d) close_range(r5, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000002c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 757.723869ms ago: executing program 1 (id=3355): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="0200000004000000060000000500000000"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) 756.463089ms ago: executing program 1 (id=3357): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) 698.584433ms ago: executing program 0 (id=3358): syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), 0xffffffffffffffff) syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000180)='./file1\x00', 0x1004001, &(0x7f0000000380)=ANY=[], 0x2, 0x81c, &(0x7f0000000d00)="$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") getcwd(&(0x7f0000000000)=""/185, 0xb9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket(0xa, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x1, 0x85}]}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r4, 0x0, 0x200000000000006}, 0x18) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$inet_opts(r2, 0x0, 0x1, &(0x7f0000000980)="9fd2", 0x2) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@int=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, r6, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0xd}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x200408c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae091f75cd9701ffa62891f686bfbb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003875c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100000}, 0x8, 0x10, &(0x7f0000000000), 0xfffffffffffffe11}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x22a, &(0x7f0000001580)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x7, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "997671", 0x1f0, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, {[@srh={0x3a, 0xa, 0x4, 0x5, 0xa4, 0x28, 0x2df, [@loopback, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @routing={0x73, 0x6, 0x0, 0x3, 0x0, [@mcast2, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}, @dstopts={0x2c, 0x1, '\x00', [@pad1, @generic={0x3, 0x5, "b2be3b8695"}, @ra={0x5, 0x2, 0x9}]}, @srh={0x88, 0x6, 0x4, 0x3, 0x0, 0x38, 0x6, [@dev={0xfe, 0x80, '\x00', 0x18}, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private0, [{0x18, 0xb, "053dc5fd551c3a7e2a1d8de99bf7face065002eaf1e3bf080ac5b46c99072e53f8148d6693339fbeb678de80a4ee658efde69641818a59b0285cabab7876486cce022495a145a79be94230496b24a7809a0b0ec7fbbfb2"}, {0x1, 0x9, "f666087b4efb167a973aac74e1878996818b2c312583055b13d078cc2eb939f8638a8529e2427704b8d9d2b01f9ecf7e4e174e1f705002d478ef6852a3f8103a9d312aa19046eb427f47"}, {0x19, 0x7, "9b328ac94f0acc936a0c8b3c4a30cdaa1dd07735a943fcce364359948c34e4c797a4199b1e8792fc146ad8001a16bade749e92c67debca99d6f5632f28"}, {0x19}, {0x18}]}}}}}}, 0x0) 697.400113ms ago: executing program 1 (id=3359): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x800000000006}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0xe, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r7, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) 686.425654ms ago: executing program 5 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfdfe, @local, 'vcan0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000009) 609.49653ms ago: executing program 0 (id=3361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[{0x20, 0x119, 0x10001, "3fb2deede9021cf786d2eb"}, {0xa0, 0x103, 0x8, "f1103e9d46814893494eab7841a60b4c6b28e86feee5b55beb92c94fbf15927a5d0f5a514eef1e4f5e6023aa31ccb1846ed61af57515463479ebb5f1c9f8c8d305c945612389cdbe82efadecd1ac9d57a7e192654f20d18d3110472bb4972872496137aaee8429238b75a503d9a67f6e7e3438bf9feafbd66a1993351850d26c253f3b5ec855c4026e"}, {0xb0, 0x235edfcf1ad994a3, 0x2, "38fbef01a91d22b390b72b9986c3edcb7ac49b15e89d59083171945ae02e7bad992bbced2eff386bbd9d91cddd5df871a6ede5432c5ddf7af4461962c06741ffa8e935e12fcd1eb894aa03249ab5f87e49ce570d6c915633be3ab6ce297b42805ea76deb20c9889d8fbf956b95b6e0e921a255996cfce6dd010c15420fb97b0e05c8d4a7005f8d3738e69c8cf0f75e2d48ee8b99a3d4e376c7"}, {0x70, 0x29, 0xffffffff, "61fc9d9f9291a34b19330c89131cc00eb7ca5ccf33bfb1c21ba7a142715b6b5ef0e8c356d71cec660ae758a5c814dac4ec9d2713b2502240e3b1dde9a6023dd97efe7dc1b4139a76cf068f7c302f9a6b9893f46e14efe30baae77f"}, {0x1008, 0x13, 0x0, "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"}], 0x11e8}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) 549.816305ms ago: executing program 0 (id=3362): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r1 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) 503.717049ms ago: executing program 3 (id=3364): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r3, 0x4) 460.427043ms ago: executing program 3 (id=3365): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x202, 0x0, 0xffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x2, @perf_bp={0x0}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64], 0x20) 459.842822ms ago: executing program 0 (id=3366): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xa0c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x800000, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0x3) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 413.924826ms ago: executing program 3 (id=3367): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x4, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, @perf_bp={0x0, 0xf}, 0x1000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a7645100b2ffbdb0ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14faecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9cf53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d0842835e81c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b2f113ad4c7915c8f82c333a7b350802f03b0057010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000000ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55a8a89b60317cd78ea1dc8e0f77f2c1e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f842cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2beaf4510134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44be9ae094c1b81d3ef947692b44d2afb09c7498dedf0f87c38bbcab7357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2002045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed8c631be6411f9927fe9f6b43ec83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea5919ffff72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff153d20f3681f7a3a31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f5cb6dbb714487a9145e9d2918846e78072e0b8f6df849e7f5e3c7e92292c858570d210720102d509083e7af826d9d9f5e4fb389d782e26f243be0c05b9c60383ad28ea3d21466c8d87a4c9cf649315fbd62a6aa4188abb6d8d42785a4ae50157d76efb9c8df83b1c35daad5afaebc7756af1b80d92e8f96a6332e429f6939c230169307e92acd283063304bf6243a0e1f5487bbd54da9fed9bee94d374cc55333fb5c4760cc9ba610937c0f107ef6fbad781863a56897c93c7de1defeaefcef70692d3a8bbf7a4364eac7d608c69caec0f4df2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000800073012f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/63}, 0x20) 413.411496ms ago: executing program 0 (id=3368): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x4, 0x1, 0x13}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 410.974596ms ago: executing program 1 (id=3369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) unshare(0x2c020400) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='rpc_stats_latency\x00', r6}, 0xff7f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000810) sendmsg$nl_route(r7, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) socket$inet_tcp(0x2, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0xa, 0xfe, 0x8001}]}) gettid() write$ppp(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)={0x40, r2, 0x8d61ddcfedb48df, 0x0, 0x1000000, {}, [@ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '))\\\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd", @ANYRES32=r8, @ANYBLOB="03008c0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x2, 0x3f4, &(0x7f00000006c0)={{0x12, 0x1, 0x310, 0x8c, 0x56, 0xb5, 0x8, 0xc45, 0x627f, 0xb8b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e2, 0x3, 0x40, 0x8, 0x50, 0x0, [{{0x9, 0x4, 0xd7, 0x67, 0x7, 0x66, 0xbf, 0xeb, 0x2, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "7d9ced"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x1, 0x6, 0x4b}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "022bdd1f4941"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x5, 0xfff1, 0x3}, {0x6, 0x24, 0x1a, 0x1, 0xa}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x19d5}]}], [{{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x41, 0x8a, 0x6}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0x7, 0x4, 0x54}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xb, 0x71, 0x1d, [@generic={0x2, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0xc, 0x9, 0xd, [@generic={0x101, 0xa, "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"}, @generic={0x9d, 0x8, "813c275fd0a5bc6fb0e46f8a9834d43c53829d71b6cb4f6917a7d70fc2960a4ef63547a2b1ba5b8e02e828a0b7ee335852a1e71dfd19cd56425956eed2ff371d6502127b25fd09e865190bfb4500fd31c524b9619440a81166e413174a50866356fa2cd61fe4d58ffe5ef0edd425f0173b3a8350f45ce77b8f9467a5d103d9b24a704b0360eb25ce651e9accacb9e4a9ed54a27cf44a2b24bc5b4f"}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x1, 0xed, 0xb4, [@generic={0x42, 0xc, "bde74b1af94733dc0ae93f01d7c4778e38839cb56503dad683cba1b0aeec3f3278e467bae7617270f0f0476394713e348afbb92612d6a86b3f947c0adf2b0104"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xb, 0x80, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1928}]}}, {{0x9, 0x5, 0x49294694143d105c, 0x0, 0x200, 0x6, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x2}]}}]}}, {{0x9, 0x4, 0xe, 0x7, 0x0, 0xdf, 0x80, 0x9e, 0x2, [@hid_hid={0x9, 0x21, 0x1000, 0x8, 0x1, {0x22, 0xc6c}}]}}, {{0x9, 0x4, 0xfe, 0x9, 0x4, 0x5a, 0x12, 0x64, 0x8, [], [{{0x9, 0x5, 0x8, 0x0, 0x40, 0x6, 0x1, 0x40}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x0, 0x4, 0x2}}, {{0x9, 0x5, 0x9, 0x8, 0x20, 0xe, 0x1, 0x9, [@generic={0xed, 0xa, "c4af65481b1fa60843ae78b3f8e62511f388b2793a71d11b3f48da6b02af1709548a8d335894010f803f4db22124a3a4cb62dac633c69c42e355e05bca445cc6598881378a4dc8443be55cbace1948489785faa427a5a1c46d0d8533ebe9ee897f25dd9d8f6863a73429a9e62449b40398d4f5c5169195da451d236ca04d27a4e3183797ded4ec81d6320c234e28b5d375d14a6b7a913166227ca462e6b6c1045da969fdbff129403195df8f71fe15804fc1e791551eadfaad109f2252a7d2283388a469dfcebd06cb2b1174a2713e8e8a72466037b90eb1f9c95a5fed0f2ba20fb81a71a611c4c3839343"}, @generic={0xe, 0x23, "ec7e03a5a38a7dc302181fad"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0x6, 0x83}}]}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x7, 0x3, 0x81, 0x40, 0x2}, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x440a}}, {0xf9, &(0x7f0000000340)=@string={0xf9, 0x3, "e94e3ede6db9be63456de3148055f42947603b6aa4f4c680f15aa212371973a5771a10b287f6810f4ae331a53d8db714ac9ba0896f00b427b5e91bfb4bc240c7603165d250af570e55e227777f9c2e62d96adc84c4720c3955294b26e3b29c57dc7749573990fa651b1c30a70574042518184b1bd56cf4f7bea6ca71ba4dafb004da5a3629a80c3c68a4a72f86232cadb859e944a367c6bd166d914c3502f22bbe513814ab32de596e5e2d65db86f9924dd2392ee76f049a8d12cfbec7c3ff956b007d1a0b5de9f70a5280092d5210441b281bfbbf192a3c1e6fa1362dd11f4ad7c532e5a9b6613848827a05e1696dff1247021b61519b"}}, {0x4e, &(0x7f0000000440)=@string={0x4e, 0x3, "cc4bb264bb049b2bbcc03e43ee3a696b347e484b19c9a90822c98018ecc7a56e6249992f0fa41a0a84ec3c5d06ebffcab8d8dde1b3fd4efb9c758000352880c10da134eb3d5582c5d224044c"}}, {0x6c, &(0x7f00000004c0)=@string={0x6c, 0x3, "e19d85e5839e061f78543b268d7a054b6c1d0494e68e2aad7a46820b9f94c5b81419bfd380da2f0dfb95570e8519ef982eb435baf8a7bc1aebed44b9a537208f67485cc0a3fcacddfcd03fc50c0e86fd442af7d8c9ce8bb6e1f5502f5dcdc90643b3ebf519b12524d7d5"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x80c}}, {0x63, &(0x7f0000000580)=@string={0x63, 0x3, "fd7b8985ad8cebff4ec16c6789132f029539b92236a3187401bf5d0b5a36ba229d3c181e002cebf2c90b923da10da3c1df71006cc7f7345a33ea5634d4de93e61109755169de6b9d3d350c79ca65fe2265a57695134aba1b3d9bbc1ca54c4835b9"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x180a}}]}) 286.271466ms ago: executing program 2 (id=3370): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4ab}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x54}}, 0x8000) r2 = socket$unix(0x1, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x4) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000100d1aa00"/20], 0x0, 0x1200) memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={r3, 0x2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r4}, 0x10) r5 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r5, &(0x7f0000002480)=[{}], 0x1) set_mempolicy(0x1, &(0x7f00000001c0)=0x5, 0x8000000000000000) semop(r5, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000000)='rxrpc_local\x00'}, 0x18) r6 = socket$kcm(0x21, 0x2, 0x2) fstat(r4, &(0x7f0000000080)) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000040)}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) 251.21664ms ago: executing program 2 (id=3374): socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x5, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x10, 0x2, 0x0, 0xff, 0x0, 0xcbf0, 0x241a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x3, @perf_config_ext={0xffff8880b8722b10, 0x80000001}, 0x0, 0x5, 0xffffffff, 0x0, 0x4, 0xfffffffc, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 214.895602ms ago: executing program 3 (id=3375): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r2, 0x4) 214.360382ms ago: executing program 3 (id=3376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfdfe, @local, 'vcan0\x00'}}, 0x1e) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) 212.867993ms ago: executing program 5 (id=3377): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x3, 0x4, 0xb2, 0x1, 0x28}, 0x50) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x10) 182.557895ms ago: executing program 2 (id=3378): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xa) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff01800400080039503230"], 0x15) r1 = dup(0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sigaltstack(0x0, 0x0) 96.193142ms ago: executing program 5 (id=3379): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x800) 94.801082ms ago: executing program 2 (id=3380): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)}, 0x1) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, &(0x7f0000000480), 0x4) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40001000) 32.237687ms ago: executing program 5 (id=3381): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4ab}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_RATE={0x6, 0x5, {0x0, 0x2}}]}, 0x54}}, 0x8000) r2 = socket$unix(0x1, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x4) connect$unix(r2, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000100d1aa00"/20], 0x0, 0x1200) memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES16, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000040000200010000001ffe02000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="3db035abd298f9012d5663b12978b1e9f7ae48bc5762afbfa7756df38e"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup, 0x7, 0x1, 0x4, &(0x7f0000000440)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000080)={0xa}, 0x8) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200)={0xffff}, 0x8) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000003c0)={0x2, 0x0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f0000000380), &(0x7f0000000640)=r3}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000740)=r7, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000780)={@ifindex=r4, 0xffffffffffffffff, 0xb, 0x0, r0, @void, @value=r0, @void, @void, r6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) get_robust_list(0x0, &(0x7f0000000940)=0x0, &(0x7f0000000980)) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) kernel console output (not intermixed with test programs): eactivated: batadv_slave_0 [ 46.042307][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.061719][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.069142][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.098084][ T3396] syz!: Port: 1 Link DOWN [ 46.125845][ T4329] Illegal XDP return value 4294967294 on prog (id 188) dev N/A, expect packet loss! [ 46.226152][ T4331] bond1: entered promiscuous mode [ 46.231307][ T4331] bond1: entered allmulticast mode [ 46.236803][ T4331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.249009][ T4331] bond1 (unregistering): Released all slaves [ 46.431833][ T4348] loop2: detected capacity change from 0 to 2048 [ 46.482268][ T4348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.492171][ T4317] syz.5.200 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 46.508405][ T4317] CPU: 1 UID: 0 PID: 4317 Comm: syz.5.200 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 46.508436][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.508450][ T4317] Call Trace: [ 46.508456][ T4317] [ 46.508532][ T4317] __dump_stack+0x1d/0x30 [ 46.508554][ T4317] dump_stack_lvl+0xe8/0x140 [ 46.508575][ T4317] dump_stack+0x15/0x1b [ 46.508593][ T4317] dump_header+0x81/0x220 [ 46.508682][ T4317] oom_kill_process+0x342/0x400 [ 46.508723][ T4317] out_of_memory+0x979/0xb80 [ 46.508756][ T4317] try_charge_memcg+0x5e6/0x9e0 [ 46.508897][ T4317] obj_cgroup_charge_pages+0xa6/0x150 [ 46.508931][ T4317] __memcg_kmem_charge_page+0x9f/0x170 [ 46.508965][ T4317] __alloc_frozen_pages_noprof+0x188/0x360 [ 46.509066][ T4317] alloc_pages_mpol+0xb3/0x250 [ 46.509101][ T4317] alloc_pages_noprof+0x90/0x130 [ 46.509145][ T4317] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 46.509197][ T4317] __kvmalloc_node_noprof+0x30f/0x4e0 [ 46.509227][ T4317] ? ip_set_alloc+0x1f/0x30 [ 46.509255][ T4317] ? ip_set_alloc+0x1f/0x30 [ 46.509337][ T4317] ? __kmalloc_cache_noprof+0x189/0x320 [ 46.509368][ T4317] ip_set_alloc+0x1f/0x30 [ 46.509464][ T4317] hash_netiface_create+0x282/0x740 [ 46.509495][ T4317] ? __pfx_hash_netiface_create+0x10/0x10 [ 46.509545][ T4317] ip_set_create+0x3cc/0x960 [ 46.509586][ T4317] ? __nla_parse+0x40/0x60 [ 46.509622][ T4317] nfnetlink_rcv_msg+0x4c6/0x590 [ 46.509662][ T4317] netlink_rcv_skb+0x120/0x220 [ 46.509691][ T4317] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 46.509727][ T4317] nfnetlink_rcv+0x16b/0x1690 [ 46.509770][ T4317] ? nlmon_xmit+0x4f/0x60 [ 46.509794][ T4317] ? consume_skb+0x49/0x150 [ 46.509825][ T4317] ? nlmon_xmit+0x4f/0x60 [ 46.509905][ T4317] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 46.509942][ T4317] ? __dev_queue_xmit+0x1200/0x2000 [ 46.509976][ T4317] ? __dev_queue_xmit+0x182/0x2000 [ 46.510013][ T4317] ? ref_tracker_free+0x37d/0x3e0 [ 46.510060][ T4317] ? __netlink_deliver_tap+0x4dc/0x500 [ 46.510093][ T4317] netlink_unicast+0x5c0/0x690 [ 46.510134][ T4317] netlink_sendmsg+0x58b/0x6b0 [ 46.510238][ T4317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.510270][ T4317] __sock_sendmsg+0x145/0x180 [ 46.510355][ T4317] ____sys_sendmsg+0x31e/0x4e0 [ 46.510391][ T4317] ___sys_sendmsg+0x17b/0x1d0 [ 46.510437][ T4317] __x64_sys_sendmsg+0xd4/0x160 [ 46.510539][ T4317] x64_sys_call+0x191e/0x2ff0 [ 46.510559][ T4317] do_syscall_64+0xd2/0x200 [ 46.510580][ T4317] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.510684][ T4317] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 46.510712][ T4317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.510736][ T4317] RIP: 0033:0x7f3b89b1eb69 [ 46.510753][ T4317] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.510773][ T4317] RSP: 002b:00007f3b8817f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.510871][ T4317] RAX: ffffffffffffffda RBX: 00007f3b89d45fa0 RCX: 00007f3b89b1eb69 [ 46.510885][ T4317] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000006 [ 46.510925][ T4317] RBP: 00007f3b89ba1df1 R08: 0000000000000000 R09: 0000000000000000 [ 46.510935][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.510946][ T4317] R13: 0000000000000000 R14: 00007f3b89d45fa0 R15: 00007ffe5d29cc38 [ 46.510962][ T4317] [ 46.841291][ T4317] memory: usage 307200kB, limit 307200kB, failcnt 539 [ 46.848049][ T4317] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 46.856036][ T4317] kmem: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 46.863343][ T4317] Memory cgroup stats for /syz5: [ 46.864199][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.864656][ T4317] cache 0 [ 46.881046][ T4317] rss 0 [ 46.883801][ T4317] shmem 0 [ 46.886824][ T4317] mapped_file 0 [ 46.890293][ T4317] dirty 0 [ 46.893253][ T4317] writeback 0 [ 46.896569][ T4317] workingset_refault_anon 132 [ 46.901261][ T4317] workingset_refault_file 18 [ 46.905889][ T4317] swap 204800 [ 46.909273][ T4317] swapcached 0 [ 46.912709][ T4317] pgpgin 5814 [ 46.916019][ T4317] pgpgout 5814 [ 46.919405][ T4317] pgfault 5021 [ 46.922766][ T4317] pgmajfault 88 [ 46.926212][ T4317] inactive_anon 0 [ 46.929858][ T4317] active_anon 0 [ 46.933354][ T4317] inactive_file 0 [ 46.936969][ T4317] active_file 0 [ 46.940445][ T4317] unevictable 0 [ 46.943972][ T4317] hierarchical_memory_limit 314572800 [ 46.949356][ T4317] hierarchical_memsw_limit 9223372036854771712 [ 46.955521][ T4317] total_cache 0 [ 46.958968][ T4317] total_rss 0 [ 46.962274][ T4317] total_shmem 0 [ 46.965728][ T4317] total_mapped_file 0 [ 46.969719][ T4317] total_dirty 0 [ 46.973169][ T4317] total_writeback 0 [ 46.976964][ T4317] total_workingset_refault_anon 132 [ 46.982172][ T4317] total_workingset_refault_file 18 [ 46.987279][ T4317] total_swap 204800 [ 46.991106][ T4317] total_swapcached 0 [ 46.994996][ T4317] total_pgpgin 5814 [ 46.998792][ T4317] total_pgpgout 5814 [ 47.002712][ T4317] total_pgfault 5021 [ 47.006593][ T4317] total_pgmajfault 88 [ 47.010577][ T4317] total_inactive_anon 0 [ 47.014722][ T4317] total_active_anon 0 [ 47.018691][ T4317] total_inactive_file 0 [ 47.022860][ T4317] total_active_file 0 [ 47.026850][ T4317] total_unevictable 0 [ 47.030840][ T4317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.200,pid=4312,uid=0 [ 47.045353][ T4317] Memory cgroup out of memory: Killed process 4312 (syz.5.200) total-vm:95812kB, anon-rss:1068kB, file-rss:22452kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 47.467597][ T4378] FAULT_INJECTION: forcing a failure. [ 47.467597][ T4378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.480759][ T4378] CPU: 1 UID: 0 PID: 4378 Comm: syz.5.221 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 47.480786][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.480797][ T4378] Call Trace: [ 47.480803][ T4378] [ 47.480809][ T4378] __dump_stack+0x1d/0x30 [ 47.480852][ T4378] dump_stack_lvl+0xe8/0x140 [ 47.480869][ T4378] dump_stack+0x15/0x1b [ 47.480883][ T4378] should_fail_ex+0x265/0x280 [ 47.480939][ T4378] should_fail+0xb/0x20 [ 47.481000][ T4378] should_fail_usercopy+0x1a/0x20 [ 47.481051][ T4378] _copy_from_user+0x1c/0xb0 [ 47.481073][ T4378] bpf_test_init+0xdf/0x160 [ 47.481179][ T4378] bpf_prog_test_run_xdp+0x274/0x910 [ 47.481252][ T4378] ? kstrtouint+0x76/0xc0 [ 47.481279][ T4378] ? __rcu_read_unlock+0x4f/0x70 [ 47.481300][ T4378] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 47.481327][ T4378] bpf_prog_test_run+0x227/0x390 [ 47.481382][ T4378] __sys_bpf+0x4b9/0x7b0 [ 47.481419][ T4378] __x64_sys_bpf+0x41/0x50 [ 47.481440][ T4378] x64_sys_call+0x2aea/0x2ff0 [ 47.481458][ T4378] do_syscall_64+0xd2/0x200 [ 47.481479][ T4378] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 47.481507][ T4378] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 47.481564][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.481651][ T4378] RIP: 0033:0x7f3b89b1eb69 [ 47.481664][ T4378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.481680][ T4378] RSP: 002b:00007f3b8817f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 47.481696][ T4378] RAX: ffffffffffffffda RBX: 00007f3b89d45fa0 RCX: 00007f3b89b1eb69 [ 47.481707][ T4378] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 47.481717][ T4378] RBP: 00007f3b8817f090 R08: 0000000000000000 R09: 0000000000000000 [ 47.481728][ T4378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.481740][ T4378] R13: 0000000000000000 R14: 00007f3b89d45fa0 R15: 00007ffe5d29cc38 [ 47.481755][ T4378] [ 47.812149][ T4387] loop0: detected capacity change from 0 to 2048 [ 47.843048][ T4387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.987940][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.067506][ T4401] loop1: detected capacity change from 0 to 2048 [ 48.132800][ T4401] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.153702][ T4411] loop2: detected capacity change from 0 to 2048 [ 48.188344][ T4411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.308928][ T4411] __nla_validate_parse: 16 callbacks suppressed [ 48.308941][ T4411] netlink: 196 bytes leftover after parsing attributes in process `syz.2.231'. [ 48.336627][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.354617][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.456261][ T4422] loop1: detected capacity change from 0 to 2048 [ 48.472579][ T4422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.585791][ T4429] loop3: detected capacity change from 0 to 512 [ 48.622234][ T4429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.659305][ T4429] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.738398][ T4448] loop5: detected capacity change from 0 to 2048 [ 48.756839][ T4448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.790951][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.800944][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.850574][ T4457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.238'. [ 48.859498][ T4457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 49.025035][ T4463] loop2: detected capacity change from 0 to 2048 [ 49.033386][ T4468] bond1: entered promiscuous mode [ 49.038502][ T4468] bond1: entered allmulticast mode [ 49.045659][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.058557][ T4468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.079293][ T4463] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.093118][ T4473] FAULT_INJECTION: forcing a failure. [ 49.093118][ T4473] name failslab, interval 1, probability 0, space 0, times 0 [ 49.105846][ T4473] CPU: 0 UID: 0 PID: 4473 Comm: syz.5.245 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 49.105877][ T4473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.105890][ T4473] Call Trace: [ 49.105897][ T4473] [ 49.105905][ T4473] __dump_stack+0x1d/0x30 [ 49.105928][ T4473] dump_stack_lvl+0xe8/0x140 [ 49.105984][ T4473] dump_stack+0x15/0x1b [ 49.106027][ T4473] should_fail_ex+0x265/0x280 [ 49.106062][ T4473] should_failslab+0x8c/0xb0 [ 49.106120][ T4473] kmem_cache_alloc_noprof+0x50/0x310 [ 49.106149][ T4473] ? getname_flags+0x80/0x3b0 [ 49.106180][ T4473] getname_flags+0x80/0x3b0 [ 49.106289][ T4473] __se_sys_move_mount+0x162/0x450 [ 49.106315][ T4473] ? fput+0x8f/0xc0 [ 49.106347][ T4473] __x64_sys_move_mount+0x67/0x80 [ 49.106374][ T4473] x64_sys_call+0xcfe/0x2ff0 [ 49.106396][ T4473] do_syscall_64+0xd2/0x200 [ 49.106455][ T4473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.106481][ T4473] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 49.106526][ T4473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.106549][ T4473] RIP: 0033:0x7f3b89b1eb69 [ 49.106565][ T4473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.106585][ T4473] RSP: 002b:00007f3b8817f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 49.106666][ T4473] RAX: ffffffffffffffda RBX: 00007f3b89d45fa0 RCX: 00007f3b89b1eb69 [ 49.106679][ T4473] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: ffffffffffffffff [ 49.106692][ T4473] RBP: 00007f3b8817f090 R08: 0000000000000000 R09: 0000000000000000 [ 49.106706][ T4473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.106718][ T4473] R13: 0000000000000000 R14: 00007f3b89d45fa0 R15: 00007ffe5d29cc38 [ 49.106737][ T4473] [ 49.293298][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 49.293313][ T29] audit: type=1400 audit(1754275877.681:1712): avc: denied { mount } for pid=4462 comm="syz.2.242" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.321538][ T29] audit: type=1400 audit(1754275877.681:1713): avc: denied { add_name } for pid=4462 comm="syz.2.242" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.342086][ T29] audit: type=1400 audit(1754275877.681:1714): avc: denied { create } for pid=4462 comm="syz.2.242" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.362094][ T29] audit: type=1400 audit(1754275877.681:1715): avc: denied { read write open } for pid=4462 comm="syz.2.242" path="/46/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.386623][ T29] audit: type=1400 audit(1754275877.761:1716): avc: denied { read } for pid=4462 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.424815][ T4468] bond1 (unregistering): Released all slaves [ 49.455067][ T29] audit: type=1400 audit(1754275877.841:1717): avc: denied { create } for pid=4476 comm="syz.3.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.463492][ T4477] loop3: detected capacity change from 0 to 2048 [ 49.474668][ T29] audit: type=1400 audit(1754275877.841:1718): avc: denied { setopt } for pid=4476 comm="syz.3.246" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.501184][ T29] audit: type=1326 audit(1754275877.841:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6ecbeb69 code=0x7ffc0000 [ 49.524512][ T29] audit: type=1326 audit(1754275877.841:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8f6ecbeb69 code=0x7ffc0000 [ 49.547709][ T29] audit: type=1326 audit(1754275877.841:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4476 comm="syz.3.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f6ecbeb69 code=0x7ffc0000 [ 49.581098][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.587442][ T4480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.247'. [ 49.598972][ T4480] netlink: 108 bytes leftover after parsing attributes in process `syz.5.247'. [ 49.620697][ T4477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.640791][ T4480] netlink: 28 bytes leftover after parsing attributes in process `syz.5.247'. [ 49.649906][ T4480] netlink: 108 bytes leftover after parsing attributes in process `syz.5.247'. [ 49.658849][ T4480] netlink: 84 bytes leftover after parsing attributes in process `syz.5.247'. [ 49.692554][ T4491] loop0: detected capacity change from 0 to 512 [ 49.782632][ T4491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.824857][ T4491] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.838384][ T4508] netlink: 56 bytes leftover after parsing attributes in process `syz.1.250'. [ 49.849765][ T4508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 49.939021][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.962716][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.970055][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.983758][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.005022][ T4527] loop1: detected capacity change from 0 to 164 [ 50.019299][ T4523] loop2: detected capacity change from 0 to 1024 [ 50.095794][ T4523] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.107580][ T4523] process 'syz.2.252' launched './file1' with NULL argv: empty string added [ 50.185020][ T4540] syzkaller0: entered promiscuous mode [ 50.190815][ T4540] syzkaller0: entered allmulticast mode [ 50.205439][ T4540] FAULT_INJECTION: forcing a failure. [ 50.205439][ T4540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.218639][ T4540] CPU: 0 UID: 0 PID: 4540 Comm: syz.0.254 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 50.218667][ T4540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.218689][ T4540] Call Trace: [ 50.218696][ T4540] [ 50.218704][ T4540] __dump_stack+0x1d/0x30 [ 50.218725][ T4540] dump_stack_lvl+0xe8/0x140 [ 50.218824][ T4540] dump_stack+0x15/0x1b [ 50.218840][ T4540] should_fail_ex+0x265/0x280 [ 50.218906][ T4540] should_fail+0xb/0x20 [ 50.218933][ T4540] should_fail_usercopy+0x1a/0x20 [ 50.218950][ T4540] _copy_from_user+0x1c/0xb0 [ 50.218974][ T4540] ___sys_sendmsg+0xc1/0x1d0 [ 50.219092][ T4540] __x64_sys_sendmsg+0xd4/0x160 [ 50.219145][ T4540] x64_sys_call+0x191e/0x2ff0 [ 50.219189][ T4540] do_syscall_64+0xd2/0x200 [ 50.219213][ T4540] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.219240][ T4540] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.219262][ T4540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.219349][ T4540] RIP: 0033:0x7f6a2ed2eb69 [ 50.219365][ T4540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.219383][ T4540] RSP: 002b:00007f6a2d38f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.219444][ T4540] RAX: ffffffffffffffda RBX: 00007f6a2ef55fa0 RCX: 00007f6a2ed2eb69 [ 50.219457][ T4540] RDX: 0000000004040084 RSI: 0000200000000280 RDI: 0000000000000007 [ 50.219517][ T4540] RBP: 00007f6a2d38f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.219551][ T4540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.219621][ T4540] R13: 0000000000000000 R14: 00007f6a2ef55fa0 R15: 00007fffd1c43dc8 [ 50.219637][ T4540] [ 50.391525][ T4542] FAULT_INJECTION: forcing a failure. [ 50.391525][ T4542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.404855][ T4542] CPU: 1 UID: 0 PID: 4542 Comm: syz.3.253 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 50.404884][ T4542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.404941][ T4542] Call Trace: [ 50.404947][ T4542] [ 50.404954][ T4542] __dump_stack+0x1d/0x30 [ 50.404976][ T4542] dump_stack_lvl+0xe8/0x140 [ 50.404992][ T4542] dump_stack+0x15/0x1b [ 50.405066][ T4542] should_fail_ex+0x265/0x280 [ 50.405097][ T4542] should_fail+0xb/0x20 [ 50.405238][ T4542] should_fail_usercopy+0x1a/0x20 [ 50.405257][ T4542] _copy_to_iter+0x24b/0xe30 [ 50.405316][ T4542] ? __schedule+0x6b9/0xb30 [ 50.405356][ T4542] ? __list_del_entry_valid_or_report+0x65/0x130 [ 50.405384][ T4542] tun_do_read+0xa8e/0x15d0 [ 50.405411][ T4542] ? ref_tracker_alloc+0x1f2/0x2f0 [ 50.405511][ T4542] ? __pfx_default_wake_function+0x10/0x10 [ 50.405537][ T4542] tun_chr_read_iter+0x176/0x250 [ 50.405564][ T4542] do_iter_readv_writev+0x421/0x4c0 [ 50.405643][ T4542] vfs_readv+0x1ea/0x690 [ 50.405692][ T4542] do_readv+0xe7/0x210 [ 50.405766][ T4542] __x64_sys_readv+0x45/0x50 [ 50.405791][ T4542] x64_sys_call+0x29f8/0x2ff0 [ 50.405814][ T4542] do_syscall_64+0xd2/0x200 [ 50.405846][ T4542] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.405868][ T4542] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 50.405886][ T4542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.405906][ T4542] RIP: 0033:0x7f8f6ecbeb69 [ 50.405922][ T4542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.405998][ T4542] RSP: 002b:00007f8f6d31f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 50.406018][ T4542] RAX: ffffffffffffffda RBX: 00007f8f6eee5fa0 RCX: 00007f8f6ecbeb69 [ 50.406031][ T4542] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000004 [ 50.406044][ T4542] RBP: 00007f8f6d31f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.406056][ T4542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.406068][ T4542] R13: 0000000000000000 R14: 00007f8f6eee5fa0 R15: 00007fff62791ff8 [ 50.406086][ T4542] [ 51.135736][ T4585] loop1: detected capacity change from 0 to 2048 [ 51.306898][ T4589] loop2: detected capacity change from 0 to 2048 [ 51.593720][ T4585] net_ratelimit: 2 callbacks suppressed [ 51.593729][ T4585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.637007][ T4599] loop3: detected capacity change from 0 to 512 [ 51.686125][ T4599] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.125599][ T4674] loop5: detected capacity change from 0 to 2048 [ 52.240258][ T4692] loop3: detected capacity change from 0 to 2048 [ 52.284854][ T4699] loop2: detected capacity change from 0 to 512 [ 52.419373][ T4699] Falling back ldisc for ttyS3. [ 52.991050][ T4726] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 53.129243][ T4731] bond1: entered promiscuous mode [ 53.134369][ T4731] bond1: entered allmulticast mode [ 53.151271][ T4731] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.174755][ T4731] bond1 (unregistering): Released all slaves [ 53.185665][ T4736] €Â: renamed from ipvlan1 [ 53.239687][ T4740] loop1: detected capacity change from 0 to 512 [ 53.278483][ T4744] loop3: detected capacity change from 0 to 2048 [ 53.279051][ T4740] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.357677][ T4742] loop5: detected capacity change from 0 to 1024 [ 53.373949][ T4742] EXT4-fs: Ignoring removed orlov option [ 53.465915][ T4756] FAULT_INJECTION: forcing a failure. [ 53.465915][ T4756] name failslab, interval 1, probability 0, space 0, times 0 [ 53.478713][ T4756] CPU: 0 UID: 0 PID: 4756 Comm: syz.2.305 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 53.478741][ T4756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 53.478754][ T4756] Call Trace: [ 53.478760][ T4756] [ 53.478767][ T4756] __dump_stack+0x1d/0x30 [ 53.478790][ T4756] dump_stack_lvl+0xe8/0x140 [ 53.478883][ T4756] dump_stack+0x15/0x1b [ 53.478901][ T4756] should_fail_ex+0x265/0x280 [ 53.478990][ T4756] should_failslab+0x8c/0xb0 [ 53.479015][ T4756] kmem_cache_alloc_noprof+0x50/0x310 [ 53.479045][ T4756] ? getname_flags+0x80/0x3b0 [ 53.479070][ T4756] ? vfs_write+0x75e/0x8e0 [ 53.479132][ T4756] getname_flags+0x80/0x3b0 [ 53.479161][ T4756] user_path_at+0x28/0x130 [ 53.479195][ T4756] vfs_open_tree+0xef/0x540 [ 53.479294][ T4756] __x64_sys_open_tree+0x45/0xc0 [ 53.479316][ T4756] x64_sys_call+0x2a87/0x2ff0 [ 53.479337][ T4756] do_syscall_64+0xd2/0x200 [ 53.479361][ T4756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.479387][ T4756] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 53.479430][ T4756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.479455][ T4756] RIP: 0033:0x7fd0e02feb69 [ 53.479505][ T4756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.479525][ T4756] RSP: 002b:00007fd0de967038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 53.479546][ T4756] RAX: ffffffffffffffda RBX: 00007fd0e0525fa0 RCX: 00007fd0e02feb69 [ 53.479559][ T4756] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffffff [ 53.479637][ T4756] RBP: 00007fd0de967090 R08: 0000000000000000 R09: 0000000000000000 [ 53.479651][ T4756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.479664][ T4756] R13: 0000000000000000 R14: 00007fd0e0525fa0 R15: 00007ffc5d21c2b8 [ 53.479713][ T4756] [ 53.819427][ T4770] loop3: detected capacity change from 0 to 2048 [ 54.319280][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 54.319292][ T29] audit: type=1326 audit(1754275882.701:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.352905][ T29] audit: type=1326 audit(1754275882.741:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.376316][ T29] audit: type=1326 audit(1754275882.741:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.399690][ T29] audit: type=1326 audit(1754275882.741:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.423006][ T29] audit: type=1326 audit(1754275882.741:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.446412][ T29] audit: type=1326 audit(1754275882.741:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.469733][ T29] audit: type=1326 audit(1754275882.741:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.493047][ T29] audit: type=1326 audit(1754275882.741:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.516466][ T29] audit: type=1326 audit(1754275882.741:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.539783][ T29] audit: type=1326 audit(1754275882.741:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4785 comm="syz.1.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 54.577700][ T4789] loop1: detected capacity change from 0 to 2048 [ 54.653499][ T4796] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 54.660070][ T4796] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 54.667607][ T4796] vhci_hcd vhci_hcd.0: Device attached [ 54.683261][ T4797] vhci_hcd: connection closed [ 54.684533][ T31] vhci_hcd: stop threads [ 54.693654][ T31] vhci_hcd: release socket [ 54.698059][ T31] vhci_hcd: disconnect device [ 54.704302][ T4800] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 54.740083][ T4802] 9pnet_fd: Insufficient options for proto=fd [ 55.070904][ T4842] __nla_validate_parse: 11 callbacks suppressed [ 55.070920][ T4842] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.337'. [ 55.311437][ T4863] netlink: 'syz.3.346': attribute type 19 has an invalid length. [ 55.376392][ T31] tipc: Subscription rejected, illegal request [ 56.204972][ T4894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.357'. [ 56.412023][ T4910] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=4910 comm=syz.0.363 [ 56.449486][ T4911] À: port 1(vlan1) entered blocking state [ 56.455269][ T4911] À: port 1(vlan1) entered disabled state [ 56.499400][ T4911] vlan1: entered allmulticast mode [ 56.504564][ T4911] veth0_vlan: entered allmulticast mode [ 56.531715][ T4911] vlan1: entered promiscuous mode [ 56.537576][ T4910] netlink: 'syz.0.363': attribute type 29 has an invalid length. [ 56.545589][ T4906] netlink: 'syz.0.363': attribute type 29 has an invalid length. [ 56.554607][ T4916] À: port 1(vlan1) entered blocking state [ 56.560535][ T4916] À: port 1(vlan1) entered forwarding state [ 56.608238][ T4921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'. [ 56.665060][ T4921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'. [ 56.693362][ T4921] netlink: 60 bytes leftover after parsing attributes in process `syz.0.369'. [ 56.791677][ T4934] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 56.799497][ T4934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.373'. [ 56.846711][ T4934] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 56.853534][ T4934] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.924468][ T4934] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 57.277265][ T4964] TCP: TCP_TX_DELAY enabled [ 57.381792][ T4976] netlink: 'syz.5.393': attribute type 10 has an invalid length. [ 57.389616][ T4976] netlink: 40 bytes leftover after parsing attributes in process `syz.5.393'. [ 57.440674][ T4976] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 57.447379][ T4976] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.510248][ T4976] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 57.658994][ T5000] loop1: detected capacity change from 0 to 512 [ 57.674710][ T5000] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.404: corrupted in-inode xattr: invalid ea_ino [ 57.690074][ T5000] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.404: couldn't read orphan inode 15 (err -117) [ 57.880775][ T5037] netlink: 'syz.1.417': attribute type 8 has an invalid length. [ 57.888487][ T5037] netlink: 156 bytes leftover after parsing attributes in process `syz.1.417'. [ 58.232455][ T5061] : port 1(syz_tun) entered blocking state [ 58.238447][ T5061] : port 1(syz_tun) entered disabled state [ 58.244710][ T5061] syz_tun: entered allmulticast mode [ 58.265095][ T5061] syz_tun: entered promiscuous mode [ 58.326669][ T5077] netlink: 156 bytes leftover after parsing attributes in process `syz.1.432'. [ 58.558244][ T5108] netlink: 60 bytes leftover after parsing attributes in process `syz.0.449'. [ 58.607481][ T5116] netlink: 'syz.0.452': attribute type 2 has an invalid length. [ 58.615235][ T5116] netlink: 'syz.0.452': attribute type 8 has an invalid length. [ 58.701754][ T5125] syzkaller0: entered promiscuous mode [ 58.707258][ T5125] syzkaller0: entered allmulticast mode [ 59.121379][ T5162] syz.0.472: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 59.135856][ T5162] CPU: 0 UID: 0 PID: 5162 Comm: syz.0.472 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 59.135906][ T5162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.135917][ T5162] Call Trace: [ 59.135924][ T5162] [ 59.135932][ T5162] __dump_stack+0x1d/0x30 [ 59.135954][ T5162] dump_stack_lvl+0xe8/0x140 [ 59.136001][ T5162] dump_stack+0x15/0x1b [ 59.136016][ T5162] warn_alloc+0x12b/0x1a0 [ 59.136104][ T5162] ? __list_add_valid_or_report+0x38/0xe0 [ 59.136132][ T5162] ? merge_sched_in+0x605/0xa60 [ 59.136151][ T5162] __vmalloc_node_range_noprof+0x9c/0xe00 [ 59.136215][ T5162] ? __rcu_read_unlock+0x4f/0x70 [ 59.136285][ T5162] ? avc_has_perm_noaudit+0x1b1/0x200 [ 59.136311][ T5162] ? should_fail_ex+0x30/0x280 [ 59.136349][ T5162] ? xskq_create+0x36/0xe0 [ 59.136375][ T5162] vmalloc_user_noprof+0x7d/0xb0 [ 59.136406][ T5162] ? xskq_create+0x80/0xe0 [ 59.136462][ T5162] xskq_create+0x80/0xe0 [ 59.136486][ T5162] xsk_init_queue+0x95/0xf0 [ 59.136509][ T5162] xsk_setsockopt+0x477/0x640 [ 59.136601][ T5162] ? __pfx_xsk_setsockopt+0x10/0x10 [ 59.136626][ T5162] __sys_setsockopt+0x184/0x200 [ 59.136663][ T5162] __x64_sys_setsockopt+0x64/0x80 [ 59.136721][ T5162] x64_sys_call+0x20ec/0x2ff0 [ 59.136741][ T5162] do_syscall_64+0xd2/0x200 [ 59.136762][ T5162] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.136789][ T5162] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.136836][ T5162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.136860][ T5162] RIP: 0033:0x7f6a2ed2eb69 [ 59.136876][ T5162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.136892][ T5162] RSP: 002b:00007f6a2d38f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.136908][ T5162] RAX: ffffffffffffffda RBX: 00007f6a2ef55fa0 RCX: 00007f6a2ed2eb69 [ 59.136920][ T5162] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 59.136932][ T5162] RBP: 00007f6a2edb1df1 R08: 0000000000000004 R09: 0000000000000000 [ 59.136959][ T5162] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 59.136972][ T5162] R13: 0000000000000000 R14: 00007f6a2ef55fa0 R15: 00007fffd1c43dc8 [ 59.136991][ T5162] [ 59.137009][ T5162] Mem-Info: [ 59.363459][ T5162] active_anon:19819 inactive_anon:0 isolated_anon:0 [ 59.363459][ T5162] active_file:21949 inactive_file:2206 isolated_file:0 [ 59.363459][ T5162] unevictable:0 dirty:190 writeback:0 [ 59.363459][ T5162] slab_reclaimable:3367 slab_unreclaimable:15463 [ 59.363459][ T5162] mapped:29321 shmem:247 pagetables:1436 [ 59.363459][ T5162] sec_pagetables:0 bounce:0 [ 59.363459][ T5162] kernel_misc_reclaimable:0 [ 59.363459][ T5162] free:1810414 free_pcp:67506 free_cma:0 [ 59.408536][ T5162] Node 0 active_anon:79276kB inactive_anon:0kB active_file:87796kB inactive_file:8824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117284kB dirty:760kB writeback:0kB shmem:988kB kernel_stack:3520kB pagetables:5744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 59.435620][ T5162] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 59.464199][ T5162] lowmem_reserve[]: 0 2883 7862 7862 [ 59.469584][ T5162] Node 0 DMA32 free:2949228kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 59.499900][ T5162] lowmem_reserve[]: 0 0 4978 4978 [ 59.504942][ T5162] Node 0 Normal free:4285136kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:79316kB inactive_anon:0kB active_file:87796kB inactive_file:8824kB unevictable:0kB writepending:772kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:258328kB local_pcp:60488kB free_cma:0kB [ 59.536934][ T5162] lowmem_reserve[]: 0 0 0 0 [ 59.541496][ T5162] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 59.554292][ T5162] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949228kB [ 59.570434][ T5162] Node 0 Normal: 2061*4kB (UME) 1263*8kB (UM) 622*16kB (UME) 348*32kB (UME) 310*64kB (UME) 215*128kB (UME) 168*256kB (UME) 156*512kB (UME) 100*1024kB (UME) 52*2048kB (UM) 944*4096kB (UM) = 4285196kB [ 59.590287][ T5162] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 59.599580][ T5162] 24412 total pagecache pages [ 59.604303][ T5162] 22 pages in swap cache [ 59.608515][ T5162] Free swap = 124908kB [ 59.612691][ T5162] Total swap = 124996kB [ 59.616830][ T5162] 2097051 pages RAM [ 59.620653][ T5162] 0 pages HighMem/MovableOnly [ 59.625350][ T5162] 80436 pages reserved [ 59.905256][ T5205] netlink: 'syz.3.490': attribute type 10 has an invalid length. [ 59.913254][ T5205] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 59.976725][ T29] kauditd_printk_skb: 77 callbacks suppressed [ 59.976740][ T29] audit: type=1400 audit(1754275888.361:2314): avc: denied { ioctl } for pid=5212 comm="syz.3.494" path="socket:[9674]" dev="sockfs" ino=9674 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 60.115320][ T29] audit: type=1400 audit(1754275888.501:2315): avc: denied { create } for pid=5228 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.134817][ T29] audit: type=1400 audit(1754275888.501:2316): avc: denied { ioctl } for pid=5228 comm="syz.3.501" path="socket:[9695]" dev="sockfs" ino=9695 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.217610][ T5241] __nla_validate_parse: 5 callbacks suppressed [ 60.217628][ T5241] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.507'. [ 60.715977][ T29] audit: type=1400 audit(1754275889.101:2317): avc: denied { read } for pid=5266 comm="syz.1.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 60.733678][ T5268] veth1_macvtap: left promiscuous mode [ 60.740827][ T5268] macsec0: entered allmulticast mode [ 60.811462][ T5277] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.522'. [ 61.078728][ T29] audit: type=1400 audit(1754275889.461:2318): avc: denied { create } for pid=5292 comm="syz.2.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 61.152396][ T5306] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.535'. [ 61.331180][ T5339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 61.485733][ T29] audit: type=1400 audit(1754275889.871:2319): avc: denied { sys_module } for pid=5343 comm="syz.2.551" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.842663][ T29] audit: type=1400 audit(1754275890.231:2320): avc: denied { setopt } for pid=5387 comm="syz.1.571" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.869814][ T5399] netlink: 'syz.1.571': attribute type 10 has an invalid length. [ 61.878437][ T5399] macvlan1: entered allmulticast mode [ 61.902673][ T5399] veth1_vlan: entered allmulticast mode [ 61.921428][ T5399] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 62.154817][ T5428] C: renamed from team_slave_0 [ 62.166112][ T5428] netlink: 'syz.5.589': attribute type 4 has an invalid length. [ 62.173928][ T5428] netlink: 116 bytes leftover after parsing attributes in process `syz.5.589'. [ 62.182952][ T5428] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 62.422752][ T5450] syzkaller0: entered promiscuous mode [ 62.428259][ T5450] syzkaller0: entered allmulticast mode [ 62.622408][ T5479] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.613'. [ 62.776699][ T29] audit: type=1400 audit(1754275891.161:2321): avc: denied { create } for pid=5501 comm="syz.1.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.858369][ T5513] netlink: 'syz.3.628': attribute type 10 has an invalid length. [ 63.036658][ T29] audit: type=1400 audit(1754275891.421:2322): avc: denied { write } for pid=5535 comm="syz.1.639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 63.067613][ T5540] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.641'. [ 63.169289][ T29] audit: type=1400 audit(1754275891.551:2323): avc: denied { write } for pid=5551 comm="syz.2.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.459674][ T5595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5595 comm=syz.2.667 [ 63.524850][ T5597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.669'. [ 63.535281][ T5597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.669'. [ 63.547135][ T5597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.669'. [ 63.696198][ T5623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5623 comm=syz.2.679 [ 63.805110][ T5636] netlink: 'syz.0.686': attribute type 13 has an invalid length. [ 63.842411][ T5636] erspan0: refused to change device tx_queue_len [ 63.848806][ T5636] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 64.316566][ T5696] netlink: 'syz.0.712': attribute type 46 has an invalid length. [ 64.508968][ T5714] netlink: 'syz.2.721': attribute type 153 has an invalid length. [ 64.731958][ T5748] C: renamed from team_slave_0 [ 65.184509][ T5797] C: renamed from team_slave_0 [ 65.421681][ T5824] netlink: 'syz.0.773': attribute type 39 has an invalid length. [ 65.548370][ T5840] netlink: 'syz.0.780': attribute type 10 has an invalid length. [ 65.595826][ T5840] team0: Port device netdevsim0 added [ 65.654468][ T5848] : renamed from bond0 (while UP) [ 65.741802][ T5861] netlink: 'syz.3.792': attribute type 3 has an invalid length. [ 65.749534][ T5861] netlink: 'syz.3.792': attribute type 1 has an invalid length. [ 65.757160][ T5861] __nla_validate_parse: 5 callbacks suppressed [ 65.757173][ T5861] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.792'. [ 65.873695][ T5876] syzkaller0: entered promiscuous mode [ 65.879339][ T5876] syzkaller0: entered allmulticast mode [ 66.485202][ T5934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.823'. [ 66.513352][ T5934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.823'. [ 66.963969][ T5997] validate_nla: 5 callbacks suppressed [ 66.964051][ T5997] netlink: 'syz.3.854': attribute type 29 has an invalid length. [ 66.978041][ T5997] netlink: 'syz.3.854': attribute type 29 has an invalid length. [ 67.049694][ T6007] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.858'. [ 67.365805][ T6048] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.878'. [ 67.935259][ T6128] netlink: 14 bytes leftover after parsing attributes in process `syz.5.915'. [ 67.960892][ T6128] hsr_slave_0: left promiscuous mode [ 67.969836][ T6128] hsr_slave_1: left promiscuous mode [ 68.150632][ T6166] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.928'. [ 68.191768][ T6155] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.928'. [ 68.257919][ T6183] netlink: 152 bytes leftover after parsing attributes in process `syz.5.941'. [ 68.295920][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 68.295934][ T29] audit: type=1400 audit(1754275896.671:2327): avc: denied { create } for pid=6184 comm="syz.0.942" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 68.321436][ T29] audit: type=1400 audit(1754275896.671:2328): avc: denied { ioctl } for pid=6184 comm="syz.0.942" path="socket:[14384]" dev="sockfs" ino=14384 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 68.354199][ T6184] delete_channel: no stack [ 68.500270][ T6212] netlink: 'syz.1.954': attribute type 39 has an invalid length. [ 68.554124][ T6214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.955'. [ 69.157811][ T29] audit: type=1400 audit(1754275897.541:2329): avc: denied { bind } for pid=6276 comm="syz.3.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 69.177135][ T29] audit: type=1400 audit(1754275897.541:2330): avc: denied { name_bind } for pid=6276 comm="syz.3.985" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 69.198425][ T29] audit: type=1400 audit(1754275897.541:2331): avc: denied { node_bind } for pid=6276 comm="syz.3.985" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 69.241897][ T6277] sctp: [Deprecated]: syz.3.985 (pid 6277) Use of int in maxseg socket option. [ 69.241897][ T6277] Use struct sctp_assoc_value instead [ 69.331268][ T29] audit: type=1400 audit(1754275897.701:2332): avc: denied { write } for pid=6292 comm="syz.2.991" path="socket:[14646]" dev="sockfs" ino=14646 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.420942][ T6314] netlink: 'syz.3.1002': attribute type 3 has an invalid length. [ 69.777140][ T6361] syzkaller0: entered promiscuous mode [ 69.782667][ T6361] syzkaller0: entered allmulticast mode [ 69.915066][ T6379] syzkaller0: entered promiscuous mode [ 69.920672][ T6379] syzkaller0: entered allmulticast mode [ 69.974901][ T6379] netlink: 'syz.0.1034': attribute type 21 has an invalid length. [ 70.010750][ T6399] C: entered allmulticast mode [ 70.295495][ T29] audit: type=1400 audit(1754275898.681:2333): avc: denied { setopt } for pid=6450 comm="syz.0.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.683593][ T6519] netlink: 'syz.3.1101': attribute type 3 has an invalid length. [ 70.691385][ T6519] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 70.846167][ T6551] __nla_validate_parse: 12 callbacks suppressed [ 70.846183][ T6551] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1116'. [ 71.153621][ T6569] netlink: 'syz.5.1124': attribute type 3 has an invalid length. [ 71.161470][ T6569] netlink: 'syz.5.1124': attribute type 1 has an invalid length. [ 71.169247][ T6569] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.1124'. [ 71.607409][ T6583] netlink: 'syz.5.1131': attribute type 29 has an invalid length. [ 71.808562][ T29] audit: type=1400 audit(1754275900.191:2334): avc: denied { ioctl } for pid=6616 comm="syz.3.1146" path="socket:[15294]" dev="sockfs" ino=15294 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 71.834152][ T6617] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 71.840028][ T6617] syzkaller1: Linktype set failed because interface is up [ 71.859399][ T3397] syzkaller1: tun_net_xmit 90 [ 71.969498][ T6638] C: renamed from team_slave_0 [ 71.975993][ T6638] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1158'. [ 72.225094][ T6690] ref_ctr_offset mismatch. inode: 0x4e9 offset: 0x0 ref_ctr_offset(old): 0x10000000 ref_ctr_offset(new): 0x0 [ 72.273066][ T6699] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1188'. [ 72.273723][ T6700] syzkaller0: entered promiscuous mode [ 72.287824][ T6700] syzkaller0: entered allmulticast mode [ 72.392455][ T6706] syzkaller0: entered promiscuous mode [ 72.398012][ T6706] syzkaller0: entered allmulticast mode [ 72.411177][ T6706] validate_nla: 1 callbacks suppressed [ 72.411220][ T6706] netlink: 'syz.3.1191': attribute type 21 has an invalid length. [ 72.425099][ T6706] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1191'. [ 72.436076][ T6706] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1191'. [ 72.505895][ T6715] netlink: 'syz.0.1196': attribute type 3 has an invalid length. [ 72.513748][ T6715] netlink: 'syz.0.1196': attribute type 1 has an invalid length. [ 72.521499][ T6715] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1196'. [ 72.735198][ T6740] syzkaller0: entered promiscuous mode [ 72.740724][ T6740] syzkaller0: entered allmulticast mode [ 72.742921][ T6753] netlink: 'syz.2.1207': attribute type 21 has an invalid length. [ 72.755310][ T6753] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1207'. [ 72.770363][ T6752] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1213'. [ 72.780986][ T6753] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1207'. [ 72.981856][ T6775] netlink: 'syz.2.1223': attribute type 3 has an invalid length. [ 72.989652][ T6775] netlink: 'syz.2.1223': attribute type 1 has an invalid length. [ 73.160584][ T6801] netlink: 'syz.2.1235': attribute type 10 has an invalid length. [ 73.447275][ T6857] netlink: 'syz.1.1262': attribute type 3 has an invalid length. [ 73.455088][ T6857] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 73.563244][ T29] audit: type=1400 audit(1754275901.951:2335): avc: denied { write } for pid=6878 comm="syz.1.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 73.664745][ T29] audit: type=1400 audit(1754275902.051:2336): avc: denied { write } for pid=6892 comm="syz.3.1280" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 73.687673][ T29] audit: type=1400 audit(1754275902.051:2337): avc: denied { create } for pid=6892 comm="syz.3.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 73.713861][ T6901] netlink: 'syz.0.1284': attribute type 3 has an invalid length. [ 74.216357][ T6985] syzkaller0: entered promiscuous mode [ 74.221950][ T6985] syzkaller0: entered allmulticast mode [ 74.498864][ T29] audit: type=1400 audit(1754275902.881:2338): avc: denied { name_bind } for pid=7046 comm="syz.0.1353" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.529352][ T29] audit: type=1400 audit(1754275902.881:2339): avc: denied { node_bind } for pid=7046 comm="syz.0.1353" saddr=172.20.20.187 src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 74.703590][ T7081] syzkaller0: entered promiscuous mode [ 74.709072][ T7081] syzkaller0: entered allmulticast mode [ 75.435974][ T7175] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 75.441952][ T7175] syzkaller1: linktype set to 272 [ 75.653636][ T7209] syzkaller0: entered promiscuous mode [ 75.659131][ T7209] syzkaller0: entered allmulticast mode [ 75.848274][ T7237] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 75.864769][ T7237] syzkaller1: linktype set to 272 [ 75.937935][ T7247] __nla_validate_parse: 9 callbacks suppressed [ 75.937950][ T7247] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1450'. [ 76.370079][ T7321] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 76.377225][ T7321] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 76.501993][ T7332] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1486'. [ 76.898932][ T7415] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1525'. [ 77.263929][ T7481] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1557'. [ 77.410746][ T7505] syzkaller0: entered promiscuous mode [ 77.416303][ T7505] syzkaller0: entered allmulticast mode [ 78.114869][ T7614] validate_nla: 15 callbacks suppressed [ 78.114882][ T7614] netlink: 'syz.5.1621': attribute type 3 has an invalid length. [ 78.128268][ T7614] netlink: 'syz.5.1621': attribute type 1 has an invalid length. [ 78.135998][ T7614] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.1621'. [ 78.388185][ T7653] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1638'. [ 78.517454][ T7667] netlink: 'syz.0.1645': attribute type 3 has an invalid length. [ 78.525271][ T7667] netlink: 'syz.0.1645': attribute type 1 has an invalid length. [ 78.533064][ T7667] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1645'. [ 78.672887][ T7693] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 78.678878][ T7693] syzkaller1: linktype set to 272 [ 78.875396][ T7717] syzkaller0: entered promiscuous mode [ 78.881090][ T7717] syzkaller0: entered allmulticast mode [ 79.000946][ T7745] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1683'. [ 79.077009][ T29] audit: type=1400 audit(1754275907.461:2340): avc: denied { ioctl } for pid=7756 comm="syz.2.1689" path="socket:[19268]" dev="sockfs" ino=19268 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.187297][ T7769] netlink: 'syz.2.1695': attribute type 3 has an invalid length. [ 79.195164][ T7769] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 79.202921][ T7769] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1695'. [ 79.330327][ T7798] netlink: 'syz.2.1708': attribute type 3 has an invalid length. [ 79.338089][ T7798] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1708'. [ 79.415672][ T7817] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 79.422083][ T7817] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 79.538524][ T7837] netlink: 'syz.5.1726': attribute type 3 has an invalid length. [ 79.602140][ T7850] netlink: 'syz.5.1733': attribute type 4 has an invalid length. [ 80.049143][ T7930] netlink: 'syz.2.1769': attribute type 3 has an invalid length. [ 80.705552][ T29] audit: type=1400 audit(1754275909.091:2341): avc: denied { create } for pid=8032 comm="syz.3.1816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.072389][ T29] audit: type=1400 audit(1754275909.461:2342): avc: denied { ioctl } for pid=8112 comm="syz.3.1854" path="socket:[20120]" dev="sockfs" ino=20120 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.207117][ T8128] __nla_validate_parse: 10 callbacks suppressed [ 81.207128][ T8128] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1860'. [ 81.315609][ T8148] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.1869'. [ 82.818150][ T8462] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.2019'. [ 82.993997][ T8503] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 83.036592][ T8515] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2044'. [ 83.123071][ T8519] syzkaller0: entered promiscuous mode [ 83.128583][ T8519] syzkaller0: entered allmulticast mode [ 83.295593][ T8561] validate_nla: 6 callbacks suppressed [ 83.295609][ T8561] netlink: 'syz.2.2067': attribute type 3 has an invalid length. [ 83.308843][ T8561] netlink: 61155 bytes leftover after parsing attributes in process `syz.2.2067'. [ 83.488408][ T8582] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2073'. [ 83.497788][ T8573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2073'. [ 83.507940][ T8573] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2073'. [ 83.738220][ T8637] netlink: 'syz.2.2102': attribute type 3 has an invalid length. [ 83.746044][ T8637] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2102'. [ 83.906861][ T8663] syzkaller0: entered promiscuous mode [ 83.912400][ T8663] syzkaller0: entered allmulticast mode [ 84.143279][ T8730] netlink: 'syz.5.2148': attribute type 3 has an invalid length. [ 84.151173][ T8730] netlink: 60387 bytes leftover after parsing attributes in process `syz.5.2148'. [ 84.166986][ T8732] netlink: 'syz.2.2149': attribute type 3 has an invalid length. [ 84.288359][ T8754] netlink: 'syz.2.2159': attribute type 8 has an invalid length. [ 98.397465][ T8817] netlink: 'syz.3.2191': attribute type 21 has an invalid length. [ 98.405363][ T8817] netlink: 'syz.3.2191': attribute type 1 has an invalid length. [ 98.413184][ T8817] __nla_validate_parse: 2 callbacks suppressed [ 98.413199][ T8817] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2191'. [ 98.977983][ T8930] netlink: 'syz.0.2242': attribute type 21 has an invalid length. [ 98.985901][ T8930] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.2242'. [ 100.168941][ T9106] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.2326'. [ 100.617699][ T9218] netlink: 'syz.5.2381': attribute type 21 has an invalid length. [ 100.617941][ T9216] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2380'. [ 100.625681][ T9218] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.2381'. [ 100.774037][ T9245] netlink: 'syz.1.2394': attribute type 21 has an invalid length. [ 100.782005][ T9245] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2394'. [ 101.285349][ T9321] netlink: 56863 bytes leftover after parsing attributes in process `syz.5.2430'. [ 101.347793][ T9332] netlink: 'syz.5.2435': attribute type 21 has an invalid length. [ 101.355685][ T9332] netlink: 'syz.5.2435': attribute type 22 has an invalid length. [ 101.363595][ T9332] netlink: 14413 bytes leftover after parsing attributes in process `syz.5.2435'. [ 101.438148][ T9342] syzkaller0: entered promiscuous mode [ 101.443741][ T9342] syzkaller0: entered allmulticast mode [ 101.524740][ T9352] syzkaller0: entered promiscuous mode [ 101.530370][ T9352] syzkaller0: entered allmulticast mode [ 101.670396][ T9376] netlink: 'syz.0.2457': attribute type 10 has an invalid length. [ 101.769345][ T9404] netlink: 'syz.5.2471': attribute type 21 has an invalid length. [ 101.777193][ T9404] netlink: 16166 bytes leftover after parsing attributes in process `syz.5.2471'. [ 101.833350][ T9417] netlink: 56859 bytes leftover after parsing attributes in process `syz.0.2477'. [ 101.862280][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.871449][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.880575][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.889676][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.898766][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.907918][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.917103][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.926245][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.935382][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 101.944610][ T9420] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 102.157545][ T9452] netlink: 'syz.3.2493': attribute type 10 has an invalid length. [ 103.645942][ T9655] validate_nla: 4 callbacks suppressed [ 103.645959][ T9655] netlink: 'syz.2.2593': attribute type 21 has an invalid length. [ 103.659320][ T9655] __nla_validate_parse: 3 callbacks suppressed [ 103.659337][ T9655] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2593'. [ 103.780428][ T9688] netlink: 'syz.2.2607': attribute type 21 has an invalid length. [ 103.788282][ T9688] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2607'. [ 103.958046][ T9725] syzkaller0: entered promiscuous mode [ 103.963703][ T9725] syzkaller0: entered allmulticast mode [ 104.276107][ T9794] netlink: 'syz.5.2658': attribute type 21 has an invalid length. [ 104.284024][ T9794] netlink: 'syz.5.2658': attribute type 22 has an invalid length. [ 104.291847][ T9794] netlink: 14413 bytes leftover after parsing attributes in process `syz.5.2658'. [ 104.676085][ T9854] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2687'. [ 104.801668][ T9875] netlink: 'syz.2.2697': attribute type 21 has an invalid length. [ 104.809608][ T9875] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2697'. [ 104.818468][ T9878] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.2700'. [ 104.944854][ T9900] syzkaller0: entered promiscuous mode [ 104.950446][ T9900] syzkaller0: entered allmulticast mode [ 105.118583][ T2991] udevd[2991]: worker [9933] terminated by signal 33 (Unknown signal 33) [ 105.159319][ T2991] udevd[2991]: worker [9933] failed while handling '/fs/nfs/net/nfs_client' [ 105.174096][ T9943] netlink: 'syz.0.2729': attribute type 21 has an invalid length. [ 105.181996][ T9943] netlink: 'syz.0.2729': attribute type 1 has an invalid length. [ 105.189798][ T9943] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2729'. [ 105.214822][ T9944] syz.3.2722: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 105.229468][ T9944] CPU: 1 UID: 0 PID: 9944 Comm: syz.3.2722 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 105.229579][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.229593][ T9944] Call Trace: [ 105.229600][ T9944] [ 105.229607][ T9944] __dump_stack+0x1d/0x30 [ 105.229629][ T9944] dump_stack_lvl+0xe8/0x140 [ 105.229651][ T9944] dump_stack+0x15/0x1b [ 105.229668][ T9944] warn_alloc+0x12b/0x1a0 [ 105.229716][ T9944] __vmalloc_node_range_noprof+0x9c/0xe00 [ 105.229750][ T9944] ? __futex_wait+0x1ff/0x260 [ 105.229825][ T9944] ? __pfx_futex_wake_mark+0x10/0x10 [ 105.229852][ T9944] ? __rcu_read_unlock+0x4f/0x70 [ 105.229942][ T9944] ? avc_has_perm_noaudit+0x1b1/0x200 [ 105.229967][ T9944] ? should_fail_ex+0x30/0x280 [ 105.229999][ T9944] ? xskq_create+0x36/0xe0 [ 105.230103][ T9944] vmalloc_user_noprof+0x7d/0xb0 [ 105.230136][ T9944] ? xskq_create+0x80/0xe0 [ 105.230164][ T9944] xskq_create+0x80/0xe0 [ 105.230241][ T9944] xsk_init_queue+0x95/0xf0 [ 105.230267][ T9944] xsk_setsockopt+0x477/0x640 [ 105.230292][ T9944] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.230316][ T9944] __sys_setsockopt+0x184/0x200 [ 105.230427][ T9944] __x64_sys_setsockopt+0x64/0x80 [ 105.230462][ T9944] x64_sys_call+0x20ec/0x2ff0 [ 105.230546][ T9944] do_syscall_64+0xd2/0x200 [ 105.230569][ T9944] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 105.230591][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.230749][ T9944] RIP: 0033:0x7f8f6ecbeb69 [ 105.230765][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.230785][ T9944] RSP: 002b:00007f8f6d2dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.230829][ T9944] RAX: ffffffffffffffda RBX: 00007f8f6eee6160 RCX: 00007f8f6ecbeb69 [ 105.230842][ T9944] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000010 [ 105.230853][ T9944] RBP: 00007f8f6ed41df1 R08: 0000000000000004 R09: 0000000000000000 [ 105.230865][ T9944] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 105.230877][ T9944] R13: 0000000000000000 R14: 00007f8f6eee6160 R15: 00007fff62791ff8 [ 105.230897][ T9944] [ 105.230917][ T9944] Mem-Info: [ 105.449788][ T9944] active_anon:18114 inactive_anon:0 isolated_anon:0 [ 105.449788][ T9944] active_file:24330 inactive_file:2222 isolated_file:0 [ 105.449788][ T9944] unevictable:0 dirty:108 writeback:0 [ 105.449788][ T9944] slab_reclaimable:3392 slab_unreclaimable:16106 [ 105.449788][ T9944] mapped:29225 shmem:247 pagetables:1307 [ 105.449788][ T9944] sec_pagetables:0 bounce:0 [ 105.449788][ T9944] kernel_misc_reclaimable:0 [ 105.449788][ T9944] free:1876465 free_pcp:1808 free_cma:0 [ 105.494778][ T9944] Node 0 active_anon:72456kB inactive_anon:0kB active_file:97320kB inactive_file:8888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116900kB dirty:432kB writeback:0kB shmem:988kB kernel_stack:3520kB pagetables:5228kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 105.521890][ T9944] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.550656][ T9944] lowmem_reserve[]: 0 2883 7862 7862 [ 105.556068][ T9944] Node 0 DMA32 free:2949228kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952860kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 105.586438][ T9944] lowmem_reserve[]: 0 0 4978 4978 [ 105.591544][ T9944] Node 0 Normal free:4541220kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72564kB inactive_anon:0kB active_file:97320kB inactive_file:8888kB unevictable:0kB writepending:432kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:3596kB local_pcp:2344kB free_cma:0kB [ 105.623342][ T9944] lowmem_reserve[]: 0 0 0 0 [ 105.627930][ T9944] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.640985][ T9944] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949228kB [ 105.657385][ T9944] Node 0 Normal: 2217*4kB (UME) 1316*8kB (UME) 948*16kB (UME) 887*32kB (UME) 672*64kB (UME) 280*128kB (UME) 185*256kB (UME) 148*512kB (UME) 106*1024kB (UME) 63*2048kB (UM) 986*4096kB (UM) = 4541156kB [ 105.677409][ T9944] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 105.686753][ T9944] 26809 total pagecache pages [ 105.691466][ T9944] 22 pages in swap cache [ 105.695737][ T9944] Free swap = 124908kB [ 105.699929][ T9944] Total swap = 124996kB [ 105.704181][ T9944] 2097051 pages RAM [ 105.708013][ T9944] 0 pages HighMem/MovableOnly [ 105.712793][ T9944] 80436 pages reserved [ 105.979090][ T9992] netlink: 'syz.2.2749': attribute type 21 has an invalid length. [ 105.987008][ T9992] netlink: 'syz.2.2749': attribute type 22 has an invalid length. [ 105.994828][ T9992] netlink: 14413 bytes leftover after parsing attributes in process `syz.2.2749'. [ 106.133360][T10014] netlink: 'syz.5.2757': attribute type 29 has an invalid length. [ 106.336144][T10049] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2775'. [ 106.448136][ T29] audit: type=1400 audit(1754275934.831:2343): avc: denied { setopt } for pid=10061 comm="syz.2.2781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.570414][T10094] netlink: 14413 bytes leftover after parsing attributes in process `syz.0.2797'. [ 106.794364][ T29] audit: type=1400 audit(1754275935.181:2344): avc: denied { mounton } for pid=10133 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.984724][T10133] chnl_net:caif_netlink_parms(): no params data found [ 107.051719][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.074735][T10133] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.082008][T10133] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.092555][T10133] bridge_slave_0: entered allmulticast mode [ 107.099299][T10133] bridge_slave_0: entered promiscuous mode [ 107.106846][T10133] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.114125][T10133] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.121663][T10133] bridge_slave_1: entered allmulticast mode [ 107.128499][T10133] bridge_slave_1: entered promiscuous mode [ 107.149066][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.169072][T10133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.185849][T10133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.205781][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.234016][T10133] team0: Port device team_slave_0 added [ 107.241259][T10133] team0: Port device team_slave_1 added [ 107.261943][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.273861][T10133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.280945][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.306859][T10133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.318008][T10133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.324953][T10133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.350936][T10133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.376007][T10133] hsr_slave_0: entered promiscuous mode [ 107.382262][T10133] hsr_slave_1: entered promiscuous mode [ 107.389534][T10133] debugfs: 'hsr0' already exists in 'hsr' [ 107.395278][T10133] Cannot create hsr debugfs directory [ 107.534196][ T58]  (unregistering): Released all slaves [ 107.572792][ T29] audit: type=1400 audit(1754275935.961:2345): avc: denied { search } for pid=3030 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.607067][ T29] audit: type=1400 audit(1754275935.961:2346): avc: denied { search } for pid=3030 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.628804][ T29] audit: type=1400 audit(1754275935.961:2347): avc: denied { search } for pid=3030 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.650593][ T29] audit: type=1400 audit(1754275935.961:2348): avc: denied { read } for pid=3030 comm="dhcpcd" name="n40" dev="tmpfs" ino=6004 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.672315][ T29] audit: type=1400 audit(1754275935.961:2349): avc: denied { open } for pid=3030 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=6004 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.695299][ T29] audit: type=1400 audit(1754275935.961:2350): avc: denied { getattr } for pid=3030 comm="dhcpcd" path="/run/udev/data/n40" dev="tmpfs" ino=6004 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 107.718623][ T29] audit: type=1400 audit(1754275935.991:2351): avc: denied { read open } for pid=10229 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.744126][ T29] audit: type=1400 audit(1754275935.991:2352): avc: denied { getattr } for pid=10229 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.774211][ T58] hsr_slave_0: left promiscuous mode [ 107.780212][ T58] hsr_slave_1: left promiscuous mode [ 107.786696][ T58] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 107.793924][ T58] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 107.812578][ T58] veth1_macvtap: left promiscuous mode [ 107.818151][ T58] veth0_macvtap: left promiscuous mode [ 107.832771][ T58] veth1_vlan: left promiscuous mode [ 107.873108][ T58] veth0_vlan: left promiscuous mode [ 108.062842][ T3396] infiniband syz1: ib_query_port failed (-19) [ 108.311965][T10317] syzkaller0: entered promiscuous mode [ 108.317471][T10317] syzkaller0: entered allmulticast mode [ 108.387848][T10133] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.401631][T10133] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.412117][T10133] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.430756][T10133] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.465695][T10341] bond1: entered promiscuous mode [ 108.470820][T10341] bond1: entered allmulticast mode [ 108.480035][T10341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.494091][T10341] bond1 (unregistering): Released all slaves [ 108.553284][T10133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.567564][T10133] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.592235][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.599339][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.610606][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.617737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.682414][T10387] validate_nla: 8 callbacks suppressed [ 108.682429][T10387] netlink: 'syz.2.2914': attribute type 21 has an invalid length. [ 108.695848][T10387] netlink: 'syz.2.2914': attribute type 1 has an invalid length. [ 108.703650][T10387] __nla_validate_parse: 3 callbacks suppressed [ 108.703662][T10387] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2914'. [ 108.744033][T10133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.766455][T10400] syzkaller0: entered promiscuous mode [ 108.772019][T10400] syzkaller0: entered allmulticast mode [ 108.828621][T10133] veth0_vlan: entered promiscuous mode [ 108.836741][T10133] veth1_vlan: entered promiscuous mode [ 108.863769][T10133] veth0_macvtap: entered promiscuous mode [ 108.871908][T10133] veth1_macvtap: entered promiscuous mode [ 108.887233][T10133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.909530][T10133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.932632][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.946347][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.957058][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.967873][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.248368][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.325103][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.440673][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.454946][T10431] chnl_net:caif_netlink_parms(): no params data found [ 109.505405][T10431] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.512607][T10431] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.519934][T10431] bridge_slave_0: entered allmulticast mode [ 109.526538][T10431] bridge_slave_0: entered promiscuous mode [ 109.533859][T10431] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.540966][T10431] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.548551][T10431] bridge_slave_1: entered allmulticast mode [ 109.557235][T10431] bridge_slave_1: entered promiscuous mode [ 109.625849][T10431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.646217][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.667398][T10510] bond1: entered promiscuous mode [ 109.672563][T10510] bond1: entered allmulticast mode [ 109.688406][T10510] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.717803][T10510] bond1 (unregistering): Released all slaves [ 109.732249][T10431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.805384][T10520] syzkaller0: entered promiscuous mode [ 109.810918][T10520] syzkaller0: entered allmulticast mode [ 109.876186][T10431] team0: Port device team_slave_0 added [ 109.890360][T10431] team0: Port device team_slave_1 added [ 109.991720][T10539] loop5: detected capacity change from 0 to 2048 [ 110.021542][T10539] EXT4-fs mount: 22 callbacks suppressed [ 110.021555][T10539] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.130736][ T31] bond0 (unregistering): Released all slaves [ 110.178373][T10541] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.185672][T10541] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.225799][T10543] bridge_slave_1: left allmulticast mode [ 110.231543][T10543] bridge_slave_1: left promiscuous mode [ 110.237228][T10543] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.270931][T10543] bridge_slave_0: left allmulticast mode [ 110.276592][T10543] bridge_slave_0: left promiscuous mode [ 110.282348][T10543] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.326541][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.353896][T10431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.360993][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.386950][T10431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.400261][T10431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.407274][T10431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.433298][T10431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.464531][ T31] hsr_slave_0: left promiscuous mode [ 110.484714][ T31] hsr_slave_1: left promiscuous mode [ 110.503093][ T31] veth1_macvtap: left promiscuous mode [ 110.518626][ T31] veth0_macvtap: left promiscuous mode [ 110.524975][ T31] veth1_vlan: left promiscuous mode [ 110.532465][ T31] veth0_vlan: left promiscuous mode [ 110.616273][T10577] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.2986'. [ 110.695129][T10580] syzkaller0: entered promiscuous mode [ 110.700792][T10580] syzkaller0: entered allmulticast mode [ 110.741329][T10431] hsr_slave_0: entered promiscuous mode [ 110.747674][T10431] hsr_slave_1: entered promiscuous mode [ 110.753760][T10431] debugfs: 'hsr0' already exists in 'hsr' [ 110.759607][T10431] Cannot create hsr debugfs directory [ 110.917449][T10608] 9pnet_fd: Insufficient options for proto=fd [ 110.951667][T10610] loop1: detected capacity change from 0 to 2048 [ 110.970443][T10610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.996300][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.040859][T10616] bond1: entered promiscuous mode [ 111.045923][T10616] bond1: entered allmulticast mode [ 111.052479][T10616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.062316][T10616] bond1 (unregistering): Released all slaves [ 111.090714][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 111.103337][T10618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.112315][T10618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.126419][T10620] syzkaller0: entered promiscuous mode [ 111.132052][T10620] syzkaller0: entered allmulticast mode [ 111.175635][T10431] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 111.184583][T10431] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 111.200283][T10431] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 111.212592][T10431] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 111.264394][T10431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.311995][T10431] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.325079][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.332167][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.345970][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.353071][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.379910][T10431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 111.390358][T10431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.456102][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 111.456116][ T29] audit: type=1400 audit(1754275939.841:2567): avc: denied { execmem } for pid=10658 comm="syz.5.3018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 111.478310][T10659] loop5: detected capacity change from 0 to 2048 [ 111.504672][ T29] audit: type=1400 audit(1754275939.891:2568): avc: denied { mounton } for pid=10658 comm="syz.5.3018" path="/554/file1" dev="tmpfs" ino=2833 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.508548][T10431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.545525][T10659] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.548080][T10666] syzkaller0: entered promiscuous mode [ 111.559817][ T29] audit: type=1400 audit(1754275939.951:2569): avc: denied { mount } for pid=10658 comm="syz.5.3018" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.563214][T10666] syzkaller0: entered allmulticast mode [ 111.586237][ T29] audit: type=1400 audit(1754275939.971:2570): avc: denied { add_name } for pid=10658 comm="syz.5.3018" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.611066][ T29] audit: type=1400 audit(1754275939.971:2571): avc: denied { create } for pid=10658 comm="syz.5.3018" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.632005][ T29] audit: type=1400 audit(1754275939.991:2572): avc: denied { read write open } for pid=10658 comm="syz.5.3018" path="/554/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 111.661887][ T29] audit: type=1400 audit(1754275940.051:2573): avc: denied { create } for pid=10669 comm="syz.3.3021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.681591][ T29] audit: type=1400 audit(1754275940.051:2574): avc: denied { write } for pid=10669 comm="syz.3.3021" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.770940][ T29] audit: type=1400 audit(1754275940.161:2575): avc: denied { create } for pid=10682 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.799886][ T29] audit: type=1400 audit(1754275940.191:2576): avc: denied { setopt } for pid=10682 comm="syz.0.3025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.836263][T10431] veth0_vlan: entered promiscuous mode [ 111.850905][T10431] veth1_vlan: entered promiscuous mode [ 111.858449][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.877589][T10431] veth0_macvtap: entered promiscuous mode [ 111.940638][T10431] veth1_macvtap: entered promiscuous mode [ 111.969167][T10431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.006486][T10431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.020303][ T9048] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.037852][ T9048] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.113677][ T9048] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.143881][ T9048] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.159540][T10726] netlink: 'syz.2.2927': attribute type 21 has an invalid length. [ 112.167424][T10726] netlink: 'syz.2.2927': attribute type 1 has an invalid length. [ 112.175184][T10726] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2927'. [ 112.211652][T10734] loop3: detected capacity change from 0 to 764 [ 112.222962][T10731] loop0: detected capacity change from 0 to 2048 [ 112.262732][T10734] sctp: [Deprecated]: syz.3.3042 (pid 10734) Use of int in max_burst socket option deprecated. [ 112.262732][T10734] Use struct sctp_assoc_value instead [ 112.285727][T10722] loop1: detected capacity change from 0 to 512 [ 112.342538][T10722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.436424][T10722] ext4 filesystem being mounted at /554/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.455708][T10747] loop2: detected capacity change from 0 to 2048 [ 112.516732][T10747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.650691][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.690328][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3050'. [ 112.699384][T10755] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3050'. [ 112.720873][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3050'. [ 112.740153][T10755] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3050'. [ 112.749305][T10755] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3050'. [ 112.859767][T10765] netlink: 'syz.3.3054': attribute type 21 has an invalid length. [ 112.867620][T10765] netlink: 'syz.3.3054': attribute type 1 has an invalid length. [ 112.875486][T10765] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.3054'. [ 112.880657][T10764] loop1: detected capacity change from 0 to 2048 [ 112.957220][T10764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.016787][ T2991] udevd[2991]: worker [10214] terminated by signal 33 (Unknown signal 33) [ 113.091556][ T2991] udevd[2991]: worker [10214] failed while handling '/devices/virtual/block/loop1' [ 113.276791][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.576673][T10801] 9pnet_fd: Insufficient options for proto=fd [ 113.712872][T10813] loop1: detected capacity change from 0 to 2048 [ 113.753074][T10813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.783177][T10431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.872068][ T3306] syz_tun (unregistering): left allmulticast mode [ 113.878624][ T3306] syz_tun (unregistering): left promiscuous mode [ 113.885110][ T3306] : port 1(syz_tun) entered disabled state [ 114.054190][T10831] bond0: (slave bond_slave_0): Releasing backup interface [ 114.086709][T10831] bond0: (slave bond_slave_1): Releasing backup interface [ 114.118895][T10831] team0: Port device team_slave_0 removed [ 114.127899][T10831] team0: Port device team_slave_1 removed [ 114.146150][T10831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.153679][T10831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.163805][T10831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.171300][T10831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.185449][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.348826][T10857] __nla_validate_parse: 5 callbacks suppressed [ 114.348841][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3091'. [ 114.364226][T10857] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3091'. [ 114.390403][T10859] loop1: detected capacity change from 0 to 2048 [ 114.430034][T10857] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3091'. [ 114.464854][T10857] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3091'. [ 114.473979][T10857] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3091'. [ 114.534384][T10865] loop3: detected capacity change from 0 to 512 [ 114.572059][T10865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.624527][T10865] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.667733][T10823] chnl_net:caif_netlink_parms(): no params data found [ 114.774255][T10133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.874995][T10823] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.882213][T10823] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.911665][T10823] bridge_slave_0: entered allmulticast mode [ 114.921294][T10823] bridge_slave_0: entered promiscuous mode [ 114.931782][T10823] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.938860][T10823] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.946471][T10823] bridge_slave_1: entered allmulticast mode [ 114.953804][T10823] bridge_slave_1: entered promiscuous mode [ 115.011921][T10823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.024230][T10898] netlink: 'syz.3.3104': attribute type 21 has an invalid length. [ 115.032134][T10898] netlink: 'syz.3.3104': attribute type 22 has an invalid length. [ 115.039975][T10898] netlink: 14413 bytes leftover after parsing attributes in process `syz.3.3104'. [ 115.050609][T10823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.075406][T10823] team0: Port device team_slave_0 added [ 115.090357][T10823] team0: Port device team_slave_1 added [ 115.135113][T10823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.142107][T10823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.168280][T10823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.180296][T10823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.187238][T10823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.213235][T10823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.235588][T10909] loop5: detected capacity change from 0 to 2048 [ 115.245238][T10823] hsr_slave_0: entered promiscuous mode [ 115.254277][T10823] hsr_slave_1: entered promiscuous mode [ 115.263697][T10909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.276247][T10823] debugfs: 'hsr0' already exists in 'hsr' [ 115.282044][T10823] Cannot create hsr debugfs directory [ 115.314146][T10914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3111'. [ 115.323242][T10914] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3111'. [ 115.335222][T10914] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3111'. [ 115.336349][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.344631][T10914] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3111'. [ 115.467888][T10823] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.505975][T10929] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.516213][T10823] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.588820][T10942] bond1: entered promiscuous mode [ 115.593929][T10942] bond1: entered allmulticast mode [ 115.603070][T10942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.616510][T10942] bond1 (unregistering): Released all slaves [ 115.637293][T10823] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.659082][T10942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.675375][T10942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.718836][T10823] team0: Port device netdevsim0 removed [ 115.725880][T10823] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.744197][T10962] 9pnet_fd: Insufficient options for proto=fd [ 115.811704][T10823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.824405][T10823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.837308][T10823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.851419][T10823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.932203][T10823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.938863][T10986] loop5: detected capacity change from 0 to 764 [ 115.954906][T10823] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.966286][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.972206][T10986] sctp: [Deprecated]: syz.5.3139 (pid 10986) Use of int in max_burst socket option deprecated. [ 115.972206][T10986] Use struct sctp_assoc_value instead [ 115.973375][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.017662][T10823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.028336][T10823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.045551][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.052631][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.164575][T10823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.237084][T10823] veth0_vlan: entered promiscuous mode [ 116.249215][T10823] veth1_vlan: entered promiscuous mode [ 116.254961][T11006] loop5: detected capacity change from 0 to 512 [ 116.265588][T10823] veth0_macvtap: entered promiscuous mode [ 116.275898][T10823] veth1_macvtap: entered promiscuous mode [ 116.291779][T11006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.304431][T11006] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.317515][T10823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.336806][T10823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.350203][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.375758][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.423517][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.443808][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.482770][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.517156][T11022] loop3: detected capacity change from 0 to 2048 [ 116.578513][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 116.578527][ T29] audit: type=1400 audit(1754275944.961:2714): avc: denied { create } for pid=11032 comm="syz.5.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.650448][ T29] audit: type=1400 audit(1754275944.971:2715): avc: denied { bind } for pid=11032 comm="syz.5.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 116.670017][ T29] audit: type=1400 audit(1754275945.001:2716): avc: denied { bind } for pid=11032 comm="syz.5.3151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.690408][ T29] audit: type=1400 audit(1754275945.001:2717): avc: denied { ioctl } for pid=11032 comm="syz.5.3151" path="socket:[32954]" dev="sockfs" ino=32954 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 116.725239][T11041] netlink: 'syz.2.3154': attribute type 21 has an invalid length. [ 116.733200][T11041] netlink: 'syz.2.3154': attribute type 22 has an invalid length. [ 116.844591][ T29] audit: type=1326 audit(1754275945.231:2718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 116.852664][T11053] loop2: detected capacity change from 0 to 2048 [ 116.868223][ T29] audit: type=1326 audit(1754275945.231:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 116.905948][ T29] audit: type=1326 audit(1754275945.291:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 116.940327][T11053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.975858][T10431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.014123][ T29] audit: type=1326 audit(1754275945.401:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 117.037756][ T29] audit: type=1326 audit(1754275945.401:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11049 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 117.161188][T11066] loop5: detected capacity change from 0 to 2048 [ 117.187674][ T29] audit: type=1326 audit(1754275945.521:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11069 comm="syz.1.3165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc987e9eb69 code=0x7ffc0000 [ 117.235343][T11066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.276680][T11077] loop2: detected capacity change from 0 to 2048 [ 117.427256][T11087] loop3: detected capacity change from 0 to 2048 [ 117.477517][T11087] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.598880][T11097] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 117.653174][ T3716] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.671688][T10133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.017078][T11128] bridge_slave_0: left allmulticast mode [ 118.022863][T11128] bridge_slave_0: left promiscuous mode [ 118.028561][T11128] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.070127][T11128] bridge_slave_1: left allmulticast mode [ 118.075812][T11128] bridge_slave_1: left promiscuous mode [ 118.081587][T11128] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.104466][T11128] bond0: (slave bond_slave_0): Releasing backup interface [ 118.124243][T11128] bond0: (slave bond_slave_1): Releasing backup interface [ 118.146194][T11128] team0: Port device team_slave_0 removed [ 118.164300][T11128] team0: Port device team_slave_1 removed [ 118.180127][T11128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.187680][T11128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.214030][T11128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.221499][T11128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.324709][T11137] netlink: 'syz.0.3191': attribute type 21 has an invalid length. [ 118.332752][T11137] netlink: 'syz.0.3191': attribute type 1 has an invalid length. [ 118.410001][T11148] loop0: detected capacity change from 0 to 2048 [ 118.439290][T11148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.495260][T10823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.515635][T11154] loop3: detected capacity change from 0 to 2048 [ 119.001605][T11192] netlink: 'syz.0.3210': attribute type 29 has an invalid length. [ 119.035091][T11192] netlink: 'syz.0.3210': attribute type 29 has an invalid length. [ 119.212148][T11205] loop2: detected capacity change from 0 to 1024 [ 119.222232][T11205] EXT4-fs: Ignoring removed orlov option [ 119.260960][T11205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.313855][T11174] chnl_net:caif_netlink_parms(): no params data found [ 119.351697][T11212] syzkaller0: entered promiscuous mode [ 119.357197][T11212] syzkaller0: entered allmulticast mode [ 119.431856][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.438945][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.486345][T11174] bridge_slave_0: entered allmulticast mode [ 119.502176][T11174] bridge_slave_0: entered promiscuous mode [ 119.510481][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.517599][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.525008][T11174] bridge_slave_1: entered allmulticast mode [ 119.531587][T11174] bridge_slave_1: entered promiscuous mode [ 119.586456][T11174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.603461][T11174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.634837][T11174] team0: Port device team_slave_0 added [ 119.649958][T11228] __nla_validate_parse: 13 callbacks suppressed [ 119.649973][T11228] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3223'. [ 119.665324][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3223'. [ 119.677789][T11174] team0: Port device team_slave_1 added [ 119.705891][T11232] netlink: 'syz.3.3227': attribute type 21 has an invalid length. [ 119.705966][T11174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.713835][T11232] netlink: 'syz.3.3227': attribute type 1 has an invalid length. [ 119.720827][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.728518][T11232] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3227'. [ 119.754416][T11174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.775990][T11174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.783009][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.808952][T11174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.834551][T11235] loop1: detected capacity change from 0 to 2048 [ 119.843299][T10431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.884351][T11235] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.917911][T11174] hsr_slave_0: entered promiscuous mode [ 119.933236][T11174] hsr_slave_1: entered promiscuous mode [ 119.956807][T11174] debugfs: 'hsr0' already exists in 'hsr' [ 119.962596][T11174] Cannot create hsr debugfs directory [ 120.010417][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.081022][T11174] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.117167][T11257] 9pnet_fd: Insufficient options for proto=fd [ 120.144125][T11261] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3237'. [ 120.153440][T11261] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'. [ 120.193697][T11263] syzkaller0: entered promiscuous mode [ 120.199228][T11263] syzkaller0: entered allmulticast mode [ 120.212197][T11174] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.263166][T11174] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.333566][T11174] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.423336][T11280] loop1: detected capacity change from 0 to 2048 [ 120.453753][T11174] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.466636][T11174] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.477071][T11174] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.496333][T11174] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.617415][T11299] bridge_slave_0: left allmulticast mode [ 120.623323][T11299] bridge_slave_0: left promiscuous mode [ 120.629016][T11299] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.644397][T11299] bridge_slave_1: left allmulticast mode [ 120.650114][T11299] bridge_slave_1: left promiscuous mode [ 120.655749][T11299] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.666561][T11299] bond0: (slave bond_slave_0): Releasing backup interface [ 120.677457][T11299] bond0: (slave bond_slave_1): Releasing backup interface [ 120.697705][T11299] team0: Port device team_slave_0 removed [ 120.706838][T11299] team0: Port device team_slave_1 removed [ 120.715292][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.715396][T11289] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3249'. [ 120.722728][T11299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.742545][T11299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.748295][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3249'. [ 120.750003][T11299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.812979][T11174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.870642][T11174] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.888397][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.895583][ T9053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.905310][T11300] loop0: detected capacity change from 0 to 164 [ 120.914347][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.921463][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.088247][T11174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.244996][T11174] veth0_vlan: entered promiscuous mode [ 121.261864][T11174] veth1_vlan: entered promiscuous mode [ 121.298122][T11174] veth0_macvtap: entered promiscuous mode [ 121.299509][T11342] netlink: 'syz.3.3261': attribute type 21 has an invalid length. [ 121.305592][T11271] syz.1.3242 (11271) used greatest stack depth: 6432 bytes left [ 121.311870][T11342] netlink: 'syz.3.3261': attribute type 22 has an invalid length. [ 121.311885][T11342] netlink: 14413 bytes leftover after parsing attributes in process `syz.3.3261'. [ 121.334159][T11174] veth1_macvtap: entered promiscuous mode [ 121.361542][T11174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.382882][T11174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.396970][ T9053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.409372][ T9053] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.436458][ T9053] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.461922][ T9053] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.515837][T11355] loop0: detected capacity change from 0 to 2048 [ 121.545299][T11355] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.570058][T11357] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 121.636640][T10823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.657611][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.664844][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.689439][T11370] bridge_slave_1: left allmulticast mode [ 121.695232][T11370] bridge_slave_1: left promiscuous mode [ 121.701079][T11370] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.728964][T11370] bridge_slave_0: left allmulticast mode [ 121.734681][T11370] bridge_slave_0: left promiscuous mode [ 121.740542][T11370] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.767782][T11375] loop0: detected capacity change from 0 to 2048 [ 121.781557][T11375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.853850][T11385] bond1: entered promiscuous mode [ 121.858937][T11385] bond1: entered allmulticast mode [ 121.881783][T11385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.893331][T11385] bond1 (unregistering): Released all slaves [ 121.954355][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3273'. [ 121.972919][T11385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.986088][T11385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.987003][T10823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.074176][T11364] chnl_net:caif_netlink_parms(): no params data found [ 122.129119][T11364] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.136323][T11364] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.145241][T11364] bridge_slave_0: entered allmulticast mode [ 122.157938][T11364] bridge_slave_0: entered promiscuous mode [ 122.178954][T11364] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.186119][T11364] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.217502][T11364] bridge_slave_1: entered allmulticast mode [ 122.224413][T11364] bridge_slave_1: entered promiscuous mode [ 122.244576][T11364] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.255146][T11364] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.276493][T11418] netlink: 'syz.2.3284': attribute type 29 has an invalid length. [ 122.286256][T11364] team0: Port device team_slave_0 added [ 122.292140][T11418] netlink: 'syz.2.3284': attribute type 29 has an invalid length. [ 122.301235][T11364] team0: Port device team_slave_1 added [ 122.307057][T11418] netlink: 'syz.2.3284': attribute type 29 has an invalid length. [ 122.331391][T11364] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.338354][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.346549][T11420] loop2: detected capacity change from 0 to 2048 [ 122.364317][T11364] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.387757][T11364] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.390432][T11420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.394758][T11364] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.432622][T11364] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.468827][T11364] hsr_slave_0: entered promiscuous mode [ 122.475168][T11364] hsr_slave_1: entered promiscuous mode [ 122.481371][T11364] debugfs: 'hsr0' already exists in 'hsr' [ 122.487111][T11364] Cannot create hsr debugfs directory [ 122.542567][T11428] loop0: detected capacity change from 0 to 2048 [ 122.564392][T11428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.639095][T11364] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.674356][T10431] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.701646][T11364] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.728395][T11439] netlink: 'syz.2.3290': attribute type 21 has an invalid length. [ 122.736309][T11439] netlink: 'syz.2.3290': attribute type 22 has an invalid length. [ 122.744243][T11439] netlink: 14413 bytes leftover after parsing attributes in process `syz.2.3290'. [ 122.792526][T11364] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.818168][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 122.818183][ T29] audit: type=1326 audit(1754275951.201:2908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 122.877988][T10823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.892779][T11364] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.907637][ T29] audit: type=1326 audit(1754275951.231:2909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 122.931305][ T29] audit: type=1326 audit(1754275951.241:2910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 122.954810][ T29] audit: type=1326 audit(1754275951.241:2911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 122.978305][ T29] audit: type=1326 audit(1754275951.241:2912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 123.001850][ T29] audit: type=1326 audit(1754275951.241:2913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 123.025339][ T29] audit: type=1326 audit(1754275951.241:2914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 123.048903][ T29] audit: type=1326 audit(1754275951.241:2915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 123.072322][ T29] audit: type=1326 audit(1754275951.241:2916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 123.095841][ T29] audit: type=1326 audit(1754275951.241:2917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11440 comm="syz.2.3291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0229d4eb69 code=0x7ffc0000 [ 123.190964][T11364] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.202962][T11364] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.246091][T11364] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.256348][T11364] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.350824][T11457] netlink: 'syz.0.3294': attribute type 29 has an invalid length. [ 123.364886][T11364] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.383968][T11457] netlink: 'syz.0.3294': attribute type 29 has an invalid length. [ 123.405628][T11457] netlink: 'syz.0.3294': attribute type 29 has an invalid length. [ 123.416580][T11364] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.442252][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.449329][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.512732][T11469] loop0: detected capacity change from 0 to 1024 [ 123.523568][T11467] loop5: detected capacity change from 0 to 2048 [ 123.537037][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.544233][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.544779][T11469] EXT4-fs: Ignoring removed orlov option [ 123.564055][T11469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.597640][T11467] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.758546][T11364] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.897331][T11364] veth0_vlan: entered promiscuous mode [ 123.940186][T11364] veth1_vlan: entered promiscuous mode [ 123.968869][T11174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.973833][T11364] veth0_macvtap: entered promiscuous mode [ 123.986030][T11364] veth1_macvtap: entered promiscuous mode [ 124.005632][T11364] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.014973][T11364] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.031008][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.072906][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.098836][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.108091][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.151606][T11511] bond0: (slave bond_slave_0): Releasing backup interface [ 124.171243][T11511] bond0: (slave bond_slave_1): Releasing backup interface [ 124.181061][T10823] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.181699][T11517] 9pnet_fd: Insufficient options for proto=fd [ 124.203552][T11511] team0: Port device team_slave_0 removed [ 124.237699][T11511] team0: Port device team_slave_1 removed [ 124.245461][T11511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.252983][T11511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.261315][T11511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.268719][T11511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.871251][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3326'. [ 124.880274][T11559] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3326'. [ 124.890182][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3326'. [ 124.900814][T11559] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3326'. [ 124.909672][T11554] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 124.909993][T11559] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3326'. [ 124.984476][T11570] 9pnet_fd: Insufficient options for proto=fd [ 125.202825][T11597] bond1: entered promiscuous mode [ 125.207914][T11597] bond1: entered allmulticast mode [ 125.213788][T11597] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.228758][T11597] bond1 (unregistering): Released all slaves [ 125.240444][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3341'. [ 125.249474][T11600] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3341'. [ 125.259100][T11600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3341'. [ 125.276606][T11600] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3341'. [ 125.285728][T11600] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3341'. [ 125.520446][T11629] loop5: detected capacity change from 0 to 512 [ 125.535184][T11629] ext3: Unknown parameter 'func' [ 125.552130][T11629] capability: warning: `syz.5.3354' uses deprecated v2 capabilities in a way that may be insecure [ 125.569254][T11629] tmpfs: Bad value for 'size' [ 125.591596][T11638] loop0: detected capacity change from 0 to 764 [ 125.623563][T11638] sctp: [Deprecated]: syz.0.3358 (pid 11638) Use of int in max_burst socket option deprecated. [ 125.623563][T11638] Use struct sctp_assoc_value instead [ 125.659930][T11640] loop5: detected capacity change from 0 to 1024 [ 125.668685][T11640] EXT4-fs: Ignoring removed orlov option [ 125.686710][T11640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.706700][T11642] loop1: detected capacity change from 0 to 2048 [ 125.742695][T11642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.778223][T11652] 9pnet_fd: Insufficient options for proto=fd [ 125.903705][T11364] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.944413][T11669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.953638][T11669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.994477][T11674] loop2: detected capacity change from 0 to 764 [ 126.006813][T11674] sctp: [Deprecated]: syz.2.3371 (pid 11674) Use of int in max_burst socket option deprecated. [ 126.006813][T11674] Use struct sctp_assoc_value instead [ 126.095258][T11174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.142886][T11684] loop3: detected capacity change from 0 to 1024 [ 126.149668][T11684] EXT4-fs: Ignoring removed orlov option [ 126.156013][T11688] 9pnet_fd: Insufficient options for proto=fd [ 126.170560][T11684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.284654][T11694] ================================================================== [ 126.292772][T11694] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 126.300770][T11694] [ 126.303093][T11694] write to 0xffff88811a1b75c0 of 4 bytes by task 11684 on cpu 0: [ 126.310806][T11694] writeback_single_inode+0x14a/0x3e0 [ 126.316187][T11694] sync_inode_metadata+0x5b/0x90 [ 126.321133][T11694] generic_buffers_fsync_noflush+0xd9/0x120 [ 126.327043][T11694] ext4_sync_file+0x1ab/0x690 [ 126.331736][T11694] vfs_fsync_range+0x10d/0x130 [ 126.336507][T11694] ext4_buffered_write_iter+0x34f/0x3c0 [ 126.342061][T11694] ext4_file_write_iter+0x383/0xf00 [ 126.347271][T11694] iter_file_splice_write+0x5f2/0x970 [ 126.352652][T11694] direct_splice_actor+0x153/0x2a0 [ 126.357765][T11694] splice_direct_to_actor+0x30f/0x680 [ 126.363141][T11694] do_splice_direct+0xda/0x150 [ 126.367900][T11694] do_sendfile+0x380/0x650 [ 126.372328][T11694] __x64_sys_sendfile64+0x105/0x150 [ 126.377538][T11694] x64_sys_call+0x2bb0/0x2ff0 [ 126.382219][T11694] do_syscall_64+0xd2/0x200 [ 126.386733][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.392640][T11694] [ 126.394963][T11694] read to 0xffff88811a1b75c0 of 4 bytes by task 11694 on cpu 1: [ 126.402592][T11694] vfs_fsync_range+0x9b/0x130 [ 126.407252][T11694] ext4_buffered_write_iter+0x34f/0x3c0 [ 126.412800][T11694] ext4_file_write_iter+0x383/0xf00 [ 126.417987][T11694] iter_file_splice_write+0x5f2/0x970 [ 126.423337][T11694] direct_splice_actor+0x153/0x2a0 [ 126.428424][T11694] splice_direct_to_actor+0x30f/0x680 [ 126.433772][T11694] do_splice_direct+0xda/0x150 [ 126.438521][T11694] do_sendfile+0x380/0x650 [ 126.442922][T11694] __x64_sys_sendfile64+0x105/0x150 [ 126.448103][T11694] x64_sys_call+0x2bb0/0x2ff0 [ 126.452759][T11694] do_syscall_64+0xd2/0x200 [ 126.457243][T11694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.463116][T11694] [ 126.465420][T11694] value changed: 0x00000038 -> 0x00000002 [ 126.471112][T11694] [ 126.473417][T11694] Reported by Kernel Concurrency Sanitizer on: [ 126.479564][T11694] CPU: 1 UID: 0 PID: 11694 Comm: syz.3.3376 Not tainted 6.16.0-syzkaller-11322-g352af6a011d5 #0 PREEMPT(voluntary) [ 126.491701][T11694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.501740][T11694] ================================================================== [ 126.564142][T10133] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.