last executing test programs: 1m25.02852052s ago: executing program 2 (id=8460): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xf2}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xbc}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000480)=""/176, 0xb0}], 0x7}, 0x40012100) 1m24.823651587s ago: executing program 2 (id=8461): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000000), 0x4000) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x5ff1, &(0x7f0000000040)={0x0, 0xdefc, 0x4, 0x3, 0x17d}) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) io_uring_enter(r1, 0x2217, 0xcf74, 0x16, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"/452], 0x14c}, 0x1, 0x0, 0x0, 0x24080}, 0x80000) 1m23.908965552s ago: executing program 2 (id=8473): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="3000000000000000000000000700000089"], 0x30}, 0x0) 1m23.897368392s ago: executing program 2 (id=8474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fddfdf251700000024003080250004007406ff4fb4d63e1e98a8e422ce5bd778ffff020022000000040001800c8d564d37b767240bdc61e2ebee2b3c00060001000000ee08ce7f"], 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x4008010) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000004c0)='net\x00') getdents64(r5, &(0x7f0000000080)=""/95, 0x5f) getdents(r5, 0xfffffffffffffffd, 0x3b) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCL_SELLOADLUT(r6, 0x541c, &(0x7f00000003c0)={0x5, 0x200, 0x5, 0x80000000, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r8, 0x6628) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x700}) ioctl$FS_IOC_FSGETXATTR(r8, 0x801c581f, &(0x7f0000000000)={0x200, 0x1ff, 0x3, 0x7fff, 0x3}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@init_itable_val={'init_itable', 0x3d, 0x1da}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) gettid() r9 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r9, 0x0) 1m23.631507234s ago: executing program 2 (id=8477): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 1m23.300686971s ago: executing program 2 (id=8486): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @broadcast}, 0x3, 0x4, 0x2, 0x2}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 1m23.300562171s ago: executing program 32 (id=8486): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x87) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x601, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0x6, 0x1b}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x12) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendto(r0, &(0x7f00000003c0)="e1118ce4769b", 0x6, 0x800, &(0x7f0000000600)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e20, @broadcast}, 0x3, 0x4, 0x2, 0x2}}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 1m14.584572473s ago: executing program 4 (id=8572): ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$tun(r1, &(0x7f00000003c0)=ANY=[], 0xdc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m14.02056782s ago: executing program 4 (id=8582): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r1, @ANYBLOB="a4c98bd2ae8d09fc9752754bb6b23fc851d2b32e42b8d3c6cc9fd683561af136f9ef40ce8a01e3e4a37b2dbcf9a5aad56fdb342579722b8e60935b7b19dfd46323ab4025b8402fc8e342992a269b7ab645cac13431bde65b0c5f433abffada5ec5352114e65b5361c21a15c09053a99c9f2ee899e7a8ba92c04a233653522a46cb19ad78d23b0492361f0e3d6f4c47f37e8ec0090629f8684d01abfddc43b0542ac211ec730dff2993bc4048ecaa88d0b7d2b3d5559a97ba99c5986a6cd906b5a0e183f7175d21c93e98fe"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m13.966535254s ago: executing program 4 (id=8584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x3e, 0x1, {0x0, 0xb, 0x5}}}}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x48}}, 0x4000010) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') socket$netlink(0x10, 0x3, 0x4) creat(0x0, 0x0) 1m13.838736225s ago: executing program 4 (id=8587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aad", 0x3a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737491a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f6", 0x8f}, {&(0x7f0000000340)="c86d573ac19fb682d1911dfb13d5d0a616279230f2052742399d2244ceb7e4b0158ffb4912c2f3bb9b033f0f8c57871e66173fb794c68ea09f70f6f438a7f8f091ab27adda7b1de7196cff3dc7d8ccaf8f8cb06d861abb18bc662ed69d0adbce1d7f85", 0x63}, {&(0x7f0000000640)="2a03a0cba4b85fbbdf75673f3ded77ee28c50735968e37f3e3786478a31197705a76751c11d25805e6658f2b1cd202fc4625cd82d206d0e085ca1ce4570325e54a781f16b031d2f5848c7bd33da968c99f8387c5b0aa37e81254b674aa34c85bb8aef95300d9e317d7254541a12f6078ae2a43e48ee5cd0ae1f221345c07e1ad94b7cfceb17676ad7dcc7292", 0x8c}], 0x3}}], 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r3, &(0x7f0000000d40)=""/43, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0), &(0x7f0000000700)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b700"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m12.728855205s ago: executing program 4 (id=8589): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "ead43f1ebd755fcaa13bae2a229fb3bd16e4c459c1f46a6c", "391aa94c42fca7ead0e17e59f1bea955800221ccbbdacfc61a4a9a2dc4ed4c44"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x55}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0900000004000000060000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000db71f7768500000021000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0, 0xea}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) setrlimit(0x5, &(0x7f0000000280)={0x6, 0x7fffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x104}, 0x20000050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e0000001000000000008000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000001000000000000004400050020010000000000000000000000000002000000002b"], 0xfc}}, 0x200408c0) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xa) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@version_u}]}}) 1m12.200389308s ago: executing program 4 (id=8597): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4f014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x3a) getdents(r7, &(0x7f0000000380)=""/169, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0xffffff5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m12.199788919s ago: executing program 33 (id=8597): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4f014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r0, 0x541c, &(0x7f0000000180)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x3a) getdents(r7, &(0x7f0000000380)=""/169, 0xa9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0xffffff5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 54.040490613s ago: executing program 6 (id=8752): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xff}, 0x18) mq_open(0x0, 0x40, 0xb4, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000280)=0x0) syz_open_procfs(r2, &(0x7f0000000340)='net/sco\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0x100ad, 0x0, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r5, 0x407, 0x6) 53.069456172s ago: executing program 6 (id=8774): ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x41) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 52.944223242s ago: executing program 6 (id=8776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 52.690871633s ago: executing program 6 (id=8785): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000300)=r3}, 0x20) unshare(0x2040400) fcntl$addseals(0xffffffffffffffff, 0x409, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x89801) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x88900) move_mount(r6, 0x0, r5, 0x0, 0x46) socket$inet(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1820000000001200000000000000000095dde5e4d544a41d2f23610d49586ef70d930364856ee5cf0d0f1d"], &(0x7f0000000c00)='GPL\x00', 0x80000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r7, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a2800c50000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001008900030073797a3278fb4cbc014ed6d7194d32e3aeda000000001476d6d16f651ad054ae028e8a448de5329756669c6cea2be50d544a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close(r5) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8=r6, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 52.021032778s ago: executing program 6 (id=8801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000740)={0x0, 0x0}) sched_rr_get_interval(r4, &(0x7f0000000780)) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000080)={0x0, 0x0, 0x8, 0xfffd, 0x9, "000100"}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0x0, 0x0) lseek(r6, 0x1000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") unshare(0x42000000) 51.656882098s ago: executing program 6 (id=8811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) socket$kcm(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 51.644160279s ago: executing program 34 (id=8811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0}, 0x18) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) socket$kcm(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4008000) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000340), 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$inet(0x2, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), r5) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r6, @ANYBLOB="05043fbd7000fddbdf250100000008000100", @ANYRES32=r7, @ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x20000401}, 0x44084) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="040101000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 5.756211469s ago: executing program 0 (id=9488): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="721281c85051b08b704f2a3c7955c1321c2d521da654a3fffaff142ac35a67c82a6d59bc7e4cada892af488694cf675349d974346f36fc5bfd746ea6c487ddc41637", &(0x7f00000003c0)="950da4a0b82ca4176b492e4ff58d24548f7846e0066acef7b182d60b148cb7375ad26288660c7785f0369a34c8b4fae29f2d104bafbe8b889d81f096801c809be58d201c059ede78175f019c4a80500e9e2d6db90e9585e582aadc1718666b8812099151aa0f2c438bd9d0b513c23e1a2fe67de64f3dedd9c37c9f4a6a81e4b65a9a56515485ff3630a9fc46ac2858ee7397e58d5033a862f918237cfb559dc386dfe887477e1644c54ddcc98c7f4728630d0d289f0c56d77bd30abb7278177a1590eb4fc52bea9e525f38563fd32e40e2f6b3c36129"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.443318527s ago: executing program 0 (id=9493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r1, 0x0, 0x400}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r2, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r2, 0x407, 0x6) 4.356955194s ago: executing program 0 (id=9496): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4f014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0xfffffffe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3a) 4.194998477s ago: executing program 5 (id=9502): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0xfffffd33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000018c0)='Ob', 0x2}, {&(0x7f0000000240)="4c0f7ff04f5f9c8f3f5325946930ebcd516c92d1e979bf8203dce0ae67adba6da5ab59c424ce88c0a8fa77f857e6ee6e5f7b0428a8faf99f9b08120bf59ed1d2d92da03c724c64dc7b395df0491c71adee2abb798ca5d8d31f37d352a1a186c9c1b8c333dd90eb2959514ab30fbcf2e718e8cba160f89d41bce3fcd229b838ce47e7c329bed5fafc6604b522c492a59fd55fe3582037c888fdd6d39d89e5a6ac9f27196a8053974aff905dfbd7a79ccd3d8e5f07cf824218e096d702ed7b4287603df088e2c9c2eede8d38dfe64efd0d558f8343802c0896", 0xd8}, {&(0x7f0000000340)="769a0bd7d5576f3f77304ae8ea8451ae600bb13ceb699d8b58697152551cb2db9be665eb", 0x24}], 0x3}}], 0x3, 0xc0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x7fffb}, 0x18) socket(0x2, 0x80805, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc", @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x7e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 4.187085218s ago: executing program 1 (id=9503): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 3.623897204s ago: executing program 1 (id=9506): socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$inet(0x2, 0x8000c, 0x3) socketpair(0xf, 0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1040}], 0x1, 0x0, 0x0, 0x0) write$vga_arbiter(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB='lock io'], 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20040810}, 0x8094) 2.733048967s ago: executing program 0 (id=9507): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}, 0x40) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x30000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x1c}, 0x0, 0x0, 0x800020, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000280)=0x80020000, 0x4) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f0000002000)={{r0}, "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"}) listen(r4, 0x2) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r5, &(0x7f0000000d40)={0x0, 0x0, 0x0}, 0x4004000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={0x0}, 0x18) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000d80)={0x1278, r6, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x13c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "913d946a37e39d1180c7209b4955340b78832b3f78ed2025dd5f"}}, @TIPC_NLA_NODE_ID={0xde, 0x3, "7f14e236fd37a93eca4b91a7d4724c28f197c8fcb2a3ba97bc826723a659ae67939fa65b3a05b7ac2e712c634a58a61a915c644988bd74fcd30144b7a90619b9543de849537122ca901b9525ff265503ad27891595dbab307619d55e8b20e52e418649e3a278f7abbf13d80760e10b1835375fd62861161a046fcad5ef74637bd6b94fb4e3809f2437ae3d48e9574d21e8198c18301920328ebc9c263cb177b5fded405419e30c77f52174969f99d840dd9935b70d6e754eb31ceb4b24ca6b4cca25632ff7c33a2e05edb771ca16d3162224fb085d32704ffe92"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbdfe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbce}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NODE={0x10cc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_ID={0xaa, 0x3, "0d34e0bcf0297914c684764120c29ab1a91ffc7e7b4c6bbb355c2287e069a02f70e973139676f8c10636d05370f1af46e9d4211792c332b8c6b2ff06ea7f42f8634a89f367542b32bfd65c5d424ae82714fd2f7e5164101b58fa3e3682da52d4aaf3133829d420a4488d01f7b0cc2e3c3253a6b8564db1cf4267c9e2a269dfa31d6c667abac91f1c193adb301c1394503a7f3a3debe0442d6ec13905c6784d0b39ca48b2f654"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}]}, 0x1278}, 0x1, 0x0, 0x0, 0x4000}, 0x40005) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000200000000000000300"], 0x138) 2.6907728s ago: executing program 5 (id=9509): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) 2.547821672s ago: executing program 3 (id=9511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f00000001c0)) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b6, 0x1010, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.543586602s ago: executing program 5 (id=9512): bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f00000001c0)) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b6, 0x1010, 0xffffffffffffffff, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 2.44746544s ago: executing program 1 (id=9514): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r1, 0x0, 0x400}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) 2.44693854s ago: executing program 3 (id=9515): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000840)="932dba5978838c78bcdc5c3740536886fa0faed4754ac0231ac0d1a12bc32e235765b80e3f5d3e3e99719a933e284a60f97d0246495e8ffa5df5494a6521bf6a1d12fdba5ab050fa0cb69fd0989ef6f7fe31f38c78de6175971b5d026a24eed137bca4c702bb234d4d59306826e62223d7c66d248c5fef183cd51b", 0x7b}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000001c80)="ad31c968728b50d2c6e598caa6165975b68bac10a2f75a50ac1cd07d9c2d6125bfe64d8ecf18747306435ad52d3dfb1619862e29e6b6157609415f4abe75b99b091fbc493407ac6326239bb5361c3f857a0c590a397839fa26986f2f8571edbaa73495f08aab500140f43db13bc9f604e085c047d9ce8f0d2b7fa5b248677b74c9e893a3b37cbd677b899aa96ab68d32c8de20f8915e9e", 0x97}, {&(0x7f0000001c00)="607c572ef4cb3cb2f721752bdbf740f6008cdf58fbdd0aee78c0aba60db01a1527900ab8d073998aa9b1d7001ba6cfc414263338556840caced0ed4e08ac34d1b918e99c4595d7a525187e391d356097787a84b02ab798c30e", 0x59}, {&(0x7f0000001a00)="60d757b8ffc84bb63d506d27e4d6c4eec28bd9531eee0fa047c01924b15e7a7b5222b6031ab3234c5e9f995fd467d60e91e2e7b39fbf66e2578259f706ece02efdca544e0fa440eba45e0adc70855823599958ab66731af97aac4b4a2aa5609b2004f2ed70f0ae8809657a25447c24f8961f015b5a311041e94efbb4587a9b82c652029b33c94b0e19e6fc1f8e0b76de0bde5a903b3fddd16011bb9234fa64b1a605eb134c97d884cdc343981d7c6733ebe43114e4a2a4f975cc5f56ce1582818a", 0xc1}, {&(0x7f0000001b00)="5260a18c5ed2a7420e78ac8a5b2eda023b9f5c00dbc55fcc4efcd2d28aa76b61c2fac18a11646f7955b0799d4b48838099c841ebe288981c83fca917ca887d9bec9f443ef79cf067f20996f5838302d283bd28880128cf3dc1bee84240e78ab0177ce9ef8502ddc72eb980914988d2849944a6712be987a3e145d1", 0x7b}], 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000080", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x20040011}}], 0x1, 0x24044040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.410090043s ago: executing program 1 (id=9516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) time(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) (fail_nth: 1) 2.360381177s ago: executing program 5 (id=9518): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="721281c85051b08b704f2a3c7955c1321c2d521da654a3fffaff142ac35a67c82a6d59bc7e4cada892af488694cf675349d974346f36fc5bfd746ea6c487ddc41637", &(0x7f00000003c0)="950da4a0b82ca4176b492e4ff58d24548f7846e0066acef7b182d60b148cb7375ad26288660c7785f0369a34c8b4fae29f2d104bafbe8b889d81f096801c809be58d201c059ede78175f019c4a80500e9e2d6db90e9585e582aadc1718666b8812099151aa0f2c438bd9d0b513c23e1a2fe67de64f3dedd9c37c9f4a6a81e4b65a9a56515485ff3630a9fc46ac2858ee7397e58d5033a862f918237cfb559dc386dfe887477e1644c54ddcc98c7f4728630d0d289f0c56d77bd30abb7278177a1590eb4fc52bea9e525f38563fd32e40e2f6b3c36129"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.000646749s ago: executing program 3 (id=9519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) time(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00008f1000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r5 = open(&(0x7f0000000180)='./bus\x00', 0x14923e, 0x18) fallocate(r5, 0x1, 0x0, 0x1001f0) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x33000, 0x0, 0x3) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0x200048d4}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x33}, @void}}}, 0x1c}}, 0x4000054) 941.593493ms ago: executing program 3 (id=9520): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="3000000000000000000000000700000089"], 0x30}, 0x0) 941.056033ms ago: executing program 5 (id=9521): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x120) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x3a) 858.39392ms ago: executing program 1 (id=9522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) 857.89546ms ago: executing program 1 (id=9523): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001ec0)=[{{&(0x7f00000007c0)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000000840)="932dba5978838c78bcdc5c3740536886fa0faed4754ac0231ac0d1a12bc32e235765b80e3f5d3e3e99719a933e284a60f97d0246495e8ffa5df5494a6521bf6a1d12fdba5ab050fa0cb69fd0989ef6f7fe31f38c78de6175971b5d026a24eed137bca4c702bb234d4d59306826e62223d7c66d248c5fef183cd51b", 0x7b}, {&(0x7f0000000a00)="a13e1f0cc27af7e5c33ef0fe3a565c4abc0228c98e005c2c2b19d1acbc2b5f3b1803e97f6316fc1927e82c99a33e746a7c1ff986b1f5f9fa607601cc9d5d42c3269b1027278046ed3889c6ac73126a8e74e151ac97cdcc738daa0f690ba2b956f7f03d75fd3ed4a3120633e1f5cbe7bdc3c99e06179cb8962b34e8d44997c0f830e283fbb81104c26be632e5448392769d5ae35c5728b23501d926656e0c7fc7e738ed4d598848aabaf61f75be4610d187b5001b7bf0e8d734d44b3d1253c0e23fb6aa27cdf7d46eb31f73a3d54fb5341970edf31d114712e7aacc6f3f06dc0f23e72e9865bb4173c001a3a8670cc1f5ac8b53285225e4835708db6d763507055e3982d963b8a4dd6e8d45a98e29f95c9f23e8fb23dbe1636ed5488150e466898d47dbf97fa1c29a465aff4f920b684d14db7f89c9cd98e0d0818283eaf8c373a1adc9f6cd5d1e52e9d40de759ed91ea261fb434a422d6e4b0be69ae33ba9180d3392f2d76244d149bf1b71c92abaf102d73c348306fb6eb1d27971e30bbf6d15c1629d65d566fe7d70e2b9b98aac00fbf8c359cd7de4f25023c781bdaaba8085412724bf424bf646ee3f971d668b3285807b8fae05451719f95c8fdcb52cd4c624c5b89524acbcc0e7dad93d3cd094da407528fd973bc66fd9869f6222129b5b0ad9da84d9694d38aa48729a67f5945951df7dc6cda050296dbc1744a92d0ef1904f10b36918223c1f07a7501b55d526657b78420ad1734d8cb838ef4f44bb9c7bc36e6b67d8b325e7a8be852e8835c808c79ce85f87f2310de765c51fd30571e4c972451cc89bb2e1ddbb2ec11dee6967873361a5abd0d6b25a9284b31a83228452b76ae9b089923a1bda30590054d82fb03bd2ed250782d6d9e7348f2e6c71416f3275e2d88ddd44ac13b5da42573f1559ddacc5751cf5dd8dac8f8da6ee7abd0b35c1d1ecb88afc8e9eb2e44391ceaa6bf0919c1974d0e7d4c051390beaa18957cb538b4f86377d376bdc8b2109016005372250ae0f701f751f62b94c5392f27030aa0dd36274c307dae79b598c60f930af5d000cc96acb009f5362546417d836b5165b585c0f8b65180bb5a6458a519206cfc1f68b7f70d2e8cc8c1979d08107f857cf41bca534b6e59dea9296529b5b054f7fd8f72dd2beacaee2ff8a643ae24de8ac76b4025b386dd6913f2dde37274ea49354fe1c4098b52e8f3163d1f1852d6efbe372b9bb0ce3852458d485611414f5190ff766e6b230d886b1992955ef4835ff06d97d32cbc307fb03ffba3949fbcf5f70e585f57cdac332017c620ba4b6a38eaaa3ba36ac034b689c594075f04577ff3027c4718771ca6bfc50d5619d4362d66d5333ec69adeb1c2a0eb1edcddad25efa0168b0ef1a778bf846ca73fd7b0c994f1b7052c92e9a0eca484c665c3dae8f0033864c54b585922bdedd981dffe1990643a79a621e05de94e9e48367d4ca5b6262456c1b31cd288a6c6a400a372b6c7eb7734a4a00159d20f3ca55a9f58f8385a1963bd41917a075ed913c75dfdea8cd11a166455904a48748ec43b8b91b990c9011ce628d1703a020ce1d47eaa7bcc5910d23e7f8d0745457c95d79d728407f30ff71e3ec32d9dfe55048cf7f7ccdcc25ef1f95375f60bc8991e0e2d7a7bde147d7549890e2eaf075e473ab8f0887fb33c763b09b9be1207ae3f94f165c4f5f815604d930b655ebcedd933d5b3f3878c251d04bc7cadab0d47085ad602087edf02a1dc39e2d1988ab50111033cdaaecc74604d4a4e4c9e3276c24519a3071b644e90e0f58bc40ed34f547ac1e1f8b478b2004db0799c933ea893998bf9bfb1dd73b7c6ac35701b946633c5ecb6019e199ef7cc7f7ccfe319bcc7f773c97c97beec6e869acc961e0c3e63a86540362e60a749e06cbb4613ce6e6d1dbd2efdb7237ecb205a8cb6908af212308cf1473e50c2b86d66e32bd492a82501407acae483501d00ca484f9fe34e8d155d19679fd2475a66781c6c5603280ab5e0eff55c4f9f89dcc442a4eeb20b4843edb742e61f3931fc27f221218dead0bb250126d8617746028df1add55027c7916be124fc2193c52f86e550f3a612ff1b822743f3fefa91401244e8c63ea3a5fcdd36f37615b22f5e0db99310932d49a1cef933e8072ccc2ef97e6f646453300eaf518eb15608b95014ab1489a3daae59d241d4fb30bfcb776a573961a094c167cfb86095e51c3951a55df81107b243117211a5a1b4a5ade974f83b5350c0fc9ea83c5e6d4fc41901703bb83aa3d2a327834e303966c46c9538c5dd0400a8f04d1bd7bf62f19d24ed00b776052fd328907c32a76d63a6846b8a396bd29b37a8c973f741b55cb8f4be02231a5edb88a92c6d5552c2b935049cf7f324cb3016ef68b3cb7bc7776604de6c0e8b197c7646d3d5a7470be83b2059cd972d242d6ebe4f66a1cd7fe833b6c6909437f252e5fe6404efe8170b18b204f2b3834f48ab9ef7124f030651f0f4e4b6084fb0605cb2d377581407f38bfcb86c3b699a6fda6802925779e7257e67d5e7b8907612a4e72273734786c6b7564d5c790ad1777c0e840cc5c961204dc387f4180346a9a9ef9869d8373f9786f9733476f583c609c4474d4dc0721614f2f738c0966ec912051541b058c2bce0a40e8c344a8b89f84c65087b02a9eb67121d0ed5591cac93417b46db889dd5a963d02270d30a6b639815467dd0c10c5a7303e7591c848f622f1c92f08f00a2cb3e8f8a9842279d3e310e6da484b269021671583d06f2399d33ac97b0829f4542875e6b239f150b8ea7d3c51ce698cea0a9873df96bbfcc5370ffc9308551d00634800edf331b41dffa5b7e6b8eba5e667e2a215f0a877753617fe608ac53a6daccb9275af601bca89f9f8ab93f3441258823ab8e5df68540958d03b92fda5f6c80f4c7958de09dda365203986f68198ce6dc33ac6db0e3769790ab4fb9c75cb18ed5cbdcde41e94fa6ccce5c4e4cf2c6e4062cc78788b110aa92408136c79ee242eb75a725fbc2fa20b567cf61aecb7631b9b9a1bded6638521ea6dd773268b7df7d754737fab16dfb1034a6706db90ffa082d1b82dabdae740b27ec1f8467b944e8fb23ad6d458b00d758f05edfc5bcccafcb42d3e6f94066b45c9eddeb77d6974e363541069b2aeb4f845613733c692f8716e128cee8341e23056c8a493f520c33c1a8cb07f7751ce4f70be6e209c5c537a4293d0fa3ea0c68b1d02d48ef6303761d452a3a9d66bb144a62d023b9aab939c8b2747378037c7547d2c52770627e56bad8b28a65448ffb2ed138180d15321189ff88dfc69c3f3b42ebb07b81cc90d990b6fcb55c826daadfaf550ab8509645de1b8c3e9e9b221d24e36442d8ef7f51429661f7621a123de9b9685b4506b82aa3061e389faa1c9429ae55286521c38d33c372346a74bc5ee4703e98802c3ed395788ee0a4a00665e86be608f4b2822f7f239e48e482f5c258e75e369959b07ca99192777f4ba04187b0b31abf6aca59e315ce5cdf46a66f305f47c9528af4a6249052ed9adca5312b0cf3e81da03a52f8e9ec9431814965a1d52e96a4b255f48cde2d5a692791afd4870b88ae48544fd0e750da4ed4f97a0d3683974a05d45bb3233864d8d01352c5cd0115664008255d67c77f021fd641912d6a93c819e9bb4f26987fddd644592cb423081e429540f0bd1ac9bfc1f8bda6d1a60fe200f7b2399a3d7308bd0154b38b02fbe5840abda0d41c48e63e3bacd66317a56760132adf9f8de737f8a816f61893c8c7c6fa80c031e7bc12d6fd202d99176fb54cfdf63aa07455ab020567ad9e379a4a0f020aaf74ba78304a6cd5c237b8d9ced8b9aff606ab4f598f1436438eaefd19dc452523ce8d54719f000811e95f7e91f02384faa102359531654d4ca791af80310869ee5b8b035b95ecd9d89b7aadf717a9686d7ac4aa43a68c7051c159954fe89a50173a4b72e669ffea9f3266d1447bf81f92a3cd4a1bb4895618ea21fb6ee2540b91f52ad38fc32097a9d8413e7f95c81e068536b0b42043dbae1c77a9e6d44caa641a2d8ff5faba3b6412972ccde4793a692dccbeb3cb2aaa8ed4199673e57614f864d5dbdac4d24cb783afbba69fbed2701448954b62b3837f9b8b8707e6b6cd03922af22cc7f4d7e82f30a1ddf9d784804811ad5951113f0cdd15993c46268dad3656d1d819ade41703a8f0ebe054e0253bb25814526891b8267991c84e29fb4658fd0e696bccfdf0aceaf404d106e92c42062dff8e342ab66612c59f547d56486cd66caa518f4abd8b3f12dcbf059de27d3c2fa362fad545bea46f607a47288b0bc3a82c3968e458b0f7f3ef006444e2aab1cabe86ab879b524d253b0fd4dc356100ad90c124b9b55fb474856289799ce3e3c4b034f54ba49dc15edeb9e7c108f21a6831fd86e5b0dcb21c5c3bc9d989917597b787a98ec3709b457522344921ba081a93ad4537e0116c639c47402a3831c8aeacee17971ab99815fbafc41b3a38934ab421a345b1ea2f54a1f1a206f49b1208c87020218b0b384fe4733ac7419a11d06f510fb810b2ecf79933f85f28eba95f8eda6d607019ff8e75f59ef4b5418499964fff3ef4d0cce1f1db78099bd33f35071182c3168374b2bbff52c61a13ff1803fcaf61c3cdd6c7129d4bb7f7bcc2816fafb93de8f5268a21dec9b4119cf56c791037bd0cfd987347192a3d2f375a1c374070ab7307ae11cf342688126fff236abe8ebd70fad1de165e93ce7d379795def60f7060460f35a68dcb78d527e63f599c0ecde71f4ab9768821543bcd9d5e0ebd6ed8a60a720204f78ce013d4045b01b67249c12941e0c06e42c6edef0423cf1c035e22010dda46f153d12062055772cc86c06f5bf718abc4cdcaa170e8476bf7fc516128941529ed9c0620222b070283ac8433233806335eada4f50e59c59c99fb9d8c294860dc1047f0c3fdc78423602725e41fd5a52d33c70f09fdd6cffc49d37eda8058d4c7a8a97b9bc5c66cfcfce86af2462552ac9283d20f2bc0586a143bbb3ed867120e382bf9ee4d8d9b9a1c94d04191e5116b76bfeef0c4f50abfe1a1f0e4858e60c1711570952d46c488043e60585dfbb2e3d61d52cb199cfeb29fe9452383c0703393b5db3b53a441e66e40ccfca058ebf4ab2baef511568aa15472538c8b8eaa33bdb0ad60ff76c99776a2c6889efe6103693b6f8bc49fc2e2ac3d0d9c0e4e7cef954a7728ed9c95e5f3d6b8bdd676923cd06aefb50327b58c67182a5d31bad6d19285d6bdbcd81a45f1ddad2e1445f051f2c6259896b9e28fac126ff4cf69ae2967a8ce5efd28ed72e2d1dbaff88de5a71d3a80228bab73723bf841de7d35d154f24f01479c488bf0a08e84680ad5f9c669ae9e17adcd8edc1d1d74752a960ac5e65ac46d20fb30aa79cc4b6d2bcf0045069753e598ac1c75087c05ea411f5a07096b7530745d8c59be2096c0b166803c3a7ab043d5624ed60bc754e4cd0fb6b1359d3765ca31a0fa6100ac13fa4bd20e7f4bad98fdd513f1a0ac29c1222a7acabd603d4bea7ed09ad9127e5125fed6c45efae0e5bb1cae0a072216ce36afcd9629f24ede8ae80a817169ae086ded64db8363c7afbf827b8bf46436fecc0b1c1f08483f179c4381529b35ff4aa8ea305ef3e7c1a35a1ae7d8b4c983b8a1174ae8ddd3dafa9df1ba9901f5d39936af2a1c6b2e95bd6221f80a7540f3ddbcd2d4d6fbee5ae327e31e40f8fc689dd595e09522bcf0722fe4b383edf2f0acfc1ffee76370cfc042b5d01289", 0x1000}, {&(0x7f0000001c80)="ad31c968728b50d2c6e598caa6165975b68bac10a2f75a50ac1cd07d9c2d6125bfe64d8ecf18747306435ad52d3dfb1619862e29e6b6157609415f4abe75b99b091fbc493407ac6326239bb5361c3f857a0c590a397839fa26986f2f8571edbaa73495f08aab500140f43db13bc9f604e085c047d9ce8f0d2b7fa5b248677b74c9e893a3b37cbd677b899aa96ab68d32c8de20f8915e9e", 0x97}, {&(0x7f0000001c00)="607c572ef4cb3cb2f721752bdbf740f6008cdf58fbdd0aee78c0aba60db01a1527900ab8d073998aa9b1d7001ba6cfc414263338556840caced0ed4e08ac34d1b918e99c4595d7a525187e391d356097787a84b02ab798c30e", 0x59}, {&(0x7f0000001a00)="60d757b8ffc84bb63d506d27e4d6c4eec28bd9531eee0fa047c01924b15e7a7b5222b6031ab3234c5e9f995fd467d60e91e2e7b39fbf66e2578259f706ece02efdca544e0fa440eba45e0adc70855823599958ab66731af97aac4b4a2aa5609b2004f2ed70f0ae8809657a25447c24f8961f015b5a311041e94efbb4587a9b82c652029b33c94b0e19e6fc1f8e0b76de0bde5a903b3fddd16011bb9234fa64b1a605eb134c97d884cdc343981d7c6733ebe43114e4a2a4f975cc5f56ce1582818a", 0xc1}, {&(0x7f0000001b00)="5260a18c5ed2a7420e78ac8a5b2eda023b9f5c00dbc55fcc4efcd2d28aa76b61c2fac18a11646f7955b0799d4b48838099c841ebe288981c83fca917ca887d9bec9f443ef79cf067f20996f5838302d283bd28880128cf3dc1bee84240e78ab0177ce9ef8502ddc72eb980914988d2849944a6712be987a3e145d1", 0x7b}], 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000080", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x58, 0x20040011}}], 0x1, 0x24044040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 855.63154ms ago: executing program 0 (id=9524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 812.896394ms ago: executing program 3 (id=9525): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000003640)='kfree\x00', r0, 0x0, 0x400}, 0x18) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r1, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) fcntl$setpipe(r1, 0x407, 0x6) 806.747564ms ago: executing program 3 (id=9526): socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$inet(0x2, 0x8000c, 0x3) socketpair(0xf, 0x3, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) ppoll(&(0x7f00000000c0)=[{r3, 0x1040}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20040810}, 0x8094) 694.929113ms ago: executing program 7 (id=9527): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, r3, 0x25, 0x2, @void}, 0x10) 569.043123ms ago: executing program 7 (id=9528): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[], 0x0) 540.785216ms ago: executing program 0 (id=9529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x0, 0x0, 0x1, 0x1}, 0x20) sendto$inet6(r4, 0x0, 0x0, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x0, 0x4, @local}, 0x1c) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x220c084, &(0x7f0000000880)=ANY=[], 0x9, 0x224, &(0x7f0000000380)="$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") socket$packet(0x11, 0x2, 0x300) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) 534.916796ms ago: executing program 7 (id=9530): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x4000040) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 380.852249ms ago: executing program 7 (id=9531): r0 = socket(0x10, 0x80002, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xe0, 0x30, 0x51b, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x68, 0x2, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x8}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xe0}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) close(0x3) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000440), &(0x7f0000000480)='%pB \x00'}, 0x20) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r3}, 0x10) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) (async) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (rerun: 64) sendmsg$NL80211_CMD_PROBE_CLIENT(r5, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r6, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x14000010}, 0x20000014) (async) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000680)) (async) r7 = dup(r5) r8 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000540)) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000740)={0x9, &(0x7f00000006c0)=[{0x7, 0xfd, 0x4, 0x10}, {0x101, 0x76, 0x7f, 0x1ff}, {0x9, 0x9, 0xf}, {0xfff8, 0x7, 0x28, 0x3}, {0xcf, 0x80, 0x8, 0x100}, {0xffb8, 0xfe, 0x0, 0xac}, {0x2000, 0x5, 0x3, 0x52d}, {0x210b, 0xfb, 0x6, 0x3}, {0x9, 0x81, 0x9, 0x2f1}]}) (async) getsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000600), &(0x7f0000000640)=0x4) r9 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r7, r9, 0x0, 0x8000fffffffe) syz_clone(0x20008411, 0x0, 0x0, 0x0, 0x0, 0x0) 308.825255ms ago: executing program 7 (id=9532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0xfffffd33) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000018c0)='Ob', 0x2}, {&(0x7f0000000240)="4c0f7ff04f5f9c8f3f5325946930ebcd516c92d1e979bf8203dce0ae67adba6da5ab59c424ce88c0a8fa77f857e6ee6e5f7b0428a8faf99f9b08120bf59ed1d2d92da03c724c64dc7b395df0491c71adee2abb798ca5d8d31f37d352a1a186c9c1b8c333dd90eb2959514ab30fbcf2e718e8cba160f89d41bce3fcd229b838ce47e7c329bed5fafc6604b522c492a59fd55fe3582037c888fdd6d39d89e5a6ac9f27196a8053974aff905dfbd7a79ccd3d8e5f07cf824218e096d702ed7b4287603df088e2c9c2eede8d38dfe64efd0d558f8343802c0896", 0xd8}, {&(0x7f0000000340)="769a0bd7d5576f3f77304ae8ea8451ae600bb13ceb699d8b58697152551cb2db9be665eb", 0x24}], 0x3}}], 0x3, 0xc0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0x7fffb}, 0x18) socket(0x2, 0x80805, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc", @ANYBLOB, @ANYRES32=0x0], 0x50) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x7d) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x7e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d000010000000000000000000000008001200"], 0x80}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 276.181428ms ago: executing program 7 (id=9533): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={&(0x7f0000000340)="721281c85051b08b704f2a3c7955c1321c2d521da654a3fffaff142ac35a67c82a6d59bc7e4cada892af488694cf675349d974346f36fc5bfd746ea6c487ddc41637", &(0x7f00000003c0)="950da4a0b82ca4176b492e4ff58d24548f7846e0066acef7b182d60b148cb7375ad26288660c7785f0369a34c8b4fae29f2d104bafbe8b889d81f096801c809be58d201c059ede78175f019c4a80500e9e2d6db90e9585e582aadc1718666b8812099151aa0f2c438bd9d0b513c23e1a2fe67de64f3dedd9c37c9f4a6a81e4b65a9a56515485ff3630a9fc46ac2858ee7397e58d5033a862f918237cfb559dc386dfe887477e1644c54ddcc98c7f4728630d0d289f0c56d77bd30abb7278177a1590eb4fc52bea9e525f38563fd32e40e2f6b3c36129"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 0s ago: executing program 5 (id=9534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) kernel console output (not intermixed with test programs): e_0) entered disabled state [ 941.148592][T28491] bridge_slave_0: entered allmulticast mode [ 941.166950][T28491] bridge_slave_0: entered promiscuous mode [ 941.186747][T28558] tipc: Started in network mode [ 941.191652][T28558] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 941.198781][T28558] tipc: Enabled bearer , priority 0 [ 941.205222][T28491] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.212387][T28491] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.219561][T28491] bridge_slave_1: entered allmulticast mode [ 941.225985][T28491] bridge_slave_1: entered promiscuous mode [ 941.260865][T28559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.269376][T28559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.299195][T28491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.333174][T28559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.343827][T28491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.359033][T28559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.410757][T28491] team0: Port device team_slave_0 added [ 941.417323][T28491] team0: Port device team_slave_1 added [ 941.528276][T28575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.536789][T28575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.545096][T28575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.553583][T28575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.564490][T28491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 941.571641][T28491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.573921][T28559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.597636][T28491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 941.606209][T28559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.640736][T28491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 941.647699][T28491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 941.673783][T28491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 941.744705][T28491] hsr_slave_0: entered promiscuous mode [ 941.762228][T28575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.763540][T28491] hsr_slave_1: entered promiscuous mode [ 941.771028][T28575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.880131][T28593] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.8621'. [ 941.964875][T28491] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 941.993981][T28491] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 942.008768][T28605] netlink: 'syz.1.8623': attribute type 2 has an invalid length. [ 942.026946][T28491] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 942.046380][T28491] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 942.105633][T28491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.116996][T28491] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.200296][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.207452][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.226395][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.233527][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.354935][ T3383] tipc: Node number set to 11578026 [ 942.609656][T28634] netlink: 'syz.3.8628': attribute type 29 has an invalid length. [ 942.661340][T28491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 942.711122][T28640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8629'. [ 942.795204][T28656] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 942.965378][T28491] veth0_vlan: entered promiscuous mode [ 942.973303][T28491] veth1_vlan: entered promiscuous mode [ 942.991513][T28668] syzkaller1: entered promiscuous mode [ 942.997046][T28668] syzkaller1: entered allmulticast mode [ 943.034543][T28491] veth0_macvtap: entered promiscuous mode [ 943.225290][T28491] veth1_macvtap: entered promiscuous mode [ 943.291643][T28491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 943.399533][T28491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 943.423017][T28675] bond1: entered promiscuous mode [ 943.434972][T26681] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.475697][T26681] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.526868][T26681] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.573643][T26681] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 943.763307][T28698] mmap: syz.5.8636 (28698) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 943.822037][T28714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8639'. [ 943.899139][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 943.899154][ T29] audit: type=1400 audit(1755037228.900:1366): avc: denied { read } for pid=28696 comm="syz.5.8636" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 944.029485][ T29] audit: type=1400 audit(1755037228.900:1367): avc: denied { open } for pid=28696 comm="syz.5.8636" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 944.053499][ T29] audit: type=1400 audit(1755037228.900:1368): avc: denied { ioctl } for pid=28696 comm="syz.5.8636" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 944.371218][T28731] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.8643'. [ 944.446675][T28739] syzkaller1: entered promiscuous mode [ 944.450980][T28741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8646'. [ 944.452247][T28739] syzkaller1: entered allmulticast mode [ 944.636925][ T29] audit: type=1400 audit(1755037229.640:1369): avc: denied { create } for pid=28750 comm="syz.3.8648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 944.656566][ T29] audit: type=1400 audit(1755037229.640:1370): avc: denied { setopt } for pid=28750 comm="syz.3.8648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 944.804514][T28751] bridge0: entered promiscuous mode [ 944.809968][T28751] macsec0: entered promiscuous mode [ 944.815455][T28751] bridge0: port 1(macsec0) entered blocking state [ 944.822023][T28751] bridge0: port 1(macsec0) entered disabled state [ 944.828537][T28751] macsec0: entered allmulticast mode [ 944.833886][T28751] bridge0: entered allmulticast mode [ 944.839862][T28751] macsec0: left allmulticast mode [ 944.844944][T28751] bridge0: left allmulticast mode [ 944.850656][T28751] bridge0: left promiscuous mode [ 944.858955][T28761] validate_nla: 10 callbacks suppressed [ 944.858979][T28761] netlink: 'syz.5.8650': attribute type 39 has an invalid length. [ 944.880166][ T29] audit: type=1400 audit(1755037229.750:1371): avc: denied { bind } for pid=28750 comm="syz.3.8648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 944.899586][ T29] audit: type=1400 audit(1755037229.750:1372): avc: denied { map } for pid=28750 comm="syz.3.8648" path="socket:[107198]" dev="sockfs" ino=107198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 944.923093][ T29] audit: type=1400 audit(1755037229.750:1373): avc: denied { read } for pid=28750 comm="syz.3.8648" path="socket:[107198]" dev="sockfs" ino=107198 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 945.005508][T28767] loop6: detected capacity change from 0 to 1024 [ 945.120298][T28767] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.136133][ T29] audit: type=1400 audit(1755037230.140:1374): avc: denied { cpu } for pid=28772 comm="syz.5.8653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 945.210837][ T29] audit: type=1400 audit(1755037230.180:1375): avc: denied { mount } for pid=28762 comm="syz.6.8651" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 945.338637][T28787] netlink: 'syz.5.8654': attribute type 2 has an invalid length. [ 945.346507][T28787] netlink: 'syz.5.8654': attribute type 1 has an invalid length. [ 945.354273][T28787] netlink: 'syz.5.8654': attribute type 1 has an invalid length. [ 945.518984][T28807] syzkaller1: entered promiscuous mode [ 945.524700][T28807] syzkaller1: entered allmulticast mode [ 945.543099][T28802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8657'. [ 945.573380][T28802] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 946.394185][T28839] syzkaller1: entered promiscuous mode [ 946.399698][T28839] syzkaller1: entered allmulticast mode [ 946.866124][T28861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8667'. [ 946.890695][T28861] hsr_slave_0: left promiscuous mode [ 946.906290][T28861] hsr_slave_1: left promiscuous mode [ 946.976099][T28873] netlink: 'syz.0.8668': attribute type 2 has an invalid length. [ 946.983923][T28873] netlink: 'syz.0.8668': attribute type 1 has an invalid length. [ 946.991748][T28873] netlink: 'syz.0.8668': attribute type 1 has an invalid length. [ 947.100137][T28884] syzkaller1: entered promiscuous mode [ 947.105631][T28884] syzkaller1: entered allmulticast mode [ 947.181744][T28890] tipc: Resetting bearer [ 947.209576][T28890] tipc: Disabling bearer [ 947.218165][T28890] team0 (unregistering): Port device vlan0 removed [ 947.431089][T28907] loop0: detected capacity change from 0 to 1024 [ 947.574546][T28907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 948.940200][T28491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.940967][T19299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.375550][T29002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8677'. [ 949.546567][T29005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8679'. [ 949.586821][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 949.586835][ T29] audit: type=1400 audit(1755037234.590:1407): avc: denied { create } for pid=29006 comm="syz.6.8680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 949.638742][ T29] audit: type=1400 audit(1755037234.630:1408): avc: denied { write } for pid=29006 comm="syz.6.8680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 949.664385][T29009] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 949.736631][ T29] audit: type=1400 audit(1755037234.670:1409): avc: denied { bind } for pid=29004 comm="syz.0.8679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 949.756042][ T29] audit: type=1400 audit(1755037234.690:1410): avc: denied { prog_load } for pid=28990 comm="syz.3.8678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.775426][ T29] audit: type=1400 audit(1755037234.690:1411): avc: denied { bpf } for pid=28990 comm="syz.3.8678" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 949.796118][ T29] audit: type=1400 audit(1755037234.690:1412): avc: denied { perfmon } for pid=28990 comm="syz.3.8678" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 949.817137][ T29] audit: type=1400 audit(1755037234.690:1413): avc: denied { prog_run } for pid=28990 comm="syz.3.8678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.836413][ T29] audit: type=1400 audit(1755037234.690:1414): avc: denied { map_create } for pid=28990 comm="syz.3.8678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.856125][ T29] audit: type=1400 audit(1755037234.690:1415): avc: denied { map_read map_write } for pid=28990 comm="syz.3.8678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 949.876247][ T29] audit: type=1400 audit(1755037234.690:1416): avc: denied { accept } for pid=28990 comm="syz.3.8678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 949.952902][T29011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.972744][T29022] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8682'. [ 949.989064][T29018] team0: Port device vlan0 removed [ 949.998108][T29011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.041423][T29011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.053720][T29023] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8684'. [ 950.054134][ T2585] tipc: Resetting bearer [ 950.062735][T29023] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8684'. [ 950.124471][T29011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.137079][T29024] team0: Port device vlan0 added [ 950.147219][T29018] tipc: Enabling of bearer rejected, already enabled [ 950.257838][T29031] loop6: detected capacity change from 0 to 512 [ 950.282400][T29031] EXT4-fs: Ignoring removed mblk_io_submit option [ 950.317691][T29031] EXT4-fs (loop6): failed to initialize system zone (-117) [ 950.335794][T29031] EXT4-fs (loop6): mount failed [ 950.345796][T29011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.358507][T29011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.601234][T29045] loop0: detected capacity change from 0 to 512 [ 950.608869][T29045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 950.652715][T29045] EXT4-fs (loop0): 1 truncate cleaned up [ 950.661369][T29045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.693937][T19299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.748516][T29052] team0: Port device vlan0 removed [ 950.777208][ T2585] tipc: Resetting bearer [ 950.777723][T29055] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8693'. [ 950.946998][T29052] team0: Port device vlan0 added [ 950.991815][T29052] tipc: Enabling of bearer rejected, already enabled [ 951.035351][T29059] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8694'. [ 951.123728][T29059] tipc: Enabling of bearer rejected, failed to enable media [ 951.264687][T29081] syzkaller1: entered promiscuous mode [ 951.270390][T29081] syzkaller1: entered allmulticast mode [ 951.366004][T29086] loop6: detected capacity change from 0 to 512 [ 951.397083][T29086] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 951.433997][T29086] EXT4-fs (loop6): 1 truncate cleaned up [ 951.460452][T29086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 951.548464][T28491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.565677][T29096] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8702'. [ 951.673983][T29089] tipc: Enabling of bearer rejected, failed to enable media [ 951.962328][T29132] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8714'. [ 952.337570][ T3453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.347964][ T3453] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 952.361372][T29157] loop6: detected capacity change from 0 to 256 [ 952.436581][ T3453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.446967][ T3453] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 952.532747][ T3453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.543145][ T3453] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 952.580704][T29144] chnl_net:caif_netlink_parms(): no params data found [ 952.625649][ T3453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.635996][ T3453] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 952.690021][T29144] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.697116][T29144] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.717904][T29144] bridge_slave_0: entered allmulticast mode [ 952.734867][T29144] bridge_slave_0: entered promiscuous mode [ 952.770318][T29144] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.777428][T29144] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.801419][T29144] bridge_slave_1: entered allmulticast mode [ 952.816369][T29144] bridge_slave_1: entered promiscuous mode [ 952.972105][ T3453] bond0 (unregistering): Released all slaves [ 953.002657][T29144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.035799][T29144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.100912][T29144] team0: Port device team_slave_0 added [ 953.118423][T29144] team0: Port device team_slave_1 added [ 953.155514][ T3453] tipc: Left network mode [ 953.178934][T29144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.186033][T29144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.212100][T29144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.314896][ T3453] veth1_macvtap: left promiscuous mode [ 953.349826][ T3453] veth0_macvtap: left promiscuous mode [ 953.377701][ T3453] veth1_vlan: left promiscuous mode [ 953.531319][T29187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.545096][T29187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.566904][T29187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.606262][T29187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.664839][T29144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.670118][T29196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8726'. [ 953.671872][T29144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.706615][T29144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.881976][T29144] hsr_slave_0: entered promiscuous mode [ 953.888052][T29144] hsr_slave_1: entered promiscuous mode [ 953.894434][T29144] debugfs: 'hsr0' already exists in 'hsr' [ 953.900187][T29144] Cannot create hsr debugfs directory [ 953.905808][T29214] netlink: 'syz.5.8729': attribute type 29 has an invalid length. [ 953.923989][T29214] netlink: 'syz.5.8729': attribute type 29 has an invalid length. [ 954.003164][T29217] syzkaller0: entered promiscuous mode [ 954.008760][T29217] syzkaller0: entered allmulticast mode [ 954.216124][T29246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8733'. [ 954.252681][T29235] netlink: 'syz.5.8733': attribute type 4 has an invalid length. [ 954.287120][T29232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.312250][T29248] team0 (unregistering): Port device team_slave_0 removed [ 954.337493][T29232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.347027][T29248] team0 (unregistering): Port device team_slave_1 removed [ 954.437494][T29232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.450231][T29232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.661074][T29232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.741586][T29261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.750189][T29261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.759161][T29261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.767858][T29261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.786449][T29144] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 954.818423][T29232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.877197][T29144] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 954.944505][T29144] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 954.977371][T29261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.986077][T29261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 955.068815][T29144] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 955.160914][T29281] loop6: detected capacity change from 0 to 164 [ 955.243634][ T29] kauditd_printk_skb: 274 callbacks suppressed [ 955.243725][ T29] audit: type=1400 audit(1755037240.250:1691): avc: denied { mount } for pid=29280 comm="syz.6.8741" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 955.377766][T29144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.392986][ T29] audit: type=1400 audit(1755037240.340:1692): avc: denied { create } for pid=29280 comm="syz.6.8741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 955.412644][ T29] audit: type=1400 audit(1755037240.350:1693): avc: denied { setopt } for pid=29280 comm="syz.6.8741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 955.432224][ T29] audit: type=1400 audit(1755037240.350:1694): avc: denied { write } for pid=29280 comm="syz.6.8741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 955.437819][T29144] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.451833][ T29] audit: type=1400 audit(1755037240.350:1695): avc: denied { connect } for pid=29280 comm="syz.6.8741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 955.478406][ T29] audit: type=1400 audit(1755037240.350:1696): avc: denied { name_connect } for pid=29280 comm="syz.6.8741" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 955.536498][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.543608][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 955.689874][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.696985][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.737508][ T29] audit: type=1400 audit(1755037240.410:1697): avc: denied { shutdown } for pid=29280 comm="syz.6.8741" laddr=fe80::f lport=56154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 955.759769][ T29] audit: type=1326 audit(1755037240.490:1698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29280 comm="syz.6.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ed1ebe9 code=0x7ffc0000 [ 955.783369][ T29] audit: type=1326 audit(1755037240.490:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29280 comm="syz.6.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f787ed1ebe9 code=0x7ffc0000 [ 955.807090][ T29] audit: type=1326 audit(1755037240.490:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29280 comm="syz.6.8741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f787ed1ebe9 code=0x7ffc0000 [ 955.888441][T29144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 955.898987][T29144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 956.056469][T29304] netlink: 'syz.6.8743': attribute type 39 has an invalid length. [ 956.116996][T29144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 956.382424][T29316] loop6: detected capacity change from 0 to 512 [ 956.409949][T29316] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 956.451060][T29316] EXT4-fs (loop6): 1 truncate cleaned up [ 956.471481][T29316] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 956.474175][T29144] veth0_vlan: entered promiscuous mode [ 956.496935][T29144] veth1_vlan: entered promiscuous mode [ 956.528507][T29144] veth0_macvtap: entered promiscuous mode [ 956.536696][T29144] veth1_macvtap: entered promiscuous mode [ 956.548323][T29144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.560551][T29144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 956.580685][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.603105][T28491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 956.626890][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.662083][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.702849][T29333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8745'. [ 956.725136][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.754347][T29334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8717'. [ 956.795146][T29334] 8021q: VLANs not supported on vcan0 [ 956.874373][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8748'. [ 956.925423][T29354] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma? [ 957.002576][T29362] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8750'. [ 957.055755][T29367] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 957.845940][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8753'. [ 957.865729][T29419] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 957.981376][T29415] loop6: detected capacity change from 0 to 1024 [ 958.021956][T29436] netlink: 'syz.5.8756': attribute type 29 has an invalid length. [ 958.043246][T29436] netlink: 'syz.5.8756': attribute type 29 has an invalid length. [ 958.100479][T29415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.122285][T29444] netlink: 'syz.5.8759': attribute type 2 has an invalid length. [ 958.130239][T29444] netlink: 'syz.5.8759': attribute type 1 has an invalid length. [ 958.137944][T29444] netlink: 'syz.5.8759': attribute type 1 has an invalid length. [ 958.611151][T29473] netlink: 'syz.1.8768': attribute type 29 has an invalid length. [ 958.688847][T28491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.724945][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8767'. [ 958.725767][T29486] syzkaller1: entered promiscuous mode [ 958.739518][T29486] syzkaller1: entered allmulticast mode [ 958.753357][T29471] hsr_slave_0: left promiscuous mode [ 958.760543][T29471] hsr_slave_1: left promiscuous mode [ 958.923962][T29491] syzkaller0: entered promiscuous mode [ 958.929628][T29491] syzkaller0: entered allmulticast mode [ 958.953776][T29495] syzkaller1: entered promiscuous mode [ 958.959285][T29495] syzkaller1: entered allmulticast mode [ 958.988460][T29501] validate_nla: 2 callbacks suppressed [ 958.988474][T29501] netlink: 'syz.3.8779': attribute type 29 has an invalid length. [ 959.003000][T29504] netlink: 'syz.3.8779': attribute type 29 has an invalid length. [ 959.011143][T29500] syzkaller1: entered promiscuous mode [ 959.016697][T29500] syzkaller1: entered allmulticast mode [ 959.087745][T29506] syzkaller0: entered promiscuous mode [ 959.093284][T29506] syzkaller0: entered allmulticast mode [ 959.117907][T29509] netlink: 'syz.3.8783': attribute type 29 has an invalid length. [ 959.131535][T29509] netlink: 'syz.3.8783': attribute type 29 has an invalid length. [ 959.204563][T29518] loop6: detected capacity change from 0 to 1024 [ 959.246325][T29524] loop0: detected capacity change from 0 to 512 [ 959.253119][T29518] EXT4-fs: Ignoring removed orlov option [ 959.261795][T29522] syzkaller1: entered promiscuous mode [ 959.267295][T29522] syzkaller1: entered allmulticast mode [ 959.275242][T29524] EXT4-fs: Ignoring removed mblk_io_submit option [ 959.285274][T29518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 959.312832][T29524] EXT4-fs (loop0): failed to initialize system zone (-117) [ 959.326364][T29524] EXT4-fs (loop0): mount failed [ 959.487615][T29548] netlink: 'syz.1.8793': attribute type 29 has an invalid length. [ 959.522329][T29548] netlink: 'syz.1.8793': attribute type 29 has an invalid length. [ 959.783311][T28491] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 959.806716][T28491] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 959.837847][T29569] syzkaller1: entered promiscuous mode [ 959.843433][T29569] syzkaller1: entered allmulticast mode [ 959.855381][T29564] loop0: detected capacity change from 0 to 1024 [ 959.893211][T29564] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 959.943639][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.964407][T29578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8804'. [ 960.042480][T29592] netlink: 'syz.1.8808': attribute type 29 has an invalid length. [ 960.055014][ T3453] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.066358][T29542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 960.115962][T29592] netlink: 'syz.1.8808': attribute type 29 has an invalid length. [ 960.137020][ T3453] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.180910][T29611] syzkaller1: entered promiscuous mode [ 960.186461][T29611] syzkaller1: entered allmulticast mode [ 960.194453][T29613] netlink: 'syz.0.8813': attribute type 39 has an invalid length. [ 960.207386][ T3453] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.262920][ T3453] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.431091][T29644] syzkaller1: entered promiscuous mode [ 960.436616][T29644] syzkaller1: entered allmulticast mode [ 960.471788][T29628] netlink: 152 bytes leftover after parsing attributes in process `syz.5.8817'. [ 960.498757][ T3453] bridge_slave_1: left allmulticast mode [ 960.504460][ T3453] bridge_slave_1: left promiscuous mode [ 960.510501][ T3453] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.530363][ T3453] bridge_slave_0: left allmulticast mode [ 960.536051][ T3453] bridge_slave_0: left promiscuous mode [ 960.541760][ T3453] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.555953][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 960.555969][ T29] audit: type=1400 audit(1755037245.560:1883): avc: denied { read } for pid=29662 comm="syz.1.8822" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 960.635234][ T29] audit: type=1400 audit(1755037245.560:1884): avc: denied { open } for pid=29662 comm="syz.1.8822" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 960.641915][T29668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8821'. [ 960.659171][ T29] audit: type=1400 audit(1755037245.560:1885): avc: denied { ioctl } for pid=29662 comm="syz.1.8822" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 960.706090][ T29] audit: type=1326 audit(1755037245.710:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29673 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 960.729921][ T29] audit: type=1326 audit(1755037245.740:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29673 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 960.753753][ T29] audit: type=1326 audit(1755037245.740:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29673 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 960.777418][ T29] audit: type=1326 audit(1755037245.740:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29673 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 960.801042][ T29] audit: type=1326 audit(1755037245.740:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29673 comm="syz.1.8824" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 960.832802][ T3453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 960.843024][ T3453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 960.853300][ T3453] bond0 (unregistering): Released all slaves [ 960.872417][T29637] tipc: Enabling of bearer rejected, failed to enable media [ 960.959178][ T3453] hsr_slave_0: left promiscuous mode [ 960.965089][T29691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8826'. [ 960.982565][ T3453] hsr_slave_1: left promiscuous mode [ 960.990932][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.998338][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.014334][ T3453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.021752][ T3453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 961.028654][T29708] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 961.040965][ T29] audit: type=1326 audit(1755037246.050:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29690 comm="syz.3.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 961.070871][ T29] audit: type=1326 audit(1755037246.080:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29690 comm="syz.3.8826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 961.097739][ T3453] veth1_macvtap: left promiscuous mode [ 961.103493][ T3453] veth0_macvtap: left promiscuous mode [ 961.111043][ T3453] veth1_vlan: left promiscuous mode [ 961.116383][ T3453] veth0_vlan: left promiscuous mode [ 961.201763][T29693] syzkaller1: entered promiscuous mode [ 961.207306][T29693] syzkaller1: entered allmulticast mode [ 961.220671][T29709] syzkaller1: entered promiscuous mode [ 961.226201][T29709] syzkaller1: entered allmulticast mode [ 961.388523][T29618] chnl_net:caif_netlink_parms(): no params data found [ 961.439693][T29756] syzkaller1: entered promiscuous mode [ 961.445321][T29756] syzkaller1: entered allmulticast mode [ 961.469827][T29740] netlink: 'syz.0.8834': attribute type 4 has an invalid length. [ 961.569363][T29776] SELinux: security_context_str_to_sid (ð=S|1r©îW„i³M!Oýj¡4~–1c3FùÕfX¶¬ê5âá0Š©ð©œ÷X2•k¢c½»m?ÕÔú'´wø´Cµª) failed with errno=-22 [ 961.585860][T29618] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.587854][T29776] FAULT_INJECTION: forcing a failure. [ 961.587854][T29776] name failslab, interval 1, probability 0, space 0, times 0 [ 961.593240][T29618] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.605830][T29776] CPU: 1 UID: 0 PID: 29776 Comm: syz.5.8841 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 961.605861][T29776] Tainted: [W]=WARN [ 961.605867][T29776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 961.605879][T29776] Call Trace: [ 961.605885][T29776] [ 961.605892][T29776] __dump_stack+0x1d/0x30 [ 961.605932][T29776] dump_stack_lvl+0xe8/0x140 [ 961.605951][T29776] dump_stack+0x15/0x1b [ 961.605968][T29776] should_fail_ex+0x265/0x280 [ 961.605990][T29776] should_failslab+0x8c/0xb0 [ 961.606021][T29776] kmem_cache_alloc_noprof+0x50/0x310 [ 961.606047][T29776] ? audit_log_start+0x365/0x6c0 [ 961.606220][T29776] audit_log_start+0x365/0x6c0 [ 961.606259][T29776] audit_seccomp+0x48/0x100 [ 961.606283][T29776] ? __seccomp_filter+0x68c/0x10d0 [ 961.606329][T29776] __seccomp_filter+0x69d/0x10d0 [ 961.606414][T29776] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 961.606440][T29776] ? vfs_write+0x7e8/0x960 [ 961.606488][T29776] __secure_computing+0x82/0x150 [ 961.606508][T29776] syscall_trace_enter+0xcf/0x1e0 [ 961.606649][T29776] do_syscall_64+0xac/0x200 [ 961.606719][T29776] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 961.606745][T29776] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 961.606769][T29776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.606863][T29776] RIP: 0033:0x7fee87c7ebe9 [ 961.606879][T29776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 961.606895][T29776] RSP: 002b:00007fee866df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 961.606914][T29776] RAX: ffffffffffffffda RBX: 00007fee87ea5fa0 RCX: 00007fee87c7ebe9 [ 961.606927][T29776] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000000000000003 [ 961.606940][T29776] RBP: 00007fee866df090 R08: 0000000000000000 R09: 0000000000000000 [ 961.606953][T29776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 961.606996][T29776] R13: 00007fee87ea6038 R14: 00007fee87ea5fa0 R15: 00007ffc59ee5948 [ 961.607015][T29776] [ 961.760212][T29784] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 961.766948][T29618] bridge_slave_0: entered allmulticast mode [ 961.843154][T29618] bridge_slave_0: entered promiscuous mode [ 961.851494][T29618] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.858542][T29618] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.866708][T29618] bridge_slave_1: entered allmulticast mode [ 961.873581][T29618] bridge_slave_1: entered promiscuous mode [ 961.897821][T29786] SELinux: security_context_str_to_sid (ð=S|1r©îW„i³M!Oýj¡4~–1c3FùÕfX¶¬ê5âá0Š©ð©œ÷X2•k¢c½»m?ÕÔú'´wø´Cµª) failed with errno=-22 [ 961.930112][T29618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.951037][T29618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.963338][T29793] syzkaller1: entered promiscuous mode [ 961.968845][T29793] syzkaller1: entered allmulticast mode [ 961.986367][T29800] __nla_validate_parse: 4 callbacks suppressed [ 961.986463][T29800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8848'. [ 962.007570][T29795] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8846'. [ 962.046327][T29618] team0: Port device team_slave_0 added [ 962.059555][T29618] team0: Port device team_slave_1 added [ 962.184838][T29618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.191838][T29618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.217862][T29618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.276242][T29812] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 962.389152][T29618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.396171][T29618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.422407][T29618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.536642][T29839] SELinux: security_context_str_to_sid (ð=S|1r©îW„i³M!Oýj¡4~–1c3FùÕfX¶¬ê5âá0Š©ð©œ÷X2•k¢c½»m?ÕÔú'´wø´Cµª) failed with errno=-22 [ 962.628551][T29618] hsr_slave_0: entered promiscuous mode [ 962.649652][T29618] hsr_slave_1: entered promiscuous mode [ 962.687675][T29860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8857'. [ 962.720921][T29860] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 962.745745][T29870] loop0: detected capacity change from 0 to 512 [ 962.764845][T29865] SELinux: security_context_str_to_sid (ð=S|1r©îW„i³M!Oýj¡4~–1c3FùÕfX¶¬ê5âá0Š©ð©œ÷X2•k¢c½»m?ÕÔú'´wø´Cµª) failed with errno=-22 [ 962.781998][T29870] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 962.808661][T29870] EXT4-fs (loop0): 1 truncate cleaned up [ 962.816487][T29870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 962.860958][T29618] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 962.881105][T29618] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 962.920051][T29618] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 962.951838][T29618] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 962.958791][T29880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8860'. [ 962.968992][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.029555][T29899] FAULT_INJECTION: forcing a failure. [ 963.029555][T29899] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 963.042836][T29899] CPU: 1 UID: 0 PID: 29899 Comm: syz.5.8859 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 963.042889][T29899] Tainted: [W]=WARN [ 963.042896][T29899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 963.042908][T29899] Call Trace: [ 963.042974][T29899] [ 963.043037][T29899] __dump_stack+0x1d/0x30 [ 963.043066][T29899] dump_stack_lvl+0xe8/0x140 [ 963.043083][T29899] dump_stack+0x15/0x1b [ 963.043100][T29899] should_fail_ex+0x265/0x280 [ 963.043121][T29899] should_fail_alloc_page+0xf2/0x100 [ 963.043207][T29899] __alloc_frozen_pages_noprof+0xff/0x360 [ 963.043244][T29899] alloc_pages_mpol+0xb3/0x250 [ 963.043268][T29899] vma_alloc_folio_noprof+0x1aa/0x300 [ 963.043415][T29899] handle_mm_fault+0xec2/0x2c20 [ 963.043474][T29899] do_user_addr_fault+0x636/0x1090 [ 963.043501][T29899] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 963.043522][T29899] exc_page_fault+0x62/0xa0 [ 963.043545][T29899] asm_exc_page_fault+0x26/0x30 [ 963.043630][T29899] RIP: 0033:0x7fee87b4a5ab [ 963.043646][T29899] Code: 00 00 00 48 8d 3d 3d 3a 19 00 48 89 c1 31 c0 e8 4b 3c ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 71 3a 19 00 48 89 34 24 48 8b 14 24 48 8b [ 963.043664][T29899] RSP: 002b:00007fee8669bfb0 EFLAGS: 00010202 [ 963.043678][T29899] RAX: 0000000000000000 RBX: 00007fee87ea6180 RCX: 0000000000000000 [ 963.043688][T29899] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000040 [ 963.043699][T29899] RBP: 00007fee8669d090 R08: 0000000000000000 R09: 0000000000000000 [ 963.043709][T29899] R10: 0000200000000040 R11: 0000000000000000 R12: 0000000000000001 [ 963.043719][T29899] R13: 00007fee87ea6218 R14: 00007fee87ea6180 R15: 00007ffc59ee5948 [ 963.043805][T29899] [ 963.043815][T29899] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 963.346452][T29618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.373841][T29618] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.397317][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.404427][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.417557][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.424700][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.437643][T29924] loop0: detected capacity change from 0 to 1024 [ 963.476633][T29924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 963.547271][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.606787][T29950] syzkaller0: entered promiscuous mode [ 963.612394][T29950] syzkaller0: entered allmulticast mode [ 963.640999][T29618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 963.826353][T29978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8877'. [ 963.846148][T29978] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 963.977353][T30017] syzkaller0: entered promiscuous mode [ 963.983017][T30017] syzkaller0: entered allmulticast mode [ 964.049216][T29618] veth0_vlan: entered promiscuous mode [ 964.070101][T29618] veth1_vlan: entered promiscuous mode [ 964.110236][T29618] veth0_macvtap: entered promiscuous mode [ 964.127890][T29618] veth1_macvtap: entered promiscuous mode [ 964.155017][T29618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.191219][T29618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.212141][ T3481] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.239379][T30057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8894'. [ 964.261811][ T3481] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.275512][T30060] validate_nla: 2 callbacks suppressed [ 964.275526][T30060] netlink: 'syz.0.8895': attribute type 39 has an invalid length. [ 964.302415][ T3481] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.324280][T30052] netlink: 'syz.3.8894': attribute type 4 has an invalid length. [ 964.332189][ T3481] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.394009][T30073] netlink: 'syz.3.8897': attribute type 39 has an invalid length. [ 964.502009][T30085] syzkaller0: entered promiscuous mode [ 964.507530][T30085] syzkaller0: entered allmulticast mode [ 964.538118][T30102] netlink: 'syz.3.8905': attribute type 39 has an invalid length. [ 964.555995][T30094] loop0: detected capacity change from 0 to 1024 [ 964.632540][T30117] netlink: 'syz.3.8908': attribute type 4 has an invalid length. [ 964.714298][T30125] FAULT_INJECTION: forcing a failure. [ 964.714298][T30125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.727645][T30125] CPU: 0 UID: 0 PID: 30125 Comm: syz.7.8907 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 964.727737][T30125] Tainted: [W]=WARN [ 964.727744][T30125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 964.727755][T30125] Call Trace: [ 964.727761][T30125] [ 964.727768][T30125] __dump_stack+0x1d/0x30 [ 964.727790][T30125] dump_stack_lvl+0xe8/0x140 [ 964.727809][T30125] dump_stack+0x15/0x1b [ 964.727854][T30125] should_fail_ex+0x265/0x280 [ 964.727871][T30125] should_fail+0xb/0x20 [ 964.727885][T30125] should_fail_usercopy+0x1a/0x20 [ 964.727903][T30125] _copy_to_user+0x20/0xa0 [ 964.727978][T30125] simple_read_from_buffer+0xb5/0x130 [ 964.727997][T30125] proc_fail_nth_read+0x10e/0x150 [ 964.728046][T30125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 964.728066][T30125] vfs_read+0x1a8/0x770 [ 964.728083][T30125] ? __rcu_read_unlock+0x4f/0x70 [ 964.728166][T30125] ? __fget_files+0x184/0x1c0 [ 964.728187][T30125] ksys_read+0xda/0x1a0 [ 964.728205][T30125] __x64_sys_read+0x40/0x50 [ 964.728230][T30125] x64_sys_call+0x27bc/0x2ff0 [ 964.728247][T30125] do_syscall_64+0xd2/0x200 [ 964.728297][T30125] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 964.728335][T30125] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 964.728355][T30125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.728372][T30125] RIP: 0033:0x7f9c3f7cd5fc [ 964.728384][T30125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 964.728398][T30125] RSP: 002b:00007f9c3e1f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 964.728414][T30125] RAX: ffffffffffffffda RBX: 00007f9c3f9f6180 RCX: 00007f9c3f7cd5fc [ 964.728482][T30125] RDX: 000000000000000f RSI: 00007f9c3e1f50a0 RDI: 0000000000000008 [ 964.728492][T30125] RBP: 00007f9c3e1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 964.728502][T30125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.728513][T30125] R13: 00007f9c3f9f6218 R14: 00007f9c3f9f6180 R15: 00007ffe985a58d8 [ 964.728528][T30125] [ 965.631978][T30166] tipc: Resetting bearer [ 965.644608][T30166] tipc: Disabling bearer [ 965.652920][T30166] team0 (unregistering): Port device vlan0 removed [ 966.126314][T30094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.180795][T30189] netlink: 'syz.3.8917': attribute type 39 has an invalid length. [ 966.991057][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 966.991073][ T29] audit: type=1400 audit(1755037251.990:2230): avc: denied { create } for pid=30180 comm="syz.7.8915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 967.239513][ T29] audit: type=1326 audit(1755037252.170:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.263223][ T29] audit: type=1326 audit(1755037252.170:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.286734][ T29] audit: type=1326 audit(1755037252.220:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.310278][ T29] audit: type=1326 audit(1755037252.220:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.333841][ T29] audit: type=1326 audit(1755037252.220:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.357342][ T29] audit: type=1326 audit(1755037252.220:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.381191][ T29] audit: type=1326 audit(1755037252.220:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.404667][ T29] audit: type=1326 audit(1755037252.220:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.428180][ T29] audit: type=1326 audit(1755037252.220:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30195 comm="syz.5.8918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 967.473090][T30202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8919'. [ 967.485018][T30202] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 967.501824][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8921'. [ 967.709197][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 967.767015][T30224] FAULT_INJECTION: forcing a failure. [ 967.767015][T30224] name failslab, interval 1, probability 0, space 0, times 0 [ 967.779702][T30224] CPU: 0 UID: 0 PID: 30224 Comm: syz.5.8924 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 967.779782][T30224] Tainted: [W]=WARN [ 967.779789][T30224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.779801][T30224] Call Trace: [ 967.779808][T30224] [ 967.779815][T30224] __dump_stack+0x1d/0x30 [ 967.779945][T30224] dump_stack_lvl+0xe8/0x140 [ 967.779962][T30224] dump_stack+0x15/0x1b [ 967.779979][T30224] should_fail_ex+0x265/0x280 [ 967.780044][T30224] should_failslab+0x8c/0xb0 [ 967.780067][T30224] kmem_cache_alloc_noprof+0x50/0x310 [ 967.780094][T30224] ? copy_fs_struct+0x31/0x110 [ 967.780126][T30224] copy_fs_struct+0x31/0x110 [ 967.780153][T30224] ksys_unshare+0x2c6/0x6d0 [ 967.780235][T30224] ? ksys_write+0x192/0x1a0 [ 967.780372][T30224] __x64_sys_unshare+0x1f/0x30 [ 967.780461][T30224] x64_sys_call+0x2911/0x2ff0 [ 967.780478][T30224] do_syscall_64+0xd2/0x200 [ 967.780564][T30224] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 967.780586][T30224] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 967.780685][T30224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.780707][T30224] RIP: 0033:0x7fee87c7ebe9 [ 967.780720][T30224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.780736][T30224] RSP: 002b:00007fee8669d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 967.780756][T30224] RAX: ffffffffffffffda RBX: 00007fee87ea6180 RCX: 00007fee87c7ebe9 [ 967.780837][T30224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000680 [ 967.780850][T30224] RBP: 00007fee8669d090 R08: 0000000000000000 R09: 0000000000000000 [ 967.780869][T30224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.780955][T30224] R13: 00007fee87ea6218 R14: 00007fee87ea6180 R15: 00007ffc59ee5948 [ 967.780970][T30224] [ 968.079838][T30223] netlink: 'syz.1.8925': attribute type 4 has an invalid length. [ 968.323400][T30245] netlink: 'syz.0.8926': attribute type 29 has an invalid length. [ 968.331899][T30245] netlink: 'syz.0.8926': attribute type 29 has an invalid length. [ 968.548318][T30262] loop0: detected capacity change from 0 to 512 [ 968.566510][T30262] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 968.617070][T30262] EXT4-fs (loop0): 1 truncate cleaned up [ 968.624008][T30262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.652693][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.719216][T30274] vlan2: entered allmulticast mode [ 968.724408][T30274] bridge_slave_0: entered allmulticast mode [ 968.805088][T30283] lo speed is unknown, defaulting to 1000 [ 968.821075][T30283] lo speed is unknown, defaulting to 1000 [ 968.827082][T30283] lo speed is unknown, defaulting to 1000 [ 968.834176][T30283] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 968.864346][T30283] lo speed is unknown, defaulting to 1000 [ 968.871672][T30283] lo speed is unknown, defaulting to 1000 [ 968.883355][T30283] lo speed is unknown, defaulting to 1000 [ 968.891590][T30283] lo speed is unknown, defaulting to 1000 [ 968.897822][T30283] lo speed is unknown, defaulting to 1000 [ 968.901597][T30287] loop0: detected capacity change from 0 to 1024 [ 969.003511][T30287] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 969.014532][T30287] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 969.029806][T30287] JBD2: no valid journal superblock found [ 969.035702][T30287] EXT4-fs (loop0): Could not load journal inode [ 969.081654][T30296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8951'. [ 969.241307][T30320] loop0: detected capacity change from 0 to 512 [ 969.257655][T30320] EXT4-fs: Ignoring removed mblk_io_submit option [ 969.301184][T30320] EXT4-fs (loop0): failed to initialize system zone (-117) [ 969.321089][T30320] EXT4-fs (loop0): mount failed [ 969.365617][T30321] lo speed is unknown, defaulting to 1000 [ 969.478273][T30339] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 969.538026][T30350] syzkaller1: entered promiscuous mode [ 969.543610][T30350] syzkaller1: entered allmulticast mode [ 969.561874][T30352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8971'. [ 969.571543][T30352] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 969.631934][T30361] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 969.950775][T30385] netlink: 'syz.1.8981': attribute type 39 has an invalid length. [ 970.047316][T30388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8982'. [ 970.079065][T30388] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 970.124549][T30397] syzkaller1: entered promiscuous mode [ 970.130176][T30397] syzkaller1: entered allmulticast mode [ 970.198557][T30399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8985'. [ 970.209517][T30399] netlink: 'syz.1.8985': attribute type 4 has an invalid length. [ 970.339780][T30408] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8990'. [ 970.480227][T30427] netlink: 'syz.7.8993': attribute type 39 has an invalid length. [ 970.630013][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8995'. [ 970.688921][T30432] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 970.727096][T30440] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8997'. [ 970.754517][T30439] netlink: 'syz.7.8997': attribute type 4 has an invalid length. [ 970.813677][T30442] loop0: detected capacity change from 0 to 512 [ 970.856506][T30442] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 970.870500][T30447] syzkaller1: entered promiscuous mode [ 970.875967][T30447] syzkaller1: entered allmulticast mode [ 970.894293][T30442] EXT4-fs (loop0): 1 truncate cleaned up [ 970.905645][T30442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 970.949052][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 971.158967][T30465] tipc: Resetting bearer [ 971.589849][T30465] tipc: Disabling bearer [ 971.606270][T30465] team0 (unregistering): Port device vlan0 removed [ 971.625427][T30477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9009'. [ 971.713511][T30480] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 972.136155][T30496] FAULT_INJECTION: forcing a failure. [ 972.136155][T30496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 972.149452][T30496] CPU: 0 UID: 0 PID: 30496 Comm: syz.1.9011 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 972.149498][T30496] Tainted: [W]=WARN [ 972.149505][T30496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 972.149551][T30496] Call Trace: [ 972.149559][T30496] [ 972.149591][T30496] __dump_stack+0x1d/0x30 [ 972.149612][T30496] dump_stack_lvl+0xe8/0x140 [ 972.149630][T30496] dump_stack+0x15/0x1b [ 972.149644][T30496] should_fail_ex+0x265/0x280 [ 972.149662][T30496] should_fail+0xb/0x20 [ 972.149793][T30496] should_fail_usercopy+0x1a/0x20 [ 972.149856][T30496] _copy_from_user+0x1c/0xb0 [ 972.149878][T30496] snd_seq_ioctl+0x127/0x2e0 [ 972.149901][T30496] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 972.149972][T30496] __se_sys_ioctl+0xcb/0x140 [ 972.149997][T30496] __x64_sys_ioctl+0x43/0x50 [ 972.150040][T30496] x64_sys_call+0x1816/0x2ff0 [ 972.150062][T30496] do_syscall_64+0xd2/0x200 [ 972.150099][T30496] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 972.150123][T30496] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 972.150180][T30496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 972.150202][T30496] RIP: 0033:0x7f60e568ebe9 [ 972.150215][T30496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 972.150231][T30496] RSP: 002b:00007f60e40b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 972.150251][T30496] RAX: ffffffffffffffda RBX: 00007f60e58b6180 RCX: 00007f60e568ebe9 [ 972.150304][T30496] RDX: 0000200000000940 RSI: 00000000c0505350 RDI: 0000000000000003 [ 972.150317][T30496] RBP: 00007f60e40b5090 R08: 0000000000000000 R09: 0000000000000000 [ 972.150329][T30496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 972.150342][T30496] R13: 00007f60e58b6218 R14: 00007f60e58b6180 R15: 00007ffc8a73c028 [ 972.150360][T30496] [ 972.486156][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 972.486172][ T29] audit: type=1326 audit(1755037257.490:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.607386][ T29] audit: type=1326 audit(1755037257.540:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.647495][ T29] audit: type=1326 audit(1755037257.610:2465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.671040][ T29] audit: type=1326 audit(1755037257.610:2466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.694786][ T29] audit: type=1326 audit(1755037257.610:2467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.718328][ T29] audit: type=1326 audit(1755037257.610:2468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.742188][ T29] audit: type=1326 audit(1755037257.610:2469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.766087][ T29] audit: type=1326 audit(1755037257.610:2470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.789940][ T29] audit: type=1326 audit(1755037257.610:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.810253][T30508] syzkaller1: entered promiscuous mode [ 972.813497][ T29] audit: type=1326 audit(1755037257.610:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30498 comm="syz.1.9013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e568ebe9 code=0x7ffc0000 [ 972.818938][T30508] syzkaller1: entered allmulticast mode [ 973.017708][T30518] bridge0: entered allmulticast mode [ 973.117595][T30522] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 973.137692][T30522] syzkaller0: entered promiscuous mode [ 973.143236][T30522] syzkaller0: entered allmulticast mode [ 973.260663][T30534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9024'. [ 973.296998][T30527] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 973.391510][T30551] siw: device registration error -23 [ 973.515164][T30559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9033'. [ 973.551568][T30556] netlink: 'syz.1.9033': attribute type 4 has an invalid length. [ 973.922756][T30586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.942381][T30586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.965985][T30586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 973.984164][T30586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.207481][T30586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 974.212470][T30880] netlink: 'syz.1.9043': attribute type 29 has an invalid length. [ 974.238104][T30586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 974.264618][T30883] netlink: 'syz.1.9043': attribute type 29 has an invalid length. [ 974.264636][T30881] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9042'. [ 974.311949][T30877] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 974.468755][T30896] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9045'. [ 974.541646][T30896] bridge0: entered promiscuous mode [ 974.558352][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9048'. [ 974.590313][T30895] netlink: 'syz.0.9048': attribute type 4 has an invalid length. [ 975.116687][T30911] FAULT_INJECTION: forcing a failure. [ 975.116687][T30911] name failslab, interval 1, probability 0, space 0, times 0 [ 975.129352][T30911] CPU: 0 UID: 0 PID: 30911 Comm: syz.0.9051 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 975.129386][T30911] Tainted: [W]=WARN [ 975.129394][T30911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 975.129404][T30911] Call Trace: [ 975.129411][T30911] [ 975.129418][T30911] __dump_stack+0x1d/0x30 [ 975.129514][T30911] dump_stack_lvl+0xe8/0x140 [ 975.129531][T30911] dump_stack+0x15/0x1b [ 975.129544][T30911] should_fail_ex+0x265/0x280 [ 975.129633][T30911] should_failslab+0x8c/0xb0 [ 975.129657][T30911] kmem_cache_alloc_noprof+0x50/0x310 [ 975.129704][T30911] ? getname_flags+0x80/0x3b0 [ 975.129729][T30911] getname_flags+0x80/0x3b0 [ 975.129816][T30911] do_sys_openat2+0x60/0x110 [ 975.129841][T30911] __x64_sys_openat+0xf2/0x120 [ 975.129925][T30911] x64_sys_call+0x2e9c/0x2ff0 [ 975.129947][T30911] do_syscall_64+0xd2/0x200 [ 975.130029][T30911] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 975.130048][T30911] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 975.130252][T30911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.130276][T30911] RIP: 0033:0x7f623e44d550 [ 975.130289][T30911] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 975.130303][T30911] RSP: 002b:00007f623ce6cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 975.130319][T30911] RAX: ffffffffffffffda RBX: 0000000000002581 RCX: 00007f623e44d550 [ 975.130332][T30911] RDX: 0000000000002581 RSI: 00007f623ce6cc10 RDI: 00000000ffffff9c [ 975.130349][T30911] RBP: 00007f623ce6cc10 R08: 0000000000000000 R09: 0000000000000000 [ 975.130363][T30911] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 975.130376][T30911] R13: 00007f623e676218 R14: 00007f623e676180 R15: 00007ffceb7f1478 [ 975.130396][T30911] [ 975.568098][T30917] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 975.709389][T30927] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9056'. [ 975.775970][T30927] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 976.002227][T30939] netlink: 'syz.3.9061': attribute type 29 has an invalid length. [ 976.029209][T30939] netlink: 'syz.3.9061': attribute type 29 has an invalid length. [ 976.143765][T30928] cgroup: fork rejected by pids controller in /syz0 [ 976.930672][T31372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9069'. [ 976.943257][T31372] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 977.247140][T31400] lo speed is unknown, defaulting to 1000 [ 977.293848][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.327596][T31400] chnl_net:caif_netlink_parms(): no params data found [ 977.350454][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.386554][T31434] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 977.482111][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.524712][T31400] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.531933][T31400] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.623257][T31400] bridge_slave_0: entered allmulticast mode [ 977.651456][T31400] bridge_slave_0: entered promiscuous mode [ 977.675976][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 977.675994][ T29] audit: type=1400 audit(1755037262.680:2608): avc: denied { create } for pid=31450 comm="syz.0.9080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 977.699756][T31400] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.709522][T31400] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.775545][ T29] audit: type=1400 audit(1755037262.780:2609): avc: denied { mounton } for pid=31450 comm="syz.0.9080" path="/68/file0" dev="tmpfs" ino=375 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 977.808828][T31400] bridge_slave_1: entered allmulticast mode [ 977.836679][T31400] bridge_slave_1: entered promiscuous mode [ 977.909637][ T29] audit: type=1400 audit(1755037262.910:2610): avc: denied { write } for pid=31462 comm="syz.3.9082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 977.929961][ T29] audit: type=1400 audit(1755037262.910:2611): avc: denied { nlmsg_write } for pid=31462 comm="syz.3.9082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 977.963456][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.997886][T31400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.077194][T31400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.079772][ T29] audit: type=1400 audit(1755037263.040:2612): avc: denied { create } for pid=31462 comm="syz.3.9082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 978.105890][ T29] audit: type=1400 audit(1755037263.040:2613): avc: denied { setopt } for pid=31462 comm="syz.3.9082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 978.268560][ T29] audit: type=1400 audit(1755037263.270:2614): avc: denied { create } for pid=31481 comm="syz.0.9085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 978.321032][ T29] audit: type=1400 audit(1755037263.300:2615): avc: denied { listen } for pid=31481 comm="syz.0.9085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 978.340564][ T29] audit: type=1400 audit(1755037263.320:2616): avc: denied { read } for pid=31481 comm="syz.0.9085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 978.362376][ T31] bond0 (unregistering): Released all slaves [ 978.413299][T31400] team0: Port device team_slave_0 added [ 978.449129][T31400] team0: Port device team_slave_1 added [ 978.467415][ T31] tipc: Left network mode [ 978.517687][T31400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.524690][T31400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.550687][T31400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.567806][T31400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.574804][T31400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.600776][T31400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.704639][T31490] loop0: detected capacity change from 0 to 1024 [ 978.717353][ T31] hsr_slave_0: left promiscuous mode [ 978.731430][ T31] hsr_slave_1: left promiscuous mode [ 978.743410][ T31] veth1_macvtap: left promiscuous mode [ 978.748222][T31490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 978.758530][ T31] veth0_macvtap: left promiscuous mode [ 978.774857][ T31] veth1_vlan: left promiscuous mode [ 978.780024][T31519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9091'. [ 978.807930][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 978.830617][T31529] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 978.832262][ T29] audit: type=1400 audit(1755037263.840:2617): avc: denied { ioctl } for pid=31527 comm="syz.0.9092" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 978.920564][T31528] loop0: detected capacity change from 0 to 256 [ 978.943878][T31528] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 978.965330][T31400] hsr_slave_0: entered promiscuous mode [ 978.971634][T31400] hsr_slave_1: entered promiscuous mode [ 978.978968][T31400] debugfs: 'hsr0' already exists in 'hsr' [ 978.984765][T31400] Cannot create hsr debugfs directory [ 979.664970][T31572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9100'. [ 979.683588][T31572] netlink: 'syz.0.9100': attribute type 4 has an invalid length. [ 979.811627][T31400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 979.843470][T31400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 979.923761][T31400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 979.937093][T31611] siw: device registration error -23 [ 979.950319][T31400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 980.056524][T31621] syzkaller0: entered promiscuous mode [ 980.062246][T31621] syzkaller0: entered allmulticast mode [ 980.145870][T31631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9115'. [ 980.164664][T31400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.185718][T31631] netlink: 'syz.0.9115': attribute type 4 has an invalid length. [ 980.199507][T31400] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.221454][ T337] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.228622][ T337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.240138][T31641] FAULT_INJECTION: forcing a failure. [ 980.240138][T31641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 980.253210][T31641] CPU: 1 UID: 0 PID: 31641 Comm: syz.3.9118 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 980.253239][T31641] Tainted: [W]=WARN [ 980.253246][T31641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.253259][T31641] Call Trace: [ 980.253265][T31641] [ 980.253273][T31641] __dump_stack+0x1d/0x30 [ 980.253334][T31641] dump_stack_lvl+0xe8/0x140 [ 980.253355][T31641] dump_stack+0x15/0x1b [ 980.253373][T31641] should_fail_ex+0x265/0x280 [ 980.253392][T31641] should_fail+0xb/0x20 [ 980.253411][T31641] should_fail_usercopy+0x1a/0x20 [ 980.253431][T31641] _copy_from_user+0x1c/0xb0 [ 980.253456][T31641] __se_sys_rt_sigtimedwait+0x83/0x200 [ 980.253545][T31641] __x64_sys_rt_sigtimedwait+0x55/0x70 [ 980.253565][T31641] x64_sys_call+0x2759/0x2ff0 [ 980.253583][T31641] do_syscall_64+0xd2/0x200 [ 980.253608][T31641] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 980.253712][T31641] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 980.253736][T31641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.253756][T31641] RIP: 0033:0x7efd8b6aebe9 [ 980.253770][T31641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.253799][T31641] RSP: 002b:00007efd8a117038 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 980.253816][T31641] RAX: ffffffffffffffda RBX: 00007efd8b8d5fa0 RCX: 00007efd8b6aebe9 [ 980.253836][T31641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 980.253893][T31641] RBP: 00007efd8a117090 R08: 0000000000000000 R09: 0000000000000000 [ 980.253905][T31641] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 980.253916][T31641] R13: 00007efd8b8d6038 R14: 00007efd8b8d5fa0 R15: 00007ffde212fbb8 [ 980.253975][T31641] [ 980.254163][ T337] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.440228][ T337] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.444815][T31664] netlink: 100 bytes leftover after parsing attributes in process `syz.7.9122'. [ 980.531035][T31400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 980.539382][T31678] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9123'. [ 980.594136][T31684] loop0: detected capacity change from 0 to 1024 [ 980.614991][T31684] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 980.626113][T31684] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 980.643971][T31690] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9126'. [ 980.655790][T31400] veth0_vlan: entered promiscuous mode [ 980.664195][T31684] JBD2: no valid journal superblock found [ 980.669967][T31684] EXT4-fs (loop0): Could not load journal inode [ 980.676836][T31400] veth1_vlan: entered promiscuous mode [ 980.687435][T31690] openvswitch: netlink: Message has 6 unknown bytes. [ 980.703205][T31690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9126'. [ 980.715411][T31400] veth0_macvtap: entered promiscuous mode [ 980.731226][T31400] veth1_macvtap: entered promiscuous mode [ 980.753314][T31400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.765553][T31400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.778596][ T337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.792911][ T337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.803913][ T337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.813832][ T337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.859098][T31696] syzkaller0: entered promiscuous mode [ 980.864727][T31696] syzkaller0: entered allmulticast mode [ 980.973675][T31703] siw: device registration error -23 [ 981.004512][T31705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9130'. [ 981.021549][T31705] netlink: 'syz.0.9130': attribute type 4 has an invalid length. [ 981.179178][T31699] cgroup: fork rejected by pids controller in /syz1 [ 981.188809][T31743] FAULT_INJECTION: forcing a failure. [ 981.188809][T31743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.201897][T31743] CPU: 1 UID: 0 PID: 31743 Comm: syz.7.9134 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 981.201929][T31743] Tainted: [W]=WARN [ 981.201936][T31743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.201951][T31743] Call Trace: [ 981.201989][T31743] [ 981.201998][T31743] __dump_stack+0x1d/0x30 [ 981.202019][T31743] dump_stack_lvl+0xe8/0x140 [ 981.202039][T31743] dump_stack+0x15/0x1b [ 981.202070][T31743] should_fail_ex+0x265/0x280 [ 981.202091][T31743] should_fail+0xb/0x20 [ 981.202108][T31743] should_fail_usercopy+0x1a/0x20 [ 981.202127][T31743] _copy_from_user+0x1c/0xb0 [ 981.202150][T31743] __sys_bpf+0x178/0x7b0 [ 981.202189][T31743] __x64_sys_bpf+0x41/0x50 [ 981.202210][T31743] x64_sys_call+0x2aea/0x2ff0 [ 981.202237][T31743] do_syscall_64+0xd2/0x200 [ 981.202257][T31743] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 981.202287][T31743] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 981.202308][T31743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.202348][T31743] RIP: 0033:0x7f9c3f7cebe9 [ 981.202360][T31743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 981.202374][T31743] RSP: 002b:00007f9c3e237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 981.202393][T31743] RAX: ffffffffffffffda RBX: 00007f9c3f9f5fa0 RCX: 00007f9c3f7cebe9 [ 981.202407][T31743] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 0000000000000000 [ 981.202419][T31743] RBP: 00007f9c3e237090 R08: 0000000000000000 R09: 0000000000000000 [ 981.202499][T31743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.202512][T31743] R13: 00007f9c3f9f6038 R14: 00007f9c3f9f5fa0 R15: 00007ffe985a58d8 [ 981.202582][T31743] [ 981.422448][T31789] pim6reg: entered allmulticast mode [ 981.457978][T32063] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 981.644586][T32228] syzkaller0: entered promiscuous mode [ 981.650173][T32228] syzkaller0: entered allmulticast mode [ 981.706571][T32235] loop0: detected capacity change from 0 to 1024 [ 981.715134][T32237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9142'. [ 981.739673][T32237] netlink: 'syz.1.9142': attribute type 4 has an invalid length. [ 981.743572][T32235] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 981.758414][T32235] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 981.823941][T32245] netlink: 100 bytes leftover after parsing attributes in process `syz.5.9144'. [ 981.833633][T32235] JBD2: no valid journal superblock found [ 981.839368][T32235] EXT4-fs (loop0): Could not load journal inode [ 982.232000][T32258] loop0: detected capacity change from 0 to 512 [ 982.254775][T32258] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 982.282249][T32258] EXT4-fs (loop0): orphan cleanup on readonly fs [ 982.297824][T32258] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.9150: Block bitmap for bg 0 marked uninitialized [ 982.312199][T32258] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 982.321795][T32258] EXT4-fs (loop0): 1 orphan inode deleted [ 982.328041][T32258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 982.343311][T32258] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 982.363825][T32258] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 982.411836][T32258] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.505191][T32272] netlink: 'syz.0.9156': attribute type 4 has an invalid length. [ 982.526505][T32274] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 982.603158][T32278] netlink: 'syz.0.9158': attribute type 39 has an invalid length. [ 982.682620][T32292] siw: device registration error -23 [ 982.842021][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 982.842034][ T29] audit: type=1326 audit(1755037267.850:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32305 comm="syz.7.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 982.898185][ T29] audit: type=1326 audit(1755037267.890:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32305 comm="syz.7.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 982.921687][ T29] audit: type=1326 audit(1755037267.890:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32305 comm="syz.7.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 982.945219][ T29] audit: type=1326 audit(1755037267.890:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32305 comm="syz.7.9169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 983.034293][T32315] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 983.045819][ T29] audit: type=1326 audit(1755037268.060:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.5.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 983.117444][ T29] audit: type=1326 audit(1755037268.080:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.5.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 983.141153][ T29] audit: type=1326 audit(1755037268.080:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.5.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 983.164790][ T29] audit: type=1326 audit(1755037268.080:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.5.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 983.188283][ T29] audit: type=1326 audit(1755037268.090:2730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.5.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 983.211879][ T29] audit: type=1326 audit(1755037268.090:2731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32314 comm="syz.5.9172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 983.442263][T32345] loop0: detected capacity change from 0 to 512 [ 983.456982][T32345] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 983.490621][T32345] EXT4-fs (loop0): 1 truncate cleaned up [ 983.496632][T32345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 983.591206][T32362] siw: device registration error -23 [ 983.604741][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 983.821136][T32380] FAULT_INJECTION: forcing a failure. [ 983.821136][T32380] name failslab, interval 1, probability 0, space 0, times 0 [ 983.833821][T32380] CPU: 0 UID: 0 PID: 32380 Comm: syz.7.9182 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 983.833858][T32380] Tainted: [W]=WARN [ 983.833867][T32380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 983.833879][T32380] Call Trace: [ 983.833885][T32380] [ 983.833892][T32380] __dump_stack+0x1d/0x30 [ 983.833914][T32380] dump_stack_lvl+0xe8/0x140 [ 983.833930][T32380] dump_stack+0x15/0x1b [ 983.833947][T32380] should_fail_ex+0x265/0x280 [ 983.834023][T32380] should_failslab+0x8c/0xb0 [ 983.834076][T32380] kmem_cache_alloc_noprof+0x50/0x310 [ 983.834103][T32380] ? getname_flags+0x80/0x3b0 [ 983.834130][T32380] getname_flags+0x80/0x3b0 [ 983.834157][T32380] do_sys_openat2+0x60/0x110 [ 983.834265][T32380] __x64_sys_openat+0xf2/0x120 [ 983.834297][T32380] x64_sys_call+0x2e9c/0x2ff0 [ 983.834333][T32380] do_syscall_64+0xd2/0x200 [ 983.834359][T32380] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 983.834379][T32380] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 983.834404][T32380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.834480][T32380] RIP: 0033:0x7f9c3f7cd550 [ 983.834495][T32380] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 983.834511][T32380] RSP: 002b:00007f9c3e215f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 983.834529][T32380] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f9c3f7cd550 [ 983.834543][T32380] RDX: 0000000000000002 RSI: 00007f9c3e215fa0 RDI: 00000000ffffff9c [ 983.834557][T32380] RBP: 00007f9c3e215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 983.834630][T32380] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 983.834643][T32380] R13: 00007f9c3f9f6128 R14: 00007f9c3f9f6090 R15: 00007ffe985a58d8 [ 983.834663][T32380] [ 984.304905][T32397] __nla_validate_parse: 5 callbacks suppressed [ 984.304920][T32397] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9202'. [ 984.416300][T32408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9203'. [ 984.444119][T32399] netlink: 'syz.3.9203': attribute type 4 has an invalid length. [ 984.614363][T32418] siw: device registration error -23 [ 984.620222][T32417] siw: device registration error -23 [ 984.693496][T32407] FAULT_INJECTION: forcing a failure. [ 984.693496][T32407] name failslab, interval 1, probability 0, space 0, times 0 [ 984.706188][T32407] CPU: 1 UID: 0 PID: 32407 Comm: syz.1.9207 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 984.706259][T32407] Tainted: [W]=WARN [ 984.706293][T32407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 984.706304][T32407] Call Trace: [ 984.706309][T32407] [ 984.706317][T32407] __dump_stack+0x1d/0x30 [ 984.706339][T32407] dump_stack_lvl+0xe8/0x140 [ 984.706416][T32407] dump_stack+0x15/0x1b [ 984.706434][T32407] should_fail_ex+0x265/0x280 [ 984.706456][T32407] should_failslab+0x8c/0xb0 [ 984.706493][T32407] __kvmalloc_node_noprof+0x123/0x4e0 [ 984.706622][T32407] ? traverse+0x9d/0x3a0 [ 984.706650][T32407] ? __rcu_read_unlock+0x4f/0x70 [ 984.706673][T32407] traverse+0x9d/0x3a0 [ 984.706754][T32407] seq_lseek+0xb5/0x170 [ 984.706819][T32407] __x64_sys_lseek+0xe5/0x160 [ 984.706901][T32407] x64_sys_call+0x2814/0x2ff0 [ 984.706922][T32407] do_syscall_64+0xd2/0x200 [ 984.706947][T32407] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 984.706971][T32407] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 984.707013][T32407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.707034][T32407] RIP: 0033:0x7f506dd6ebe9 [ 984.707104][T32407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.707130][T32407] RSP: 002b:00007f506c7cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 984.707150][T32407] RAX: ffffffffffffffda RBX: 00007f506df95fa0 RCX: 00007f506dd6ebe9 [ 984.707164][T32407] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000004 [ 984.707177][T32407] RBP: 00007f506c7cf090 R08: 0000000000000000 R09: 0000000000000000 [ 984.707190][T32407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.707202][T32407] R13: 00007f506df96038 R14: 00007f506df95fa0 R15: 00007fff6453f898 [ 984.707249][T32407] [ 984.708765][T32420] loop0: detected capacity change from 0 to 512 [ 984.930070][T32420] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 984.993955][T32420] EXT4-fs (loop0): 1 truncate cleaned up [ 985.010194][T32420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 985.104966][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 985.230202][T32464] siw: device registration error -23 [ 985.472343][T32447] cgroup: fork rejected by pids controller in /syz7 [ 985.599898][T32543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9223'. [ 985.653545][T32566] netlink: 'syz.1.9223': attribute type 4 has an invalid length. [ 985.809289][T32601] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9226'. [ 985.871591][T32617] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 986.255536][T32719] netlink: 100 bytes leftover after parsing attributes in process `syz.0.9233'. [ 986.263587][T32718] siw: device registration error -23 [ 986.315214][T32722] siw: device registration error -23 [ 986.473224][T32727] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 986.678007][ T412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9242'. [ 986.737174][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9244'. [ 986.756927][ T441] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 987.626573][ T1196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9254'. [ 987.674965][ T1198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9255'. [ 987.684405][ T1198] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 987.728085][ T1204] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 987.839387][ T1216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9259'. [ 987.862978][ T1216] netlink: 'syz.1.9259': attribute type 4 has an invalid length. [ 987.910634][ T1218] loop0: detected capacity change from 0 to 512 [ 987.943193][ T1218] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 987.963306][ T1218] EXT4-fs (loop0): 1 truncate cleaned up [ 987.969302][ T1218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 988.003804][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 988.003856][ T29] audit: type=1326 audit(1755037273.010:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.033648][ T29] audit: type=1326 audit(1755037273.010:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.057105][ T29] audit: type=1326 audit(1755037273.010:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.080549][ T29] audit: type=1326 audit(1755037273.010:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.104060][ T29] audit: type=1326 audit(1755037273.010:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.127488][ T29] audit: type=1326 audit(1755037273.010:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.150871][ T29] audit: type=1326 audit(1755037273.010:2991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.174350][ T29] audit: type=1326 audit(1755037273.010:2992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.198814][ T29] audit: type=1326 audit(1755037273.140:2993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.199524][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 988.222267][ T29] audit: type=1326 audit(1755037273.140:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1224 comm="syz.7.9264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 988.257625][ T1230] siw: device registration error -23 [ 988.388182][ T1240] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 988.511523][ T1253] syzkaller0: entered promiscuous mode [ 988.517041][ T1253] syzkaller0: entered allmulticast mode [ 988.695696][ T1280] netlink: 'syz.3.9274': attribute type 4 has an invalid length. [ 988.746414][ T1284] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 988.881690][ T1287] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 989.240777][ T1304] lo speed is unknown, defaulting to 1000 [ 989.853587][ T1312] syzkaller0: entered promiscuous mode [ 989.859121][ T1312] syzkaller0: entered allmulticast mode [ 990.154278][ T1320] __nla_validate_parse: 6 callbacks suppressed [ 990.154294][ T1320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9289'. [ 990.293151][ T1329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9291'. [ 990.345691][ T1326] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 990.450007][ T1335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9294'. [ 990.854207][ T1349] syzkaller0: entered promiscuous mode [ 990.859880][ T1349] syzkaller0: entered allmulticast mode [ 990.945996][ T1359] netlink: 28 bytes leftover after parsing attributes in process `syz.7.9306'. [ 990.990482][ T1365] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9305'. [ 991.144045][ T1375] lo speed is unknown, defaulting to 1000 [ 992.758113][ T1399] syzkaller0: entered promiscuous mode [ 992.763675][ T1399] syzkaller0: entered allmulticast mode [ 993.143362][ T1449] syzkaller0: entered promiscuous mode [ 993.148919][ T1449] syzkaller0: entered allmulticast mode [ 993.173022][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 993.173034][ T29] audit: type=1326 audit(1755037278.180:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.203991][ T29] audit: type=1326 audit(1755037278.180:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.227488][ T29] audit: type=1326 audit(1755037278.180:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.228639][ T1459] FAULT_INJECTION: forcing a failure. [ 993.228639][ T1459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.251245][ T29] audit: type=1326 audit(1755037278.180:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1452 comm="syz.3.9343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.264136][ T1459] CPU: 0 UID: 0 PID: 1459 Comm: syz.7.9339 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 993.264167][ T1459] Tainted: [W]=WARN [ 993.264174][ T1459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 993.264186][ T1459] Call Trace: [ 993.264193][ T1459] [ 993.264201][ T1459] __dump_stack+0x1d/0x30 [ 993.264221][ T1459] dump_stack_lvl+0xe8/0x140 [ 993.264240][ T1459] dump_stack+0x15/0x1b [ 993.264269][ T1459] should_fail_ex+0x265/0x280 [ 993.264289][ T1459] should_fail+0xb/0x20 [ 993.264306][ T1459] should_fail_usercopy+0x1a/0x20 [ 993.264327][ T1459] _copy_from_user+0x1c/0xb0 [ 993.264419][ T1459] snd_seq_ioctl+0x127/0x2e0 [ 993.264447][ T1459] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 993.264470][ T1459] __se_sys_ioctl+0xcb/0x140 [ 993.264524][ T1459] __x64_sys_ioctl+0x43/0x50 [ 993.264568][ T1459] x64_sys_call+0x1816/0x2ff0 [ 993.264595][ T1459] do_syscall_64+0xd2/0x200 [ 993.264619][ T1459] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 993.264642][ T1459] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 993.264670][ T1459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.264691][ T1459] RIP: 0033:0x7f9c3f7cebe9 [ 993.264706][ T1459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 993.264723][ T1459] RSP: 002b:00007f9c3e1f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 993.264741][ T1459] RAX: ffffffffffffffda RBX: 00007f9c3f9f6180 RCX: 00007f9c3f7cebe9 [ 993.264754][ T1459] RDX: 0000200000000940 RSI: 00000000c0505350 RDI: 0000000000000003 [ 993.264766][ T1459] RBP: 00007f9c3e1f5090 R08: 0000000000000000 R09: 0000000000000000 [ 993.264790][ T1459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 993.264802][ T1459] R13: 00007f9c3f9f6218 R14: 00007f9c3f9f6180 R15: 00007ffe985a58d8 [ 993.264819][ T1459] [ 993.325658][ T1461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9346'. [ 993.326106][ T29] audit: type=1326 audit(1755037278.180:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1455 comm="syz.3.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.332565][ T1461] netlink: 'syz.0.9346': attribute type 4 has an invalid length. [ 993.334824][ T29] audit: type=1326 audit(1755037278.180:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1455 comm="syz.3.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.538190][ T29] audit: type=1326 audit(1755037278.180:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1455 comm="syz.3.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.562296][ T29] audit: type=1326 audit(1755037278.180:3166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1455 comm="syz.3.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.586143][ T29] audit: type=1326 audit(1755037278.180:3167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1455 comm="syz.3.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.609549][ T29] audit: type=1326 audit(1755037278.180:3168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1455 comm="syz.3.9344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 993.772696][ T1491] syzkaller0: entered promiscuous mode [ 993.778205][ T1491] syzkaller0: entered allmulticast mode [ 993.873463][ T1509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9363'. [ 993.882402][ T1509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9363'. [ 993.894302][ T1503] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9361'. [ 993.903989][ T1503] netlink: 'syz.7.9361': attribute type 4 has an invalid length. [ 993.952660][ T1514] loop0: detected capacity change from 0 to 512 [ 993.971741][ T1514] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 993.988354][ T1514] EXT4-fs (loop0): 1 truncate cleaned up [ 993.999876][ T1514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 994.068692][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.118615][ T1528] team0 (unregistering): Port device team_slave_0 removed [ 994.118619][ T1530] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9368'. [ 994.139638][ T1528] team0 (unregistering): Port device team_slave_1 removed [ 994.236032][ T1551] FAULT_INJECTION: forcing a failure. [ 994.236032][ T1551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 994.249303][ T1551] CPU: 0 UID: 0 PID: 1551 Comm: syz.3.9373 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 994.249337][ T1551] Tainted: [W]=WARN [ 994.249358][ T1551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 994.249398][ T1551] Call Trace: [ 994.249403][ T1551] [ 994.249409][ T1551] __dump_stack+0x1d/0x30 [ 994.249427][ T1551] dump_stack_lvl+0xe8/0x140 [ 994.249447][ T1551] dump_stack+0x15/0x1b [ 994.249463][ T1551] should_fail_ex+0x265/0x280 [ 994.249559][ T1551] should_fail+0xb/0x20 [ 994.249584][ T1551] should_fail_usercopy+0x1a/0x20 [ 994.249612][ T1551] _copy_from_user+0x1c/0xb0 [ 994.249637][ T1551] ___sys_sendmsg+0xc1/0x1d0 [ 994.249669][ T1551] __x64_sys_sendmsg+0xd4/0x160 [ 994.249697][ T1551] x64_sys_call+0x191e/0x2ff0 [ 994.249720][ T1551] do_syscall_64+0xd2/0x200 [ 994.249813][ T1551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 994.249835][ T1551] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 994.249941][ T1551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 994.249960][ T1551] RIP: 0033:0x7efd8b6aebe9 [ 994.249975][ T1551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 994.249993][ T1551] RSP: 002b:00007efd8a117038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 994.250012][ T1551] RAX: ffffffffffffffda RBX: 00007efd8b8d5fa0 RCX: 00007efd8b6aebe9 [ 994.250024][ T1551] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000003 [ 994.250083][ T1551] RBP: 00007efd8a117090 R08: 0000000000000000 R09: 0000000000000000 [ 994.250095][ T1551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 994.250106][ T1551] R13: 00007efd8b8d6038 R14: 00007efd8b8d5fa0 R15: 00007ffde212fbb8 [ 994.250123][ T1551] [ 994.688467][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.696181][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.703859][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.711533][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.719167][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.726819][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.734639][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.742299][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.750035][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.757716][ T10] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 994.790623][ T1562] lo speed is unknown, defaulting to 1000 [ 995.184288][ T10] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 995.316561][ T1589] fido_id[1589]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 995.361714][ T1590] __nla_validate_parse: 3 callbacks suppressed [ 995.361727][ T1590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9385'. [ 995.376857][ T1590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9385'. [ 995.448736][ T1613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9386'. [ 995.458190][ T1613] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 995.492741][ T1614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9389'. [ 995.505423][ T1605] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 995.630750][ T1631] siw: device registration error -23 [ 998.886818][ T1648] team0 (unregistering): Port device team_slave_0 removed [ 998.896261][ T1653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9402'. [ 998.905222][ T1653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9402'. [ 998.906387][ T1648] team0 (unregistering): Port device team_slave_1 removed [ 998.969676][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 998.969691][ T29] audit: type=1326 audit(1755037283.970:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.3.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 999.008415][ T1671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9407'. [ 999.019158][ T1665] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 999.036413][ T29] audit: type=1326 audit(1755037284.010:3305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.3.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 999.059927][ T29] audit: type=1326 audit(1755037284.010:3306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.3.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 999.083429][ T29] audit: type=1326 audit(1755037284.010:3307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1664 comm="syz.3.9408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd8b6aebe9 code=0x7ffc0000 [ 999.106891][ T29] audit: type=1326 audit(1755037284.040:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.5.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 999.130285][ T29] audit: type=1326 audit(1755037284.040:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.5.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 999.153791][ T29] audit: type=1326 audit(1755037284.040:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.5.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 999.177278][ T29] audit: type=1326 audit(1755037284.040:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.5.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 999.200689][ T29] audit: type=1326 audit(1755037284.040:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.5.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 999.224079][ T29] audit: type=1326 audit(1755037284.040:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1663 comm="syz.5.9407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fee87c7ebe9 code=0x7ffc0000 [ 999.747306][ T1686] loop0: detected capacity change from 0 to 256 [ 999.798322][ T1701] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9416'. [ 999.813997][ T1696] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 999.882259][ T1712] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9418'. [ 999.891600][ T1711] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9422'. [ 999.901763][ T1712] netlink: 'syz.5.9418': attribute type 4 has an invalid length. [ 1000.275712][ T1744] lo speed is unknown, defaulting to 1000 [ 1000.606410][ T1754] __nla_validate_parse: 1 callbacks suppressed [ 1000.606427][ T1754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9437'. [ 1000.621807][ T1754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9437'. [ 1001.671785][ T1775] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9446'. [ 1001.700221][ T1775] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1001.924885][ T1789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9451'. [ 1001.933864][ T1789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9451'. [ 1001.970433][ T1791] syzkaller0: entered promiscuous mode [ 1001.975957][ T1791] syzkaller0: entered allmulticast mode [ 1002.166496][ T1801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9454'. [ 1002.208336][ T1796] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 1002.604823][ T1812] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9460'. [ 1002.630194][ T1812] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 1002.694866][ T1823] syzkaller0: entered promiscuous mode [ 1002.700468][ T1823] syzkaller0: entered allmulticast mode [ 1002.761957][ T1832] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1002.940608][ T1838] lo speed is unknown, defaulting to 1000 [ 1003.893679][ T1843] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9471'. [ 1005.823972][ T1889] loop0: detected capacity change from 0 to 512 [ 1005.841224][ T1889] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1005.861736][ T1892] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9483'. [ 1005.910910][ T1889] EXT4-fs (loop0): 1 truncate cleaned up [ 1005.934489][ T1889] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.023371][ T1901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9486'. [ 1006.052275][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1006.074976][ T1900] netlink: 'syz.3.9486': attribute type 4 has an invalid length. [ 1007.419847][ T1929] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614) [ 1007.564972][ T1937] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9500'. [ 1007.580851][ T1937] RDS: rds_bind could not find a transport for ::ffff:172.30.1.8, load rds_tcp or rds_rdma? [ 1007.612886][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 1007.612899][ T29] audit: type=1326 audit(1755037292.620:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.661317][ T29] audit: type=1326 audit(1755037292.650:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.684845][ T29] audit: type=1326 audit(1755037292.650:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.708249][ T29] audit: type=1326 audit(1755037292.650:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.731682][ T29] audit: type=1326 audit(1755037292.660:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.755074][ T29] audit: type=1326 audit(1755037292.660:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.778502][ T29] audit: type=1326 audit(1755037292.660:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.801859][ T29] audit: type=1326 audit(1755037292.660:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.825399][ T29] audit: type=1326 audit(1755037292.660:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.848856][ T29] audit: type=1326 audit(1755037292.660:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1935 comm="syz.7.9500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3f7cebe9 code=0x7ffc0000 [ 1007.882860][ T1949] siw: device registration error -23 [ 1007.987412][ T1951] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9502'. [ 1008.089821][ T1951] netlink: 'syz.5.9502': attribute type 4 has an invalid length. [ 1009.151389][ T1957] netlink: 100 bytes leftover after parsing attributes in process `syz.1.9506'. [ 1009.166608][ T1964] lo speed is unknown, defaulting to 1000 [ 1009.183558][ T1969] loop0: detected capacity change from 0 to 512 [ 1009.242345][ T1969] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 1009.255433][ T1969] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1009.265193][ T1969] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.9507: corrupted inode contents [ 1009.277362][ T1969] EXT4-fs (loop0): Remounting filesystem read-only [ 1009.284005][ T1969] EXT4-fs (loop0): 1 truncate cleaned up [ 1009.289914][ T4966] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1009.300585][ T4966] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 1009.311778][ T4966] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 1009.322713][ T1969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1009.399056][ T3493] hid_parser_main: 22 callbacks suppressed [ 1009.399074][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.412961][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.420773][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.428458][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.436206][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.443923][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.451719][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.459409][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.467095][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.474925][ T3493] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 1009.576815][ T3493] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 1010.501918][ T1999] FAULT_INJECTION: forcing a failure. [ 1010.501918][ T1999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.515049][ T1999] CPU: 0 UID: 0 PID: 1999 Comm: syz.1.9516 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 1010.515107][ T1999] Tainted: [W]=WARN [ 1010.515112][ T1999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1010.515125][ T1999] Call Trace: [ 1010.515133][ T1999] [ 1010.515141][ T1999] __dump_stack+0x1d/0x30 [ 1010.515165][ T1999] dump_stack_lvl+0xe8/0x140 [ 1010.515258][ T1999] dump_stack+0x15/0x1b [ 1010.515313][ T1999] should_fail_ex+0x265/0x280 [ 1010.515333][ T1999] should_fail+0xb/0x20 [ 1010.515351][ T1999] should_fail_usercopy+0x1a/0x20 [ 1010.515445][ T1999] _copy_from_user+0x1c/0xb0 [ 1010.515472][ T1999] ___sys_sendmsg+0xc1/0x1d0 [ 1010.515555][ T1999] __x64_sys_sendmsg+0xd4/0x160 [ 1010.515582][ T1999] x64_sys_call+0x191e/0x2ff0 [ 1010.515664][ T1999] do_syscall_64+0xd2/0x200 [ 1010.515685][ T1999] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1010.515755][ T1999] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1010.515806][ T1999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.515824][ T1999] RIP: 0033:0x7f506dd6ebe9 [ 1010.515837][ T1999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.515853][ T1999] RSP: 002b:00007f506c78d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1010.515882][ T1999] RAX: ffffffffffffffda RBX: 00007f506df96180 RCX: 00007f506dd6ebe9 [ 1010.515896][ T1999] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000007 [ 1010.515910][ T1999] RBP: 00007f506c78d090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.515923][ T1999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.515937][ T1999] R13: 00007f506df96218 R14: 00007f506df96180 R15: 00007fff6453f898 [ 1010.515962][ T1999] [ 1010.817266][ T2002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9519'. [ 1010.895922][ T1996] fido_id[1996]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1010.966533][T29144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.051435][ T2020] netlink: 100 bytes leftover after parsing attributes in process `syz.3.9526'. [ 1011.422776][ T2042] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=2042 comm=syz.7.9531 [ 1011.478179][ T2047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9532'. [ 1011.487759][ T2047] netlink: 'syz.7.9532': attribute type 4 has an invalid length. [ 1011.648413][ T2051] loop0: detected capacity change from 0 to 256 [ 1011.805813][ T2052] ================================================================== [ 1011.813914][ T2052] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 1011.820856][ T2052] [ 1011.823173][ T2052] read-write to 0xffff8881190574ec of 4 bytes by task 2050 on cpu 0: [ 1011.831220][ T2052] fifo_open+0x86/0x5d0 [ 1011.835367][ T2052] do_dentry_open+0x646/0xa20 [ 1011.840038][ T2052] vfs_open+0x37/0x1e0 [ 1011.844101][ T2052] path_openat+0x1c5e/0x2170 [ 1011.848678][ T2052] do_filp_open+0x109/0x230 [ 1011.853164][ T2052] do_sys_openat2+0xa6/0x110 [ 1011.857759][ T2052] __x64_sys_openat+0xf2/0x120 [ 1011.862519][ T2052] x64_sys_call+0x2e9c/0x2ff0 [ 1011.867185][ T2052] do_syscall_64+0xd2/0x200 [ 1011.871690][ T2052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.877573][ T2052] [ 1011.879883][ T2052] read to 0xffff8881190574ec of 4 bytes by task 2052 on cpu 1: [ 1011.887409][ T2052] wait_for_partner+0xb5/0x1c0 [ 1011.892161][ T2052] fifo_open+0x462/0x5d0 [ 1011.896393][ T2052] do_dentry_open+0x646/0xa20 [ 1011.901067][ T2052] vfs_open+0x37/0x1e0 [ 1011.905125][ T2052] path_openat+0x1c5e/0x2170 [ 1011.909701][ T2052] do_filp_open+0x109/0x230 [ 1011.914186][ T2052] do_sys_openat2+0xa6/0x110 [ 1011.918772][ T2052] __x64_sys_open+0xe6/0x110 [ 1011.923360][ T2052] x64_sys_call+0x1457/0x2ff0 [ 1011.928030][ T2052] do_syscall_64+0xd2/0x200 [ 1011.932529][ T2052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.938411][ T2052] [ 1011.940716][ T2052] value changed: 0x00000001 -> 0x00000002 [ 1011.946416][ T2052] [ 1011.948721][ T2052] Reported by Kernel Concurrency Sanitizer on: [ 1011.954860][ T2052] CPU: 1 UID: 0 PID: 2052 Comm: syz.7.9533 Tainted: G W 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 1011.968827][ T2052] Tainted: [W]=WARN [ 1011.972615][ T2052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1011.982657][ T2052] ==================================================================