last executing test programs: 9m36.915842043s ago: executing program 2 (id=1209): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (fail_nth: 5) 9m36.622824958s ago: executing program 2 (id=1210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) 9m36.622053558s ago: executing program 2 (id=1211): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x20000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000eeb000/0x4000)=nil, 0x3) 9m36.50728099s ago: executing program 2 (id=1212): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) (async) fcntl$dupfd(r0, 0x0, r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x2}, 0x18) (async) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) (async) 9m36.47524676s ago: executing program 2 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000000280)=""/64}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 9m36.263036694s ago: executing program 2 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) 9m36.262765534s ago: executing program 32 (id=1215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x1}) 3.493633602s ago: executing program 1 (id=10453): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000040), 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 3.474678552s ago: executing program 1 (id=10454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 3.434673433s ago: executing program 1 (id=10456): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r0}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x200}, {0x8e1d, 0x1, 0x8, 0x7ff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c000000"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0x4}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2.991038471s ago: executing program 3 (id=10466): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r2}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) 2.955170091s ago: executing program 3 (id=10468): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1608, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x40, 0x2}, 0x0, 0xffffffffffffffff, 0x40000000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000040000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa40}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r4, 0x2, &(0x7f00000007c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0xd, r3, &(0x7f0000000700)="c7828103709b", 0x6}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) utimes(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdf8bd000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) read(0xffffffffffffffff, &(0x7f0000001300)=""/4096, 0x1000) 2.953097722s ago: executing program 0 (id=10469): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x2, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x3, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0xffffff8d, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r5 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) 2.760357695s ago: executing program 0 (id=10470): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffc}, 0xc) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x2, 0x2) 2.743067795s ago: executing program 0 (id=10471): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0xa, 0x3, 0x73) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_usbip_server_init(0xaa7f3cec63cbb9d) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2, 0x0, 0x7f}) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) 2.466881099s ago: executing program 1 (id=10472): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7fff000a}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_usb_connect(0x0, 0x41, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 1.87069668s ago: executing program 4 (id=10475): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x1, @perf_bp={0x0, 0xd}, 0xc1a8, 0x10000, 0x6, 0x1, 0x31c, 0x20005, 0x0, 0x0, 0x408000, 0x0, 0xffffffffffffff7f}, 0x0, 0x107, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) unshare(0x6a040000) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 1.85754193s ago: executing program 3 (id=10476): r0 = add_key$keyring(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="564dd89938e60d9a58b8518379fc640b02ea8a2501fd704c413ace1e9677c491345323d2aea5965ace87e3a6a1f0e72a0aa3e902b41b600971ef375cab55632b88117ca3ebdf85af27caac02122e2d0a0494a7f788c80e68bbffa05ee79bb53555d53794fffb090bd98d017009d6722a3430106ea8a82ababfd1b8afc40cca3a46e751f78ddba3eb048e0976d96f4b88f218cd480cc6fbd0de2a933680c10a731abd8c02d1526f6aa9e3ca8c68bf174db93c1a8f82f3e99238a5943b68e64854497c8d51d41f6ea356e53b4d4a68f5f0ae530a1976ec4bcea7eaa9c6571a283f0187c641c8c2b3791ecd7266836717980c33a6", 0xf3, r0) 1.84370246s ago: executing program 3 (id=10477): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000040), 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.802526591s ago: executing program 3 (id=10479): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'pim6reg0\x00', 0x2000}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$eJzs3Mtv3MQfAPCvvXn0nfz6K48+oIGCiCgkTVqgByQEAqkXJCQ4wDGkoSpNW9QEiVYVbREqR8RfAByR+As4wQUBJxBXuCOkCvXSwgEtstdOnGwatptuNnQ/H8mbGXtsz3g88diz3gB61kj2kURsi4hfImKoEa0kGMwTZeluXr84/ef1i9NJ1Ouv/jGYp7tx/eJ0mbRcb2sRGU0j0g+T2LvCfufOXzg1NTs7c66Ij8+ffmd87vyFJ0+enjoxc2LmzOTRo0cOTzzz9ORTd6ScWblu7Hn/7L7dx9745OXperz5/ZdZfrcVy6vlaBhe8z5HYiTq9Xo9XTJ3IP98dM1b31i2R8SVIpz0dTkztKwWEVl19eftfyhqsVh5Q/HSB13NHNBR2fVpsGlurfFnIJJs+aZKWuBukmjX0KPKK352/1tO69b52ACuPZ99zuTlv1lMjSV9kd23J8ONO/Zah/a/LSJev/zXp9kUKz6HAAC4s77O+j9PrNT/S+PeSrodxRjKcEQcjIidEfH/iNgVEfdE5Gnvi4j7b3P/+fjTlcV4c//np81tF64FWf/v2WJsa2n/b2HUZrhWxLbn5e9P3jo5O3OoOCaj0T+YxSdW2cc3L/788a2WjVT6f9mU7b/sCxb5+L1v2QO641PzU2spc9W1KxF7+lYqf7IwEpBExO6I2NPG9rNjdvLxL/Zl4R1bm5f/e/lXc7mNHC1V/zzisUb9X45l5S8ljSGSW41Pjm+K2ZlD4+VZ0eyHH6++Uo33V8JrK//aZfW/ZcXzvyh/2QzK8dq5Fjc8sBi8+utHxTabm3K75/9A8tqS3bw3NT9/biJiYCia508urlvGy/RZ+UcPRFwtBoKr7X9nxN+fFevtjYjsJH4gIh6MiP1F3h+KiIcj4sAqh+K7Fx55e/WD1d36P75a/UcMJ9Xx+jYCtVPfflVubKEqi38urdX/kTw0Wsxp5f9fqxm8E8cQAAAANro0H4NO0rGFcJqOjTW+w78rtqSzZ+fmD47Eu2eON8aqh6M/LZ90DVWeh04Uz4bL+OSy+OGI+F/+TaPNeXxs+uzs9m4XHnrc1lu0/80R8VunvvQCbBy39b5W0rl8AOsqf7fH+5rQu1pu//2dzQew/lz/oXdp/9C7Vmr/lyJudiErwDq7rev/c53LB7D+Vmv/HvnB3c39P/Qu7R96UvMr8eVvNLTzpv9iYOexNa3eQ4Fah7Yc1R/t6EAg0q4fuvYD6UbIxv4iMBgRra51qaN1uvz8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+O/7JwAA///M09j9") syz_open_procfs(0x0, 0x0) umount2(0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r6}, 0x20) unshare(0x64000600) 1.724933422s ago: executing program 4 (id=10480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) 1.623419704s ago: executing program 4 (id=10481): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x2, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x0, 0x0, 0x3, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0xffffff8d, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r5 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 1.377650338s ago: executing program 1 (id=10483): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, 0x0, 0x0, 0x7b997c24170cb9b4, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f0000000200), &(0x7f0000000500)}, 0x20) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="00000000f42228169cf2a3850000000000000000", @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) unshare(0x2040400) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) 1.301630169s ago: executing program 4 (id=10484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 1.120262422s ago: executing program 4 (id=10485): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='generic_add_lease\x00', r0}, 0x18) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x3, 0x0, 0x0, 0x200}, {0x8e1d, 0x1, 0x8, 0x7ff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x8000, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x1221, &(0x7f0000002300)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x0, 0x4}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 1.112421222s ago: executing program 0 (id=10486): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000001c0)=0x100, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x1000000, r2}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x800086, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 1.068094293s ago: executing program 5 (id=10488): unshare(0x64000600) 1.001273224s ago: executing program 5 (id=10489): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000040), 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 980.679464ms ago: executing program 5 (id=10490): r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r0, r1, 0x0) 970.651355ms ago: executing program 5 (id=10491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) 935.875675ms ago: executing program 5 (id=10492): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x80000001}, 0x10}, 0x94) lseek(r0, 0x0, 0x1) 935.171615ms ago: executing program 5 (id=10493): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, 0x0, 0x0, 0x7b997c24170cb9b4, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a", 0x37, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) 895.795776ms ago: executing program 3 (id=10494): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto(r0, 0x0, 0x0, 0x7b997c24170cb9b4, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a", 0x37, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, 0x0, 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x400, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="00000000f42228169cf2", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00fe7d1830daa688de001dfd99d53e5090bd0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_clone(0x20000000, &(0x7f0000001040)="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", 0x1000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000001c0)="57156587095867f239687b952a8906492ea8f6be83a79fe1e88ade49356be93fc9e1f868197990609f3872c647e26faec0dcbee9f789") openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x8, 0xc, 0x2, 0x2}, {0x7fff, 0x0, 0x0, 0x1}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f00000003c0)=0x800001, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) 510.826112ms ago: executing program 1 (id=10495): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'pim6reg0\x00', 0x2000}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}]}, 0x28}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000401, &(0x7f0000000100)={[{@user_xattr}, {@data_err_ignore}, {@noblock_validity}]}, 0x84, 0x49e, &(0x7f0000000bc0)="$eJzs3Mtv3MQfAPCvvXn0nfz6K48+oIGCiCgkTVqgByQEAqkXJCQ4wDGkoSpNW9QEiVYVbREqR8RfAByR+As4wQUBJxBXuCOkCvXSwgEtstdOnGwatptuNnQ/H8mbGXtsz3g88diz3gB61kj2kURsi4hfImKoEa0kGMwTZeluXr84/ef1i9NJ1Ouv/jGYp7tx/eJ0mbRcb2sRGU0j0g+T2LvCfufOXzg1NTs7c66Ij8+ffmd87vyFJ0+enjoxc2LmzOTRo0cOTzzz9ORTd6ScWblu7Hn/7L7dx9745OXperz5/ZdZfrcVy6vlaBhe8z5HYiTq9Xo9XTJ3IP98dM1b31i2R8SVIpz0dTkztKwWEVl19eftfyhqsVh5Q/HSB13NHNBR2fVpsGlurfFnIJJs+aZKWuBukmjX0KPKK352/1tO69b52ACuPZ99zuTlv1lMjSV9kd23J8ONO/Zah/a/LSJev/zXp9kUKz6HAAC4s77O+j9PrNT/S+PeSrodxRjKcEQcjIidEfH/iNgVEfdE5Gnvi4j7b3P/+fjTlcV4c//np81tF64FWf/v2WJsa2n/b2HUZrhWxLbn5e9P3jo5O3OoOCaj0T+YxSdW2cc3L/788a2WjVT6f9mU7b/sCxb5+L1v2QO641PzU2spc9W1KxF7+lYqf7IwEpBExO6I2NPG9rNjdvLxL/Zl4R1bm5f/e/lXc7mNHC1V/zzisUb9X45l5S8ljSGSW41Pjm+K2ZlD4+VZ0eyHH6++Uo33V8JrK//aZfW/ZcXzvyh/2QzK8dq5Fjc8sBi8+utHxTabm3K75/9A8tqS3bw3NT9/biJiYCia508urlvGy/RZ+UcPRFwtBoKr7X9nxN+fFevtjYjsJH4gIh6MiP1F3h+KiIcj4sAqh+K7Fx55e/WD1d36P75a/UcMJ9Xx+jYCtVPfflVubKEqi38urdX/kTw0Wsxp5f9fqxm8E8cQAAAANro0H4NO0rGFcJqOjTW+w78rtqSzZ+fmD47Eu2eON8aqh6M/LZ90DVWeh04Uz4bL+OSy+OGI+F/+TaPNeXxs+uzs9m4XHnrc1lu0/80R8VunvvQCbBy39b5W0rl8AOsqf7fH+5rQu1pu//2dzQew/lz/oXdp/9C7Vmr/lyJudiErwDq7rev/c53LB7D+Vmv/HvnB3c39P/Qu7R96UvMr8eVvNLTzpv9iYOexNa3eQ4Fah7Yc1R/t6EAg0q4fuvYD6UbIxv4iMBgRra51qaN1uvz8AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+O/7JwAA///M09j9") syz_open_procfs(0x0, 0x0) umount2(0x0, 0x5) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r5}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r6}, 0x20) unshare(0x64000600) 218.872357ms ago: executing program 0 (id=10496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) 210.828267ms ago: executing program 4 (id=10497): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) personality(0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='cachefiles_prep_read\x00', r1, 0x0, 0x3}, 0x18) unshare(0x2040400) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2020200) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) open_tree(r4, &(0x7f0000000240)='./file0\x00', 0x8000) r5 = fsmount(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @remote}, 0x14) umount2(&(0x7f0000000100)='./file0\x00', 0x4) sendmmsg$sock(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r5, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000000000001000000000000000000000c00000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000d689730a70621f8927b5490d15c02b171d06216f647aa9a084d48da10ec41a9c21fd03913abdc7d50f47a340411cfd46ceff962b78f14f6fb10818077622875132e1a2fd4ea6b0d4a6f872a643b5fb6eb54046c8a0dc6917f18eedc55a365037775eb6f065dec32fe055bf99e0a8ba1ed42e2f1c38a9d54084ea81b12ea6667f23c330c47a0adc9ff73bbf4316c601ba9760c36d0569e5e9bb5fad347c3b28e849bc77f12105ab5720e574e4eac4c5365fddb91b61470c0cea7346723e3df6b3e8", @ANYRES32=r8, @ANYRES32=r5], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) 0s ago: executing program 0 (id=10498): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='cachefiles_prep_read\x00', r1, 0x0, 0x3}, 0x18) unshare(0x2020200) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20004874) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000000001000000000000000000000c00000000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x4000, 0x1, 0x1d6}) kernel console output (not intermixed with test programs): evsim1 netdevsim2: renamed from eth2 [ 597.280532][T31624] SELinux: failed to load policy [ 597.287749][T31567] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 597.341460][T31567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.354680][T31567] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.364402][ T4889] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.371568][ T4889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.391307][ T4889] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.398451][ T4889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.472897][T31567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 597.544564][T31567] veth0_vlan: entered promiscuous mode [ 597.555469][T31567] veth1_vlan: entered promiscuous mode [ 597.579467][T31567] veth0_macvtap: entered promiscuous mode [ 597.586704][T31567] veth1_macvtap: entered promiscuous mode [ 597.597742][T31567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 597.608746][T31567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 597.618240][T31567] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.627056][T31567] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.635786][T31567] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.644598][T31567] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 598.486337][T31670] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9508'. [ 598.495919][T31670] netlink: 'syz.5.9508': attribute type 2 has an invalid length. [ 598.503738][T31670] netlink: 'syz.5.9508': attribute type 2 has an invalid length. [ 598.511662][T31670] netlink: 'syz.5.9508': attribute type 1 has an invalid length. [ 598.519534][T31670] netlink: 'syz.5.9508': attribute type 1 has an invalid length. [ 599.026589][T31681] tipc: Started in network mode [ 599.031505][T31681] tipc: Node identity ac14140f, cluster identity 4711 [ 599.038578][T31681] tipc: New replicast peer: 0.0.255.255 [ 599.044234][T31681] tipc: Enabled bearer , priority 10 [ 599.285707][T31686] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 599.299345][T31688] FAULT_INJECTION: forcing a failure. [ 599.299345][T31688] name failslab, interval 1, probability 0, space 0, times 0 [ 599.312008][T31688] CPU: 1 UID: 0 PID: 31688 Comm: syz.5.9516 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 599.312033][T31688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.312042][T31688] Call Trace: [ 599.312047][T31688] [ 599.312054][T31688] __dump_stack+0x1d/0x30 [ 599.312073][T31688] dump_stack_lvl+0xe8/0x140 [ 599.312089][T31688] dump_stack+0x15/0x1b [ 599.312103][T31688] should_fail_ex+0x265/0x280 [ 599.312126][T31688] should_failslab+0x8c/0xb0 [ 599.312144][T31688] kmem_cache_alloc_noprof+0x50/0x310 [ 599.312165][T31688] ? __mpol_dup+0x42/0x1b0 [ 599.312189][T31688] __mpol_dup+0x42/0x1b0 [ 599.312213][T31688] vma_dup_policy+0x29/0x70 [ 599.312238][T31688] __split_vma+0x266/0x650 [ 599.312260][T31688] ? mntput+0x4b/0x80 [ 599.312279][T31688] ? terminate_walk+0x27f/0x2a0 [ 599.312297][T31688] vms_gather_munmap_vmas+0x172/0x7a0 [ 599.312313][T31688] ? _parse_integer_limit+0x170/0x190 [ 599.312335][T31688] ? _parse_integer+0x27/0x40 [ 599.312359][T31688] do_vmi_align_munmap+0x1a4/0x3d0 [ 599.312390][T31688] do_vmi_munmap+0x1db/0x220 [ 599.312411][T31688] __vm_munmap+0x1a1/0x280 [ 599.312433][T31688] __x64_sys_munmap+0x36/0x50 [ 599.312448][T31688] x64_sys_call+0xa65/0x2fb0 [ 599.312464][T31688] do_syscall_64+0xd2/0x200 [ 599.312479][T31688] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 599.312503][T31688] ? clear_bhb_loop+0x40/0x90 [ 599.312523][T31688] ? clear_bhb_loop+0x40/0x90 [ 599.312540][T31688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.312559][T31688] RIP: 0033:0x7fa111f1e9a9 [ 599.312574][T31688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.312591][T31688] RSP: 002b:00007fa11057f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 599.312607][T31688] RAX: ffffffffffffffda RBX: 00007fa112145fa0 RCX: 00007fa111f1e9a9 [ 599.312617][T31688] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 00002000003fe000 [ 599.312627][T31688] RBP: 00007fa11057f090 R08: 0000000000000000 R09: 0000000000000000 [ 599.312637][T31688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.312647][T31688] R13: 0000000000000000 R14: 00007fa112145fa0 R15: 00007fffa3602588 [ 599.312680][T31688] [ 599.356955][T31694] lo speed is unknown, defaulting to 1000 [ 599.418073][T31696] hub 6-0:1.0: USB hub found [ 599.561150][T31696] hub 6-0:1.0: 8 ports detected [ 599.606460][T31700] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9521'. [ 599.643536][T31702] FAULT_INJECTION: forcing a failure. [ 599.643536][T31702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 599.656718][T31702] CPU: 0 UID: 0 PID: 31702 Comm: syz.5.9522 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 599.656745][T31702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 599.656757][T31702] Call Trace: [ 599.656765][T31702] [ 599.656773][T31702] __dump_stack+0x1d/0x30 [ 599.656798][T31702] dump_stack_lvl+0xe8/0x140 [ 599.656814][T31702] dump_stack+0x15/0x1b [ 599.656830][T31702] should_fail_ex+0x265/0x280 [ 599.656936][T31702] should_fail+0xb/0x20 [ 599.656962][T31702] should_fail_usercopy+0x1a/0x20 [ 599.657020][T31702] _copy_from_user+0x1c/0xb0 [ 599.657037][T31702] copy_from_sockptr_offset+0x66/0xa0 [ 599.657062][T31702] do_ipt_set_ctl+0x5c8/0x820 [ 599.657182][T31702] nf_setsockopt+0x196/0x1b0 [ 599.657203][T31702] ip_setsockopt+0x102/0x110 [ 599.657227][T31702] udp_setsockopt+0x99/0xb0 [ 599.657253][T31702] sock_common_setsockopt+0x69/0x80 [ 599.657351][T31702] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 599.657444][T31702] __sys_setsockopt+0x184/0x200 [ 599.657494][T31702] __x64_sys_setsockopt+0x64/0x80 [ 599.657540][T31702] x64_sys_call+0x2bd5/0x2fb0 [ 599.657558][T31702] do_syscall_64+0xd2/0x200 [ 599.657578][T31702] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 599.657604][T31702] ? clear_bhb_loop+0x40/0x90 [ 599.657623][T31702] ? clear_bhb_loop+0x40/0x90 [ 599.657707][T31702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.657727][T31702] RIP: 0033:0x7fa111f1e9a9 [ 599.657743][T31702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.657760][T31702] RSP: 002b:00007fa11057f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 599.657777][T31702] RAX: ffffffffffffffda RBX: 00007fa112145fa0 RCX: 00007fa111f1e9a9 [ 599.657802][T31702] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 599.657812][T31702] RBP: 00007fa11057f090 R08: 0000000000000310 R09: 0000000000000000 [ 599.657823][T31702] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000001 [ 599.657837][T31702] R13: 0000000000000000 R14: 00007fa112145fa0 R15: 00007fffa3602588 [ 599.657858][T31702] [ 599.880085][T31704] loop0: detected capacity change from 0 to 1024 [ 599.902172][T31704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 599.953371][T31704] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.9523: Allocating blocks 449-513 which overlap fs metadata [ 599.990066][T31704] EXT4-fs (loop0): Remounting filesystem read-only [ 600.011767][T31703] EXT4-fs (loop0): pa ffff888106e5f1c0: logic 48, phys. 177, len 21 [ 600.032125][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 600.065969][T31715] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9527'. [ 600.148614][ T3386] tipc: Node number set to 2886997007 [ 600.196322][T31713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9525'. [ 600.264900][T31729] hub 6-0:1.0: USB hub found [ 600.269788][T31729] hub 6-0:1.0: 8 ports detected [ 600.504247][T31733] lo speed is unknown, defaulting to 1000 [ 600.510058][T31733] lo speed is unknown, defaulting to 1000 [ 600.515970][T31733] lo speed is unknown, defaulting to 1000 [ 600.522512][T31733] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 600.534121][T31733] lo speed is unknown, defaulting to 1000 [ 600.540340][T31733] lo speed is unknown, defaulting to 1000 [ 600.546456][T31733] lo speed is unknown, defaulting to 1000 [ 600.552447][T31733] lo speed is unknown, defaulting to 1000 [ 600.558492][T31733] lo speed is unknown, defaulting to 1000 [ 600.578307][T31733] lo speed is unknown, defaulting to 1000 [ 600.584449][T31733] lo speed is unknown, defaulting to 1000 [ 600.884228][T31740] lo speed is unknown, defaulting to 1000 [ 600.890421][T31740] lo speed is unknown, defaulting to 1000 [ 600.917188][T31741] xt_CT: No such helper "pptp" [ 600.937939][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 600.937955][ T29] audit: type=1326 audit(1842429538.649:102312): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.1.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 600.968860][ T29] audit: type=1326 audit(1842429538.649:102313): auid=4294967295 uid=0 gid=4294967040 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31737 comm="syz.1.9534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 601.133709][T31749] netlink: 'syz.5.9538': attribute type 4 has an invalid length. [ 601.145875][ T3386] lo speed is unknown, defaulting to 1000 [ 601.151696][ T3386] syz0: Port: 1 Link DOWN [ 601.244596][T31753] lo speed is unknown, defaulting to 1000 [ 601.250965][T31753] lo speed is unknown, defaulting to 1000 [ 601.343948][T31749] netlink: 'syz.5.9538': attribute type 4 has an invalid length. [ 601.352591][T31750] 9pnet_fd: Insufficient options for proto=fd [ 601.489992][ T36] lo speed is unknown, defaulting to 1000 [ 601.495853][ T36] syz0: Port: 1 Link ACTIVE [ 601.635499][ T29] audit: type=1326 audit(1842429539.326:102314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7139c5967 code=0x7ffc0000 [ 601.659230][ T29] audit: type=1326 audit(1842429539.326:102315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa71396ab89 code=0x7ffc0000 [ 601.663106][T31756] SELinux: ebitmap: truncated map [ 601.690403][ T29] audit: type=1326 audit(1842429539.385:102316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 601.698460][T31756] SELinux: failed to load policy [ 601.714266][ T29] audit: type=1326 audit(1842429539.385:102317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7139c5967 code=0x7ffc0000 [ 601.742735][ T29] audit: type=1326 audit(1842429539.385:102318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa71396ab89 code=0x7ffc0000 [ 601.766517][ T29] audit: type=1326 audit(1842429539.385:102319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7139c5967 code=0x7ffc0000 [ 601.790104][ T29] audit: type=1326 audit(1842429539.385:102320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa71396ab89 code=0x7ffc0000 [ 601.813715][ T29] audit: type=1326 audit(1842429539.385:102321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31764 comm="syz.0.9544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa7139c5967 code=0x7ffc0000 [ 601.989699][T31780] lo speed is unknown, defaulting to 1000 [ 601.999194][T31780] lo speed is unknown, defaulting to 1000 [ 602.122740][T31786] netlink: 'syz.4.9550': attribute type 10 has an invalid length. [ 602.141913][T31786] batman_adv: batadv0: Adding interface: netdevsim1 [ 602.148596][T31786] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 602.174325][T31786] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 602.239162][T31790] siw: device registration error -23 [ 602.845732][T31810] SELinux: ebitmap: truncated map [ 602.905522][T31810] SELinux: failed to load policy [ 603.057054][T31814] hub 6-0:1.0: USB hub found [ 603.064044][T31814] hub 6-0:1.0: 8 ports detected [ 603.340777][T31819] hub 6-0:1.0: USB hub found [ 603.345521][T31819] hub 6-0:1.0: 8 ports detected [ 604.240073][T31840] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9572'. [ 604.415565][T31858] netlink: 'syz.5.9579': attribute type 4 has an invalid length. [ 604.427300][ T3386] lo speed is unknown, defaulting to 1000 [ 604.433104][ T3386] syz0: Port: 1 Link DOWN [ 604.436655][T31858] netlink: 'syz.5.9579': attribute type 4 has an invalid length. [ 604.440470][T31860] siw: device registration error -23 [ 604.452827][ T23] lo speed is unknown, defaulting to 1000 [ 604.458615][ T23] syz0: Port: 1 Link ACTIVE [ 604.531665][T31854] SELinux: ebitmap: truncated map [ 604.540037][T31854] SELinux: failed to load policy [ 604.548207][T31872] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9585'. [ 604.866113][T31887] lo speed is unknown, defaulting to 1000 [ 604.872473][T31887] lo speed is unknown, defaulting to 1000 [ 605.275342][T31891] netlink: 'syz.3.9592': attribute type 4 has an invalid length. [ 605.285989][T31891] netlink: 'syz.3.9592': attribute type 4 has an invalid length. [ 605.324335][T31895] netlink: 'syz.3.9594': attribute type 4 has an invalid length. [ 605.334739][T31895] netlink: 'syz.3.9594': attribute type 4 has an invalid length. [ 605.459680][T31901] SELinux: ebitmap: truncated map [ 605.466281][T31901] SELinux: failed to load policy [ 605.618598][T31920] netlink: 'syz.1.9606': attribute type 4 has an invalid length. [ 605.638830][T31920] netlink: 'syz.1.9606': attribute type 4 has an invalid length. [ 606.030466][ T29] kauditd_printk_skb: 1394 callbacks suppressed [ 606.030481][ T29] audit: type=1326 audit(1842429543.656:103716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 606.099018][ T29] audit: type=1326 audit(1842429543.685:103717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 606.122797][ T29] audit: type=1326 audit(1842429543.685:103718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 606.146613][ T29] audit: type=1326 audit(1842429543.685:103719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 606.170463][ T29] audit: type=1326 audit(1842429543.685:103720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 606.194179][ T29] audit: type=1326 audit(1842429543.695:103721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 606.217962][ T29] audit: type=1326 audit(1842429543.695:103722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 606.241653][ T29] audit: type=1326 audit(1842429543.695:103723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 606.248686][T31934] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9609'. [ 606.265409][ T29] audit: type=1326 audit(1842429543.715:103724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 606.298020][ T29] audit: type=1326 audit(1842429543.715:103725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31924 comm="syz.1.9608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 606.339624][T31946] lo speed is unknown, defaulting to 1000 [ 606.345871][T31946] lo speed is unknown, defaulting to 1000 [ 606.759107][T31958] netlink: 'syz.1.9618': attribute type 4 has an invalid length. [ 606.783434][T31958] netlink: 'syz.1.9618': attribute type 4 has an invalid length. [ 606.897442][T31965] lo speed is unknown, defaulting to 1000 [ 606.911666][T31965] lo speed is unknown, defaulting to 1000 [ 607.065196][T31963] SELinux: ebitmap: truncated map [ 607.074545][T31963] SELinux: failed to load policy [ 607.157035][ T23] lo speed is unknown, defaulting to 1000 [ 607.162917][ T23] syz0: Port: 1 Link DOWN [ 607.170988][ T23] lo speed is unknown, defaulting to 1000 [ 607.176756][ T23] syz0: Port: 1 Link ACTIVE [ 607.239045][T31994] lo speed is unknown, defaulting to 1000 [ 607.246241][T31994] lo speed is unknown, defaulting to 1000 [ 607.326289][T31992] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9629'. [ 607.926194][T32012] lo speed is unknown, defaulting to 1000 [ 607.932638][T32012] lo speed is unknown, defaulting to 1000 [ 609.078419][T32042] hub 6-0:1.0: USB hub found [ 609.083107][T32042] hub 6-0:1.0: 8 ports detected [ 609.214365][T32053] 9pnet_fd: Insufficient options for proto=fd [ 609.586660][T32060] validate_nla: 3 callbacks suppressed [ 609.586674][T32060] netlink: 'syz.1.9653': attribute type 10 has an invalid length. [ 609.613223][T32060] batman_adv: batadv0: Adding interface: netdevsim1 [ 609.619881][T32060] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.645677][T32060] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 609.863001][T32066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9656'. [ 610.019541][T32076] hub 6-0:1.0: USB hub found [ 610.024221][T32076] hub 6-0:1.0: 8 ports detected [ 610.110125][T32088] netlink: 'syz.4.9665': attribute type 10 has an invalid length. [ 610.156634][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9668'. [ 610.391445][T32107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9671'. [ 611.069971][T32137] lo speed is unknown, defaulting to 1000 [ 611.081215][T32137] lo speed is unknown, defaulting to 1000 [ 611.104945][ T29] kauditd_printk_skb: 1879 callbacks suppressed [ 611.104961][ T29] audit: type=1326 audit(1842429548.665:105605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4484675967 code=0x7ffc0000 [ 611.147189][ T29] audit: type=1326 audit(1842429548.665:105606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f448461ab89 code=0x7ffc0000 [ 611.170965][ T29] audit: type=1326 audit(1842429548.665:105607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 611.194612][ T29] audit: type=1326 audit(1842429548.675:105608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4484675967 code=0x7ffc0000 [ 611.218381][ T29] audit: type=1326 audit(1842429548.675:105609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f448461ab89 code=0x7ffc0000 [ 611.242056][ T29] audit: type=1326 audit(1842429548.675:105610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 611.266127][ T29] audit: type=1326 audit(1842429548.695:105611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4484675967 code=0x7ffc0000 [ 611.289776][ T29] audit: type=1326 audit(1842429548.695:105612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f448461ab89 code=0x7ffc0000 [ 611.313831][ T29] audit: type=1326 audit(1842429548.695:105613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 611.337965][ T29] audit: type=1326 audit(1842429548.705:105614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32111 comm="syz.4.9672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4484675967 code=0x7ffc0000 [ 611.621381][T32172] netlink: 'syz.3.9696': attribute type 10 has an invalid length. [ 611.631400][T32172] batman_adv: batadv0: Adding interface: netdevsim1 [ 611.638150][T32172] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.663830][T32172] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 611.682317][T32163] SELinux: ebitmap: truncated map [ 611.692738][T32163] SELinux: failed to load policy [ 612.486409][T32198] netlink: 'syz.4.9704': attribute type 10 has an invalid length. [ 612.487292][T32196] lo speed is unknown, defaulting to 1000 [ 612.502512][T32196] lo speed is unknown, defaulting to 1000 [ 612.513456][T32200] veth1_macvtap: left promiscuous mode [ 612.518992][T32200] macsec0: entered promiscuous mode [ 612.738194][T32228] hub 6-0:1.0: USB hub found [ 612.743689][T32228] hub 6-0:1.0: 8 ports detected [ 612.769648][T32231] netlink: 'syz.1.9717': attribute type 4 has an invalid length. [ 612.790145][T32231] netlink: 'syz.1.9717': attribute type 4 has an invalid length. [ 612.952855][T32241] lo speed is unknown, defaulting to 1000 [ 612.959261][T32241] lo speed is unknown, defaulting to 1000 [ 613.647029][T32277] netlink: 'syz.4.9736': attribute type 4 has an invalid length. [ 613.661095][T32277] netlink: 'syz.4.9736': attribute type 4 has an invalid length. [ 613.756010][T32282] hub 6-0:1.0: USB hub found [ 613.760919][T32282] hub 6-0:1.0: 8 ports detected [ 613.851696][T32299] hub 6-0:1.0: USB hub found [ 613.862698][T32299] hub 6-0:1.0: 8 ports detected [ 614.814427][T32305] lo speed is unknown, defaulting to 1000 [ 614.820807][T32305] lo speed is unknown, defaulting to 1000 [ 614.821697][T32313] loop0: detected capacity change from 0 to 1024 [ 614.848066][T32313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 614.891386][T32313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.988064][T32307] SELinux: ebitmap: truncated map [ 614.994536][T32307] SELinux: failed to load policy [ 615.084627][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9751'. [ 615.094225][T32336] netlink: 'syz.0.9751': attribute type 2 has an invalid length. [ 615.101973][T32336] netlink: 'syz.0.9751': attribute type 2 has an invalid length. [ 615.109783][T32336] netlink: 'syz.0.9751': attribute type 1 has an invalid length. [ 615.117594][T32336] netlink: 'syz.0.9751': attribute type 1 has an invalid length. [ 615.393174][T32349] lo speed is unknown, defaulting to 1000 [ 615.400140][T32349] lo speed is unknown, defaulting to 1000 [ 615.744298][T32363] lo speed is unknown, defaulting to 1000 [ 615.750788][T32363] lo speed is unknown, defaulting to 1000 [ 615.925910][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.183141][T32373] SELinux: ebitmap: truncated map [ 616.189325][T32373] SELinux: failed to load policy [ 616.407278][T32379] lo speed is unknown, defaulting to 1000 [ 616.413575][T32379] lo speed is unknown, defaulting to 1000 [ 616.448646][T32381] lo speed is unknown, defaulting to 1000 [ 616.455715][T32381] lo speed is unknown, defaulting to 1000 [ 616.530713][ T29] kauditd_printk_skb: 1858 callbacks suppressed [ 616.530727][ T29] audit: type=1326 audit(1842429554.048:107473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.573420][ T29] audit: type=1326 audit(1842429554.088:107474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.597287][ T29] audit: type=1326 audit(1842429554.088:107475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.621005][ T29] audit: type=1326 audit(1842429554.088:107476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.644696][ T29] audit: type=1326 audit(1842429554.088:107477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.668453][ T29] audit: type=1326 audit(1842429554.088:107478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.692158][ T29] audit: type=1326 audit(1842429554.088:107479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.715881][ T29] audit: type=1326 audit(1842429554.088:107480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32389 comm="syz.1.9777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.751960][T32393] loop1: detected capacity change from 0 to 1024 [ 616.789117][T32393] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.801277][T32393] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.820519][ T29] audit: type=1326 audit(1842429554.336:107481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32391 comm="syz.1.9778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.861881][T31567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.873490][T32404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9781'. [ 616.901807][T32396] SELinux: policydb magic number 0x77359400 does not match expected magic number 0xf97cff8c [ 616.931739][T32396] SELinux: failed to load policy [ 616.939858][ T29] audit: type=1326 audit(1842429554.366:107482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32391 comm="syz.1.9778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 616.999250][T32414] loop0: detected capacity change from 0 to 1024 [ 617.020383][T32414] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.073602][T32414] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.9783: Allocating blocks 449-513 which overlap fs metadata [ 617.101449][T32414] EXT4-fs (loop0): Remounting filesystem read-only [ 617.124744][T32410] EXT4-fs (loop0): pa ffff888106e90770: logic 48, phys. 177, len 21 [ 617.144702][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.354136][T32433] hub 6-0:1.0: USB hub found [ 617.358987][T32433] hub 6-0:1.0: 8 ports detected [ 617.669924][T32443] SELinux: ebitmap: truncated map [ 617.676371][T32443] SELinux: failed to load policy [ 617.852385][T32450] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 617.945441][T32458] lo speed is unknown, defaulting to 1000 [ 617.951529][T32458] lo speed is unknown, defaulting to 1000 [ 618.030340][T32463] loop0: detected capacity change from 0 to 1024 [ 618.051436][T32463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.090614][T32463] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.9804: Allocating blocks 449-513 which overlap fs metadata [ 618.106842][T32463] EXT4-fs (loop0): Remounting filesystem read-only [ 618.121710][T32474] netlink: 'syz.1.9807': attribute type 4 has an invalid length. [ 618.122697][T32462] EXT4-fs (loop0): pa ffff888106e90700: logic 48, phys. 177, len 21 [ 618.142308][T32474] netlink: 'syz.1.9807': attribute type 4 has an invalid length. [ 618.159776][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.183297][T32476] netlink: 'syz.4.9809': attribute type 4 has an invalid length. [ 618.233429][T32476] netlink: 'syz.4.9809': attribute type 4 has an invalid length. [ 618.526007][T32505] lo speed is unknown, defaulting to 1000 [ 618.532299][T32505] lo speed is unknown, defaulting to 1000 [ 618.673870][T32495] loop0: detected capacity change from 0 to 736 [ 619.213056][T32527] loop0: detected capacity change from 0 to 1024 [ 619.257656][T32527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 619.281259][T32527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.299585][T32534] hub 6-0:1.0: USB hub found [ 619.305135][T32534] hub 6-0:1.0: 8 ports detected [ 619.418134][T32542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9828'. [ 619.429791][T32553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9826'. [ 619.505649][T32554] lo speed is unknown, defaulting to 1000 [ 619.512100][T32554] lo speed is unknown, defaulting to 1000 [ 619.624473][T32553] netlink: 'syz.0.9826': attribute type 2 has an invalid length. [ 619.632350][T32553] netlink: 'syz.0.9826': attribute type 2 has an invalid length. [ 620.199744][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.062375][T32608] lo speed is unknown, defaulting to 1000 [ 621.069268][T32608] lo speed is unknown, defaulting to 1000 [ 621.270368][T32613] hub 6-0:1.0: USB hub found [ 621.289362][T32613] hub 6-0:1.0: 8 ports detected [ 621.567316][T32626] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9855'. [ 621.623454][ T29] kauditd_printk_skb: 1267 callbacks suppressed [ 621.623469][ T29] audit: type=1326 audit(1842429559.106:108750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32634 comm="syz.1.9861" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb2d16be9a9 code=0x0 [ 621.656722][ T29] audit: type=1326 audit(1842429559.146:108751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.680514][ T29] audit: type=1326 audit(1842429559.146:108752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.704243][ T29] audit: type=1326 audit(1842429559.146:108753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.727908][ T29] audit: type=1326 audit(1842429559.146:108754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.751706][ T29] audit: type=1326 audit(1842429559.146:108755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.775361][ T29] audit: type=1326 audit(1842429559.146:108756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.799039][ T29] audit: type=1326 audit(1842429559.146:108757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.822732][ T29] audit: type=1326 audit(1842429559.146:108758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.846666][ T29] audit: type=1326 audit(1842429559.146:108759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32630 comm="syz.4.9860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 621.901728][T32637] loop1: detected capacity change from 0 to 8192 [ 621.912363][T32637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9861'. [ 621.953042][T32637] team0 (unregistering): Port device team_slave_0 removed [ 621.972208][T32637] team0 (unregistering): Port device team_slave_1 removed [ 622.404064][T32650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9862'. [ 622.419883][T32650] validate_nla: 2 callbacks suppressed [ 622.419911][T32650] netlink: 'syz.0.9862': attribute type 2 has an invalid length. [ 622.423799][T32647] hub 6-0:1.0: USB hub found [ 622.425529][T32650] netlink: 'syz.0.9862': attribute type 2 has an invalid length. [ 622.433687][T32647] hub 6-0:1.0: 8 ports detected [ 622.437926][T32650] netlink: 'syz.0.9862': attribute type 1 has an invalid length. [ 622.437957][T32650] netlink: 'syz.0.9862': attribute type 1 has an invalid length. [ 622.562454][T32660] loop1: detected capacity change from 0 to 1024 [ 622.574710][T32660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.589621][T32660] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.619428][T31567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.679935][T32662] SELinux: ebitmap: truncated map [ 622.686324][T32662] SELinux: failed to load policy [ 622.729081][T32670] loop1: detected capacity change from 0 to 8192 [ 622.753031][T32670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9872'. [ 623.409892][T32680] netlink: 'syz.4.9876': attribute type 4 has an invalid length. [ 623.420361][T32680] netlink: 'syz.4.9876': attribute type 4 has an invalid length. [ 623.512362][T32688] loop1: detected capacity change from 0 to 1024 [ 623.537955][T32688] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.549409][T32690] hub 6-0:1.0: USB hub found [ 623.554868][T32690] hub 6-0:1.0: 8 ports detected [ 623.563497][T32688] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.9879: Allocating blocks 449-513 which overlap fs metadata [ 623.580736][T32688] EXT4-fs (loop1): Remounting filesystem read-only [ 623.591407][T32687] EXT4-fs (loop1): pa ffff888106e90770: logic 48, phys. 177, len 21 [ 623.609808][T31567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.509623][T32704] lo speed is unknown, defaulting to 1000 [ 624.515817][T32704] lo speed is unknown, defaulting to 1000 [ 624.518368][T32705] lo speed is unknown, defaulting to 1000 [ 624.528392][T32705] lo speed is unknown, defaulting to 1000 [ 624.759505][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9890'. [ 624.780214][T32725] hub 6-0:1.0: USB hub found [ 624.785301][T32725] hub 6-0:1.0: 8 ports detected [ 624.806099][T32733] netlink: 'syz.4.9895': attribute type 10 has an invalid length. [ 625.176335][T32739] SELinux: ebitmap: truncated map [ 625.183907][T32739] SELinux: failed to load policy [ 625.656697][T32752] 9pnet_virtio: no channels available for device 127.0.0.1 [ 625.668849][T32754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9903'. [ 625.685054][T32756] FAULT_INJECTION: forcing a failure. [ 625.685054][T32756] name failslab, interval 1, probability 0, space 0, times 0 [ 625.697827][T32756] CPU: 1 UID: 0 PID: 32756 Comm: syz.4.9904 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 625.697900][T32756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 625.697914][T32756] Call Trace: [ 625.697920][T32756] [ 625.697928][T32756] __dump_stack+0x1d/0x30 [ 625.697950][T32756] dump_stack_lvl+0xe8/0x140 [ 625.697970][T32756] dump_stack+0x15/0x1b [ 625.698045][T32756] should_fail_ex+0x265/0x280 [ 625.698085][T32756] should_failslab+0x8c/0xb0 [ 625.698103][T32756] __kmalloc_noprof+0xa5/0x3e0 [ 625.698123][T32756] ? sock_kmalloc+0x85/0xc0 [ 625.698213][T32756] ? iovec_from_user+0x5e/0x210 [ 625.698231][T32756] sock_kmalloc+0x85/0xc0 [ 625.698248][T32756] ____sys_sendmsg+0xf8/0x4e0 [ 625.698280][T32756] ___sys_sendmsg+0x17b/0x1d0 [ 625.698383][T32756] __sys_sendmmsg+0x178/0x300 [ 625.698418][T32756] __x64_sys_sendmmsg+0x57/0x70 [ 625.698438][T32756] x64_sys_call+0x2f2f/0x2fb0 [ 625.698522][T32756] do_syscall_64+0xd2/0x200 [ 625.698538][T32756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 625.698653][T32756] ? clear_bhb_loop+0x40/0x90 [ 625.698671][T32756] ? clear_bhb_loop+0x40/0x90 [ 625.698746][T32756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.698773][T32756] RIP: 0033:0x7f448467e9a9 [ 625.698790][T32756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.698807][T32756] RSP: 002b:00007f4482cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 625.698827][T32756] RAX: ffffffffffffffda RBX: 00007f44848a5fa0 RCX: 00007f448467e9a9 [ 625.698865][T32756] RDX: 0000000000000001 RSI: 0000200000001ac0 RDI: 0000000000000007 [ 625.698878][T32756] RBP: 00007f4482cdf090 R08: 0000000000000000 R09: 0000000000000000 [ 625.698892][T32756] R10: 0000000000044000 R11: 0000000000000246 R12: 0000000000000001 [ 625.698905][T32756] R13: 0000000000000000 R14: 00007f44848a5fa0 R15: 00007ffd7e61dbb8 [ 625.698926][T32756] [ 625.902706][T32757] loop1: detected capacity change from 0 to 512 [ 625.919167][T32759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9905'. [ 625.930246][T32757] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.942975][T32757] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 625.959221][T32759] batadv0: entered promiscuous mode [ 625.966613][T32759] macvtap0: entered promiscuous mode [ 625.972117][T32759] macvtap0: entered allmulticast mode [ 625.977511][T32759] batadv0: entered allmulticast mode [ 625.984028][T32759] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 625.995535][T32766] netlink: 'syz.5.9907': attribute type 4 has an invalid length. [ 626.005781][ T9] lo speed is unknown, defaulting to 1000 [ 626.011579][ T9] syz0: Port: 1 Link DOWN [ 626.016602][ T302] No control pipe specified [ 626.025462][T32766] netlink: 'syz.5.9907': attribute type 4 has an invalid length. [ 626.034318][T31567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.036092][ T302] rdma_op ffff88811a787580 conn xmit_rdma 0000000000000000 [ 626.046579][ T9] lo speed is unknown, defaulting to 1000 [ 626.056442][ T9] syz0: Port: 1 Link ACTIVE [ 626.060169][ T302] siw: device registration error -23 [ 626.175143][ T312] lo speed is unknown, defaulting to 1000 [ 626.181268][ T312] lo speed is unknown, defaulting to 1000 [ 626.188105][ T309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9910'. [ 626.231134][ T321] loop1: detected capacity change from 0 to 512 [ 626.260648][ T321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.274057][ T321] ext4 filesystem being mounted at /105/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.287389][ T321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9914: bg 0: block 217: padding at end of block bitmap is not set [ 626.315951][T31567] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.455241][ T343] netlink: 'syz.3.9921': attribute type 4 has an invalid length. [ 626.574661][ T350] batman_adv: batadv0: Adding interface: netdevsim1 [ 626.581413][ T350] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.607199][ T350] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 626.636891][ T351] SELinux: ebitmap: truncated map [ 626.645425][ T351] SELinux: failed to load policy [ 627.496336][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 627.496350][ T29] audit: type=1326 audit(1842429564.959:109537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.526237][ T29] audit: type=1326 audit(1842429564.959:109538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.549879][ T29] audit: type=1326 audit(1842429564.959:109539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.573434][ T29] audit: type=1326 audit(1842429564.959:109540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.596779][ T29] audit: type=1326 audit(1842429564.959:109541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.620262][ T29] audit: type=1326 audit(1842429564.959:109542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.643563][ T29] audit: type=1326 audit(1842429564.959:109543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.667159][ T29] audit: type=1326 audit(1842429564.959:109544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.690680][ T29] audit: type=1326 audit(1842429564.959:109545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.714267][ T29] audit: type=1326 audit(1842429564.959:109546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=364 comm="syz.0.9929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 627.951559][ T378] validate_nla: 2 callbacks suppressed [ 627.951570][ T378] netlink: 'syz.4.9934': attribute type 4 has an invalid length. [ 627.967124][ T378] netlink: 'syz.4.9934': attribute type 4 has an invalid length. [ 628.642830][ T396] FAULT_INJECTION: forcing a failure. [ 628.642830][ T396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.655949][ T396] CPU: 0 UID: 0 PID: 396 Comm: syz.5.9941 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 628.655976][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 628.656029][ T396] Call Trace: [ 628.656036][ T396] [ 628.656044][ T396] __dump_stack+0x1d/0x30 [ 628.656064][ T396] dump_stack_lvl+0xe8/0x140 [ 628.656082][ T396] dump_stack+0x15/0x1b [ 628.656099][ T396] should_fail_ex+0x265/0x280 [ 628.656128][ T396] should_fail+0xb/0x20 [ 628.656225][ T396] should_fail_usercopy+0x1a/0x20 [ 628.656252][ T396] _copy_from_user+0x1c/0xb0 [ 628.656270][ T396] ___sys_sendmsg+0xc1/0x1d0 [ 628.656302][ T396] __x64_sys_sendmsg+0xd4/0x160 [ 628.656321][ T396] x64_sys_call+0x2999/0x2fb0 [ 628.656343][ T396] do_syscall_64+0xd2/0x200 [ 628.656379][ T396] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 628.656404][ T396] ? clear_bhb_loop+0x40/0x90 [ 628.656502][ T396] ? clear_bhb_loop+0x40/0x90 [ 628.656523][ T396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.656571][ T396] RIP: 0033:0x7fa111f1e9a9 [ 628.656581][ T396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.656591][ T396] RSP: 002b:00007fa11057f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.656603][ T396] RAX: ffffffffffffffda RBX: 00007fa112145fa0 RCX: 00007fa111f1e9a9 [ 628.656709][ T396] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000005 [ 628.656722][ T396] RBP: 00007fa11057f090 R08: 0000000000000000 R09: 0000000000000000 [ 628.656735][ T396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.656748][ T396] R13: 0000000000000000 R14: 00007fa112145fa0 R15: 00007fffa3602588 [ 628.656774][ T396] [ 628.878827][ T404] netlink: 'syz.5.9945': attribute type 4 has an invalid length. [ 628.888304][ T3603] lo speed is unknown, defaulting to 1000 [ 628.889671][ T404] netlink: 'syz.5.9945': attribute type 4 has an invalid length. [ 628.894078][ T3603] syz0: Port: 1 Link DOWN [ 628.908168][ T3603] lo speed is unknown, defaulting to 1000 [ 628.914019][ T3603] syz0: Port: 1 Link ACTIVE [ 629.045857][ T415] sg_write: data in/out 1288228958/120 bytes for SCSI command 0x6-- guessing data in; [ 629.045857][ T415] program syz.1.9948 not setting count and/or reply_len properly [ 629.377996][ T419] lo speed is unknown, defaulting to 1000 [ 629.384534][ T419] lo speed is unknown, defaulting to 1000 [ 629.920340][ T426] hub 6-0:1.0: USB hub found [ 629.926115][ T426] hub 6-0:1.0: 8 ports detected [ 629.948899][ T436] netlink: 'syz.1.9956': attribute type 4 has an invalid length. [ 629.960500][ T436] netlink: 'syz.1.9956': attribute type 4 has an invalid length. [ 630.015755][ T441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9958'. [ 630.083759][ T439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9955'. [ 630.116420][ T447] hub 6-0:1.0: USB hub found [ 630.121112][ T447] hub 6-0:1.0: 8 ports detected [ 630.147081][ T456] netlink: 'syz.1.9962': attribute type 10 has an invalid length. [ 631.024992][ T477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9969'. [ 631.182129][ T496] netlink: 'syz.4.9974': attribute type 39 has an invalid length. [ 631.277296][ T501] lo speed is unknown, defaulting to 1000 [ 631.283687][ T501] lo speed is unknown, defaulting to 1000 [ 631.725087][ T509] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.733918][ T509] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.742690][ T509] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.751464][ T509] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 631.798257][ T513] random: crng reseeded on system resumption [ 631.806720][ T510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9976'. [ 631.822970][ T516] netlink: 'syz.5.9979': attribute type 10 has an invalid length. [ 632.522667][ T29] kauditd_printk_skb: 1431 callbacks suppressed [ 632.522683][ T29] audit: type=1326 audit(1842429569.972:110978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 632.552560][ T29] audit: type=1326 audit(1842429569.972:110979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 632.576123][ T29] audit: type=1326 audit(1842429569.972:110980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 632.599651][ T29] audit: type=1326 audit(1842429569.982:110981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 632.623190][ T29] audit: type=1326 audit(1842429569.982:110982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 632.646587][ T29] audit: type=1326 audit(1842429569.982:110983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 632.670049][ T29] audit: type=1326 audit(1842429570.002:110984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 632.693533][ T29] audit: type=1326 audit(1842429570.002:110985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 632.716999][ T29] audit: type=1326 audit(1842429570.002:110986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 632.740636][ T29] audit: type=1326 audit(1842429570.002:110987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=533 comm="syz.1.9986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 632.809618][ T554] lo speed is unknown, defaulting to 1000 [ 632.815709][ T554] lo speed is unknown, defaulting to 1000 [ 632.879260][ T562] No control pipe specified [ 632.924907][ T564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9994'. [ 633.026192][ T571] hub 6-0:1.0: USB hub found [ 633.030916][ T571] hub 6-0:1.0: 8 ports detected [ 633.062111][ T581] vhci_hcd: default hub control req: 000d v0002 i0000 l0 [ 633.092476][ T584] loop0: detected capacity change from 0 to 1024 [ 633.104724][ T584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.140610][ T584] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.10002: Allocating blocks 449-513 which overlap fs metadata [ 633.156356][ T584] EXT4-fs (loop0): Remounting filesystem read-only [ 633.166225][ T582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9998'. [ 633.180643][ T583] EXT4-fs (loop0): pa ffff888106e90770: logic 48, phys. 177, len 21 [ 633.200426][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.239119][ T605] loop0: detected capacity change from 0 to 1024 [ 633.254257][ T605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.334490][ T609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10006'. [ 633.345048][ T609] netlink: 'syz.1.10006': attribute type 2 has an invalid length. [ 633.352884][ T609] netlink: 'syz.1.10006': attribute type 2 has an invalid length. [ 633.360806][ T609] netlink: 'syz.1.10006': attribute type 1 has an invalid length. [ 633.368727][ T609] netlink: 'syz.1.10006': attribute type 1 has an invalid length. [ 633.456895][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.676966][ T619] hub 6-0:1.0: USB hub found [ 633.681688][ T619] hub 6-0:1.0: 8 ports detected [ 633.733292][ T628] netlink: 'syz.3.10015': attribute type 39 has an invalid length. [ 634.052628][ T637] FAULT_INJECTION: forcing a failure. [ 634.052628][ T637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 634.065802][ T637] CPU: 1 UID: 0 PID: 637 Comm: syz.3.10018 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 634.065828][ T637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 634.065876][ T637] Call Trace: [ 634.065883][ T637] [ 634.065892][ T637] __dump_stack+0x1d/0x30 [ 634.065912][ T637] dump_stack_lvl+0xe8/0x140 [ 634.065932][ T637] dump_stack+0x15/0x1b [ 634.066014][ T637] should_fail_ex+0x265/0x280 [ 634.066106][ T637] should_fail+0xb/0x20 [ 634.066131][ T637] should_fail_usercopy+0x1a/0x20 [ 634.066159][ T637] _copy_to_user+0x20/0xa0 [ 634.066179][ T637] simple_read_from_buffer+0xb5/0x130 [ 634.066283][ T637] proc_fail_nth_read+0x100/0x140 [ 634.066314][ T637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 634.066342][ T637] vfs_read+0x19d/0x6f0 [ 634.066417][ T637] ? __rcu_read_unlock+0x4f/0x70 [ 634.066447][ T637] ? __fget_files+0x184/0x1c0 [ 634.066490][ T637] ksys_read+0xda/0x1a0 [ 634.066538][ T637] __x64_sys_read+0x40/0x50 [ 634.066566][ T637] x64_sys_call+0x2d77/0x2fb0 [ 634.066586][ T637] do_syscall_64+0xd2/0x200 [ 634.066671][ T637] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 634.066759][ T637] ? clear_bhb_loop+0x40/0x90 [ 634.066779][ T637] ? clear_bhb_loop+0x40/0x90 [ 634.066906][ T637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.066926][ T637] RIP: 0033:0x7fa79de4d3bc [ 634.066943][ T637] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 634.066961][ T637] RSP: 002b:00007fa79c4af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 634.067054][ T637] RAX: ffffffffffffffda RBX: 00007fa79e075fa0 RCX: 00007fa79de4d3bc [ 634.067067][ T637] RDX: 000000000000000f RSI: 00007fa79c4af0a0 RDI: 0000000000000005 [ 634.067088][ T637] RBP: 00007fa79c4af090 R08: 0000000000000000 R09: 0000000000000000 [ 634.067105][ T637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.067117][ T637] R13: 0000000000000000 R14: 00007fa79e075fa0 R15: 00007fffc8154bc8 [ 634.067135][ T637] [ 634.285338][ T646] netlink: 'syz.5.10022': attribute type 4 has an invalid length. [ 634.333158][ T644] SELinux: policydb magic number 0x77359400 does not match expected magic number 0xf97cff8c [ 634.343850][ T644] SELinux: failed to load policy [ 634.359245][ T651] hub 6-0:1.0: USB hub found [ 634.364133][ T651] hub 6-0:1.0: 8 ports detected [ 634.524802][ T667] siw: device registration error -23 [ 634.552042][ T669] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10028'. [ 634.645191][ T673] loop0: detected capacity change from 0 to 128 [ 634.710993][ T674] netlink: 'syz.0.10032': attribute type 39 has an invalid length. [ 634.889699][ T680] netlink: 'syz.0.10035': attribute type 4 has an invalid length. [ 634.963364][ T688] vhci_hcd: default hub control req: 000d v0002 i0000 l0 [ 635.000255][ T678] syz.4.10034: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 635.006306][ T691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10040'. [ 635.014881][ T678] CPU: 1 UID: 0 PID: 678 Comm: syz.4.10034 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 635.014909][ T678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 635.014922][ T678] Call Trace: [ 635.014984][ T678] [ 635.015029][ T678] __dump_stack+0x1d/0x30 [ 635.015052][ T678] dump_stack_lvl+0xe8/0x140 [ 635.015071][ T678] dump_stack+0x15/0x1b [ 635.015139][ T678] warn_alloc+0x12b/0x1a0 [ 635.015172][ T678] __vmalloc_node_range_noprof+0x9c/0xe00 [ 635.015201][ T678] ? __futex_wait+0x1ff/0x260 [ 635.015278][ T678] ? __pfx_futex_wake_mark+0x10/0x10 [ 635.015306][ T678] ? __rcu_read_unlock+0x4f/0x70 [ 635.015327][ T678] ? avc_has_perm_noaudit+0x1b1/0x200 [ 635.015408][ T678] ? should_fail_ex+0x30/0x280 [ 635.015437][ T678] ? xskq_create+0x36/0xe0 [ 635.015490][ T678] vmalloc_user_noprof+0x7d/0xb0 [ 635.015518][ T678] ? xskq_create+0x80/0xe0 [ 635.015540][ T678] xskq_create+0x80/0xe0 [ 635.015620][ T678] xsk_init_queue+0x95/0xf0 [ 635.015642][ T678] xsk_setsockopt+0x35c/0x510 [ 635.015663][ T678] ? __pfx_xsk_setsockopt+0x10/0x10 [ 635.015709][ T678] __sys_setsockopt+0x184/0x200 [ 635.015784][ T678] __x64_sys_setsockopt+0x64/0x80 [ 635.015814][ T678] x64_sys_call+0x2bd5/0x2fb0 [ 635.015884][ T678] do_syscall_64+0xd2/0x200 [ 635.015952][ T678] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 635.015976][ T678] ? clear_bhb_loop+0x40/0x90 [ 635.015996][ T678] ? clear_bhb_loop+0x40/0x90 [ 635.016021][ T678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.016120][ T678] RIP: 0033:0x7f448467e9a9 [ 635.016136][ T678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.016154][ T678] RSP: 002b:00007f4482cdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 635.016173][ T678] RAX: ffffffffffffffda RBX: 00007f44848a5fa0 RCX: 00007f448467e9a9 [ 635.016186][ T678] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 635.016200][ T678] RBP: 00007f4484700d69 R08: 0000000000000004 R09: 0000000000000000 [ 635.016212][ T678] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.016225][ T678] R13: 0000000000000000 R14: 00007f44848a5fa0 R15: 00007ffd7e61dbb8 [ 635.016272][ T678] [ 635.016280][ T678] Mem-Info: [ 635.030321][ T691] loop0: detected capacity change from 0 to 512 [ 635.036257][ T678] active_anon:92809 inactive_anon:22 isolated_anon:0 [ 635.036257][ T678] active_file:16727 inactive_file:13399 isolated_file:0 [ 635.036257][ T678] unevictable:0 dirty:633 writeback:0 [ 635.036257][ T678] slab_reclaimable:3211 slab_unreclaimable:14579 [ 635.036257][ T678] mapped:36416 shmem:87655 pagetables:1463 [ 635.036257][ T678] sec_pagetables:0 bounce:0 [ 635.036257][ T678] kernel_misc_reclaimable:0 [ 635.036257][ T678] free:1790824 free_pcp:8956 free_cma:0 [ 635.071405][ T691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.075802][ T678] Node 0 active_anon:371352kB inactive_anon:88kB active_file:66908kB inactive_file:53596kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145664kB dirty:2532kB writeback:0kB shmem:350620kB writeback_tmp:0kB kernel_stack:3376kB pagetables:5852kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 635.082595][ T691] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 635.085791][ T678] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 635.384950][ T678] lowmem_reserve[]: 0 2882 7860 7860 [ 635.390369][ T678] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 635.420479][ T678] lowmem_reserve[]: 0 0 4978 4978 [ 635.425571][ T678] Node 0 Normal free:4195588kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:373904kB inactive_anon:88kB active_file:66908kB inactive_file:53596kB unevictable:0kB writepending:2532kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:34428kB local_pcp:17448kB free_cma:0kB [ 635.457809][ T678] lowmem_reserve[]: 0 0 0 0 [ 635.462414][ T678] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 635.475231][ T678] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947824kB [ 635.491358][ T678] Node 0 Normal: 717*4kB (UM) 19*8kB (UME) 382*16kB (UME) 425*32kB (UM) 623*64kB (UME) 349*128kB (UME) 180*256kB (UME) 71*512kB (UM) 114*1024kB (UM) 31*2048kB (UME) 934*4096kB (UM) = 4195596kB [ 635.510640][ T678] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 635.519959][ T678] 118507 total pagecache pages [ 635.524715][ T678] 34 pages in swap cache [ 635.529001][ T678] Free swap = 124860kB [ 635.533171][ T678] Total swap = 124996kB [ 635.537323][ T678] 2097051 pages RAM [ 635.541167][ T678] 0 pages HighMem/MovableOnly [ 635.545894][ T678] 80813 pages reserved [ 635.554406][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.592960][ T700] netlink: 'syz.5.10042': attribute type 1 has an invalid length. [ 635.612365][ T700] 8021q: adding VLAN 0 to HW filter on device bond1 [ 635.650496][ T707] netlink: 'syz.1.10044': attribute type 39 has an invalid length. [ 635.682763][ T700] bond1: (slave gretap1): making interface the new active one [ 635.691701][ T700] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 635.770637][ T719] SELinux: ebitmap: truncated map [ 635.777957][ T719] SELinux: failed to load policy [ 635.879677][ T732] loop0: detected capacity change from 0 to 8192 [ 635.905179][ T732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10052'. [ 635.997213][ T739] siw: device registration error -23 [ 636.700091][ T765] lo speed is unknown, defaulting to 1000 [ 636.709538][ T761] hub 6-0:1.0: USB hub found [ 636.714970][ T761] hub 6-0:1.0: 8 ports detected [ 636.729249][ T765] lo speed is unknown, defaulting to 1000 [ 636.776600][ T773] SELinux: ebitmap: truncated map [ 636.783966][ T773] SELinux: failed to load policy [ 636.959877][ T783] syz_tun: entered allmulticast mode [ 637.522625][ T788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10073'. [ 637.561138][ T799] vhci_hcd: default hub control req: 000d v0002 i0000 l0 [ 637.710012][ T29] kauditd_printk_skb: 825 callbacks suppressed [ 637.710029][ T29] audit: type=1326 audit(1842429575.138:111813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.739873][ T29] audit: type=1326 audit(1842429575.138:111814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.763451][ T29] audit: type=1326 audit(1842429575.138:111815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.787313][ T29] audit: type=1326 audit(1842429575.138:111816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.810949][ T29] audit: type=1326 audit(1842429575.138:111817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.834649][ T29] audit: type=1326 audit(1842429575.138:111818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.834677][ T29] audit: type=1326 audit(1842429575.138:111819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=813 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.864481][ T29] audit: type=1326 audit(1842429575.248:111820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.864512][ T29] audit: type=1326 audit(1842429575.248:111821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 637.864537][ T29] audit: type=1326 audit(1842429575.248:111822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=793 comm="syz.5.10075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 638.128032][ T830] SELinux: ebitmap: truncated map [ 638.130017][ T830] SELinux: failed to load policy [ 638.309635][ T844] hub 6-0:1.0: USB hub found [ 638.309684][ T844] hub 6-0:1.0: 8 ports detected [ 638.369046][ T846] hub 6-0:1.0: USB hub found [ 638.369119][ T846] hub 6-0:1.0: 8 ports detected [ 638.413165][ T850] validate_nla: 5 callbacks suppressed [ 638.413181][ T850] netlink: 'syz.5.10093': attribute type 4 has an invalid length. [ 638.525659][ T862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10098'. [ 638.556084][ T868] lo speed is unknown, defaulting to 1000 [ 638.562354][ T868] lo speed is unknown, defaulting to 1000 [ 638.587381][ T869] siw: device registration error -23 [ 638.952674][ T883] netlink: 'syz.1.10105': attribute type 4 has an invalid length. [ 638.999197][ T876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10101'. [ 639.316614][ T898] lo speed is unknown, defaulting to 1000 [ 639.317061][ T898] lo speed is unknown, defaulting to 1000 [ 639.550402][ T911] SELinux: ebitmap: truncated map [ 639.552498][ T911] SELinux: failed to load policy [ 639.932338][ T913] lo speed is unknown, defaulting to 1000 [ 639.938762][ T913] lo speed is unknown, defaulting to 1000 [ 639.994432][ T922] netlink: 'syz.0.10116': attribute type 4 has an invalid length. [ 640.048181][ T924] lo speed is unknown, defaulting to 1000 [ 640.054673][ T924] lo speed is unknown, defaulting to 1000 [ 640.135132][ T924] lo speed is unknown, defaulting to 1000 [ 640.141165][ T924] lo speed is unknown, defaulting to 1000 [ 640.218551][ T932] siw: device registration error -23 [ 640.555273][ T938] netlink: 'syz.0.10121': attribute type 39 has an invalid length. [ 640.710420][ T945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10123'. [ 640.928966][ T955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10126'. [ 641.014854][ T965] netlink: 'syz.1.10127': attribute type 4 has an invalid length. [ 641.094704][ T972] SELinux: ebitmap: truncated map [ 641.100882][ T972] SELinux: failed to load policy [ 641.430961][ T986] No control pipe specified [ 641.445155][ T986] rdma_op ffff888116a6fd80 conn xmit_rdma 0000000000000000 [ 641.608200][ T996] netlink: 'syz.4.10141': attribute type 4 has an invalid length. [ 641.631563][ T999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10140'. [ 641.642696][ T999] netlink: 'syz.0.10140': attribute type 2 has an invalid length. [ 641.650553][ T999] netlink: 'syz.0.10140': attribute type 2 has an invalid length. [ 641.658510][ T999] netlink: 'syz.0.10140': attribute type 1 has an invalid length. [ 641.666350][ T999] netlink: 'syz.0.10140': attribute type 1 has an invalid length. [ 642.020316][ T1021] lo speed is unknown, defaulting to 1000 [ 642.026489][ T1021] lo speed is unknown, defaulting to 1000 [ 642.120232][ T1022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10148'. [ 642.595327][ T1054] vhci_hcd: default hub control req: 000d v0002 i0000 l0 [ 642.726261][ T29] kauditd_printk_skb: 937 callbacks suppressed [ 642.726276][ T29] audit: type=1326 audit(1842429580.148:112760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa111f15967 code=0x7ffc0000 [ 642.756214][ T29] audit: type=1326 audit(1842429580.148:112761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa111ebab89 code=0x7ffc0000 [ 642.779944][ T29] audit: type=1326 audit(1842429580.148:112762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 642.804506][ T29] audit: type=1326 audit(1842429580.228:112763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa111f15967 code=0x7ffc0000 [ 642.828190][ T29] audit: type=1326 audit(1842429580.228:112764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa111ebab89 code=0x7ffc0000 [ 642.851861][ T29] audit: type=1326 audit(1842429580.228:112765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 642.875844][ T29] audit: type=1326 audit(1842429580.258:112766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa111f15967 code=0x7ffc0000 [ 642.899598][ T29] audit: type=1326 audit(1842429580.258:112767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fa111ebab89 code=0x7ffc0000 [ 642.923465][ T29] audit: type=1326 audit(1842429580.258:112768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 642.947297][ T29] audit: type=1326 audit(1842429580.278:112769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1035 comm="syz.5.10154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fa111f15967 code=0x7ffc0000 [ 642.980714][ T1064] lo speed is unknown, defaulting to 1000 [ 642.986960][ T1064] lo speed is unknown, defaulting to 1000 [ 643.099702][ T1080] No control pipe specified [ 643.110016][ T1080] rdma_op ffff888115cf8d80 conn xmit_rdma 0000000000000000 [ 643.188591][ T1083] lo speed is unknown, defaulting to 1000 [ 643.195280][ T1083] lo speed is unknown, defaulting to 1000 [ 643.938425][ T1127] validate_nla: 1 callbacks suppressed [ 643.938441][ T1127] netlink: 'syz.3.10189': attribute type 4 has an invalid length. [ 643.968486][ T1130] random: crng reseeded on system resumption [ 644.480821][ T1142] netlink: 'syz.1.10193': attribute type 4 has an invalid length. [ 644.976754][ T1158] lo speed is unknown, defaulting to 1000 [ 644.982886][ T1158] lo speed is unknown, defaulting to 1000 [ 645.522151][ T1163] FAULT_INJECTION: forcing a failure. [ 645.522151][ T1163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 645.535470][ T1163] CPU: 0 UID: 0 PID: 1163 Comm: syz.0.10200 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 645.535561][ T1163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.535568][ T1163] Call Trace: [ 645.535573][ T1163] [ 645.535578][ T1163] __dump_stack+0x1d/0x30 [ 645.535649][ T1163] dump_stack_lvl+0xe8/0x140 [ 645.535660][ T1163] dump_stack+0x15/0x1b [ 645.535669][ T1163] should_fail_ex+0x265/0x280 [ 645.535686][ T1163] should_fail+0xb/0x20 [ 645.535783][ T1163] should_fail_usercopy+0x1a/0x20 [ 645.535807][ T1163] strncpy_from_user+0x25/0x230 [ 645.535826][ T1163] ? kmem_cache_alloc_noprof+0x186/0x310 [ 645.535850][ T1163] ? getname_flags+0x80/0x3b0 [ 645.535906][ T1163] getname_flags+0xae/0x3b0 [ 645.535991][ T1163] do_sys_openat2+0x60/0x110 [ 645.536018][ T1163] __x64_sys_openat+0xf2/0x120 [ 645.536052][ T1163] x64_sys_call+0x1af/0x2fb0 [ 645.536072][ T1163] do_syscall_64+0xd2/0x200 [ 645.536083][ T1163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 645.536097][ T1163] ? clear_bhb_loop+0x40/0x90 [ 645.536108][ T1163] ? clear_bhb_loop+0x40/0x90 [ 645.536151][ T1163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.536199][ T1163] RIP: 0033:0x7fa7139ce9a9 [ 645.536209][ T1163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.536219][ T1163] RSP: 002b:00007fa712037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 645.536230][ T1163] RAX: ffffffffffffffda RBX: 00007fa713bf5fa0 RCX: 00007fa7139ce9a9 [ 645.536281][ T1163] RDX: 0000000000167483 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 645.536358][ T1163] RBP: 00007fa712037090 R08: 0000000000000000 R09: 0000000000000000 [ 645.536369][ T1163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.536375][ T1163] R13: 0000000000000000 R14: 00007fa713bf5fa0 R15: 00007ffed24a9758 [ 645.536387][ T1163] [ 645.761152][ T1167] netlink: 'syz.5.10202': attribute type 4 has an invalid length. [ 645.885051][ T1178] FAULT_INJECTION: forcing a failure. [ 645.885051][ T1178] name failslab, interval 1, probability 0, space 0, times 0 [ 645.897849][ T1178] CPU: 1 UID: 0 PID: 1178 Comm: syz.0.10206 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 645.897877][ T1178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 645.897933][ T1178] Call Trace: [ 645.897940][ T1178] [ 645.897948][ T1178] __dump_stack+0x1d/0x30 [ 645.898044][ T1178] dump_stack_lvl+0xe8/0x140 [ 645.898062][ T1178] dump_stack+0x15/0x1b [ 645.898078][ T1178] should_fail_ex+0x265/0x280 [ 645.898107][ T1178] should_failslab+0x8c/0xb0 [ 645.898177][ T1178] kmem_cache_alloc_node_noprof+0x57/0x320 [ 645.898204][ T1178] ? __alloc_skb+0x101/0x320 [ 645.898230][ T1178] __alloc_skb+0x101/0x320 [ 645.898254][ T1178] virtio_transport_alloc_skb+0x47/0x600 [ 645.898316][ T1178] ? __kfree_skb+0x109/0x150 [ 645.898342][ T1178] ? __memcg_slab_free_hook+0x135/0x230 [ 645.898370][ T1178] virtio_transport_send_pkt_info+0x434/0x860 [ 645.898469][ T1178] virtio_transport_seqpacket_dequeue+0x58f/0x5d0 [ 645.898519][ T1178] __vsock_connectible_recvmsg+0x39c/0x740 [ 645.898541][ T1178] ? selinux_socket_recvmsg+0x175/0x1b0 [ 645.898558][ T1178] ? __pfx_autoremove_wake_function+0x10/0x10 [ 645.898578][ T1178] vsock_connectible_recvmsg+0x80/0x90 [ 645.898678][ T1178] ? __pfx_vsock_connectible_recvmsg+0x10/0x10 [ 645.898693][ T1178] sock_recvmsg+0x136/0x170 [ 645.898710][ T1178] __sys_recvfrom+0x122/0x1f0 [ 645.898741][ T1178] __x64_sys_recvfrom+0x76/0x90 [ 645.898757][ T1178] x64_sys_call+0x1a52/0x2fb0 [ 645.898858][ T1178] do_syscall_64+0xd2/0x200 [ 645.898924][ T1178] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 645.898939][ T1178] ? clear_bhb_loop+0x40/0x90 [ 645.898950][ T1178] ? clear_bhb_loop+0x40/0x90 [ 645.898962][ T1178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.899001][ T1178] RIP: 0033:0x7fa7139ce9a9 [ 645.899011][ T1178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 645.899021][ T1178] RSP: 002b:00007fa712037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 645.899153][ T1178] RAX: ffffffffffffffda RBX: 00007fa713bf5fa0 RCX: 00007fa7139ce9a9 [ 645.899160][ T1178] RDX: 0000000000000107 RSI: 0000200000000140 RDI: 0000000000000007 [ 645.899167][ T1178] RBP: 00007fa712037090 R08: 0000000000000000 R09: 0000000000000000 [ 645.899174][ T1178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 645.899181][ T1178] R13: 0000000000000000 R14: 00007fa713bf5fa0 R15: 00007ffed24a9758 [ 645.899230][ T1178] [ 646.194103][ T1181] siw: device registration error -23 [ 646.711584][ T1193] random: crng reseeded on system resumption [ 646.880165][ T1206] SELinux: ebitmap: truncated map [ 646.886828][ T1206] SELinux: failed to load policy [ 647.625568][ T1229] hub 6-0:1.0: USB hub found [ 647.630365][ T1229] hub 6-0:1.0: 8 ports detected [ 647.865261][ T29] kauditd_printk_skb: 1139 callbacks suppressed [ 647.865278][ T29] audit: type=1326 audit(1842429585.270:113909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 647.895363][ T29] audit: type=1326 audit(1842429585.270:113910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 647.934340][ T29] audit: type=1326 audit(1842429585.350:113911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 647.963927][ T29] audit: type=1326 audit(1842429585.350:113912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 647.987952][ T29] audit: type=1326 audit(1842429585.370:113913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 648.011731][ T29] audit: type=1326 audit(1842429585.370:113914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 648.035570][ T29] audit: type=1326 audit(1842429585.380:113915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 648.059379][ T29] audit: type=1326 audit(1842429585.380:113916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 648.083223][ T29] audit: type=1326 audit(1842429585.380:113917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 648.107136][ T29] audit: type=1326 audit(1842429585.380:113918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1245 comm="syz.3.10230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 648.153905][ T1258] FAULT_INJECTION: forcing a failure. [ 648.153905][ T1258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 648.167030][ T1258] CPU: 0 UID: 0 PID: 1258 Comm: syz.4.10234 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 648.167061][ T1258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 648.167073][ T1258] Call Trace: [ 648.167081][ T1258] [ 648.167089][ T1258] __dump_stack+0x1d/0x30 [ 648.167107][ T1258] dump_stack_lvl+0xe8/0x140 [ 648.167124][ T1258] dump_stack+0x15/0x1b [ 648.167175][ T1258] should_fail_ex+0x265/0x280 [ 648.167226][ T1258] should_fail+0xb/0x20 [ 648.167313][ T1258] should_fail_usercopy+0x1a/0x20 [ 648.167363][ T1258] strncpy_from_user+0x25/0x230 [ 648.167381][ T1258] ? kmem_cache_alloc_noprof+0x186/0x310 [ 648.167434][ T1258] ? getname_flags+0x80/0x3b0 [ 648.167477][ T1258] getname_flags+0xae/0x3b0 [ 648.167571][ T1258] do_sys_openat2+0x60/0x110 [ 648.167657][ T1258] __x64_sys_openat+0xf2/0x120 [ 648.167752][ T1258] x64_sys_call+0x1af/0x2fb0 [ 648.167773][ T1258] do_syscall_64+0xd2/0x200 [ 648.167803][ T1258] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 648.167869][ T1258] ? clear_bhb_loop+0x40/0x90 [ 648.167945][ T1258] ? clear_bhb_loop+0x40/0x90 [ 648.167962][ T1258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.168001][ T1258] RIP: 0033:0x7f448467d310 [ 648.168016][ T1258] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 648.168101][ T1258] RSP: 002b:00007f4482cdeb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 648.168121][ T1258] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f448467d310 [ 648.168135][ T1258] RDX: 0000000000000002 RSI: 00007f4482cdec10 RDI: 00000000ffffff9c [ 648.168149][ T1258] RBP: 00007f4482cdec10 R08: 0000000000000000 R09: 00007f4482cde986 [ 648.168187][ T1258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 648.168197][ T1258] R13: 0000000000000000 R14: 00007f44848a5fa0 R15: 00007ffd7e61dbb8 [ 648.168213][ T1258] [ 648.595858][ T1265] SELinux: ebitmap: truncated map [ 648.602486][ T1265] SELinux: failed to load policy [ 649.010300][ T1277] lo speed is unknown, defaulting to 1000 [ 649.016415][ T1277] lo speed is unknown, defaulting to 1000 [ 649.363389][ T1293] netlink: 'syz.4.10243': attribute type 4 has an invalid length. [ 649.506874][ T1296] siw: device registration error -23 [ 649.953501][ T1319] netlink: 'syz.3.10253': attribute type 4 has an invalid length. [ 650.033972][ T1322] lo speed is unknown, defaulting to 1000 [ 650.040330][ T1322] lo speed is unknown, defaulting to 1000 [ 650.189015][ T1321] netlink: 'syz.3.10254': attribute type 4 has an invalid length. [ 650.762422][ T1340] netlink: 'syz.1.10260': attribute type 39 has an invalid length. [ 650.762808][ T1341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10261'. [ 650.785174][ T1341] loop0: detected capacity change from 0 to 512 [ 650.799609][ T1341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.818388][ T1341] ext4 filesystem being mounted at /316/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 650.854236][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.137117][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10265'. [ 651.146689][ T1362] netlink: 'syz.5.10265': attribute type 2 has an invalid length. [ 651.154627][ T1362] netlink: 'syz.5.10265': attribute type 2 has an invalid length. [ 651.162516][ T1362] netlink: 'syz.5.10265': attribute type 1 has an invalid length. [ 651.170391][ T1362] netlink: 'syz.5.10265': attribute type 1 has an invalid length. [ 651.367298][ T1365] netlink: 'syz.3.10266': attribute type 4 has an invalid length. [ 651.762076][ T1381] loop0: detected capacity change from 0 to 128 [ 651.781519][ T1379] lo speed is unknown, defaulting to 1000 [ 651.787668][ T1379] lo speed is unknown, defaulting to 1000 [ 651.822745][ T1382] netlink: 'syz.0.10272': attribute type 39 has an invalid length. [ 651.863259][ T1382] loop0: detected capacity change from 0 to 512 [ 651.871279][ T1382] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 651.884436][ T1382] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 651.941442][ T1382] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.10272: Invalid block bitmap block 0 in block_group 0 [ 651.956571][ T1382] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 651.966823][ T1382] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.10272: attempt to clear invalid blocks 983261 len 1 [ 651.981513][ T1382] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.10272: Invalid inode table block 0 in block_group 0 [ 651.999084][ T1382] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 652.025385][ T1382] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 652.038120][ T1392] rdma_op ffff888102477580 conn xmit_rdma 0000000000000000 [ 652.047389][ T1382] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.10272: Invalid inode table block 0 in block_group 0 [ 652.084865][ T1382] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 652.095366][ T1382] EXT4-fs error (device loop0): ext4_truncate:4597: inode #11: comm syz.0.10272: mark_inode_dirty error [ 652.108123][ T1382] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 652.118939][ T1382] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.10272: Invalid inode table block 0 in block_group 0 [ 652.132599][ T1382] EXT4-fs (loop0): 1 truncate cleaned up [ 652.139602][ T1382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.164165][T29425] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.199536][ T1402] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10279'. [ 652.267818][ T1408] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10282'. [ 652.273586][ T1408] loop0: detected capacity change from 0 to 1024 [ 652.289832][ T1408] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10282'. [ 652.303300][ T1408] loop0: detected capacity change from 0 to 1024 [ 653.257830][ T1436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10291'. [ 653.290749][ T29] kauditd_printk_skb: 1198 callbacks suppressed [ 653.290798][ T29] audit: type=1326 audit(1842429590.703:115117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 653.290957][ T29] audit: type=1326 audit(1842429590.703:115118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 653.291056][ T29] audit: type=1326 audit(1842429590.703:115119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1439 comm="syz.0.10293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7139ce9a9 code=0x7ffc0000 [ 653.443107][ T1442] syz.0.10294: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 653.443168][ T1442] CPU: 1 UID: 0 PID: 1442 Comm: syz.0.10294 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 653.443234][ T1442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 653.443247][ T1442] Call Trace: [ 653.443252][ T1442] [ 653.443259][ T1442] __dump_stack+0x1d/0x30 [ 653.443281][ T1442] dump_stack_lvl+0xe8/0x140 [ 653.443340][ T1442] dump_stack+0x15/0x1b [ 653.443355][ T1442] warn_alloc+0x12b/0x1a0 [ 653.443389][ T1442] __vmalloc_node_range_noprof+0x9c/0xe00 [ 653.443424][ T1442] ? __futex_wait+0x1ff/0x260 [ 653.443450][ T1442] ? __pfx_futex_wake_mark+0x10/0x10 [ 653.443529][ T1442] ? __rcu_read_unlock+0x4f/0x70 [ 653.443551][ T1442] ? avc_has_perm_noaudit+0x1b1/0x200 [ 653.443661][ T1442] ? should_fail_ex+0x30/0x280 [ 653.443690][ T1442] ? xskq_create+0x36/0xe0 [ 653.443778][ T1442] vmalloc_user_noprof+0x7d/0xb0 [ 653.443805][ T1442] ? xskq_create+0x80/0xe0 [ 653.443871][ T1442] xskq_create+0x80/0xe0 [ 653.443893][ T1442] xsk_init_queue+0x95/0xf0 [ 653.443915][ T1442] xsk_setsockopt+0x35c/0x510 [ 653.443937][ T1442] ? __pfx_xsk_setsockopt+0x10/0x10 [ 653.443985][ T1442] __sys_setsockopt+0x184/0x200 [ 653.444018][ T1442] __x64_sys_setsockopt+0x64/0x80 [ 653.444049][ T1442] x64_sys_call+0x2bd5/0x2fb0 [ 653.444078][ T1442] do_syscall_64+0xd2/0x200 [ 653.444096][ T1442] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 653.444121][ T1442] ? clear_bhb_loop+0x40/0x90 [ 653.444142][ T1442] ? clear_bhb_loop+0x40/0x90 [ 653.444200][ T1442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.444273][ T1442] RIP: 0033:0x7fa7139ce9a9 [ 653.444288][ T1442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.444305][ T1442] RSP: 002b:00007fa712037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 653.444326][ T1442] RAX: ffffffffffffffda RBX: 00007fa713bf5fa0 RCX: 00007fa7139ce9a9 [ 653.444338][ T1442] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 653.444351][ T1442] RBP: 00007fa713a50d69 R08: 0000000000000004 R09: 0000000000000000 [ 653.444363][ T1442] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.444375][ T1442] R13: 0000000000000000 R14: 00007fa713bf5fa0 R15: 00007ffed24a9758 [ 653.444394][ T1442] [ 653.444416][ T1442] Mem-Info: [ 653.498737][ T29] audit: type=1326 audit(1842429590.903:115120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 653.500282][ T1442] active_anon:93530 inactive_anon:22 isolated_anon:0 [ 653.500282][ T1442] active_file:16727 inactive_file:13405 isolated_file:0 [ 653.500282][ T1442] unevictable:0 dirty:393 writeback:0 [ 653.500282][ T1442] slab_reclaimable:3215 slab_unreclaimable:14561 [ 653.500282][ T1442] mapped:36482 shmem:87595 pagetables:1447 [ 653.500282][ T1442] sec_pagetables:0 bounce:0 [ 653.500282][ T1442] kernel_misc_reclaimable:0 [ 653.500282][ T1442] free:1789055 free_pcp:9829 free_cma:0 [ 653.504579][ T29] audit: type=1326 audit(1842429590.903:115121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 653.510297][ T1442] Node 0 active_anon:374120kB inactive_anon:88kB active_file:66908kB inactive_file:53620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:145928kB dirty:1572kB writeback:0kB shmem:350380kB writeback_tmp:0kB kernel_stack:3248kB pagetables:5788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 653.514951][ T29] audit: type=1326 audit(1842429590.903:115122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 653.520217][ T1442] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.520322][ T1442] lowmem_reserve[]: 0 2882 7860 7860 [ 653.520346][ T1442] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 653.525369][ T29] audit: type=1326 audit(1842429590.903:115123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 653.530685][ T1442] lowmem_reserve[]: 0 0 4978 4978 [ 653.530710][ T1442] Node 0 Normal free:4193036kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:374120kB inactive_anon:88kB active_file:66908kB inactive_file:53620kB unevictable:0kB writepending:1572kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:35788kB local_pcp:7952kB free_cma:0kB [ 653.535473][ T29] audit: type=1326 audit(1842429590.903:115124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 653.539872][ T1442] lowmem_reserve[]: [ 653.544807][ T29] audit: type=1326 audit(1842429590.903:115125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 653.549197][ T1442] 0 0 0 [ 653.553538][ T29] audit: type=1326 audit(1842429590.903:115126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1446 comm="syz.4.10296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f448467e9a9 code=0x7ffc0000 [ 653.557951][ T1442] 0 [ 653.557999][ T1442] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 654.037801][ T1442] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947824kB [ 654.066339][ T1442] Node 0 Normal: 1224*4kB (UM) 210*8kB (UM) 378*16kB (UM) 395*32kB (UME) 555*64kB (UME) 347*128kB (UM) 178*256kB (UME) 71*512kB (UM) 114*1024kB (UM) 31*2048kB (UME) 934*4096kB (UM) = 4193008kB [ 654.085496][ T1442] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 654.094807][ T1442] 117733 total pagecache pages [ 654.099565][ T1442] 34 pages in swap cache [ 654.103841][ T1442] Free swap = 124860kB [ 654.108040][ T1442] Total swap = 124996kB [ 654.112252][ T1442] 2097051 pages RAM [ 654.116125][ T1442] 0 pages HighMem/MovableOnly [ 654.120873][ T1442] 80813 pages reserved [ 654.314634][ T1469] siw: device registration error -23 [ 654.580376][ T1477] hsr0: entered promiscuous mode [ 654.585935][ T1477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10305'. [ 654.595334][ T1477] hsr_slave_0: left promiscuous mode [ 654.601094][ T1477] hsr_slave_1: left promiscuous mode [ 654.608634][ T1477] hsr0 (unregistering): left promiscuous mode [ 654.642254][ T1478] bridge0: entered promiscuous mode [ 654.649122][ T1478] bridge0: port 3(macsec0) entered blocking state [ 654.655656][ T1478] bridge0: port 3(macsec0) entered disabled state [ 654.662373][ T1478] macsec0: entered allmulticast mode [ 654.667696][ T1478] bridge0: entered allmulticast mode [ 654.674581][ T1478] macsec0: left allmulticast mode [ 654.679730][ T1478] bridge0: left allmulticast mode [ 654.685658][ T1478] bridge0: left promiscuous mode [ 654.755817][ T1482] netlink: 264 bytes leftover after parsing attributes in process `syz.3.10307'. [ 655.264885][ T1505] hub 6-0:1.0: USB hub found [ 655.269696][ T1505] hub 6-0:1.0: 8 ports detected [ 655.539062][ T1512] netlink: 264 bytes leftover after parsing attributes in process `syz.1.10319'. [ 655.581937][ T1514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10320'. [ 655.644753][ T1518] hub 6-0:1.0: USB hub found [ 655.649589][ T1518] hub 6-0:1.0: 8 ports detected [ 656.549135][ T1558] validate_nla: 3 callbacks suppressed [ 656.549149][ T1558] netlink: 'syz.3.10330': attribute type 10 has an invalid length. [ 656.707172][ T1567] hub 6-0:1.0: USB hub found [ 656.712334][ T1567] hub 6-0:1.0: 8 ports detected [ 657.605328][ T1598] siw: device registration error -23 [ 657.994088][ T1612] lo speed is unknown, defaulting to 1000 [ 658.000286][ T1612] lo speed is unknown, defaulting to 1000 [ 658.466918][ T1616] lo speed is unknown, defaulting to 1000 [ 658.472964][ T1616] lo speed is unknown, defaulting to 1000 [ 658.523679][ T29] kauditd_printk_skb: 1030 callbacks suppressed [ 658.523696][ T29] audit: type=1326 audit(1842429595.908:116157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x0 [ 658.674960][ T29] audit: type=1326 audit(1842429596.068:116158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.698976][ T29] audit: type=1326 audit(1842429596.068:116159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.722847][ T29] audit: type=1326 audit(1842429596.078:116160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1620 comm="syz.0.10349" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa7139ce9a9 code=0x0 [ 658.746777][ T29] audit: type=1326 audit(1842429596.118:116161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.770545][ T29] audit: type=1326 audit(1842429596.118:116162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.794266][ T29] audit: type=1326 audit(1842429596.128:116163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.797028][ T1625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10350'. [ 658.817923][ T29] audit: type=1326 audit(1842429596.128:116164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.897851][ T29] audit: type=1326 audit(1842429596.148:116165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.921660][ T29] audit: type=1326 audit(1842429596.148:116166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1617 comm="syz.3.10348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa79de4e9a9 code=0x7ffc0000 [ 658.947800][ T1630] lo speed is unknown, defaulting to 1000 [ 658.953822][ T1630] lo speed is unknown, defaulting to 1000 [ 659.148918][ T1641] hub 6-0:1.0: USB hub found [ 659.153704][ T1641] hub 6-0:1.0: 8 ports detected [ 659.179212][ T1647] rdma_op ffff88811a784580 conn xmit_rdma 0000000000000000 [ 659.250494][ T1653] hub 6-0:1.0: USB hub found [ 659.256590][ T1653] hub 6-0:1.0: 8 ports detected [ 659.326913][ T1657] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10362'. [ 659.529018][ T1667] lo speed is unknown, defaulting to 1000 [ 659.536132][ T1667] lo speed is unknown, defaulting to 1000 [ 660.073091][ T1673] lo speed is unknown, defaulting to 1000 [ 660.079390][ T1673] lo speed is unknown, defaulting to 1000 [ 660.243084][ T1679] hub 6-0:1.0: USB hub found [ 660.243136][ T1679] hub 6-0:1.0: 8 ports detected [ 660.349214][ T1690] netlink: 'syz.1.10373': attribute type 4 has an invalid length. [ 660.406054][ T1693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10374'. [ 660.421192][ T1696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10370'. [ 660.476671][ T1696] netlink: 'syz.4.10370': attribute type 2 has an invalid length. [ 660.476690][ T1696] netlink: 'syz.4.10370': attribute type 2 has an invalid length. [ 660.476702][ T1696] netlink: 'syz.4.10370': attribute type 1 has an invalid length. [ 660.476715][ T1696] netlink: 'syz.4.10370': attribute type 1 has an invalid length. [ 660.552990][ T1702] netlink: 'syz.1.10377': attribute type 39 has an invalid length. [ 660.625495][ T1708] rdma_op ffff888118f1c180 conn xmit_rdma 0000000000000000 [ 660.820856][ T1719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10385'. [ 660.932310][ T1735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10389'. [ 660.997315][ T1742] pim6reg1: entered promiscuous mode [ 661.002717][ T1742] pim6reg1: entered allmulticast mode [ 661.020497][ T1742] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.059547][ T1742] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.118463][ T1742] batman_adv: batadv0: Removing interface: netdevsim1 [ 661.132402][ T1742] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.189623][ T1742] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.272566][ T1742] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.283310][ T1742] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.294054][ T1742] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.304650][ T1742] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.581323][ T1764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10398'. [ 661.787401][ T1773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10401'. [ 661.797087][ T1773] hsr_slave_0: left promiscuous mode [ 661.802686][ T1773] hsr_slave_1: left promiscuous mode [ 661.831069][ T1775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10402'. [ 662.134187][ T1785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10405'. [ 662.134447][ T1785] netlink: 'syz.1.10405': attribute type 2 has an invalid length. [ 662.151108][ T1785] netlink: 'syz.1.10405': attribute type 2 has an invalid length. [ 662.159095][ T1785] netlink: 'syz.1.10405': attribute type 1 has an invalid length. [ 662.159109][ T1785] netlink: 'syz.1.10405': attribute type 1 has an invalid length. [ 662.585160][ T1803] SELinux: ebitmap: truncated map [ 662.591920][ T1803] SELinux: failed to load policy [ 663.530788][ T1823] lo speed is unknown, defaulting to 1000 [ 663.537185][ T1823] lo speed is unknown, defaulting to 1000 [ 663.783327][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 663.783361][ T29] audit: type=1326 audit(1842429601.163:117245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb2d16b5967 code=0x7ffc0000 [ 663.813342][ T29] audit: type=1326 audit(1842429601.163:117246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb2d165ab89 code=0x7ffc0000 [ 663.837037][ T29] audit: type=1326 audit(1842429601.163:117247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1809 comm="syz.1.10413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fb2d16be9a9 code=0x7ffc0000 [ 663.922102][ T1830] hub 6-0:1.0: USB hub found [ 663.926917][ T1830] hub 6-0:1.0: 8 ports detected [ 663.949111][ T29] audit: type=1326 audit(1842429601.343:117248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1833 comm="syz.4.10421" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f448467e9a9 code=0x0 [ 664.014021][ T1836] __nla_validate_parse: 1 callbacks suppressed [ 664.014033][ T1836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10421'. [ 664.062444][ T1832] SELinux: ebitmap: truncated map [ 664.071992][ T1832] SELinux: failed to load policy [ 664.101649][ T29] audit: type=1326 audit(1842429601.503:117249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.5.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 664.127109][ T29] audit: type=1326 audit(1842429601.503:117250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.5.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 664.151006][ T29] audit: type=1326 audit(1842429601.503:117251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.5.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 664.174766][ T29] audit: type=1326 audit(1842429601.503:117252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.5.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 664.198493][ T29] audit: type=1326 audit(1842429601.503:117253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1839 comm="syz.5.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 664.222053][ T29] audit: type=1326 audit(1842429601.523:117254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.5.10422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fa111f1e9a9 code=0x7ffc0000 [ 665.025283][ T1852] netlink: 'syz.5.10426': attribute type 4 has an invalid length. [ 665.047296][ T3379] lo speed is unknown, defaulting to 1000 [ 665.053250][ T3379] syz0: Port: 1 Link DOWN [ 665.298515][ T1854] lo speed is unknown, defaulting to 1000 [ 665.304705][ T1854] lo speed is unknown, defaulting to 1000 [ 665.363056][ T1854] chnl_net:caif_netlink_parms(): no params data found [ 665.400054][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.407240][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.414435][ T1854] bridge_slave_0: entered allmulticast mode [ 665.420797][ T1854] bridge_slave_0: entered promiscuous mode [ 665.427392][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state [ 665.434506][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.441755][ T1854] bridge_slave_1: entered allmulticast mode [ 665.448207][ T1854] bridge_slave_1: entered promiscuous mode [ 665.461601][ T4879] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.471937][ T4879] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.488471][ T1854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.498916][ T1854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.517289][ T1854] team0: Port device team_slave_0 added [ 665.523825][ T1854] team0: Port device team_slave_1 added [ 665.539732][ T4879] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.550097][ T4879] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.562125][ T1854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.569068][ T1854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.595066][ T1854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.606199][ T1854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.613240][ T1854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.639224][ T1854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.654540][ T4879] batman_adv: batadv0: Removing interface: netdevsim1 [ 665.663165][ T4879] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.673591][ T4879] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.697697][ T1854] hsr_slave_0: entered promiscuous mode [ 665.703673][ T1854] hsr_slave_1: entered promiscuous mode [ 665.709545][ T1854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 665.717319][ T1854] Cannot create hsr debugfs directory [ 665.726423][ T4879] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 665.736784][ T4879] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.807255][ T4879] bridge_slave_1: left allmulticast mode [ 665.813044][ T4879] bridge_slave_1: left promiscuous mode [ 665.818683][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.827899][ T4879] bridge_slave_0: left allmulticast mode [ 665.833621][ T4879] bridge_slave_0: left promiscuous mode [ 665.839363][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.874065][ T1882] hub 6-0:1.0: USB hub found [ 665.879131][ T1882] hub 6-0:1.0: 8 ports detected [ 665.885517][ T4879] bond1 (unregistering): (slave gretap1): Releasing active interface [ 665.954235][ T4879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.965847][ T4879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.975691][ T4879] bond0 (unregistering): Released all slaves [ 665.984833][ T4879] bond1 (unregistering): Released all slaves [ 666.017898][ T1884] warn_alloc: 2 callbacks suppressed [ 666.017988][ T1884] syz.3.10432: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 666.037993][ T1884] CPU: 0 UID: 0 PID: 1884 Comm: syz.3.10432 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 666.038087][ T1884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 666.038101][ T1884] Call Trace: [ 666.038109][ T1884] [ 666.038118][ T1884] __dump_stack+0x1d/0x30 [ 666.038172][ T1884] dump_stack_lvl+0xe8/0x140 [ 666.038189][ T1884] dump_stack+0x15/0x1b [ 666.038204][ T1884] warn_alloc+0x12b/0x1a0 [ 666.038234][ T1884] ? __account_obj_stock+0x211/0x350 [ 666.038257][ T1884] __vmalloc_node_range_noprof+0x9c/0xe00 [ 666.038331][ T1884] ? __cgroup_account_cputime+0x81/0xa0 [ 666.038358][ T1884] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 666.038382][ T1884] ? probe_sched_wakeup+0x85/0xa0 [ 666.038418][ T1884] ? __rcu_read_unlock+0x4f/0x70 [ 666.038506][ T1884] ? avc_has_perm_noaudit+0x1b1/0x200 [ 666.038583][ T1884] ? should_fail_ex+0x30/0x280 [ 666.038638][ T1884] ? xskq_create+0x36/0xe0 [ 666.038651][ T1884] vmalloc_user_noprof+0x7d/0xb0 [ 666.038666][ T1884] ? xskq_create+0x80/0xe0 [ 666.038678][ T1884] xskq_create+0x80/0xe0 [ 666.038694][ T1884] xsk_init_queue+0x95/0xf0 [ 666.038744][ T1884] xsk_setsockopt+0x35c/0x510 [ 666.038756][ T1884] ? __pfx_xsk_setsockopt+0x10/0x10 [ 666.038767][ T1884] __sys_setsockopt+0x184/0x200 [ 666.038817][ T1884] __x64_sys_setsockopt+0x64/0x80 [ 666.038833][ T1884] x64_sys_call+0x2bd5/0x2fb0 [ 666.038859][ T1884] do_syscall_64+0xd2/0x200 [ 666.038870][ T1884] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 666.038883][ T1884] ? clear_bhb_loop+0x40/0x90 [ 666.038894][ T1884] ? clear_bhb_loop+0x40/0x90 [ 666.038966][ T1884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.038977][ T1884] RIP: 0033:0x7fa79de4e9a9 [ 666.038989][ T1884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.038999][ T1884] RSP: 002b:00007fa79c4af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 666.039036][ T1884] RAX: ffffffffffffffda RBX: 00007fa79e075fa0 RCX: 00007fa79de4e9a9 [ 666.039043][ T1884] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 666.039049][ T1884] RBP: 00007fa79ded0d69 R08: 0000000000000004 R09: 0000000000000000 [ 666.039056][ T1884] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 666.039063][ T1884] R13: 0000000000000000 R14: 00007fa79e075fa0 R15: 00007fffc8154bc8 [ 666.039072][ T1884] [ 666.039076][ T1884] Mem-Info: [ 666.281649][ T1884] active_anon:77474 inactive_anon:22 isolated_anon:0 [ 666.281649][ T1884] active_file:16727 inactive_file:13412 isolated_file:0 [ 666.281649][ T1884] unevictable:0 dirty:248 writeback:0 [ 666.281649][ T1884] slab_reclaimable:3213 slab_unreclaimable:14765 [ 666.281649][ T1884] mapped:35918 shmem:72590 pagetables:1298 [ 666.281649][ T1884] sec_pagetables:0 bounce:0 [ 666.281649][ T1884] kernel_misc_reclaimable:0 [ 666.281649][ T1884] free:1795301 free_pcp:19915 free_cma:0 [ 666.300880][ T1894] SELinux: ebitmap: truncated map [ 666.327148][ T1884] Node 0 active_anon:309896kB inactive_anon:88kB active_file:66908kB inactive_file:53648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:143672kB dirty:992kB writeback:0kB shmem:290360kB writeback_tmp:0kB kernel_stack:3248kB pagetables:5192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 666.361457][ T1884] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.362917][ T1894] SELinux: failed to load policy [ 666.390079][ T1884] lowmem_reserve[]: 0 2882 7860 7860 [ 666.400477][ T1884] Node 0 DMA32 free:2947824kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951352kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 666.430905][ T1884] lowmem_reserve[]: 0 0 4978 4978 [ 666.436074][ T1884] Node 0 Normal free:4218020kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:309200kB inactive_anon:88kB active_file:66908kB inactive_file:53648kB unevictable:0kB writepending:992kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:76612kB local_pcp:48808kB free_cma:0kB [ 666.468358][ T1884] lowmem_reserve[]: 0 0 0 0 [ 666.473013][ T1884] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 666.485786][ T1884] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 3*16kB (M) 3*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947824kB [ 666.502171][ T1884] Node 0 Normal: 1313*4kB (UM) 900*8kB (UME) 1344*16kB (UME) 665*32kB (ME) 535*64kB (UME) 293*128kB (UM) 190*256kB (UME) 71*512kB (UM) 114*1024kB (UM) 31*2048kB (UME) 934*4096kB (UM) = 4217860kB [ 666.521944][ T1884] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 666.531425][ T1884] 101425 total pagecache pages [ 666.536229][ T1884] 34 pages in swap cache [ 666.540471][ T1884] Free swap = 124860kB [ 666.544673][ T1884] Total swap = 124996kB [ 666.548807][ T1884] 2097051 pages RAM [ 666.552636][ T1884] 0 pages HighMem/MovableOnly [ 666.557320][ T1884] 80813 pages reserved [ 666.574774][ T4879] hsr_slave_0: left promiscuous mode [ 666.580735][ T4879] hsr_slave_1: left promiscuous mode [ 666.589096][ T4879] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.596565][ T4879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.605438][ T4879] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.613014][ T4879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.623470][ T4879] veth1_vlan: left promiscuous mode [ 666.628821][ T4879] veth0_vlan: left promiscuous mode [ 666.723477][ T1900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10435'. [ 666.736011][ T1904] netlink: 'syz.3.10436': attribute type 10 has an invalid length. [ 666.883929][ T1854] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 666.892470][ T1854] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 666.900763][ T1854] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 666.909411][ T1854] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 666.939011][ T1854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 666.950917][ T1854] 8021q: adding VLAN 0 to HW filter on device team0 [ 666.960427][ T4884] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.967642][ T4884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 666.969951][ T1920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10440'. [ 666.986447][ T4886] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.993566][ T4886] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.055298][ T1922] hub 6-0:1.0: USB hub found [ 667.056479][ T1854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.062318][ T1922] hub 6-0:1.0: 8 ports detected [ 667.145449][ T1941] siw: device registration error -23 [ 667.163007][ T1854] veth0_vlan: entered promiscuous mode [ 667.170242][ T1854] veth1_vlan: entered promiscuous mode [ 667.183700][ T1854] veth0_macvtap: entered promiscuous mode [ 667.190830][ T1854] veth1_macvtap: entered promiscuous mode [ 667.200923][ T1854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 667.211461][ T1854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.220577][ T1854] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.229364][ T1854] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.238234][ T1854] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.247009][ T1854] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.283762][ T1944] netlink: 'syz.5.10427': attribute type 10 has an invalid length. [ 667.293223][ T1944] batman_adv: batadv0: Adding interface: netdevsim1 [ 667.299860][ T1944] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 667.325608][ T1944] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 667.496976][ T1952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10445'. [ 667.601705][ T1958] lo speed is unknown, defaulting to 1000 [ 667.722136][ T1966] netlink: 'syz.1.10451': attribute type 4 has an invalid length. [ 667.789413][ T1975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10454'. [ 667.896795][ T1981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10456'. [ 667.946027][ T1988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10458'. [ 668.207792][ T1998] netlink: 'syz.3.10463': attribute type 4 has an invalid length. [ 668.596891][ T2024] lo speed is unknown, defaulting to 1000 [ 668.798100][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 668.798113][ T29] audit: type=1326 audit(1842429606.189:117863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8e5015967 code=0x7ffc0000 [ 668.982563][ T29] audit: type=1326 audit(1842429606.219:117864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8e4fbab89 code=0x7ffc0000 [ 669.006275][ T29] audit: type=1326 audit(1842429606.219:117865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8e5015967 code=0x7ffc0000 [ 669.029966][ T29] audit: type=1326 audit(1842429606.219:117866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8e4fbab89 code=0x7ffc0000 [ 669.053644][ T29] audit: type=1326 audit(1842429606.219:117867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc8e501e9a9 code=0x7ffc0000 [ 669.077494][ T29] audit: type=1326 audit(1842429606.229:117868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8e5015967 code=0x7ffc0000 [ 669.101270][ T29] audit: type=1326 audit(1842429606.229:117869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8e4fbab89 code=0x7ffc0000 [ 669.125024][ T29] audit: type=1326 audit(1842429606.229:117870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fc8e501e9a9 code=0x7ffc0000 [ 669.148751][ T29] audit: type=1326 audit(1842429606.239:117871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc8e5015967 code=0x7ffc0000 [ 669.172550][ T29] audit: type=1326 audit(1842429606.239:117872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2005 comm="syz.5.10462" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc8e4fbab89 code=0x7ffc0000 [ 669.279269][ T2031] netlink: 'syz.4.10474': attribute type 4 has an invalid length. [ 669.377107][ T2034] lo speed is unknown, defaulting to 1000 [ 669.726244][ T2055] lo speed is unknown, defaulting to 1000 [ 670.197519][ T2069] lo speed is unknown, defaulting to 1000 [ 670.264242][ T2070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10485'. [ 670.946712][ T2092] lo speed is unknown, defaulting to 1000 [ 671.255198][ T2082] ================================================================== [ 671.263306][ T2082] BUG: KCSAN: data-race in pipe_lock / pipe_release [ 671.269900][ T2082] [ 671.272211][ T2082] read-write to 0xffff88812e0fa72c of 4 bytes by task 2081 on cpu 0: [ 671.280266][ T2082] pipe_release+0x16a/0x1d0 [ 671.284772][ T2082] __fput+0x29b/0x650 [ 671.288748][ T2082] ____fput+0x1c/0x30 [ 671.292722][ T2082] task_work_run+0x131/0x1a0 [ 671.297331][ T2082] exit_to_user_mode_loop+0xe4/0x100 [ 671.302608][ T2082] do_syscall_64+0x1d6/0x200 [ 671.307202][ T2082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.313088][ T2082] [ 671.315401][ T2082] read to 0xffff88812e0fa72c of 4 bytes by task 2082 on cpu 1: [ 671.322933][ T2082] pipe_lock+0x17/0x50 [ 671.327176][ T2082] __se_sys_vmsplice+0x230/0x10f0 [ 671.332201][ T2082] __x64_sys_vmsplice+0x55/0x70 [ 671.337059][ T2082] x64_sys_call+0x2f45/0x2fb0 [ 671.341730][ T2082] do_syscall_64+0xd2/0x200 [ 671.346224][ T2082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.352111][ T2082] [ 671.354421][ T2082] value changed: 0x00000002 -> 0x00000001 [ 671.360127][ T2082] [ 671.362440][ T2082] Reported by Kernel Concurrency Sanitizer on: [ 671.368578][ T2082] CPU: 1 UID: 0 PID: 2082 Comm: syz.5.10493 Not tainted 6.16.0-rc7-syzkaller-00018-g01a412d06bc5 #0 PREEMPT(voluntary) [ 671.381074][ T2082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.391122][ T2082] ==================================================================