last executing test programs: 32.458201136s ago: executing program 2 (id=112): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_format(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x460, 0x98, 0x160, 0x160, 0x0, 0x220, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0xffff]}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x4}}}}}, 0x30}}, 0x8840) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020022449bdca6f0ffbbce27bd7000fddbdf250500000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000300000006000000"], 0x28}}, 0xc000) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="020027bd7000fddbdf25140000000800", @ANYRES32=r7, @ANYBLOB="0c009900040000003c00000008001400", @ANYBLOB="f728c4b1355253c3e638b85585ed3607c5981c7637b06db11d28a4e5d2d512c46bd9077e764e139836561bd09b84a26b904d67f85ce097cf4c9ff4c9916f33ed3d408ef07f76f8d4808e138ecc96ec3f13b72294a43e5fbbe9a4415448711a1df64f5a940b96154d799e26a6ee94fd422d669e4e194a1b28eb6955f5fde097be0471a1f65a95722a6ff5e82a48d250ed3299e88db38bdb0f25d976154abf3f5bbf2519e9239e01b184f4a3903cc67e3948", @ANYBLOB="0600120109000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x110, r3, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5aa5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x202}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x7eeb3eb9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x8001, 0x10]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xbb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4f07, 0x2, 0x8, 0xd543, 0xc]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xf89, 0x5, 0x10, 0x0, 0x10001, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4804}, 0x4000847) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) getdents64(r11, &(0x7f0000000100)=""/54, 0x36) add_key$user(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="b95337b4c4b7b19d7de41da8896385e1ad1572d8c4a80b832655c55b0edb06a4807b6e2202f9e6ec8122c3f55c92d4fdab93e72905748470f121aca16d319e1d66224a23177b8700c255bc39db83b8807153f5f3f5b26e88c4a50da32fbec52ac40cdc49dbb74c787959afbb5c97bd575315cdf82893e770dcbb7c5febd9f82c794d38efca7a12480faba30e7960832b3545ea9a0c39e0598990a2df10e7", 0x9e, 0xfffffffffffffffa) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) 32.174953011s ago: executing program 2 (id=116): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x0) 32.134977932s ago: executing program 2 (id=117): r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r2, r3, 0x0, 0x8000fffffffe) (fail_nth: 4) 31.959597624s ago: executing program 2 (id=119): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f0000000000)={[{@user_xattr}, {@errors_remount}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000280)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@i_version, 0x0}, {@noload}, {@usrquota}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) flistxattr(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x12, 0xa, 0x4, 0x9, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000300), 0x0}, 0x20) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f0000000200)) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) 31.668203909s ago: executing program 2 (id=121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006ffff0027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x10000000000ac6}, 0x18) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x8) write$tun(0xffffffffffffffff, 0x0, 0x36) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0xa, 0x3, 0x3a) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r7}, 0xc) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) mount(&(0x7f0000000340)=@sr0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=zdm2x') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) pipe2(&(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r9, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="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", 0x341}], 0x1, 0xa) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', r7, 0x4, 0x76, 0x4, 0x2ac1, 0x15, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8000, 0x9, 0x6}}) fcntl$setpipe(r9, 0x407, 0x2) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r10, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 31.363214634s ago: executing program 2 (id=123): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8b3, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES16=r2], 0x1000f) 31.362717094s ago: executing program 32 (id=123): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8b3, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getitimer(0x0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x2) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRES16=r2], 0x1000f) 4.282335791s ago: executing program 1 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_io_uring_setup(0x7a8e, 0x0, &(0x7f0000000000)=0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0xf9ef, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 3.397360425s ago: executing program 1 (id=413): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000400)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6bd1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, r9, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_KEY={0x78, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x10, 0x4, "3b9559bc8ebdc50989e088fd"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8fcf55c3fae6914632bc543400"}, @NL80211_KEY_SEQ={0x10, 0x4, "ee2d504a56a56111509963d8"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4e802b354b"}, @NL80211_KEY_SEQ={0x11, 0x4, "ea3c443db3322f558166b2b12f"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x15}, 0x40000c0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5, 0x1}, 0x80, 0x0}, 0x24004859) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.107460056s ago: executing program 1 (id=439): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x5b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r0}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.83381696s ago: executing program 1 (id=445): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="aa1e16e494772557fd2e57d5351d0ffb5b84a539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964fcbb14d661cf07dc3e20eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef4f0dcedd348d4248d6bb248f1b00"/154, 0x9a}], 0x1, 0x0, 0x0, 0x44000}, 0x4008) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1.791694641s ago: executing program 1 (id=447): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000003c6fe8fc41b16b", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r5, 0x1, 0x0, 0x100000, {{}, {}, {0x0, 0x19, {0x1, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) 1.769064201s ago: executing program 1 (id=449): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r2 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r2, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x4000, 0x0) ioctl$RTC_IRQP_READ(r4, 0x8008700b, &(0x7f0000000400)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x40, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0x14, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6bd1}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0xa8, r9, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x29}}}}, [@NL80211_ATTR_KEY={0x78, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_SEQ={0x10, 0x4, "3b9559bc8ebdc50989e088fd"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8fcf55c3fae6914632bc543400"}, @NL80211_KEY_SEQ={0x10, 0x4, "ee2d504a56a56111509963d8"}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "4e802b354b"}, @NL80211_KEY_SEQ={0x11, 0x4, "ea3c443db3322f558166b2b12f"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0xa8}, 0x1, 0x0, 0x0, 0x15}, 0x40000c0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5, 0x1}, 0x80, 0x0}, 0x24004859) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.480316966s ago: executing program 4 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.439304076s ago: executing program 5 (id=453): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$netlink(0x10, 0x3, 0xa) 1.265389909s ago: executing program 5 (id=457): syz_emit_ethernet(0x6e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x38, 0x3a, 0x0, @private1, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0bae2b", 0x0, 0x2f, 0x0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@fragment={0x87}]}}}}}}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) socket$netlink(0x10, 0x3, 0xa) 1.251327019s ago: executing program 4 (id=458): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 1.167193861s ago: executing program 4 (id=459): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$igmp6(0xa, 0x3, 0x2) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, 0x0, 0x20000004) madvise(&(0x7f000084f000/0x1000)=nil, 0x1000, 0x2) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x2, &(0x7f0000000140)) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) read(r1, &(0x7f0000000200)=""/97, 0x61) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYBLOB="0000000008000000010009000c00"/27], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14a, 0x14a, 0x8, [@ptr={0x5, 0x0, 0x0, 0x2, 0x3}, @float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum64={0x2, 0x6, 0x0, 0x13, 0x1, 0xa, [{0x6, 0x4, 0x2}, {0x4, 0x380, 0x10001}, {0x8, 0x1000, 0xe}, {0x4, 0xefa, 0xffffffff}, {0xa, 0x5, 0x2c000}, {0x8, 0xfffffff8, 0x1ff}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0xf}, {0x0, 0x4}, {0x2, 0x4}, {0x0, 0x4}, {0xd, 0x3}, {0xe, 0x5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x6, 0x2}, {0x8, 0x3}, {0x4, 0x5}, {0xb}, {0xb}]}, @float={0x5}, @datasec={0xe, 0x4, 0x0, 0xf, 0x2, [{0x3, 0xfffffffd, 0x7}, {0x2, 0x3, 0xff}, {0x4, 0x5, 0x3}, {0x4, 0x3, 0x6}], "f6bf"}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x5a, 0x0, 0x6c, 0x4}, @float={0x8, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x5f, 0x2e, 0x61, 0x0, 0x5f]}}, &(0x7f0000000340)=""/220, 0x16c, 0xdc, 0x0, 0x401, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000740)='block_bio_remap\x00', 0xffffffffffffffff, 0x0, 0xb}, 0x18) sync() 1.166967691s ago: executing program 5 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2, r0}, 0x38) 1.124482322s ago: executing program 5 (id=461): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 910.835145ms ago: executing program 5 (id=464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r2, 0x0, 0x200}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r3, &(0x7f0000000380)="c908616fd479d69f87548f01611e1ee7feed358643133d7934", 0x19) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x6}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffc, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000080)='tracefs\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000340), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b7000000e9f9000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) syz_read_part_table(0x618, &(0x7f0000002200)="$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") r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r7, 0x0) write$selinux_load(r6, &(0x7f0000000000)=ANY=[], 0x44f0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="540000002800010001000000fcdbdf254400f2800c0018000aac0f00000000001400010000000000000000000000ffffac1414487afcd4a282c60b543d200e349e692d540014bb080013000000000000000000", @ANYRES32=0x0, @ANYBLOB="08009d80040018000400e600"], 0x54}], 0x1, 0x0, 0x0, 0x5}, 0x0) 689.879358ms ago: executing program 0 (id=469): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000001c0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x0) 672.207489ms ago: executing program 0 (id=471): r0 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) fstatfs(r0, &(0x7f00000003c0)=""/146) 607.15337ms ago: executing program 0 (id=472): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r6, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 530.834621ms ago: executing program 3 (id=474): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./cgroup\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000080)=@raw=[@tail_call], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000140)=[{0x0, 0x2, 0xa, 0x1}, {0x0, 0x4, 0x7, 0x9}, {0x1, 0x3, 0x3, 0x7}, {0x4, 0x2, 0x7, 0x5}, {0x1, 0x5, 0xe, 0x9}, {0x2, 0x2, 0x2, 0x7}, {0x4, 0x5, 0x3, 0xb}], 0x10, 0xd4e, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='block_plug\x00', r1, 0x0, 0x5c}, 0x18) (async) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)={0x10180, 0x81, 0x40}, 0x18) openat(r2, &(0x7f00000003c0)='./cgroup\x00', 0x800, 0x171) (async) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000002300)) 527.139831ms ago: executing program 0 (id=475): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='mm_page_alloc\x00', r0}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$phonet(0x23, 0x2, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000680), 0x2}, 0x38) 491.049432ms ago: executing program 3 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 489.836252ms ago: executing program 3 (id=477): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_format(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) r4 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x430, 0x98, 0x160, 0x160, 0x0, 0x220, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x3c8, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0xff, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {0xff}, {}, 0x6, 0x0, 0x40}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffffff, 0xff000000, 'veth1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0xff, 0x1, 0xc}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x7}}}, {{@ip={@rand_addr, @local, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00', {0xff}}, 0x0, 0xb8, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@socket0={{0x20}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, r3, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x12}, @val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x4}}}}}, 0x30}}, 0x8840) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) r6 = syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="020022449bdca6f0ffbbce27bd7000fddbdf250500000008000300", @ANYRES32=r7, @ANYBLOB="0c0099000300000006000000"], 0x28}}, 0xc000) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYBLOB="020027bd7000fddbdf25140000000800", @ANYRES32=r7, @ANYBLOB="0c009900040000003c00000008001400", @ANYBLOB="f728c4b1355253c3e638b85585ed3607c5981c7637b06db11d28a4e5d2d512c46bd9077e764e139836561bd09b84a26b904d67f85ce097cf4c9ff4c9916f33ed3d408ef07f76f8d4808e138ecc96ec3f13b72294a43e5fbbe9a4415448711a1df64f5a940b96154d799e26a6ee94fd422d669e4e194a1b28eb6955f5fde097be0471a1f65a95722a6ff5e82a48d250ed3299e88db38bdb0f25d976154abf3f5bbf2519e9239e01b184f4a3903cc67e3948", @ANYBLOB="0600120109000000"], 0x38}, 0x1, 0x0, 0x0, 0x4044084}, 0x40000) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x110, r3, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x35}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x5aa5}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcc}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x26}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x202}]}, @NL80211_ATTR_CQM={0x48, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xa}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x7eeb3eb9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x9}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x8001, 0x10]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6d}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xbb}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3ff}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4f07, 0x2, 0x8, 0xd543, 0xc]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0xf89, 0x5, 0x10, 0x0, 0x10001, 0x5, 0x3]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xd}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4804}, 0x4000847) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00') r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) getdents64(r11, &(0x7f0000000100)=""/54, 0x36) add_key$user(&(0x7f0000000340), &(0x7f0000000500)={'syz', 0x0}, &(0x7f0000000540)="b95337b4c4b7b19d7de41da8896385e1ad1572d8c4a80b832655c55b0edb06a4807b6e2202f9e6ec8122c3f55c92d4fdab93e72905748470f121aca16d319e1d66224a23177b8700c255bc39db83b8807153f5f3f5b26e88c4a50da32fbec52ac40cdc49dbb74c787959afbb5c97bd575315cdf82893e770dcbb7c5febd9f82c794d38efca7a12480faba30e7960832b3545ea9a0c39e0598990a2df10e7", 0x9e, 0xfffffffffffffffa) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0xef, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x8004) 454.926672ms ago: executing program 0 (id=478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}, r4}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000840)={0x3, 0x40, 0xfa02, {{0x0, 0x4e28, 0xfffffff7, @empty}, {0x2, 0x4e23, 0x6, @remote, 0x5852}, r4, 0x6}}, 0x48) 453.894902ms ago: executing program 0 (id=479): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, r0, 0xfffffffffffffffd, 0x0, 0x9, 0xff}) read$hidraw(r0, &(0x7f0000000200)=""/74, 0x4a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x380, 0xffffffff, 0x0, 0x218, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {0xff}, {}, 0xc, 0x2, 0x40}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x3, 0x3, 0x2, 0x5, 0x2], 0x2, 0x1}}}, @common=@ah={{0x30}, {[0x5, 0x2ede1cca], 0x1}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0x0, 0xffffffff, 0xff, 0xffffff00], 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0xe, 0x6, 0xaa, 0x0, 0x9}}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'bond0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x2f}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x0, 0x3, 0x7, 0x3, 0x6, 0x6], 0x5}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x0, 'ip6gre0\x00', '\x00', {0xff}, {}, 0x5c, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x0, 0x7, [0x3a, 0x31, 0x38, 0x5, 0x1f, 0x9, 0x3c, 0x11, 0x0, 0x39, 0x3c, 0x35, 0x16, 0x11, 0x32], 0x1, 0x7ff, 0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) close(r1) 395.358933ms ago: executing program 3 (id=480): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x3c, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 378.763914ms ago: executing program 3 (id=481): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xe0, &(0x7f0000000000)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r2, 0x0, 0x9}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = dup3(r1, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r8, 0x408c5333, &(0x7f0000000740)={0x8, 0x3, 0x1, 'queue1\x00', 0xff}) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) open$dir(0x0, 0x2100, 0x124) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x1) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 340.706044ms ago: executing program 4 (id=482): r0 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) fstatfs(r0, &(0x7f00000003c0)=""/146) 302.312295ms ago: executing program 4 (id=483): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f00000000c0)={[{@utf8}, {@map_off}, {@mode={'mode', 0x3d, 0x7d}}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@check_relaxed}, {@utf8}, {@check_strict}]}, 0x0, 0x558, &(0x7f0000000fc0)="$eJzs3V1v01gawPHHpYUqK6HV7gqhqsAB9qKVSnASCIq4AK9zkh5I7Mh2UHuFKpqiihRWlJW2vUHcsDvSzIfgdj7EXM+XQfMRMvJL6GuSDiVNB/1/EfjEPjnnsRP56YniYwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGK5VdsuWNIwXntFDeZWA7+59zR79ZEVsnhgMaRfESv+J7OzcjVddfUfe5uvxP/dkvn02bzMxotZ2f3Llb8+/Pv0VP/1QwI+E9s7u6/Wut3O20kHMkbXLg3eVteeCX3TdOpamdBXlXLZvrtcC1XNNHQos5FuKjfQTuQHamFqURUqlZLS+VW/7dWrTkOrBTdZ+eBO0bbL6km+pZ0g9L27T/Khu2waDePVkzrx5rjOg/iD+NREKtJOU6mNzW6nNGoH4kqFk1QqjqpUtIvFQqFYLJTvV+4/sO3pIyvsQ+RIjcl/aDFZ3/DsDZzOVJb/pSFGPGnLiqhjH65UJRBfmgO2ZxYfZYW7emi/+/N/P8tf3ds8J0n+v54+uz4o/w+I5ewe27Iju/JK1qQrXenI24lHNN6HJQePeV20eGIk/PRYjDTFSdaoeI34oqQiZSmLLc9lWWoSipKaGGmIlrD3Pnuvm8mnKxAtjkTiSyBKFsSVRVFSkIpUpCRKtORlVXxpiyd1qYqTtLIhm8lxLw2J+UulwsAquf7nriPFIS2R/3F63+rUDZxar5//h7h4ZtEAAAAAAIBxsJJv3+Px/4xcS0o109D2pMMCAAAAAADfUK/X68m8WPH4X0SuicX4HwAAAACA742VXGNniUhObqSlDbGSy6X4EgAAAAAAgO9EcuX/9XiRzIFyQ6wv06Uw/gcAAAAA4Dvx/8Fz7M9mVVqXrF9+kyCYsT60Vv5pbTnxSmfrQrr1wuEWo9qcdTlrJFmUp7Nnrp63stkv9ybBTHv5vDFqrn8rC8BKv7L4qgDkR7mZ1rm5ni7X+1vSXnI109B51288LIjjXJ6K9Er0n9eb/5Vk93/wmpct2djsdvIv3nTXk4PxIW7lw1Y2geKReRSHxPIumW8huebi2D2eSS7EyPrNpf3a/TfgsThbU+nLp07c5yP5KLdEZHqvbu7g/s/GfRbyg/Y+i6Jwyj3/KLfTOrcXbqeLY6IojoqiuD+KP3wsThhFaVQUpVNGAQCTsjEiC1lHE/9XnOVOnN1P8+eFfJSFtM7CXHJinZ475oxujzqj26fMbj8fuQfSoBwb9/vToaz6KX7Bp4H9ho2iFR/CC++2/i1Xtnd272xurb3svOy8LhZLZfuebd8vykyyG9mC3AMAOMboe+yMrGHdGzGq/tuXnxTk5YW8ka6sy1JytUHyi4NjW83t+xnCUjJqjYPN7tNyaNSaS9JkeoeXpSGjuovJVQ79dotD6x6MoTT+NwIAgDN0a0QePkn+Xxox7j6Yy4ePjnP77tYGAADGQwefrVz0PysITOt5oVIpONGyVoHvPlWBqda1Ml6kA3fZ8epatQI/8l2/EReemaoOVdhutfwgUjU/UC0/NCvKEktUuBpGuqlC3XS8yLhhq6GdUCvX9yLHjVTVhK5qtf/VMOGyDpIXhy3tmppxncj4ngr9duDqvFKh1morJ5JWNFXtRaZm4qKnWoFpOsGqeuY32k2tqjp0A9OK/LTBfl/Gq/lBM2k2P+mDDQDAObG9s/tqrdvtvB1jYdL7CAAADiJLAwAAAAAAAAAAAAAAAAAAAABw/p3F9X8Uxl5Y+bXXOwdhnJPCRTkXYfy5CyNPHe/P5AQFYGx+DwAA///jeFNb") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 301.288275ms ago: executing program 3 (id=484): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (fail_nth: 3) fcntl$dupfd(r0, 0x0, r0) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264"], 0x40}}, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file1\x00', 0x1c0da, &(0x7f0000002480)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="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", @ANYRES32], 0x1, 0x2b2, &(0x7f00000006c0)="$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") r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r3, 0x540a, 0x2) ioctl$TIOCSETD(r3, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffffdc2}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) write$binfmt_script(0xffffffffffffffff, &(0x7f00000002c0)={'#! ', './file1'}, 0xb) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x0) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x8360}, 0x8, 0x8, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0) shmdt(0x0) open(&(0x7f0000000080)='./bus\x00', 0x2461c4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000070200324a0516451f00f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) 11.03693ms ago: executing program 4 (id=485): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xa5d4}, 0x4c58, 0x2, 0x0, 0x1, 0x100, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xca45c19e68be943a}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c0}, 0x24048080) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000200000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000001, 0x80010, r7, 0x0) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r6, 0x0, r9, 0x0, 0x8, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getcwd(0x0, 0x0) 0s ago: executing program 5 (id=486): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(0x0, 0x0, 0xfffffffffffffff7, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='sched_switch\x00', r1}, 0x18) gettid() timer_create(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x20000, 0x2, 0x4, 0x10000}, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r3, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): 3498] loop2: p1 < > p4 [ 42.930233][ T3498] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.939795][ T3715] loop2: p1 < > p4 [ 42.944279][ T3715] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.980539][ T3715] SELinux: ebitmap: truncated map [ 42.986742][ T3715] SELinux: failed to load policy [ 43.060436][ T3721] FAULT_INJECTION: forcing a failure. [ 43.060436][ T3721] name failslab, interval 1, probability 0, space 0, times 0 [ 43.073185][ T3721] CPU: 0 UID: 0 PID: 3721 Comm: syz.2.85 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 43.073278][ T3721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.073291][ T3721] Call Trace: [ 43.073297][ T3721] [ 43.073305][ T3721] __dump_stack+0x1d/0x30 [ 43.073331][ T3721] dump_stack_lvl+0xe8/0x140 [ 43.073407][ T3721] dump_stack+0x15/0x1b [ 43.073499][ T3721] should_fail_ex+0x265/0x280 [ 43.073545][ T3721] should_failslab+0x8c/0xb0 [ 43.073607][ T3721] kmem_cache_alloc_noprof+0x50/0x310 [ 43.073643][ T3721] ? audit_log_start+0x365/0x6c0 [ 43.073683][ T3721] audit_log_start+0x365/0x6c0 [ 43.073728][ T3721] audit_seccomp+0x48/0x100 [ 43.073769][ T3721] ? __seccomp_filter+0x68c/0x10d0 [ 43.073792][ T3721] __seccomp_filter+0x69d/0x10d0 [ 43.073816][ T3721] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 43.073842][ T3721] ? vfs_write+0x75e/0x8e0 [ 43.073914][ T3721] __secure_computing+0x82/0x150 [ 43.073937][ T3721] syscall_trace_enter+0xcf/0x1e0 [ 43.073970][ T3721] do_syscall_64+0xac/0x200 [ 43.074006][ T3721] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 43.074062][ T3721] ? clear_bhb_loop+0x40/0x90 [ 43.074090][ T3721] ? clear_bhb_loop+0x40/0x90 [ 43.074185][ T3721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.074215][ T3721] RIP: 0033:0x7fa02c77e929 [ 43.074229][ T3721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 43.074245][ T3721] RSP: 002b:00007fa02ade7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 43.074335][ T3721] RAX: ffffffffffffffda RBX: 00007fa02c9a5fa0 RCX: 00007fa02c77e929 [ 43.074347][ T3721] RDX: 0000000000000000 RSI: 0000000000004800 RDI: 0000200000000000 [ 43.074357][ T3721] RBP: 00007fa02ade7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.074368][ T3721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.074379][ T3721] R13: 0000000000000000 R14: 00007fa02c9a5fa0 R15: 00007fff813031e8 [ 43.074396][ T3721] [ 43.418422][ T3730] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.462000][ T3633] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.472942][ T3730] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.484213][ T3731] netlink: 68 bytes leftover after parsing attributes in process `syz.4.89'. [ 43.494599][ T3731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.496472][ T3633] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.504826][ T3731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.518428][ T3633] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.531138][ T3730] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.546083][ T3633] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.577206][ T3730] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.646053][ T3730] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.658132][ T3730] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.670707][ T3730] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.684980][ T3730] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.768683][ T3745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 44.237435][ T29] kauditd_printk_skb: 803 callbacks suppressed [ 44.237454][ T29] audit: type=1400 audit(1749571835.854:1718): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 44.264587][ T3759] FAULT_INJECTION: forcing a failure. [ 44.264587][ T3759] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 44.277763][ T3759] CPU: 0 UID: 0 PID: 3759 Comm: syz.4.101 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 44.277799][ T3759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 44.277815][ T3759] Call Trace: [ 44.277823][ T3759] [ 44.277832][ T3759] __dump_stack+0x1d/0x30 [ 44.277878][ T3759] dump_stack_lvl+0xe8/0x140 [ 44.277927][ T3759] dump_stack+0x15/0x1b [ 44.277948][ T3759] should_fail_ex+0x265/0x280 [ 44.278063][ T3759] should_fail+0xb/0x20 [ 44.278093][ T3759] should_fail_usercopy+0x1a/0x20 [ 44.278113][ T3759] _copy_from_iter+0xcf/0xe40 [ 44.278210][ T3759] ? __build_skb_around+0x1a0/0x200 [ 44.278318][ T3759] ? __alloc_skb+0x223/0x320 [ 44.278361][ T3759] netlink_sendmsg+0x471/0x6b0 [ 44.278433][ T3759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 44.278462][ T3759] __sock_sendmsg+0x142/0x180 [ 44.278494][ T3759] ____sys_sendmsg+0x31e/0x4e0 [ 44.278523][ T3759] ___sys_sendmsg+0x17b/0x1d0 [ 44.278619][ T3759] __x64_sys_sendmsg+0xd4/0x160 [ 44.278645][ T3759] x64_sys_call+0x2999/0x2fb0 [ 44.278674][ T3759] do_syscall_64+0xd2/0x200 [ 44.278701][ T3759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 44.278760][ T3759] ? clear_bhb_loop+0x40/0x90 [ 44.278781][ T3759] ? clear_bhb_loop+0x40/0x90 [ 44.278804][ T3759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.278832][ T3759] RIP: 0033:0x7f9e7129e929 [ 44.278866][ T3759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.278889][ T3759] RSP: 002b:00007f9e6f907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 44.278913][ T3759] RAX: ffffffffffffffda RBX: 00007f9e714c5fa0 RCX: 00007f9e7129e929 [ 44.278930][ T3759] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 44.278981][ T3759] RBP: 00007f9e6f907090 R08: 0000000000000000 R09: 0000000000000000 [ 44.278997][ T3759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.279012][ T3759] R13: 0000000000000000 R14: 00007f9e714c5fa0 R15: 00007fff43745f98 [ 44.279036][ T3759] [ 44.494608][ T29] audit: type=1400 audit(1749571836.104:1719): avc: denied { read write } for pid=3760 comm="syz.2.103" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.518698][ T29] audit: type=1400 audit(1749571836.104:1720): avc: denied { open } for pid=3760 comm="syz.2.103" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 44.660147][ T29] audit: type=1326 audit(1749571836.274:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 44.713798][ T29] audit: type=1326 audit(1749571836.314:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 44.737516][ T29] audit: type=1326 audit(1749571836.314:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 44.761060][ T29] audit: type=1326 audit(1749571836.314:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 44.784583][ T29] audit: type=1326 audit(1749571836.314:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 44.805023][ T3774] loop4: detected capacity change from 0 to 512 [ 44.808296][ T29] audit: type=1326 audit(1749571836.314:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 44.825084][ T3774] EXT4-fs: inline encryption not supported [ 44.837673][ T29] audit: type=1326 audit(1749571836.314:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 44.843485][ T3774] EXT4-fs: Ignoring removed mblk_io_submit option [ 44.847139][ T3774] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.886606][ T3774] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 44.922740][ T3776] pim6reg1: entered promiscuous mode [ 44.928235][ T3776] pim6reg1: entered allmulticast mode [ 44.987441][ T3770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.105'. [ 45.038887][ T3774] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #17: comm syz.4.108: corrupted in-inode xattr: invalid ea_ino [ 45.064001][ T3774] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.108: couldn't read orphan inode 17 (err -117) [ 45.081923][ T3774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.233849][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.250780][ T3794] xt_TPROXY: Can be used only with -p tcp or -p udp [ 45.267416][ T3794] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 45.291557][ T3794] vlan2: entered allmulticast mode [ 45.351770][ T3795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 45.450339][ T3803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.116'. [ 45.493707][ T3799] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.513151][ T3805] FAULT_INJECTION: forcing a failure. [ 45.513151][ T3805] name failslab, interval 1, probability 0, space 0, times 0 [ 45.525926][ T3805] CPU: 0 UID: 0 PID: 3805 Comm: syz.2.117 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 45.525959][ T3805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 45.525975][ T3805] Call Trace: [ 45.525983][ T3805] [ 45.526051][ T3805] __dump_stack+0x1d/0x30 [ 45.526124][ T3805] dump_stack_lvl+0xe8/0x140 [ 45.526152][ T3805] dump_stack+0x15/0x1b [ 45.526185][ T3805] should_fail_ex+0x265/0x280 [ 45.526225][ T3805] should_failslab+0x8c/0xb0 [ 45.526251][ T3805] __kmalloc_noprof+0xa5/0x3e0 [ 45.526281][ T3805] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 45.526341][ T3805] kernfs_fop_write_iter+0xe1/0x2d0 [ 45.526369][ T3805] ? iov_iter_bvec+0xa4/0xd0 [ 45.526396][ T3805] iter_file_splice_write+0x5f2/0x970 [ 45.526505][ T3805] ? __pfx_iter_file_splice_write+0x10/0x10 [ 45.526669][ T3805] direct_splice_actor+0x156/0x2a0 [ 45.526707][ T3805] ? shmem_file_open+0x21/0x40 [ 45.526730][ T3805] splice_direct_to_actor+0x312/0x680 [ 45.526870][ T3805] ? __pfx_direct_splice_actor+0x10/0x10 [ 45.527023][ T3805] do_splice_direct+0xda/0x150 [ 45.527060][ T3805] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 45.527086][ T3805] do_sendfile+0x380/0x650 [ 45.527239][ T3805] __x64_sys_sendfile64+0x105/0x150 [ 45.527270][ T3805] x64_sys_call+0xb39/0x2fb0 [ 45.527293][ T3805] do_syscall_64+0xd2/0x200 [ 45.527373][ T3805] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.527402][ T3805] ? clear_bhb_loop+0x40/0x90 [ 45.527426][ T3805] ? clear_bhb_loop+0x40/0x90 [ 45.527490][ T3805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.527648][ T3805] RIP: 0033:0x7fa02c77e929 [ 45.527666][ T3805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.527687][ T3805] RSP: 002b:00007fa02ade7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 45.527708][ T3805] RAX: ffffffffffffffda RBX: 00007fa02c9a5fa0 RCX: 00007fa02c77e929 [ 45.527722][ T3805] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 45.527735][ T3805] RBP: 00007fa02ade7090 R08: 0000000000000000 R09: 0000000000000000 [ 45.527808][ T3805] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 45.527821][ T3805] R13: 0000000000000000 R14: 00007fa02c9a5fa0 R15: 00007fff813031e8 [ 45.527843][ T3805] [ 45.557330][ T3807] netlink: 'syz.1.114': attribute type 10 has an invalid length. [ 45.659075][ T3812] loop2: detected capacity change from 0 to 1024 [ 45.659205][ T3807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.114'. [ 45.693167][ T3812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.695301][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.716458][ T3812] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.826792][ T3807] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 45.859975][ T3812] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz.2.119: path /38/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 45.892445][ T3806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 45.908451][ T3799] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.917784][ T3812] EXT4-fs (loop2): Remounting filesystem read-only [ 45.966166][ T3819] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.989782][ T3822] loop4: detected capacity change from 0 to 1024 [ 46.000227][ T3822] EXT4-fs (loop4): orphan cleanup on readonly fs [ 46.008395][ T3822] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.122: Failed to acquire dquot type 0 [ 46.020883][ T3799] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.021945][ T3822] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 46.045377][ T3822] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.122: corrupted inode contents [ 46.057514][ T3822] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.122: mark_inode_dirty error [ 46.069304][ T3822] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.122: corrupted inode contents [ 46.069960][ T3819] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.082990][ T3822] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.122: mark_inode_dirty error [ 46.102909][ T3822] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.122: corrupted inode contents [ 46.115801][ T3822] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 46.124972][ T3822] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.122: corrupted inode contents [ 46.126031][ T3799] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.139666][ T3822] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.122: mark_inode_dirty error [ 46.159015][ T3822] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 46.159489][ T3820] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.169393][ T3822] EXT4-fs (loop4): 1 truncate cleaned up [ 46.183949][ T3819] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.184090][ T3822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.210201][ T3451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.253678][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.282183][ T3819] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.329066][ T3451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.373488][ T3819] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.399628][ T3819] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.418784][ T3451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.443045][ T3819] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.479915][ T3819] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.490253][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 46.560121][ T3451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.582622][ T3842] netlink: get zone limit has 8 unknown bytes [ 46.596499][ T3841] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 46.596499][ T3841] program syz.3.128 not setting count and/or reply_len properly [ 46.691074][ T3827] chnl_net:caif_netlink_parms(): no params data found [ 46.702501][ T3849] FAULT_INJECTION: forcing a failure. [ 46.702501][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 46.715281][ T3849] CPU: 0 UID: 0 PID: 3849 Comm: syz.3.130 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 46.715311][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.715324][ T3849] Call Trace: [ 46.715331][ T3849] [ 46.715388][ T3849] __dump_stack+0x1d/0x30 [ 46.715412][ T3849] dump_stack_lvl+0xe8/0x140 [ 46.715514][ T3849] dump_stack+0x15/0x1b [ 46.715534][ T3849] should_fail_ex+0x265/0x280 [ 46.715576][ T3849] should_failslab+0x8c/0xb0 [ 46.715602][ T3849] kmem_cache_alloc_node_noprof+0x57/0x320 [ 46.715647][ T3849] ? __alloc_skb+0x101/0x320 [ 46.715683][ T3849] __alloc_skb+0x101/0x320 [ 46.715717][ T3849] netlink_alloc_large_skb+0xba/0xf0 [ 46.715790][ T3849] netlink_sendmsg+0x3cf/0x6b0 [ 46.715873][ T3849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.715897][ T3849] __sock_sendmsg+0x142/0x180 [ 46.715928][ T3849] ____sys_sendmsg+0x31e/0x4e0 [ 46.715969][ T3849] ___sys_sendmsg+0x17b/0x1d0 [ 46.716011][ T3849] __x64_sys_sendmsg+0xd4/0x160 [ 46.716037][ T3849] x64_sys_call+0x2999/0x2fb0 [ 46.716067][ T3849] do_syscall_64+0xd2/0x200 [ 46.716089][ T3849] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 46.716190][ T3849] ? clear_bhb_loop+0x40/0x90 [ 46.716213][ T3849] ? clear_bhb_loop+0x40/0x90 [ 46.716236][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.716258][ T3849] RIP: 0033:0x7ff4f0e5e929 [ 46.716275][ T3849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.716369][ T3849] RSP: 002b:00007ff4ef4c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.716389][ T3849] RAX: ffffffffffffffda RBX: 00007ff4f1085fa0 RCX: 00007ff4f0e5e929 [ 46.716401][ T3849] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 46.716414][ T3849] RBP: 00007ff4ef4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 46.716444][ T3849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.716528][ T3849] R13: 0000000000000000 R14: 00007ff4f1085fa0 R15: 00007ffd557365c8 [ 46.716548][ T3849] [ 46.723320][ T3451] bridge_slave_1: left allmulticast mode [ 46.938229][ T3451] bridge_slave_1: left promiscuous mode [ 46.944029][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.963673][ T3451] bridge_slave_0: left promiscuous mode [ 46.969534][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.089172][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.099970][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.117111][ T3451] bond0 (unregistering): Released all slaves [ 47.181841][ T3827] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.189120][ T3827] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.197805][ T3827] bridge_slave_0: entered allmulticast mode [ 47.204387][ T3827] bridge_slave_0: entered promiscuous mode [ 47.213570][ T3827] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.220762][ T3827] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.231150][ T3827] bridge_slave_1: entered allmulticast mode [ 47.238840][ T3827] bridge_slave_1: entered promiscuous mode [ 47.289032][ T3827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.307583][ T3879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.132'. [ 47.320063][ T3451] hsr_slave_0: left promiscuous mode [ 47.332894][ T3451] hsr_slave_1: left promiscuous mode [ 47.340321][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.347968][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.358692][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.366402][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.379701][ T3451] veth1_macvtap: left promiscuous mode [ 47.385719][ T3451] veth0_macvtap: left promiscuous mode [ 47.391929][ T3451] veth1_vlan: left promiscuous mode [ 47.398033][ T3451] veth0_vlan: left promiscuous mode [ 47.473428][ T3894] loop4: detected capacity change from 0 to 2048 [ 47.495069][ T3898] process 'syz.0.134' launched './file1' with NULL argv: empty string added [ 47.516171][ T3894] loop4: p1 < > p4 [ 47.521276][ T3894] loop4: p4 size 8388608 extends beyond EOD, truncated [ 47.528625][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 47.539941][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 47.589185][ T3894] SELinux: ebitmap: truncated map [ 47.596177][ T3894] SELinux: failed to load policy [ 47.602683][ T3827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.634324][ T3827] team0: Port device team_slave_0 added [ 47.666878][ T3827] team0: Port device team_slave_1 added [ 47.741786][ T3827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.748886][ T3827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.774982][ T3827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.789055][ T3827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.796134][ T3827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.822231][ T3827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.911787][ T3908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.137'. [ 47.978932][ T3907] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.068310][ T3827] hsr_slave_0: entered promiscuous mode [ 48.074566][ T3827] hsr_slave_1: entered promiscuous mode [ 48.120728][ T3907] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.139335][ T3923] loop0: detected capacity change from 0 to 1024 [ 48.149159][ T3923] ext4: Bad value for 'max_dir_size_kb' [ 48.220093][ T3907] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.322446][ T3907] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.399322][ T3937] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.434075][ T3827] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.443970][ T3827] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.453515][ T3827] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.465472][ T3827] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.499785][ T3937] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.559075][ T3907] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.571649][ T3907] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.605952][ T3937] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.647146][ T3907] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.659458][ T3907] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.673938][ T3827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.694552][ T3827] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.726468][ T3971] xt_TPROXY: Can be used only with -p tcp or -p udp [ 48.739546][ T3937] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.757017][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.764116][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.773175][ T3971] syz!: rxe_newlink: already configured on team_slave_0 [ 48.782321][ T3799] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.793134][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.800309][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.813176][ T3971] vlan2: entered allmulticast mode [ 48.828574][ T3799] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.842705][ T3799] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.854567][ T3799] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.883225][ T3973] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 48.883225][ T3973] program syz.3.143 not setting count and/or reply_len properly [ 48.914626][ T3827] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.925191][ T3827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.027668][ T3827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.130418][ T3995] SELinux: ebitmap: truncated map [ 49.136877][ T3995] SELinux: failed to load policy [ 49.298232][ T29] kauditd_printk_skb: 570 callbacks suppressed [ 49.298252][ T29] audit: type=1326 audit(1749571840.814:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e712958e7 code=0x7ffc0000 [ 49.327755][ T29] audit: type=1326 audit(1749571840.814:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e7123ab19 code=0x7ffc0000 [ 49.351062][ T29] audit: type=1326 audit(1749571840.814:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 49.374409][ T29] audit: type=1326 audit(1749571840.824:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e712958e7 code=0x7ffc0000 [ 49.397789][ T29] audit: type=1326 audit(1749571840.824:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e7123ab19 code=0x7ffc0000 [ 49.421327][ T29] audit: type=1326 audit(1749571840.824:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 49.444748][ T29] audit: type=1326 audit(1749571840.834:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e712958e7 code=0x7ffc0000 [ 49.468028][ T29] audit: type=1326 audit(1749571840.834:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e7123ab19 code=0x7ffc0000 [ 49.491373][ T29] audit: type=1326 audit(1749571840.834:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f9e7129e929 code=0x7ffc0000 [ 49.514702][ T29] audit: type=1326 audit(1749571840.844:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3976 comm="syz.4.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e712958e7 code=0x7ffc0000 [ 49.547402][ T4017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 49.603507][ T3827] veth0_vlan: entered promiscuous mode [ 49.613774][ T3827] veth1_vlan: entered promiscuous mode [ 49.645349][ T3827] veth0_macvtap: entered promiscuous mode [ 49.663119][ T3827] veth1_macvtap: entered promiscuous mode [ 49.683872][ T3827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.701507][ T3827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.713662][ T3827] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.722532][ T3827] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.731324][ T3827] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.740146][ T3827] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.953653][ T4067] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.981637][ T4061] loop5: detected capacity change from 0 to 256 [ 49.991942][ T4061] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 50.024881][ T4073] xt_TPROXY: Can be used only with -p tcp or -p udp [ 50.033153][ T4073] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.034391][ T4074] futex_wake_op: syz.3.152 tries to shift op by -1; fix this program [ 50.049488][ T4073] vlan2: entered allmulticast mode [ 50.062296][ T4067] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.136944][ T4067] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.178586][ T4067] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.224011][ T4080] netlink: 12 bytes leftover after parsing attributes in process `syz.5.157'. [ 50.490390][ T4102] FAULT_INJECTION: forcing a failure. [ 50.490390][ T4102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.503677][ T4102] CPU: 0 UID: 0 PID: 4102 Comm: syz.5.163 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 50.503711][ T4102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.503743][ T4102] Call Trace: [ 50.503757][ T4102] [ 50.503765][ T4102] __dump_stack+0x1d/0x30 [ 50.503787][ T4102] dump_stack_lvl+0xe8/0x140 [ 50.503807][ T4102] dump_stack+0x15/0x1b [ 50.503823][ T4102] should_fail_ex+0x265/0x280 [ 50.503873][ T4102] should_fail+0xb/0x20 [ 50.503905][ T4102] should_fail_usercopy+0x1a/0x20 [ 50.504003][ T4102] _copy_from_user+0x1c/0xb0 [ 50.504028][ T4102] copy_bpf_fprog_from_user+0x107/0x1e0 [ 50.504123][ T4102] fanout_set_data+0x153/0x330 [ 50.504156][ T4102] packet_setsockopt+0x68a/0xfd0 [ 50.504279][ T4102] ? __pfx_packet_setsockopt+0x10/0x10 [ 50.504311][ T4102] __sys_setsockopt+0x184/0x200 [ 50.504351][ T4102] __x64_sys_setsockopt+0x64/0x80 [ 50.504371][ T4102] x64_sys_call+0x2bd5/0x2fb0 [ 50.504393][ T4102] do_syscall_64+0xd2/0x200 [ 50.504415][ T4102] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.504490][ T4102] ? clear_bhb_loop+0x40/0x90 [ 50.504558][ T4102] ? clear_bhb_loop+0x40/0x90 [ 50.504625][ T4102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.504647][ T4102] RIP: 0033:0x7f79d286e929 [ 50.504722][ T4102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.504741][ T4102] RSP: 002b:00007f79d0ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.504768][ T4102] RAX: ffffffffffffffda RBX: 00007f79d2a95fa0 RCX: 00007f79d286e929 [ 50.504781][ T4102] RDX: 0000000000000016 RSI: 0000000000000107 RDI: 0000000000000006 [ 50.504793][ T4102] RBP: 00007f79d0ed7090 R08: 0000000000000010 R09: 0000000000000000 [ 50.504805][ T4102] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 50.504857][ T4102] R13: 0000000000000000 R14: 00007f79d2a95fa0 R15: 00007ffc512be168 [ 50.504877][ T4102] [ 50.740014][ T4105] xt_TPROXY: Can be used only with -p tcp or -p udp [ 50.740512][ T4106] netlink: 248 bytes leftover after parsing attributes in process `syz.5.165'. [ 50.748959][ T4105] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 50.762571][ T4106] loop5: detected capacity change from 0 to 256 [ 50.772840][ T4105] vlan2: entered allmulticast mode [ 50.978591][ T4111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 51.047382][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 51.124339][ T4125] syzkaller0: entered promiscuous mode [ 51.130069][ T4125] syzkaller0: entered allmulticast mode [ 51.138879][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.172'. [ 51.228387][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 51.235949][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 51.243389][ T23] hid-generic 0000:0004:0000.0001: unknown main item tag 0x0 [ 51.251326][ T23] hid-generic 0000:0004:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 51.269496][ T3937] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.281185][ T3937] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.297467][ T3937] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.309148][ T3937] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.355653][ T4131] fido_id[4131]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 51.387653][ T4137] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 51.414487][ T4143] xt_TPROXY: Can be used only with -p tcp or -p udp [ 51.422593][ T4143] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 51.437141][ T4143] vlan2: entered allmulticast mode [ 51.523942][ T4153] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 51.531828][ T4153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.183'. [ 51.546784][ T4153] team0: Port device geneve1 added [ 51.558996][ T4153] netlink: 5 bytes leftover after parsing attributes in process `syz.3.183'. [ 51.568082][ T4153] 0{X: renamed from gretap0 (while UP) [ 51.575686][ T4153] 0{X: entered allmulticast mode [ 51.581916][ T4153] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 51.675541][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 51.730288][ T4161] syzkaller0: entered promiscuous mode [ 51.736000][ T4161] syzkaller0: entered allmulticast mode [ 51.743310][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.188'. [ 51.755593][ T4164] netlink: 488 bytes leftover after parsing attributes in process `+}[@'. [ 51.863308][ T4174] FAULT_INJECTION: forcing a failure. [ 51.863308][ T4174] name failslab, interval 1, probability 0, space 0, times 0 [ 51.876165][ T4174] CPU: 0 UID: 0 PID: 4174 Comm: syz.0.193 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 51.876199][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 51.876211][ T4174] Call Trace: [ 51.876217][ T4174] [ 51.876225][ T4174] __dump_stack+0x1d/0x30 [ 51.876320][ T4174] dump_stack_lvl+0xe8/0x140 [ 51.876364][ T4174] dump_stack+0x15/0x1b [ 51.876387][ T4174] should_fail_ex+0x265/0x280 [ 51.876432][ T4174] should_failslab+0x8c/0xb0 [ 51.876462][ T4174] kmem_cache_alloc_node_noprof+0x57/0x320 [ 51.876659][ T4174] ? __alloc_skb+0x101/0x320 [ 51.876706][ T4174] __alloc_skb+0x101/0x320 [ 51.876750][ T4174] mpls_netconf_notify_devconf+0x46/0x100 [ 51.876809][ T4174] mpls_dev_sysctl_unregister+0x6b/0x80 [ 51.876852][ T4174] ? __pfx_mpls_dev_notify+0x10/0x10 [ 51.876937][ T4174] mpls_dev_notify+0x7a7/0x8d0 [ 51.876984][ T4174] ? __pfx_batadv_hard_if_event+0x10/0x10 [ 51.877069][ T4174] ? batadv_hard_if_event+0x217/0x1070 [ 51.877114][ T4174] ? ovs_netdev_get_vport+0x5a/0x60 [ 51.877140][ T4174] ? __pfx_mpls_dev_notify+0x10/0x10 [ 51.877183][ T4174] raw_notifier_call_chain+0x6c/0x1b0 [ 51.877249][ T4174] ? call_netdevice_notifiers_info+0x9c/0x100 [ 51.877370][ T4174] call_netdevice_notifiers_info+0xae/0x100 [ 51.877401][ T4174] unregister_netdevice_many_notify+0xd9d/0x1690 [ 51.877436][ T4174] unregister_netdevice_queue+0x1f5/0x220 [ 51.877482][ T4174] unregister_netdev+0xb3/0xe0 [ 51.877511][ T4174] slip_close+0xe4/0x100 [ 51.877544][ T4174] ? __pfx_slip_close+0x10/0x10 [ 51.877608][ T4174] tty_ldisc_close+0x74/0xa0 [ 51.877659][ T4174] tty_set_ldisc+0x1b9/0x380 [ 51.877702][ T4174] tiocsetd+0x51/0x60 [ 51.877768][ T4174] tty_ioctl+0xa7f/0xb80 [ 51.877882][ T4174] ? __pfx_tty_ioctl+0x10/0x10 [ 51.877937][ T4174] __se_sys_ioctl+0xce/0x140 [ 51.877978][ T4174] __x64_sys_ioctl+0x43/0x50 [ 51.878086][ T4174] x64_sys_call+0x19a8/0x2fb0 [ 51.878112][ T4174] do_syscall_64+0xd2/0x200 [ 51.878138][ T4174] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 51.878258][ T4174] ? clear_bhb_loop+0x40/0x90 [ 51.878285][ T4174] ? clear_bhb_loop+0x40/0x90 [ 51.878312][ T4174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.878337][ T4174] RIP: 0033:0x7f325f6ae929 [ 51.878357][ T4174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 51.878460][ T4174] RSP: 002b:00007f325dd17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 51.878485][ T4174] RAX: ffffffffffffffda RBX: 00007f325f8d5fa0 RCX: 00007f325f6ae929 [ 51.878501][ T4174] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 51.878517][ T4174] RBP: 00007f325dd17090 R08: 0000000000000000 R09: 0000000000000000 [ 51.878533][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.878548][ T4174] R13: 0000000000000000 R14: 00007f325f8d5fa0 R15: 00007ffe23833ac8 [ 51.878648][ T4174] [ 52.215246][ T4174] Falling back ldisc for ttyS3. [ 52.221317][ T4182] netlink: 'syz.5.194': attribute type 10 has an invalid length. [ 52.239120][ T4185] futex_wake_op: syz.3.191 tries to shift op by -1; fix this program [ 52.258259][ T4182] team0: Port device geneve1 added [ 52.288540][ T4192] 0{X: renamed from gretap0 (while UP) [ 52.309351][ T4192] 0{X: entered allmulticast mode [ 52.316742][ T4192] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 52.406171][ T4207] netlink: 'syz.5.197': attribute type 5 has an invalid length. [ 52.419675][ T4207] netlink: 'syz.5.197': attribute type 13 has an invalid length. [ 52.475996][ T4207] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.483356][ T4207] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.527039][ T4207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.538325][ T4207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.573077][ T4207] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.582156][ T4207] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.591134][ T4207] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.600126][ T4207] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.712245][ T4227] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.758677][ T4230] netlink: 'syz.3.201': attribute type 10 has an invalid length. [ 52.768813][ T4230] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 52.849595][ T4227] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.870489][ T4232] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.888325][ T4227] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.919709][ T4233] netlink: 'syz.0.202': attribute type 10 has an invalid length. [ 52.932076][ T4233] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 52.941148][ T4233] team0: Failed to send options change via netlink (err -105) [ 52.948881][ T4233] team0: Port device geneve1 added [ 52.957176][ T4232] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.970220][ T4227] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.006762][ T4232] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.042525][ T4227] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.054035][ T4227] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.065827][ T4227] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.078037][ T4227] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.087814][ T4232] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.516963][ T4252] loop5: detected capacity change from 0 to 2048 [ 54.565638][ T3498] loop5: p1 < > p4 [ 54.579780][ T3498] loop5: p4 size 8388608 extends beyond EOD, truncated [ 54.606231][ T4252] loop5: p1 < > p4 [ 54.616963][ T4252] loop5: p4 size 8388608 extends beyond EOD, truncated [ 54.754192][ T4252] SELinux: ebitmap: truncated map [ 54.803503][ T4252] SELinux: failed to load policy [ 55.075547][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 55.075562][ T29] audit: type=1400 audit(1749571846.684:2619): avc: denied { write } for pid=4262 comm="syz.4.210" path="socket:[7820]" dev="sockfs" ino=7820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 55.309701][ T29] audit: type=1326 audit(1749571846.924:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4267 comm="syz.4.211" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e7129e929 code=0x0 [ 55.412395][ T4268] loop4: detected capacity change from 0 to 512 [ 55.439492][ T4232] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.462893][ T4232] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.518842][ T4232] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.525191][ T4268] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 55.536146][ T4232] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.656447][ T4268] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.211: iget: bad i_size value: 12154757448730 [ 55.689355][ T4277] __nla_validate_parse: 9 callbacks suppressed [ 55.689375][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.213'. [ 55.728909][ T4268] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.211: couldn't read orphan inode 13 (err -117) [ 55.784027][ T4268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.879782][ T4281] xt_TPROXY: Can be used only with -p tcp or -p udp [ 55.887537][ T4281] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 55.900708][ T4281] vlan2: entered allmulticast mode [ 55.906454][ T29] audit: type=1326 audit(1749571847.514:2621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 55.929946][ T29] audit: type=1326 audit(1749571847.514:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 55.953320][ T29] audit: type=1326 audit(1749571847.514:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 55.976756][ T29] audit: type=1326 audit(1749571847.514:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 55.989295][ T4268] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 56.000170][ T29] audit: type=1326 audit(1749571847.514:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 56.033587][ T29] audit: type=1326 audit(1749571847.514:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 56.088048][ T4287] EXT4-fs warning (device loop4): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 56.115731][ T29] audit: type=1326 audit(1749571847.734:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 56.139132][ T29] audit: type=1326 audit(1749571847.734:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.5.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79d286e929 code=0x7ffc0000 [ 56.172950][ T4287] netlink: 'syz.4.211': attribute type 10 has an invalid length. [ 56.180850][ T4287] netlink: 40 bytes leftover after parsing attributes in process `syz.4.211'. [ 56.246293][ T4268] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.341790][ T4296] syzkaller0: entered promiscuous mode [ 56.347371][ T4296] syzkaller0: entered allmulticast mode [ 56.353611][ T4300] netlink: 'syz.1.217': attribute type 10 has an invalid length. [ 56.361701][ T4300] netlink: 40 bytes leftover after parsing attributes in process `syz.1.217'. [ 56.370988][ T4301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.218'. [ 56.386167][ T4287] team0: Port device geneve1 added [ 56.394272][ T4293] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.437211][ T4268] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.456760][ T4293] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.526684][ T4293] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.539351][ T4305] netlink: 'syz.5.220': attribute type 10 has an invalid length. [ 56.547301][ T4305] netlink: 40 bytes leftover after parsing attributes in process `syz.5.220'. [ 56.557045][ T4305] netlink: 5 bytes leftover after parsing attributes in process `syz.5.220'. [ 56.566087][ T4305] 1{X: renamed from 30{X [ 56.578971][ T4305] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 56.624436][ T4307] FAULT_INJECTION: forcing a failure. [ 56.624436][ T4307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 56.637631][ T4307] CPU: 0 UID: 0 PID: 4307 Comm: syz.5.221 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 56.637727][ T4307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.637784][ T4307] Call Trace: [ 56.637794][ T4307] [ 56.637805][ T4307] __dump_stack+0x1d/0x30 [ 56.637833][ T4307] dump_stack_lvl+0xe8/0x140 [ 56.637857][ T4307] dump_stack+0x15/0x1b [ 56.637908][ T4307] should_fail_ex+0x265/0x280 [ 56.637944][ T4307] should_fail+0xb/0x20 [ 56.638051][ T4307] should_fail_usercopy+0x1a/0x20 [ 56.638079][ T4307] _copy_from_user+0x1c/0xb0 [ 56.638110][ T4307] ip6_tnl_siocdevprivate+0x132/0x920 [ 56.638229][ T4307] dev_ifsioc+0x8f5/0xaa0 [ 56.638259][ T4307] dev_ioctl+0x78d/0x960 [ 56.638319][ T4307] sock_ioctl+0x593/0x610 [ 56.638352][ T4307] ? __pfx_sock_ioctl+0x10/0x10 [ 56.638383][ T4307] __se_sys_ioctl+0xce/0x140 [ 56.638442][ T4307] __x64_sys_ioctl+0x43/0x50 [ 56.638472][ T4307] x64_sys_call+0x19a8/0x2fb0 [ 56.638529][ T4307] do_syscall_64+0xd2/0x200 [ 56.638557][ T4307] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 56.638609][ T4307] ? clear_bhb_loop+0x40/0x90 [ 56.638638][ T4307] ? clear_bhb_loop+0x40/0x90 [ 56.638667][ T4307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.638763][ T4307] RIP: 0033:0x7f79d286e929 [ 56.638784][ T4307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.638808][ T4307] RSP: 002b:00007f79d0ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 56.638863][ T4307] RAX: ffffffffffffffda RBX: 00007f79d2a95fa0 RCX: 00007f79d286e929 [ 56.638880][ T4307] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000007 [ 56.638895][ T4307] RBP: 00007f79d0ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 56.638977][ T4307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.638994][ T4307] R13: 0000000000000000 R14: 00007f79d2a95fa0 R15: 00007ffc512be168 [ 56.639019][ T4307] [ 56.850277][ T4293] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.914207][ T4293] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.925962][ T4293] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.937423][ T4293] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.948831][ T4293] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.985962][ T4317] netlink: 'syz.1.225': attribute type 10 has an invalid length. [ 56.993875][ T4317] netlink: 40 bytes leftover after parsing attributes in process `syz.1.225'. [ 57.006638][ T4317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 57.554534][ T4332] netlink: 'syz.5.232': attribute type 10 has an invalid length. [ 57.562480][ T4332] netlink: 40 bytes leftover after parsing attributes in process `syz.5.232'. [ 57.572021][ T4332] netlink: 5 bytes leftover after parsing attributes in process `syz.5.232'. [ 57.580973][ T4332] 0{X: renamed from 31{X (while UP) [ 57.590872][ T4332] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 58.195236][ T4272] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 58.557558][ T4355] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.605634][ T4357] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 58.614391][ T4355] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.676626][ T4355] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.726597][ T4355] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.871554][ T4355] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.883348][ T4355] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.894772][ T4355] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.906507][ T4355] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.962408][ T4361] xt_TPROXY: Can be used only with -p tcp or -p udp [ 58.969880][ T4361] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 58.981812][ T4361] vlan2: entered allmulticast mode [ 59.240419][ T4376] FAULT_INJECTION: forcing a failure. [ 59.240419][ T4376] name failslab, interval 1, probability 0, space 0, times 0 [ 59.253149][ T4376] CPU: 0 UID: 0 PID: 4376 Comm: syz.3.243 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 59.253259][ T4376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 59.253270][ T4376] Call Trace: [ 59.253277][ T4376] [ 59.253284][ T4376] __dump_stack+0x1d/0x30 [ 59.253303][ T4376] dump_stack_lvl+0xe8/0x140 [ 59.253320][ T4376] dump_stack+0x15/0x1b [ 59.253334][ T4376] should_fail_ex+0x265/0x280 [ 59.253390][ T4376] should_failslab+0x8c/0xb0 [ 59.253411][ T4376] __kmalloc_noprof+0xa5/0x3e0 [ 59.253434][ T4376] ? bpf_test_init+0xa9/0x160 [ 59.253452][ T4376] bpf_test_init+0xa9/0x160 [ 59.253507][ T4376] bpf_prog_test_run_xdp+0x274/0x910 [ 59.253525][ T4376] ? kstrtouint+0x76/0xc0 [ 59.253552][ T4376] ? __rcu_read_unlock+0x4f/0x70 [ 59.253575][ T4376] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 59.253645][ T4376] bpf_prog_test_run+0x227/0x390 [ 59.253677][ T4376] __sys_bpf+0x3dc/0x790 [ 59.253809][ T4376] __x64_sys_bpf+0x41/0x50 [ 59.253847][ T4376] x64_sys_call+0x2478/0x2fb0 [ 59.253866][ T4376] do_syscall_64+0xd2/0x200 [ 59.253955][ T4376] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 59.253978][ T4376] ? clear_bhb_loop+0x40/0x90 [ 59.253997][ T4376] ? clear_bhb_loop+0x40/0x90 [ 59.254073][ T4376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.254092][ T4376] RIP: 0033:0x7ff4f0e5e929 [ 59.254129][ T4376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.254144][ T4376] RSP: 002b:00007ff4ef4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.254213][ T4376] RAX: ffffffffffffffda RBX: 00007ff4f1085fa0 RCX: 00007ff4f0e5e929 [ 59.254224][ T4376] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 59.254235][ T4376] RBP: 00007ff4ef4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.254245][ T4376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.254261][ T4376] R13: 0000000000000000 R14: 00007ff4f1085fa0 R15: 00007ffd557365c8 [ 59.254278][ T4376] [ 59.525818][ T4382] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.575917][ T4384] netlink: 'syz.3.246': attribute type 10 has an invalid length. [ 59.576975][ T4382] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.646535][ T4382] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.678437][ T4387] loop5: detected capacity change from 0 to 2048 [ 59.697006][ T4382] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.705775][ T3498] loop5: p1 < > p4 [ 59.711282][ T3498] loop5: p4 size 8388608 extends beyond EOD, truncated [ 59.722377][ T4387] loop5: p1 < > p4 [ 59.727022][ T4387] loop5: p4 size 8388608 extends beyond EOD, truncated [ 59.787874][ T4387] SELinux: ebitmap: truncated map [ 59.793893][ T4387] SELinux: failed to load policy [ 60.508880][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 60.508900][ T29] audit: type=1400 audit(1749571852.124:2716): avc: denied { append } for pid=4414 comm="syz.5.248" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 60.542037][ T4415] loop5: detected capacity change from 0 to 128 [ 60.559310][ T4415] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.571732][ T4415] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.606497][ T29] audit: type=1400 audit(1749571852.224:2717): avc: denied { read append open } for pid=4414 comm="syz.5.248" path="/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/freezer.self_freezing" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.654160][ T4415] EXT4-fs (loop5): shut down requested (0) [ 60.674695][ T3827] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.684898][ T29] audit: type=1400 audit(1749571852.264:2718): avc: denied { ioctl } for pid=4414 comm="syz.5.248" path="/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/blkio.bfq.idle_time" dev="loop5" ino=13 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.731762][ T29] audit: type=1400 audit(1749571852.274:2719): avc: denied { read } for pid=2979 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 60.754046][ T29] audit: type=1400 audit(1749571852.274:2720): avc: denied { search } for pid=2979 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.775774][ T29] audit: type=1400 audit(1749571852.274:2721): avc: denied { search } for pid=2979 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.797399][ T29] audit: type=1400 audit(1749571852.274:2722): avc: denied { add_name } for pid=2979 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.818302][ T29] audit: type=1400 audit(1749571852.274:2723): avc: denied { create } for pid=2979 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.839156][ T29] audit: type=1400 audit(1749571852.274:2724): avc: denied { append open } for pid=2979 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.862653][ T29] audit: type=1400 audit(1749571852.274:2725): avc: denied { getattr } for pid=2979 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 60.911922][ T4437] xt_TPROXY: Can be used only with -p tcp or -p udp [ 60.919311][ T4437] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 60.931224][ T4437] vlan2: entered allmulticast mode [ 61.061032][ T4454] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 61.088570][ T4462] __nla_validate_parse: 3 callbacks suppressed [ 61.088591][ T4462] netlink: 64 bytes leftover after parsing attributes in process `syz.0.254'. [ 61.138431][ T4466] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.169317][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.187598][ T4468] netlink: 'syz.0.256': attribute type 10 has an invalid length. [ 61.195417][ T4468] netlink: 40 bytes leftover after parsing attributes in process `syz.0.256'. [ 61.228929][ T4468] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 61.242596][ T4466] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.262838][ T4468] netlink: 5 bytes leftover after parsing attributes in process `syz.0.256'. [ 61.283153][ T4468] 0{X: renamed from gretap0 (while UP) [ 61.290573][ T4468] 0{X: entered allmulticast mode [ 61.297538][ T4468] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 61.334496][ T4482] loop4: detected capacity change from 0 to 128 [ 61.430135][ T4466] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.516573][ T4466] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.558860][ T4482] netlink: 'syz.4.257': attribute type 13 has an invalid length. [ 62.158263][ T4482] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.165627][ T4482] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.228619][ T4507] netlink: '': attribute type 13 has an invalid length. [ 62.253985][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.266169][ T4482] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.379189][ T4466] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.392025][ T4466] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.448840][ T4466] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.461061][ T4466] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.519524][ T4524] xt_TPROXY: Can be used only with -p tcp or -p udp [ 62.526622][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.526622][ T3451] loop4: rw=1, sector=145, nr_sectors = 32 limit=128 [ 62.527170][ T4524] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 62.554327][ T4524] vlan2: entered allmulticast mode [ 62.563980][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.563980][ T3451] loop4: rw=1, sector=185, nr_sectors = 16 limit=128 [ 62.578757][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.578757][ T3451] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 62.593263][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.593263][ T3451] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 62.611685][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.611685][ T3451] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 62.626671][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.626671][ T3451] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 62.640607][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.640607][ T3451] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 62.654236][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.654236][ T3451] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 62.764829][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.764829][ T3451] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 62.778913][ T3451] kworker/u8:8: attempt to access beyond end of device [ 62.778913][ T3451] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 63.224487][ T4562] futex_wake_op: syz.0.269 tries to shift op by -1; fix this program [ 63.386251][ T4566] IPv6: NLM_F_CREATE should be specified when creating new route [ 63.397038][ T4566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.408206][ T4566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.501832][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 63.510832][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 63.723393][ T4581] syz.0.277 (4581) used greatest stack depth: 9768 bytes left [ 63.901759][ T4382] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.913273][ T4382] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.927103][ T4382] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.938795][ T4382] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.989274][ T4593] netlink: get zone limit has 8 unknown bytes [ 64.499380][ T4608] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 64.663537][ T4626] netlink: get zone limit has 8 unknown bytes [ 64.676406][ T4622] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.767258][ T4622] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.846454][ T4629] SELinux: Context G is not valid (left unmapped). [ 64.873293][ T4622] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.952469][ T4622] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.055362][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 65.064235][ T4639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 65.073759][ T4640] netlink: 'syz.5.290': attribute type 10 has an invalid length. [ 65.081595][ T4640] netlink: 40 bytes leftover after parsing attributes in process `syz.5.290'. [ 65.208613][ T4622] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.250621][ T4648] netlink: 292 bytes leftover after parsing attributes in process `syz.3.296'. [ 65.323653][ T4622] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.334639][ T4648] $H: renamed from bond0 (while UP) [ 65.342902][ T4648] $H: entered promiscuous mode [ 65.348068][ T4648] bond_slave_0: entered promiscuous mode [ 65.353869][ T4648] bond_slave_1: entered promiscuous mode [ 65.437730][ T4622] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.487360][ T4622] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.524629][ T4659] pimreg: entered allmulticast mode [ 65.535453][ T29] kauditd_printk_skb: 684 callbacks suppressed [ 65.535470][ T29] audit: type=1326 audit(1749571857.154:3410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.575437][ T29] audit: type=1326 audit(1749571857.184:3411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.598896][ T29] audit: type=1326 audit(1749571857.184:3412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.622306][ T29] audit: type=1326 audit(1749571857.184:3413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.645972][ T29] audit: type=1326 audit(1749571857.184:3414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.669479][ T29] audit: type=1326 audit(1749571857.184:3415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.692904][ T29] audit: type=1326 audit(1749571857.184:3416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.716303][ T29] audit: type=1326 audit(1749571857.184:3417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.739732][ T29] audit: type=1326 audit(1749571857.184:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.763049][ T29] audit: type=1326 audit(1749571857.184:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4658 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e03dde929 code=0x7ffc0000 [ 65.891741][ T4658] pimreg: left allmulticast mode [ 65.900808][ T4666] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.916624][ T4674] netlink: 'syz.3.302': attribute type 10 has an invalid length. [ 65.989323][ T4674] 1{X: renamed from 30{X (while UP) [ 66.001350][ T4674] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 66.036988][ T4666] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.098127][ T4666] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.138953][ T4666] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.228545][ T4686] __nla_validate_parse: 2 callbacks suppressed [ 66.228563][ T4686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.307'. [ 66.262806][ T4680] futex_wake_op: syz.1.304 tries to shift op by -1; fix this program [ 66.330823][ T4689] netlink: 12 bytes leftover after parsing attributes in process `syz.4.308'. [ 66.555467][ T4694] loop5: detected capacity change from 0 to 512 [ 66.562665][ T4694] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.574913][ T4694] EXT4-fs (loop5): 1 truncate cleaned up [ 66.581506][ T4694] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.599687][ T4697] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 66.622990][ T4697] syz.5.309 (4697) used greatest stack depth: 9064 bytes left [ 66.633081][ T3827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.751830][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.313'. [ 66.760772][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.313'. [ 67.012740][ T4707] futex_wake_op: syz.4.311 tries to shift op by -1; fix this program [ 67.190230][ T4729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.322'. [ 67.200934][ T4729] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 67.258815][ T4737] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.290319][ T4741] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.303466][ T4737] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.329961][ T4744] FAULT_INJECTION: forcing a failure. [ 67.329961][ T4744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.343141][ T4744] CPU: 1 UID: 0 PID: 4744 Comm: syz.1.328 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 67.343172][ T4744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.343186][ T4744] Call Trace: [ 67.343194][ T4744] [ 67.343201][ T4744] __dump_stack+0x1d/0x30 [ 67.343294][ T4744] dump_stack_lvl+0xe8/0x140 [ 67.343319][ T4744] dump_stack+0x15/0x1b [ 67.343340][ T4744] should_fail_ex+0x265/0x280 [ 67.343452][ T4744] should_fail+0xb/0x20 [ 67.343481][ T4744] should_fail_usercopy+0x1a/0x20 [ 67.343499][ T4744] _copy_from_user+0x1c/0xb0 [ 67.343520][ T4744] kstrtouint_from_user+0x69/0xf0 [ 67.343569][ T4744] ? 0xffffffff81000000 [ 67.343629][ T4744] ? selinux_file_permission+0x1e4/0x320 [ 67.343777][ T4744] proc_fail_nth_write+0x50/0x160 [ 67.343796][ T4744] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 67.343814][ T4744] vfs_write+0x266/0x8e0 [ 67.343830][ T4744] ? vfs_read+0x47f/0x6f0 [ 67.343844][ T4744] ? __rcu_read_unlock+0x4f/0x70 [ 67.343890][ T4744] ? __fget_files+0x184/0x1c0 [ 67.343925][ T4744] ksys_write+0xda/0x1a0 [ 67.343952][ T4744] __x64_sys_write+0x40/0x50 [ 67.343974][ T4744] x64_sys_call+0x2cdd/0x2fb0 [ 67.343992][ T4744] do_syscall_64+0xd2/0x200 [ 67.344068][ T4744] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.344090][ T4744] ? clear_bhb_loop+0x40/0x90 [ 67.344109][ T4744] ? clear_bhb_loop+0x40/0x90 [ 67.344128][ T4744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.344217][ T4744] RIP: 0033:0x7f6e03ddd3df [ 67.344230][ T4744] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 67.344266][ T4744] RSP: 002b:00007f6e02447030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 67.344282][ T4744] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6e03ddd3df [ 67.344293][ T4744] RDX: 0000000000000001 RSI: 00007f6e024470a0 RDI: 0000000000000006 [ 67.344338][ T4744] RBP: 00007f6e02447090 R08: 0000000000000000 R09: 0000000000000000 [ 67.344349][ T4744] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 67.344359][ T4744] R13: 0000000000000000 R14: 00007f6e04005fa0 R15: 00007ffcd6040998 [ 67.344407][ T4744] [ 67.567363][ T4737] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.586765][ T4666] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.598812][ T4666] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.601219][ T4746] netlink: 'syz.1.329': attribute type 10 has an invalid length. [ 67.611583][ T4666] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.614845][ T4746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.329'. [ 67.633896][ T4737] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.646323][ T4746] netlink: 5 bytes leftover after parsing attributes in process `syz.1.329'. [ 67.648072][ T4666] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.663516][ T4746] 0{X: renamed from gretap0 (while UP) [ 67.671714][ T4746] 0{X: entered allmulticast mode [ 67.677834][ T4746] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 67.712043][ T4737] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.725144][ T4737] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.736255][ T4750] FAULT_INJECTION: forcing a failure. [ 67.736255][ T4750] name failslab, interval 1, probability 0, space 0, times 0 [ 67.749026][ T4750] CPU: 1 UID: 0 PID: 4750 Comm: syz.1.331 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 67.749056][ T4750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 67.749068][ T4750] Call Trace: [ 67.749075][ T4750] [ 67.749083][ T4750] __dump_stack+0x1d/0x30 [ 67.749109][ T4750] dump_stack_lvl+0xe8/0x140 [ 67.749134][ T4750] dump_stack+0x15/0x1b [ 67.749218][ T4750] should_fail_ex+0x265/0x280 [ 67.749268][ T4750] should_failslab+0x8c/0xb0 [ 67.749296][ T4750] __kmalloc_noprof+0xa5/0x3e0 [ 67.749327][ T4750] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 67.749429][ T4750] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 67.749469][ T4750] ? selinux_capable+0x1f9/0x270 [ 67.749647][ T4750] genl_family_rcv_msg_doit+0x48/0x1b0 [ 67.749683][ T4750] ? security_capable+0x83/0x90 [ 67.749711][ T4750] ? ns_capable+0x7d/0xb0 [ 67.749765][ T4750] genl_rcv_msg+0x422/0x460 [ 67.749888][ T4750] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 67.749932][ T4750] netlink_rcv_skb+0x120/0x220 [ 67.749957][ T4750] ? __pfx_genl_rcv_msg+0x10/0x10 [ 67.750050][ T4750] genl_rcv+0x28/0x40 [ 67.750082][ T4750] netlink_unicast+0x5a1/0x670 [ 67.750122][ T4750] netlink_sendmsg+0x58b/0x6b0 [ 67.750220][ T4750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.750276][ T4750] __sock_sendmsg+0x142/0x180 [ 67.750305][ T4750] ____sys_sendmsg+0x31e/0x4e0 [ 67.750352][ T4750] ___sys_sendmsg+0x17b/0x1d0 [ 67.750394][ T4750] __x64_sys_sendmsg+0xd4/0x160 [ 67.750424][ T4750] x64_sys_call+0x2999/0x2fb0 [ 67.750475][ T4750] do_syscall_64+0xd2/0x200 [ 67.750503][ T4750] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 67.750529][ T4750] ? clear_bhb_loop+0x40/0x90 [ 67.750600][ T4750] ? clear_bhb_loop+0x40/0x90 [ 67.750628][ T4750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.750655][ T4750] RIP: 0033:0x7f6e03dde929 [ 67.750692][ T4750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.750713][ T4750] RSP: 002b:00007f6e02447038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.750736][ T4750] RAX: ffffffffffffffda RBX: 00007f6e04005fa0 RCX: 00007f6e03dde929 [ 67.750752][ T4750] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 67.750767][ T4750] RBP: 00007f6e02447090 R08: 0000000000000000 R09: 0000000000000000 [ 67.750783][ T4750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.750797][ T4750] R13: 0000000000000000 R14: 00007f6e04005fa0 R15: 00007ffcd6040998 [ 67.750856][ T4750] [ 67.862722][ T4737] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.041961][ T4749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 68.053463][ T4749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.330'. [ 68.062467][ T4749] netlink: 188 bytes leftover after parsing attributes in process `syz.3.330'. [ 68.078708][ T4737] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.175405][ T4760] FAULT_INJECTION: forcing a failure. [ 68.175405][ T4760] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 68.188768][ T4760] CPU: 1 UID: 0 PID: 4760 Comm: syz.0.335 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 68.188804][ T4760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 68.188820][ T4760] Call Trace: [ 68.188828][ T4760] [ 68.188838][ T4760] __dump_stack+0x1d/0x30 [ 68.188859][ T4760] dump_stack_lvl+0xe8/0x140 [ 68.188911][ T4760] dump_stack+0x15/0x1b [ 68.188990][ T4760] should_fail_ex+0x265/0x280 [ 68.189105][ T4760] should_fail_alloc_page+0xf2/0x100 [ 68.189138][ T4760] __alloc_frozen_pages_noprof+0xff/0x360 [ 68.189182][ T4760] __alloc_pages_noprof+0x9/0x20 [ 68.189246][ T4760] ___kmalloc_large_node+0x73/0x140 [ 68.189275][ T4760] __kmalloc_large_node_noprof+0x16/0xa0 [ 68.189311][ T4760] __kmalloc_noprof+0x2ab/0x3e0 [ 68.189343][ T4760] ? iovec_from_user+0x84/0x210 [ 68.189445][ T4760] iovec_from_user+0x84/0x210 [ 68.189472][ T4760] __import_iovec+0xf3/0x540 [ 68.189497][ T4760] ? kstrtouint_from_user+0x9f/0xf0 [ 68.189565][ T4760] import_iovec+0x61/0x80 [ 68.189599][ T4760] vfs_readv+0xf1/0x690 [ 68.189642][ T4760] __x64_sys_preadv+0xfd/0x1c0 [ 68.189665][ T4760] x64_sys_call+0x1503/0x2fb0 [ 68.189691][ T4760] do_syscall_64+0xd2/0x200 [ 68.189713][ T4760] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 68.189747][ T4760] ? clear_bhb_loop+0x40/0x90 [ 68.189775][ T4760] ? clear_bhb_loop+0x40/0x90 [ 68.189838][ T4760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.189859][ T4760] RIP: 0033:0x7f325f6ae929 [ 68.189875][ T4760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.189979][ T4760] RSP: 002b:00007f325dd17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 68.189998][ T4760] RAX: ffffffffffffffda RBX: 00007f325f8d5fa0 RCX: 00007f325f6ae929 [ 68.190011][ T4760] RDX: 00000000000003e8 RSI: 0000200000001300 RDI: 0000000000000004 [ 68.190037][ T4760] RBP: 00007f325dd17090 R08: 0000000000000000 R09: 0000000000000000 [ 68.190050][ T4760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.190066][ T4760] R13: 0000000000000000 R14: 00007f325f8d5fa0 R15: 00007ffe23833ac8 [ 68.190091][ T4760] [ 68.538951][ T4772] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.559047][ T36] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 68.566635][ T36] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 68.574078][ T36] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 68.581658][ T36] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 68.589146][ T36] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 68.593315][ T4777] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 68.596612][ T36] hid-generic FFFC:0003:0000.0002: unknown main item tag 0x0 [ 68.617696][ T36] hid-generic FFFC:0003:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.647907][ T4778] fido_id[4778]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 68.657351][ T4772] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.689383][ T4779] 1{X: renamed from 30{X (while UP) [ 68.698068][ T4779] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 68.740347][ T4781] vlan2: entered allmulticast mode [ 68.745636][ T4781] macsec0: entered allmulticast mode [ 68.783758][ T4772] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.795019][ T4788] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.808490][ T4788] bridge_slave_1: left allmulticast mode [ 68.814217][ T4788] bridge_slave_1: left promiscuous mode [ 68.820076][ T4788] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.829711][ T4788] bridge_slave_0: left promiscuous mode [ 68.829754][ T4783] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 68.835441][ T4788] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.846670][ T4783] SELinux: failed to load policy [ 68.859542][ T4783] netlink: 'syz.1.343': attribute type 10 has an invalid length. [ 68.895783][ T4797] netlink: 'syz.3.347': attribute type 10 has an invalid length. [ 68.909189][ T4772] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.920327][ T4783] dummy0: entered promiscuous mode [ 68.926549][ T4783] bridge0: port 3(dummy0) entered blocking state [ 68.933048][ T4783] bridge0: port 3(dummy0) entered disabled state [ 68.940398][ T4783] dummy0: entered allmulticast mode [ 68.946549][ T4783] bridge0: port 3(dummy0) entered blocking state [ 68.953051][ T4783] bridge0: port 3(dummy0) entered forwarding state [ 68.962273][ T4797] 0{X: renamed from 31{X (while UP) [ 68.970799][ T4797] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 69.051702][ T4809] FAULT_INJECTION: forcing a failure. [ 69.051702][ T4809] name failslab, interval 1, probability 0, space 0, times 0 [ 69.064580][ T4809] CPU: 1 UID: 0 PID: 4809 Comm: syz.3.351 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 69.064604][ T4809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.064615][ T4809] Call Trace: [ 69.064620][ T4809] [ 69.064627][ T4809] __dump_stack+0x1d/0x30 [ 69.064646][ T4809] dump_stack_lvl+0xe8/0x140 [ 69.064721][ T4809] dump_stack+0x15/0x1b [ 69.064736][ T4809] should_fail_ex+0x265/0x280 [ 69.064767][ T4809] should_failslab+0x8c/0xb0 [ 69.064812][ T4809] __kmalloc_node_noprof+0xa9/0x410 [ 69.064836][ T4809] ? qdisc_alloc+0x65/0x440 [ 69.064854][ T4809] qdisc_alloc+0x65/0x440 [ 69.064871][ T4809] qdisc_create_dflt+0x7f/0x2d0 [ 69.064889][ T4809] mq_init+0x1b6/0x380 [ 69.064908][ T4809] ? __rcu_read_unlock+0x4f/0x70 [ 69.064967][ T4809] qdisc_create_dflt+0xef/0x2d0 [ 69.065051][ T4809] ? dev_activate+0xbb/0x9e0 [ 69.065080][ T4809] dev_activate+0xde/0x9e0 [ 69.065102][ T4809] ? _raw_spin_unlock_bh+0x36/0x40 [ 69.065140][ T4809] __dev_open+0x472/0x530 [ 69.065174][ T4809] __dev_change_flags+0x163/0x400 [ 69.065245][ T4809] netif_change_flags+0x5a/0xd0 [ 69.065274][ T4809] dev_change_flags+0xce/0x180 [ 69.065300][ T4809] dev_ifsioc+0x44b/0xaa0 [ 69.065390][ T4809] ? __rcu_read_unlock+0x4f/0x70 [ 69.065411][ T4809] dev_ioctl+0x70a/0x960 [ 69.065430][ T4809] sock_do_ioctl+0x197/0x220 [ 69.065465][ T4809] sock_ioctl+0x41b/0x610 [ 69.065499][ T4809] ? __pfx_sock_ioctl+0x10/0x10 [ 69.065544][ T4809] __se_sys_ioctl+0xce/0x140 [ 69.065636][ T4809] __x64_sys_ioctl+0x43/0x50 [ 69.065689][ T4809] x64_sys_call+0x19a8/0x2fb0 [ 69.065708][ T4809] do_syscall_64+0xd2/0x200 [ 69.065727][ T4809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.065750][ T4809] ? clear_bhb_loop+0x40/0x90 [ 69.065826][ T4809] ? clear_bhb_loop+0x40/0x90 [ 69.065846][ T4809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.065865][ T4809] RIP: 0033:0x7ff4f0e5e929 [ 69.065878][ T4809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.065964][ T4809] RSP: 002b:00007ff4ef4c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.065981][ T4809] RAX: ffffffffffffffda RBX: 00007ff4f1085fa0 RCX: 00007ff4f0e5e929 [ 69.065999][ T4809] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004 [ 69.066010][ T4809] RBP: 00007ff4ef4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 69.066072][ T4809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.066133][ T4809] R13: 0000000000000000 R14: 00007ff4f1085fa0 R15: 00007ffd557365c8 [ 69.066150][ T4809] [ 69.326036][ T4809] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 69.371536][ T4810] pimreg: entered allmulticast mode [ 69.379205][ T4810] pimreg: left allmulticast mode [ 69.552545][ T4820] FAULT_INJECTION: forcing a failure. [ 69.552545][ T4820] name failslab, interval 1, probability 0, space 0, times 0 [ 69.565297][ T4820] CPU: 1 UID: 0 PID: 4820 Comm: syz.4.354 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 69.565333][ T4820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.565420][ T4820] Call Trace: [ 69.565427][ T4820] [ 69.565490][ T4820] __dump_stack+0x1d/0x30 [ 69.565568][ T4820] dump_stack_lvl+0xe8/0x140 [ 69.565586][ T4820] dump_stack+0x15/0x1b [ 69.565602][ T4820] should_fail_ex+0x265/0x280 [ 69.565761][ T4820] should_failslab+0x8c/0xb0 [ 69.565790][ T4820] kmem_cache_alloc_noprof+0x50/0x310 [ 69.565825][ T4820] ? security_file_alloc+0x32/0x100 [ 69.565857][ T4820] security_file_alloc+0x32/0x100 [ 69.565885][ T4820] init_file+0x5c/0x1d0 [ 69.565951][ T4820] alloc_empty_file+0x8b/0x200 [ 69.566063][ T4820] alloc_file_pseudo+0xc6/0x160 [ 69.566097][ T4820] __shmem_file_setup+0x1de/0x210 [ 69.566207][ T4820] shmem_file_setup+0x3b/0x50 [ 69.566254][ T4820] __se_sys_memfd_create+0x2c3/0x590 [ 69.566303][ T4820] __x64_sys_memfd_create+0x31/0x40 [ 69.566336][ T4820] x64_sys_call+0x122f/0x2fb0 [ 69.566357][ T4820] do_syscall_64+0xd2/0x200 [ 69.566400][ T4820] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.566425][ T4820] ? clear_bhb_loop+0x40/0x90 [ 69.566447][ T4820] ? clear_bhb_loop+0x40/0x90 [ 69.566474][ T4820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.566520][ T4820] RIP: 0033:0x7f9e7129e929 [ 69.566539][ T4820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.566623][ T4820] RSP: 002b:00007f9e6f906e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 69.566763][ T4820] RAX: ffffffffffffffda RBX: 0000000000000605 RCX: 00007f9e7129e929 [ 69.566800][ T4820] RDX: 00007f9e6f906ef0 RSI: 0000000000000000 RDI: 00007f9e713214cc [ 69.566823][ T4820] RBP: 0000200000000c00 R08: 00007f9e6f906bb7 R09: 00007f9e6f906e40 [ 69.566834][ T4820] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 69.566844][ T4820] R13: 00007f9e6f906ef0 R14: 00007f9e6f906eb0 R15: 0000200000000380 [ 69.566861][ T4820] [ 69.811233][ T4822] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 69.820662][ T4822] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 69.878741][ T4824] bond0: (slave bond_slave_0): Releasing backup interface [ 69.888363][ T4826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 69.896087][ T4826] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 69.909478][ T4826] vlan2: entered allmulticast mode [ 70.007327][ T4833] syzkaller1: entered promiscuous mode [ 70.012895][ T4833] syzkaller1: entered allmulticast mode [ 70.224342][ T4840] FAULT_INJECTION: forcing a failure. [ 70.224342][ T4840] name failslab, interval 1, probability 0, space 0, times 0 [ 70.237067][ T4840] CPU: 0 UID: 0 PID: 4840 Comm: syz.1.361 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 70.237165][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.237178][ T4840] Call Trace: [ 70.237185][ T4840] [ 70.237193][ T4840] __dump_stack+0x1d/0x30 [ 70.237294][ T4840] dump_stack_lvl+0xe8/0x140 [ 70.237313][ T4840] dump_stack+0x15/0x1b [ 70.237335][ T4840] should_fail_ex+0x265/0x280 [ 70.237382][ T4840] should_failslab+0x8c/0xb0 [ 70.237455][ T4840] kmem_cache_alloc_node_noprof+0x57/0x320 [ 70.237490][ T4840] ? alloc_vmap_area+0x231/0xe50 [ 70.237528][ T4840] alloc_vmap_area+0x231/0xe50 [ 70.237568][ T4840] ? should_failslab+0x8c/0xb0 [ 70.237671][ T4840] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 70.237705][ T4840] __get_vm_area_node+0x173/0x1d0 [ 70.237809][ T4840] __vmalloc_node_range_noprof+0x273/0xe00 [ 70.237862][ T4840] ? copy_process+0x399/0x1fe0 [ 70.237949][ T4840] ? __rcu_read_unlock+0x4f/0x70 [ 70.237982][ T4840] __vmalloc_node_noprof+0x89/0xc0 [ 70.238016][ T4840] ? copy_process+0x399/0x1fe0 [ 70.238074][ T4840] ? copy_process+0x399/0x1fe0 [ 70.238102][ T4840] dup_task_struct+0x449/0x6a0 [ 70.238125][ T4840] ? path_openat+0x1bf8/0x2170 [ 70.238156][ T4840] copy_process+0x399/0x1fe0 [ 70.238261][ T4840] ? copy_clone_args_from_user+0x3ce/0x490 [ 70.238294][ T4840] kernel_clone+0x16c/0x5b0 [ 70.238427][ T4840] __se_sys_clone3+0x1c2/0x200 [ 70.238469][ T4840] ? fpregs_restore_userregs+0xad/0x1d0 [ 70.238508][ T4840] __x64_sys_clone3+0x31/0x40 [ 70.238543][ T4840] x64_sys_call+0x10c9/0x2fb0 [ 70.238615][ T4840] do_syscall_64+0xd2/0x200 [ 70.238637][ T4840] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.238672][ T4840] ? clear_bhb_loop+0x40/0x90 [ 70.238700][ T4840] ? clear_bhb_loop+0x40/0x90 [ 70.238722][ T4840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.238742][ T4840] RIP: 0033:0x7f6e03dde929 [ 70.238756][ T4840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.238775][ T4840] RSP: 002b:00007f6e02404f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 70.238870][ T4840] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6e03dde929 [ 70.238885][ T4840] RDX: 00007f6e02404f20 RSI: 0000000000000058 RDI: 00007f6e02404f20 [ 70.238897][ T4840] RBP: 00007f6e02405090 R08: 0000000000000000 R09: 0000000000000058 [ 70.238910][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.238976][ T4840] R13: 0000000000000000 R14: 00007f6e04006160 R15: 00007ffcd6040998 [ 70.238996][ T4840] [ 70.239011][ T4840] syz.1.361: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 70.513522][ T4840] CPU: 0 UID: 0 PID: 4840 Comm: syz.1.361 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 70.513551][ T4840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 70.513564][ T4840] Call Trace: [ 70.513574][ T4840] [ 70.513632][ T4840] __dump_stack+0x1d/0x30 [ 70.513659][ T4840] dump_stack_lvl+0xe8/0x140 [ 70.513681][ T4840] dump_stack+0x15/0x1b [ 70.513697][ T4840] warn_alloc+0x12b/0x1a0 [ 70.513813][ T4840] __vmalloc_node_range_noprof+0x297/0xe00 [ 70.513874][ T4840] ? __rcu_read_unlock+0x4f/0x70 [ 70.513905][ T4840] __vmalloc_node_noprof+0x89/0xc0 [ 70.513946][ T4840] ? copy_process+0x399/0x1fe0 [ 70.513977][ T4840] ? copy_process+0x399/0x1fe0 [ 70.514076][ T4840] dup_task_struct+0x449/0x6a0 [ 70.514109][ T4840] ? path_openat+0x1bf8/0x2170 [ 70.514214][ T4840] copy_process+0x399/0x1fe0 [ 70.514251][ T4840] ? copy_clone_args_from_user+0x3ce/0x490 [ 70.514359][ T4840] kernel_clone+0x16c/0x5b0 [ 70.514392][ T4840] __se_sys_clone3+0x1c2/0x200 [ 70.514481][ T4840] ? fpregs_restore_userregs+0xad/0x1d0 [ 70.514515][ T4840] __x64_sys_clone3+0x31/0x40 [ 70.514551][ T4840] x64_sys_call+0x10c9/0x2fb0 [ 70.514580][ T4840] do_syscall_64+0xd2/0x200 [ 70.514682][ T4840] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 70.514709][ T4840] ? clear_bhb_loop+0x40/0x90 [ 70.514731][ T4840] ? clear_bhb_loop+0x40/0x90 [ 70.514795][ T4840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.514817][ T4840] RIP: 0033:0x7f6e03dde929 [ 70.514837][ T4840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.514860][ T4840] RSP: 002b:00007f6e02404f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 70.514881][ T4840] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f6e03dde929 [ 70.514894][ T4840] RDX: 00007f6e02404f20 RSI: 0000000000000058 RDI: 00007f6e02404f20 [ 70.514929][ T4840] RBP: 00007f6e02405090 R08: 0000000000000000 R09: 0000000000000058 [ 70.514949][ T4840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.514962][ T4840] R13: 0000000000000000 R14: 00007f6e04006160 R15: 00007ffcd6040998 [ 70.514983][ T4840] [ 70.515002][ T4840] Mem-Info: [ 70.736575][ T4840] active_anon:10246 inactive_anon:0 isolated_anon:0 [ 70.736575][ T4840] active_file:6676 inactive_file:2222 isolated_file:0 [ 70.736575][ T4840] unevictable:0 dirty:119 writeback:0 [ 70.736575][ T4840] slab_reclaimable:3057 slab_unreclaimable:48180 [ 70.736575][ T4840] mapped:32562 shmem:3157 pagetables:1437 [ 70.736575][ T4840] sec_pagetables:0 bounce:0 [ 70.736575][ T4840] kernel_misc_reclaimable:0 [ 70.736575][ T4840] free:1838228 free_pcp:32750 free_cma:0 [ 70.781638][ T4840] Node 0 active_anon:40984kB inactive_anon:0kB active_file:26704kB inactive_file:8888kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130248kB dirty:476kB writeback:0kB shmem:12628kB writeback_tmp:0kB kernel_stack:3456kB pagetables:5748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 70.810515][ T4840] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 70.839302][ T4840] lowmem_reserve[]: 0 2882 7861 7861 [ 70.844748][ T4840] Node 0 DMA32 free:2947940kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951468kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 70.875115][ T4840] lowmem_reserve[]: 0 0 4978 4978 [ 70.880206][ T4840] Node 0 Normal free:4389612kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40984kB inactive_anon:0kB active_file:26704kB inactive_file:8888kB unevictable:0kB writepending:476kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:127472kB local_pcp:111396kB free_cma:0kB [ 70.912382][ T4840] lowmem_reserve[]: 0 0 0 0 [ 70.917121][ T4840] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 70.929913][ T4840] Node 0 DMA32: 5*4kB (M) 4*8kB (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947940kB [ 70.946236][ T4840] Node 0 Normal: 1580*4kB (UM) 628*8kB (UM) 329*16kB (UM) 317*32kB (UM) 228*64kB (UME) 191*128kB (UME) 210*256kB (UM) 164*512kB (UME) 80*1024kB (UM) 18*2048kB (UME) 993*4096kB (UM) = 4389632kB [ 70.965537][ T4840] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 70.974880][ T4840] 12049 total pagecache pages [ 70.979588][ T4840] 0 pages in swap cache [ 70.983764][ T4840] Free swap = 124996kB [ 70.987984][ T4840] Total swap = 124996kB [ 70.992144][ T4840] 2097051 pages RAM [ 70.996005][ T4840] 0 pages HighMem/MovableOnly [ 71.000810][ T4840] 80786 pages reserved [ 71.156915][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 71.156929][ T29] audit: type=1400 audit(1749571862.774:3625): avc: denied { read write } for pid=4854 comm="syz.4.365" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.187275][ T29] audit: type=1400 audit(1749571862.774:3626): avc: denied { open } for pid=4854 comm="syz.4.365" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 71.238626][ T29] audit: type=1400 audit(1749571862.834:3627): avc: denied { ioctl } for pid=4856 comm="syz.1.366" path="socket:[11925]" dev="sockfs" ino=11925 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 71.263352][ T29] audit: type=1400 audit(1749571862.834:3628): avc: denied { name_bind } for pid=4856 comm="syz.1.366" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 71.375434][ T29] audit: type=1400 audit(1749571862.984:3629): avc: denied { name_bind } for pid=4872 comm="syz.1.373" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 71.397327][ T29] audit: type=1400 audit(1749571862.984:3630): avc: denied { node_bind } for pid=4872 comm="syz.1.373" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 71.456822][ T4873] SELinux: ebitmap: truncated map [ 71.463290][ T4873] SELinux: failed to load policy [ 71.550991][ T4874] __nla_validate_parse: 61 callbacks suppressed [ 71.551008][ T4874] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 71.596295][ T4880] pim6reg1: entered promiscuous mode [ 71.601858][ T4880] pim6reg1: entered allmulticast mode [ 71.609400][ T4880] capability: warning: `syz.4.375' uses deprecated v2 capabilities in a way that may be insecure [ 71.612698][ T4882] random: crng reseeded on system resumption [ 71.620013][ T29] audit: type=1400 audit(1749571863.224:3631): avc: denied { append } for pid=4881 comm="syz.1.376" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.635318][ T4882] Restarting kernel threads ... [ 71.649224][ T29] audit: type=1400 audit(1749571863.224:3632): avc: denied { open } for pid=4881 comm="syz.1.376" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.655804][ T4882] Done restarting kernel threads. [ 71.677912][ T29] audit: type=1400 audit(1749571863.244:3633): avc: denied { firmware_load } for pid=53 comm="kworker/u8:4" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 71.707608][ T29] audit: type=1400 audit(1749571863.244:3634): avc: denied { ioctl } for pid=4881 comm="syz.1.376" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.749548][ T4882] netlink: 'syz.1.376': attribute type 2 has an invalid length. [ 71.757288][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 71.768964][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.778279][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.837581][ T4887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 71.845546][ T4887] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 71.857812][ T4887] vlan2: entered allmulticast mode [ 71.934992][ T4891] netlink: 'syz.1.380': attribute type 10 has an invalid length. [ 71.942902][ T4891] netlink: 40 bytes leftover after parsing attributes in process `syz.1.380'. [ 71.952251][ T4891] netlink: 5 bytes leftover after parsing attributes in process `syz.1.380'. [ 71.961362][ T4891] 1{X: renamed from 30{X (while UP) [ 71.968969][ T4891] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 72.038185][ T4892] SELinux: ebitmap: truncated map [ 72.043773][ T4892] SELinux: failed to load policy [ 72.109586][ T4900] netlink: 52 bytes leftover after parsing attributes in process `syz.1.384'. [ 72.122240][ T4900] sd 0:0:1:0: device reset [ 72.311682][ T4903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.385'. [ 72.432773][ T4911] xt_TPROXY: Can be used only with -p tcp or -p udp [ 72.440178][ T4911] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 72.452882][ T4911] vlan2: entered allmulticast mode [ 72.740562][ T4922] FAULT_INJECTION: forcing a failure. [ 72.740562][ T4922] name failslab, interval 1, probability 0, space 0, times 0 [ 72.753387][ T4922] CPU: 1 UID: 0 PID: 4922 Comm: syz.1.394 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 72.753424][ T4922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.753440][ T4922] Call Trace: [ 72.753449][ T4922] [ 72.753459][ T4922] __dump_stack+0x1d/0x30 [ 72.753485][ T4922] dump_stack_lvl+0xe8/0x140 [ 72.753529][ T4922] dump_stack+0x15/0x1b [ 72.753550][ T4922] should_fail_ex+0x265/0x280 [ 72.753588][ T4922] should_failslab+0x8c/0xb0 [ 72.753612][ T4922] kmem_cache_alloc_noprof+0x50/0x310 [ 72.753713][ T4922] ? __proc_create+0x265/0x500 [ 72.753790][ T4922] __proc_create+0x265/0x500 [ 72.753821][ T4922] proc_create_data+0xa3/0x1e0 [ 72.753886][ T4922] recent_mt_check+0x779/0x8f0 [ 72.753917][ T4922] recent_mt_check_v0+0x67/0x90 [ 72.753960][ T4922] xt_check_match+0x2aa/0x4f0 [ 72.754004][ T4922] ? strnlen+0x28/0x50 [ 72.754088][ T4922] ? strcmp+0x22/0x50 [ 72.754149][ T4922] ? xt_find_match+0x1d1/0x210 [ 72.754193][ T4922] translate_table+0xb4b/0x1070 [ 72.754314][ T4922] ? _copy_from_user+0x89/0xb0 [ 72.754355][ T4922] do_ip6t_set_ctl+0x678/0x840 [ 72.754403][ T4922] nf_setsockopt+0x199/0x1b0 [ 72.754445][ T4922] ipv6_setsockopt+0x11a/0x130 [ 72.754473][ T4922] tcp_setsockopt+0x95/0xb0 [ 72.754495][ T4922] sock_common_setsockopt+0x69/0x80 [ 72.754534][ T4922] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 72.754575][ T4922] __sys_setsockopt+0x184/0x200 [ 72.754686][ T4922] __x64_sys_setsockopt+0x64/0x80 [ 72.754705][ T4922] x64_sys_call+0x2bd5/0x2fb0 [ 72.754724][ T4922] do_syscall_64+0xd2/0x200 [ 72.754743][ T4922] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.754797][ T4922] ? clear_bhb_loop+0x40/0x90 [ 72.754869][ T4922] ? clear_bhb_loop+0x40/0x90 [ 72.754916][ T4922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.755076][ T4922] RIP: 0033:0x7f6e03dde929 [ 72.755096][ T4922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.755119][ T4922] RSP: 002b:00007f6e02447038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 72.755143][ T4922] RAX: ffffffffffffffda RBX: 00007f6e04005fa0 RCX: 00007f6e03dde929 [ 72.755161][ T4922] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 72.755171][ T4922] RBP: 00007f6e02447090 R08: 0000000000000450 R09: 0000000000000000 [ 72.755195][ T4922] R10: 00002000000010c0 R11: 0000000000000246 R12: 0000000000000001 [ 72.755206][ T4922] R13: 0000000000000000 R14: 00007f6e04005fa0 R15: 00007ffcd6040998 [ 72.755223][ T4922] [ 73.069107][ T4928] syzkaller0: entered promiscuous mode [ 73.074701][ T4928] syzkaller0: entered allmulticast mode [ 73.140441][ T4931] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 73.217704][ T4935] SELinux: ebitmap: truncated map [ 73.223891][ T4935] SELinux: failed to load policy [ 73.314144][ T4943] netlink: get zone limit has 8 unknown bytes [ 73.384663][ T4948] netlink: 'syz.3.406': attribute type 10 has an invalid length. [ 73.392535][ T4948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.406'. [ 73.403690][ T4948] netlink: 5 bytes leftover after parsing attributes in process `syz.3.406'. [ 73.412956][ T4948] 1{X: renamed from 30{X (while UP) [ 73.421078][ T4948] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 73.452895][ T4772] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.498799][ T4772] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.533903][ T4772] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.547601][ T4772] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.876513][ T4955] netlink: 'syz.3.408': attribute type 10 has an invalid length. [ 73.884345][ T4955] netlink: 40 bytes leftover after parsing attributes in process `syz.3.408'. [ 73.920855][ T4956] syzkaller0: entered promiscuous mode [ 73.926525][ T4956] syzkaller0: entered allmulticast mode [ 73.934665][ T4960] netlink: 5 bytes leftover after parsing attributes in process `syz.3.408'. [ 73.947669][ T4959] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 73.951560][ T4960] 0{X: renamed from 31{X (while UP) [ 74.007127][ T4960] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 74.112126][ T4951] Set syz1 is full, maxelem 65536 reached [ 74.189702][ T4965] loop9: detected capacity change from 0 to 7 [ 74.198675][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.202319][ T4959] vlan2: entered allmulticast mode [ 74.211817][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.219890][ T3498] loop9: unable to read partition table [ 74.235280][ T4965] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.268778][ T4965] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.276746][ T4965] loop9: unable to read partition table [ 74.283902][ T4965] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 74.283902][ T4965] U) failed (rc=-5) [ 74.301036][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.312588][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.343997][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.364608][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.376842][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.384985][ T3498] Buffer I/O error on dev loop9, logical block 0, async page read [ 74.416893][ T4967] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.490828][ T4984] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.513355][ T4988] loop5: detected capacity change from 0 to 512 [ 74.522522][ T4988] EXT4-fs: Ignoring removed oldalloc option [ 74.544246][ T4990] netlink: 'syz.3.420': attribute type 10 has an invalid length. [ 74.559958][ T4967] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.574668][ T4988] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.421: Parent and EA inode have the same ino 15 [ 74.598944][ T4988] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 74.612359][ T4988] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.421: Parent and EA inode have the same ino 15 [ 74.626265][ T4984] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.636449][ T4988] EXT4-fs (loop5): 1 orphan inode deleted [ 74.642418][ T4994] 1{X: renamed from 30{X (while UP) [ 74.651428][ T4988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.675278][ T4994] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 74.737895][ T4967] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.770844][ T4988] hub 8-0:1.0: USB hub found [ 74.783206][ T4988] hub 8-0:1.0: 8 ports detected [ 74.795195][ T4984] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.830564][ T3827] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.882830][ T4967] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.914525][ T4984] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.005763][ T4984] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.017794][ T4984] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.059235][ T4984] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.079986][ T4984] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.103988][ T4967] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.123147][ T4967] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.143229][ T4967] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.153537][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.167501][ T5022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.210836][ T4967] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.220500][ T5028] FAULT_INJECTION: forcing a failure. [ 75.220500][ T5028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.233834][ T5028] CPU: 0 UID: 0 PID: 5028 Comm: syz.5.435 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 75.233871][ T5028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.233886][ T5028] Call Trace: [ 75.233893][ T5028] [ 75.233901][ T5028] __dump_stack+0x1d/0x30 [ 75.233926][ T5028] dump_stack_lvl+0xe8/0x140 [ 75.233945][ T5028] dump_stack+0x15/0x1b [ 75.233961][ T5028] should_fail_ex+0x265/0x280 [ 75.234063][ T5028] should_fail+0xb/0x20 [ 75.234160][ T5028] should_fail_usercopy+0x1a/0x20 [ 75.234188][ T5028] _copy_from_user+0x1c/0xb0 [ 75.234219][ T5028] ___sys_sendmsg+0xc1/0x1d0 [ 75.234268][ T5028] __x64_sys_sendmsg+0xd4/0x160 [ 75.234340][ T5028] x64_sys_call+0x2999/0x2fb0 [ 75.234368][ T5028] do_syscall_64+0xd2/0x200 [ 75.234395][ T5028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.234504][ T5028] ? clear_bhb_loop+0x40/0x90 [ 75.234532][ T5028] ? clear_bhb_loop+0x40/0x90 [ 75.234562][ T5028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.234589][ T5028] RIP: 0033:0x7f79d286e929 [ 75.234681][ T5028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.234705][ T5028] RSP: 002b:00007f79d0ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.234730][ T5028] RAX: ffffffffffffffda RBX: 00007f79d2a95fa0 RCX: 00007f79d286e929 [ 75.234752][ T5028] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 75.234768][ T5028] RBP: 00007f79d0ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.234784][ T5028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.234820][ T5028] R13: 0000000000000000 R14: 00007f79d2a95fa0 R15: 00007ffc512be168 [ 75.234845][ T5028] [ 75.484821][ T5033] syzkaller0: entered promiscuous mode [ 75.490821][ T5033] syzkaller0: entered allmulticast mode [ 75.670989][ T5048] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 75.683738][ T5048] vlan2: entered allmulticast mode [ 75.759796][ T5053] netlink: 'syz.5.444': attribute type 10 has an invalid length. [ 75.769778][ T5053] 1{X: renamed from 30{X [ 75.780921][ T5053] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 75.883585][ T5063] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.019723][ T5063] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.089151][ T5063] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.157639][ T5069] syzkaller0: entered promiscuous mode [ 76.163187][ T5069] syzkaller0: entered allmulticast mode [ 76.208465][ T5063] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.252805][ T5075] FAULT_INJECTION: forcing a failure. [ 76.252805][ T5075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.256920][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 76.256940][ T29] audit: type=1400 audit(1749571867.864:4001): avc: denied { create } for pid=5070 comm="syz.5.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 76.265980][ T5075] CPU: 0 UID: 0 PID: 5075 Comm: syz.3.454 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 76.266022][ T5075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 76.266042][ T5075] Call Trace: [ 76.266052][ T5075] [ 76.266064][ T5075] __dump_stack+0x1d/0x30 [ 76.266105][ T5075] dump_stack_lvl+0xe8/0x140 [ 76.266132][ T5075] dump_stack+0x15/0x1b [ 76.266212][ T5075] should_fail_ex+0x265/0x280 [ 76.266261][ T5075] should_fail+0xb/0x20 [ 76.266306][ T5075] should_fail_usercopy+0x1a/0x20 [ 76.266336][ T5075] _copy_to_user+0x20/0xa0 [ 76.266427][ T5075] simple_read_from_buffer+0xb5/0x130 [ 76.266477][ T5075] proc_fail_nth_read+0x100/0x140 [ 76.266511][ T5075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 76.266608][ T5075] vfs_read+0x19d/0x6f0 [ 76.266634][ T5075] ? current_time+0x174/0x240 [ 76.266688][ T5075] ? __rcu_read_unlock+0x4f/0x70 [ 76.266720][ T5075] ? __fget_files+0x184/0x1c0 [ 76.266755][ T5075] ksys_read+0xda/0x1a0 [ 76.266864][ T5075] __x64_sys_read+0x40/0x50 [ 76.266891][ T5075] x64_sys_call+0x2d77/0x2fb0 [ 76.266921][ T5075] do_syscall_64+0xd2/0x200 [ 76.266998][ T5075] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 76.267114][ T5075] ? clear_bhb_loop+0x40/0x90 [ 76.267144][ T5075] ? clear_bhb_loop+0x40/0x90 [ 76.267177][ T5075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.267207][ T5075] RIP: 0033:0x7ff4f0e5d33c [ 76.267230][ T5075] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 76.267282][ T5075] RSP: 002b:00007ff4ef4c7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 76.267317][ T5075] RAX: ffffffffffffffda RBX: 00007ff4f1085fa0 RCX: 00007ff4f0e5d33c [ 76.267335][ T5075] RDX: 000000000000000f RSI: 00007ff4ef4c70a0 RDI: 0000000000000004 [ 76.267351][ T5075] RBP: 00007ff4ef4c7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.267368][ T5075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.267386][ T5075] R13: 0000000000000000 R14: 00007ff4f1085fa0 R15: 00007ffd557365c8 [ 76.267451][ T5075] [ 76.503191][ T29] audit: type=1400 audit(1749571867.904:4002): avc: denied { read write } for pid=5076 comm="syz.3.455" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.527341][ T29] audit: type=1400 audit(1749571867.904:4003): avc: denied { open } for pid=5076 comm="syz.3.455" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 76.559970][ T5079] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 76.582604][ T29] audit: type=1400 audit(1749571868.194:4004): avc: denied { read } for pid=5084 comm="syz.4.459" path="socket:[13502]" dev="sockfs" ino=13502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.595726][ T5079] vlan2: entered allmulticast mode [ 76.631609][ T29] audit: type=1326 audit(1749571868.194:4005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f0e5e929 code=0x7ffc0000 [ 76.655128][ T29] audit: type=1326 audit(1749571868.194:4006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff4f0e5e929 code=0x7ffc0000 [ 76.678682][ T29] audit: type=1326 audit(1749571868.194:4007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f0e5e929 code=0x7ffc0000 [ 76.702188][ T29] audit: type=1326 audit(1749571868.194:4008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff4f0e5e929 code=0x7ffc0000 [ 76.708852][ T5097] futex_wake_op: syz.4.459 tries to shift op by -1; fix this program [ 76.725724][ T29] audit: type=1326 audit(1749571868.204:4009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4f0e5e929 code=0x7ffc0000 [ 76.725775][ T29] audit: type=1326 audit(1749571868.204:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5078 comm="syz.3.456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff4f0e5e929 code=0x7ffc0000 [ 76.831893][ T5104] netlink: 'syz.3.467': attribute type 10 has an invalid length. [ 76.839785][ T5104] __nla_validate_parse: 7 callbacks suppressed [ 76.839802][ T5104] netlink: 40 bytes leftover after parsing attributes in process `syz.3.467'. [ 76.859930][ T5104] netlink: 5 bytes leftover after parsing attributes in process `syz.3.467'. [ 76.869006][ T5104] 0{X: renamed from 31{X (while UP) [ 76.876952][ T5104] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 76.899851][ T5105] loop5: detected capacity change from 0 to 2048 [ 76.956755][ T5105] loop5: p1 < > p4 [ 76.963119][ T5105] loop5: p4 size 8388608 extends beyond EOD, truncated [ 76.981589][ T5111] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 76.993439][ T5111] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 77.042110][ T5105] SELinux: ebitmap: truncated map [ 77.048621][ T5105] SELinux: failed to load policy [ 77.130120][ T5129] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 77.145214][ T5129] vlan2: entered allmulticast mode [ 77.158532][ T5133] pim6reg1: entered promiscuous mode [ 77.163941][ T5133] pim6reg1: entered allmulticast mode [ 77.237112][ T5137] netlink: 'syz.3.481': attribute type 10 has an invalid length. [ 77.244922][ T5137] netlink: 40 bytes leftover after parsing attributes in process `syz.3.481'. [ 77.254648][ T5137] netlink: 5 bytes leftover after parsing attributes in process `syz.3.481'. [ 77.264221][ T5137] 1{X: renamed from 30{X (while UP) [ 77.272930][ T5137] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 77.310354][ T5143] FAULT_INJECTION: forcing a failure. [ 77.310354][ T5143] name failslab, interval 1, probability 0, space 0, times 0 [ 77.323200][ T5143] CPU: 1 UID: 0 PID: 5143 Comm: syz.3.484 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 77.323237][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.323331][ T5143] Call Trace: [ 77.323339][ T5143] [ 77.323348][ T5143] __dump_stack+0x1d/0x30 [ 77.323411][ T5143] dump_stack_lvl+0xe8/0x140 [ 77.323434][ T5143] dump_stack+0x15/0x1b [ 77.323450][ T5143] should_fail_ex+0x265/0x280 [ 77.323550][ T5143] should_failslab+0x8c/0xb0 [ 77.323580][ T5143] kmem_cache_alloc_noprof+0x50/0x310 [ 77.323611][ T5143] ? alloc_empty_file+0x76/0x200 [ 77.323671][ T5143] alloc_empty_file+0x76/0x200 [ 77.323758][ T5143] path_openat+0x68/0x2170 [ 77.323804][ T5143] ? __rcu_read_unlock+0x34/0x70 [ 77.323888][ T5143] ? filemap_map_pages+0x9be/0xab0 [ 77.323915][ T5143] ? css_rstat_updated+0xcd/0x5b0 [ 77.323960][ T5143] do_filp_open+0x109/0x230 [ 77.324073][ T5143] do_sys_openat2+0xa6/0x110 [ 77.324112][ T5143] __x64_sys_openat+0xf2/0x120 [ 77.324151][ T5143] x64_sys_call+0x1af/0x2fb0 [ 77.324245][ T5143] do_syscall_64+0xd2/0x200 [ 77.324271][ T5143] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 77.324304][ T5143] ? clear_bhb_loop+0x40/0x90 [ 77.324331][ T5143] ? clear_bhb_loop+0x40/0x90 [ 77.324369][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.324397][ T5143] RIP: 0033:0x7ff4f0e5d290 [ 77.324416][ T5143] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 77.324439][ T5143] RSP: 002b:00007ff4ef4c6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 77.324526][ T5143] RAX: ffffffffffffffda RBX: 0000000000008002 RCX: 00007ff4f0e5d290 [ 77.324542][ T5143] RDX: 0000000000008002 RSI: 00007ff4ef4c6c10 RDI: 00000000ffffff9c [ 77.324557][ T5143] RBP: 00007ff4ef4c6c10 R08: 0000000000000000 R09: 002367732f766564 [ 77.324573][ T5143] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 77.324589][ T5143] R13: 0000000000000001 R14: 00007ff4f1085fa0 R15: 00007ffd557365c8 [ 77.324613][ T5143] [ 77.643357][ T5143] vhci_hcd: invalid port number 96 [ 77.662792][ T5143] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 77.703353][ T5143] ================================================================== [ 77.711505][ T5143] BUG: KCSAN: data-race in __dentry_kill / shrink_dentry_list [ 77.718998][ T5143] [ 77.721346][ T5143] read-write to 0xffff8881004e39c0 of 4 bytes by task 3307 on cpu 1: [ 77.729412][ T5143] shrink_dentry_list+0x1a6/0x3d0 [ 77.734449][ T5143] shrink_dcache_parent+0x42/0x1b0 [ 77.739573][ T5143] d_invalidate+0xa6/0x1c0 [ 77.744008][ T5143] proc_invalidate_siblings_dcache+0x1c0/0x2a0 [ 77.750179][ T5143] proc_flush_pid+0x1d/0x30 [ 77.754696][ T5143] release_task+0x992/0xb60 [ 77.759212][ T5143] wait_consider_task+0x113f/0x1650 [ 77.764426][ T5143] __do_wait+0xfa/0x510 [ 77.768595][ T5143] do_wait+0xb7/0x260 [ 77.772592][ T5143] kernel_wait4+0x16b/0x1e0 [ 77.777113][ T5143] __x64_sys_wait4+0x91/0x120 [ 77.781820][ T5143] x64_sys_call+0x26c8/0x2fb0 [ 77.786509][ T5143] do_syscall_64+0xd2/0x200 [ 77.791031][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.796938][ T5143] [ 77.799267][ T5143] read to 0xffff8881004e39c0 of 4 bytes by task 5143 on cpu 0: [ 77.806817][ T5143] __dentry_kill+0x2aa/0x4b0 [ 77.811427][ T5143] dput+0x5e/0xd0 [ 77.815079][ T5143] proc_invalidate_siblings_dcache+0x1c8/0x2a0 [ 77.821259][ T5143] proc_flush_pid+0x1d/0x30 [ 77.825782][ T5143] release_task+0x992/0xb60 [ 77.830307][ T5143] do_exit+0xd85/0x1590 [ 77.834475][ T5143] do_group_exit+0xff/0x140 [ 77.839004][ T5143] get_signal+0xe59/0xf70 [ 77.843366][ T5143] arch_do_signal_or_restart+0x96/0x480 [ 77.848944][ T5143] exit_to_user_mode_loop+0x7a/0x100 [ 77.854251][ T5143] do_syscall_64+0x1d6/0x200 [ 77.858853][ T5143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.864760][ T5143] [ 77.867088][ T5143] value changed: 0x0024040c -> 0x0000000c [ 77.872831][ T5143] [ 77.875161][ T5143] Reported by Kernel Concurrency Sanitizer on: [ 77.881320][ T5143] CPU: 0 UID: 0 PID: 5143 Comm: wg1 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 77.893129][ T5143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 77.903282][ T5143] ================================================================== [ 79.200278][ T5063] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.211753][ T5063] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.223533][ T5063] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.235462][ T5063] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0