last executing test programs: 1m22.223793612s ago: executing program 1 (id=1058): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x6c}]}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 1m22.190006082s ago: executing program 1 (id=1059): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) preadv(r1, 0x0, 0x0, 0xbbb, 0x24) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x80000000000}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x40000004, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_int(r0, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) sendfile(r10, r10, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 1m22.010803355s ago: executing program 1 (id=1063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x6}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) 1m21.983695505s ago: executing program 1 (id=1064): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r3}, 0x10) io_setup(0x3, &(0x7f0000000340)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x1, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="aaa0a4bfa98e99b33af9c66937b90c80dbeb15feb8feed25078a2a6a57639213468dc403b79bb44b2b9e415f83252be148a481cb661bc1e6de6e758f04c6686a1f69d66854cbd80a72d0f7b18f76144ca665da7ee0e67e", @ANYRES8=r2, @ANYBLOB, @ANYRES16=0x0, @ANYBLOB="3d53cddaad6d954a3b3411d7fd641b1aea8450c99f83fa498677e558ca3292738eea692c5f6359487ffc73f4664f4a487573efc5ab9fc4a850571f70459fbe44eb8bb26796a134bed380496e098f9cb3945919fb21dad46c0be9f6a7b5f73f9efbf3e1ab80761a36"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) ioperm(0x4, 0x2, 0x7fffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xc, 0x18, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0a00080101000000000000060000000000000000", @ANYRES32=r4, @ANYRESDEC=r7, @ANYRES8=0x0, @ANYBLOB="00000000000000001864000001000000000000005100000085200000030000008c27f0ff0400000085100000faffffff18510000020000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x70, &(0x7f0000000940)=""/112, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xe, 0x8, 0xf0}, 0x10, 0x0, r7, 0x6, 0x0, &(0x7f0000000cc0)=[{0x5, 0x4, 0x8, 0x6}, {0x4, 0x5, 0x7, 0x1}, {0x6, 0x1, 0x10, 0xc}, {0x0, 0x1, 0xb, 0x5}, {0x1, 0x2, 0x6, 0x3}, {0x0, 0x5, 0x10, 0x3}], 0x10, 0x7, @void, @value}, 0x94) prctl$PR_SET_DUMPABLE(0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) getresuid(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f00000004c0)='./file0\x00', r9, 0x4000, r6}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r10 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r10, &(0x7f0000000580)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x212) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000500)='./file0\x00') 1m21.771064488s ago: executing program 1 (id=1066): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="200000000e14100029bd7000fcdbdf2508000100000000000800030001000000dfc0696371a6957f2d78589de041f110eacd91d7293a7aaa607988a97d4b0a003b2918c508c8856bb712552a37cd652a3ba25a5d93c49a377ba65f2ffa69d5fdb7fbc3875b6106455de094dc571bfd0cf996450b320978e3b28cb2fb27d8eab3971b6aec624581f44509946fec29637e5bbca5ca13d045b15f925ee2643ffa03fb03"], 0x20}, 0x1, 0x0, 0x0, 0x20040402}, 0x4000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) io_uring_setup(0x280d, &(0x7f0000001280)={0x0, 0x160, 0x800, 0xfffffffc}) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rseq_update\x00', 0xffffffffffffffff, 0x0, 0x56a}, 0x18) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="d44bde71663be809d3c47f90dd1a383057be384f6256d87c8b2a40cc7f733867991b461f50454ce600111a8a2bbfb46524d03a6c02a90e85dd2ef6de8fd9c7420b0b8235b36a46c3b3a2a98187c521b8f9cf3d2e1a0f7c5c290fb54c31c8325c6a3ffadc0204062d507f63f9695625536dcdfd41cf034b5c25d2ab1c32d972534e00f615d16fdc66ae9eff6ecd450d9e2225aae1a3fa6a30ca3558b491d9a6808de183e6"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a000000"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', r7, 0x4000, r5}, 0x18) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000a00)) listen(r6, 0x0) 1m21.450942882s ago: executing program 1 (id=1068): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000002c0)=""/14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xf, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0xff, 0x52e, &(0x7f0000000f00)="$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") 1m21.436456592s ago: executing program 32 (id=1068): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000440)={[{@bsdgroups}, {@noblock_validity}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@errors_remount}]}, 0x1, 0x5fc, &(0x7f0000000600)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = msgget$private(0x0, 0x0) futex(&(0x7f0000000300), 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) msgsnd(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="030000"], 0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000002c0)=""/14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) symlinkat(0x0, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0xf, &(0x7f0000002400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000003c0), 0xff, 0x52e, &(0x7f0000000f00)="$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") 1m18.927265584s ago: executing program 4 (id=1105): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000980)="a9", 0x1) 1m17.885914357s ago: executing program 4 (id=1119): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x2, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x80}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xffffff9c}, @CTA_TUPLE_ORIG={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 1m17.155845217s ago: executing program 4 (id=1137): r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/47, 0x2f) 1m17.027172238s ago: executing program 4 (id=1138): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x6, 0x2a4, &(0x7f0000002680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x1, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f00000004c0)='./file0\x00', r2, 0x4000, r1}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 1m17.020932088s ago: executing program 5 (id=1139): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40011) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18) 1m16.978051689s ago: executing program 5 (id=1142): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc)=0x1, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write(r0, &(0x7f0000000980)="a9", 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r4}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) flock(0xffffffffffffffff, 0x2) 1m16.926896619s ago: executing program 4 (id=1143): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x88f, &(0x7f0000000580)={0x0, 0x8688, 0x0, 0x0, 0x29c}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35c, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={0xffffffffffffffff, r1, 0x0, r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) mount$9p_virtio(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r3, {0xfff2}, {}, {0x9}}}, 0x24}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000340)=ANY=[@ANYRES32], &(0x7f0000000180)=0x2c) r5 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100003e4e00000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) 1m16.90528828s ago: executing program 5 (id=1144): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0xbbb, 0x24) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x80000000000}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x40000004, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_int(r0, 0x0, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) sendfile(r8, r8, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 1m16.794798291s ago: executing program 5 (id=1146): r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c666c7573682c646d61736b3d30303030303030303030303030303030303137373737372c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c757466383d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c726f6469722c696f636861727365743d757466382c666d61736b3d30303030303030303030303030303030303030303030342c646d61736b3d30303030303030303030303030303030303030303030372c757466383d312c726f6469722c73686f72746e616d653d77696e39352c726f6469722c00743ccfec7cd6c7d05b0f2a54ddce151ec4cbbaacb9552647fd950fedfdc024b3953e7669bc9d4f66e3beaecb80fe73633280b1d3e82023d4f5c7f5a4989406c0f0d0cf537f132dc1e63d84a17532cb78ae7a368bc0029207b9b166705972f4e8dad041e6be170bf43057b456d43f100c53b471aa6c8e3751"], 0x6, 0x2a4, &(0x7f0000002680)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknodat$loop(r0, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x1, 0x1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000540)=@o_path={&(0x7f00000004c0)='./file0\x00', r2, 0x4000, r1}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000580)='./file0/../file0/../file0/../file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x212) pivot_root(&(0x7f0000000380)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000500)='./file0\x00') 1m16.709633722s ago: executing program 5 (id=1149): r0 = syz_open_procfs(0x0, 0x0) read$char_usb(r0, &(0x7f0000000040)=""/47, 0x2f) 1m16.631081343s ago: executing program 4 (id=1151): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xa1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(0x0, &(0x7f00000000c0)='./file1\x00') 1m16.630435543s ago: executing program 33 (id=1151): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0xa1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r3}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rename(0x0, &(0x7f00000000c0)='./file1\x00') 1m15.438031878s ago: executing program 5 (id=1161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0xcfa5dff25f028aa3, 0x0, &(0x7f00000001c0)) bind$packet(r1, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) sendto$packet(r1, &(0x7f0000000040)="bb53a94584285101010000853e60", 0xe, 0x14, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/72, 0x48}, 0x49}], 0x1, 0x2040, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) geteuid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 1m15.379504779s ago: executing program 34 (id=1161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000006fd6850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r1 = socket(0x11, 0x3, 0x0) socketpair$unix(0x1, 0xcfa5dff25f028aa3, 0x0, &(0x7f00000001c0)) bind$packet(r1, &(0x7f0000000080)={0x11, 0xc, 0x0, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) sendto$packet(r1, &(0x7f0000000040)="bb53a94584285101010000853e60", 0xe, 0x14, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/72, 0x48}, 0x49}], 0x1, 0x2040, 0x0) syz_usb_connect(0x4, 0x24, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) geteuid() r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) 2.269466131s ago: executing program 0 (id=2691): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffffffffffffffba}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r4 = epoll_create(0x4) epoll_pwait2(r4, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, &(0x7f0000000080)={0x77359400}, &(0x7f00000002c0)={[0x9]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = memfd_secret(0x0) cachestat(r5, &(0x7f0000000000)={0x2, 0x7fff}, &(0x7f0000000040), 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000380)={0x2, 0x80, 0xda, 0x86, 0x7f, 0xfe, 0x0, 0x1, 0x10000, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x2, @perf_bp={&(0x7f00000001c0), 0xe}, 0x2880, 0x2, 0x7, 0x0, 0xb503, 0x4, 0xfff9, 0x0, 0xcdd, 0x0, 0x2}, 0xffffffffffffffff, 0x200000000002, r1, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0xfffffffffffffd32) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r8}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r9}, 0x10) io_setup(0x3, &(0x7f0000000340)) perf_event_open(&(0x7f0000000100)={0x1, 0x4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r6, 0x0) r10 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') close(r10) 2.207030522s ago: executing program 6 (id=2692): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000140)='./control\x00', 0x5) close(r0) r1 = inotify_init1(0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x5, @loopback, 0x8}, @in6={0xa, 0x4e21, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e20, @local}], 0x48) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fbffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) socket(0x28, 0x5, 0x0) accept4$unix(r3, 0x0, 0x0, 0x0) 1.897018646s ago: executing program 2 (id=2697): openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 1.632492609s ago: executing program 2 (id=2704): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 1.399667112s ago: executing program 6 (id=2708): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40011) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1.326917333s ago: executing program 6 (id=2709): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x2, 0x4, 0x20, 0x2, @multicast}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3477, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7535}}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pwritev2(r1, &(0x7f0000000680)=[{&(0x7f0000000000)="a840437cfba4d34fa10fd33d781d86563d8aadb0b2cbc9093b443ef646aedce0c7335135b83708f486", 0x29}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000000100)="c4c00018645cdfb1b7036f7f79a6c96e0f0727238c8e2f6e9dfc1406b65370c09834c7a3b6124958e934ca99c74a5ee09515f5b07500171939b44426e41f7a92cfe071b450d5979280f7977ab786ba934004e0eb7dde332195f936ca1a1497e0efd849ef3898ed722c302e41c604e042fcec0459e8c73799b212eba407e5398d49a0db4bec54203ef06bcdc9221193e060a383224473924ff8d4575eb62bcad1c9180d2105185de3dbb7aa3d6261cdb328dadb093aecc50a609e99251789b0af8627fccb19ec43ab93cc79c74f2bccc420634604d2de650c", 0xd8}, {&(0x7f0000000080)="9324766fb1bd45c1", 0x8}, {&(0x7f0000000200)="afcf6d75ccc59595a57b3e7b3482a2c85f7117df992e3206dd5e988103c94655cd7eb0c211f79cd0782869c5057a1a20393b0430e5081c3f39df71896773026a4d08ef0cfc8620040d288a23295cf8513591eb2af6c03bb9dcfb80df163515746c378c5650e468f79721c2a3a3489892538c447210648f84007de080a1d1f9c0a112f193402d44224c152ac0fa00be17", 0x90}, {&(0x7f0000000380)="4997906987eb354f20f259230c0b9cdd1ed5f22a8a2d2b0c9d78b2fce1af7f0a733b13ec73be9b6701a89f12411938a62acc83ee3b8f8d172bf2e5604087764e01a9e999ba8bac68f3a2cfe29d1cc05c320cc0812eb7a7205604792e83cbfebc41034b90b8baefc1ee815763a69a357fe75d76d2edd8fb7100fd61bbddb02e732866fcf5", 0x84}, {&(0x7f00000002c0)}, {&(0x7f0000000440)="eee644cdc1762a2648a978cf5ce2c2bc07a478440b8fb4f1890b59f3108408a32d60282e3e0f069af781b5e2e54af164", 0x30}, {&(0x7f0000000480)="6f0e414fe35fdbc8", 0x8}, {&(0x7f0000000540)="45d168593b2544512244ba12a51cfc0c7d51c88893742f77a1eef29aa606ff9f47ec257d4562af32dcf5e798861b7f66601b2a7e4eb2b3a67d436fed7afc87996c4c8a961937ced247d7", 0x4a}], 0xa, 0x9, 0x9, 0x0) unshare(0x2a020400) r2 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000003340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x800}}], 0x18}}], 0x2, 0x0) recvfrom$llc(r2, &(0x7f0000001ec0)=""/4096, 0x1000, 0x80, &(0x7f0000001d00)={0x1a, 0x13, 0x0, 0x12, 0x5, 0x8, @broadcast}, 0x10) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r3, &(0x7f0000000540), 0xfffffdd8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1b000000003d36d0228f09976cf29ad55b8d01c783f569a8e5966823316a47a74b2eb57d621fc55f94241626c11d1dffb09154b0fb88e036897acf5d77b244339519030df7480cd2ba286027150e77c0f492277baf8b291dbfa1a4aa49602fc88bf456402f8482d06d9c98f9d4d21409ddcc64c59a57787adb071c406080434c353308ad35e05b06921921e355cf4072150282d362999eca51cc4ffbc3814c1135824af0cd93f2fabe10b59989182d0eab61b46401a83298", @ANYRES32=0x1, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000020000000500"/28], 0x50) syz_emit_ethernet(0x46, &(0x7f0000000240)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x10, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c}], @echo_reply}}}}}, 0x0) unshare(0x2c020400) 1.227582025s ago: executing program 0 (id=2710): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000c"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x3, 0x0, 0x1}}, 0x26) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) accept4(r1, 0x0, 0x0, 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r7, 0x20, 0x0, 0x8000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000240)={0x8}) unshare(0x20060400) r8 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='rpc_xdr_alignment\x00', r9, 0x0, 0x401}, 0x18) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) unshare(0x2c040000) 1.041646407s ago: executing program 0 (id=2711): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r1, 0x0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='d', 0x1}], 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB='('], 0x28}, 0x0, 0x4800, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47f8, 0x0, 0x0, 0x0, 0x0) 849.429909ms ago: executing program 0 (id=2712): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) sendmsg$NL80211_CMD_GET_REG(r0, 0x0, 0x20004851) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) poll(&(0x7f0000000100)=[{}], 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x8000, 0x7800, 0x3, 0xfffffffe, {{0x1d, 0x4, 0x2, 0x33, 0x74, 0x65, 0x0, 0x3, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x6, "ac01b249"}, @generic={0x44, 0x4, "b05e"}, @end, @timestamp_addr={0x44, 0x34, 0x10, 0x1, 0xc, [{@loopback}, {@rand_addr=0x64010100, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x23}, 0x6}, {@empty, 0x2}, {@private=0xa010100, 0x8}, {@rand_addr=0x64010100, 0x3}]}, @rr={0x7, 0x17, 0xe7, [@dev={0xac, 0x14, 0x14, 0x3e}, @empty, @loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0x28}]}, @ssrr={0x89, 0x7, 0xf, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x1011216d79e753a4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x76, @void, @value}, 0x94) 820.29441ms ago: executing program 3 (id=2713): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) lchown(&(0x7f00000017c0)='./file0\x00', 0xee00, 0xee01) 782.93589ms ago: executing program 3 (id=2714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x28}, 0x0, 0x4001, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 709.871021ms ago: executing program 3 (id=2715): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @loopback, 0x2}}, 0x8b3a, 0xfff8, 0x3, 0x3, 0xc, 0x7, 0xf8}, &(0x7f0000000000)=0x9c) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x4000)=nil) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r1, 0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) creat(&(0x7f0000000600)='./file0\x00', 0xe5) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 709.377901ms ago: executing program 0 (id=2716): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) geteuid() 625.080582ms ago: executing program 0 (id=2718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r1, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6, 0xfffffffffffffffd}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000380), 0x12) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val={'init_itable', 0x3d, 0x8000}}, {@nodiscard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {}, {@nobarrier}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000010001fff010000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYRESOCT], 0x6c}}, 0x48c0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) fsmount(r7, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0x208e24b) ftruncate(r5, 0x6) socket$inet6(0xa, 0x80002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 609.863592ms ago: executing program 3 (id=2720): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) add_key$keyring(&(0x7f0000000340), &(0x7f00000003c0)={'syz', 0x0}, 0xffff0f00, 0x0, r1) 499.049414ms ago: executing program 3 (id=2722): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x40011) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) 494.774324ms ago: executing program 3 (id=2723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x3502, 0x2}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') unlinkat(r2, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 464.957134ms ago: executing program 7 (id=2724): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 464.197604ms ago: executing program 6 (id=2725): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 398.787725ms ago: executing program 7 (id=2726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x28}, 0x0, 0x4001, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 294.204596ms ago: executing program 2 (id=2727): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 265.574477ms ago: executing program 7 (id=2728): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) move_mount(0xffffffffffffff9c, &(0x7f0000000800)='./bus\x00', r0, &(0x7f0000000840)='./file0\x00', 0x64) 217.464337ms ago: executing program 6 (id=2729): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 175.855308ms ago: executing program 7 (id=2730): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x2a309, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000003740)=""/4096, 0x1900}], 0x0, 0x11a}, 0x20) 172.051758ms ago: executing program 2 (id=2731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x28}, 0x0, 0x4001, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 101.011589ms ago: executing program 7 (id=2732): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e24, 0x9, @loopback, 0x2}}, 0x8b3a, 0xfff8, 0x3, 0x3, 0xc, 0x7, 0xf8}, &(0x7f0000000000)=0x9c) prctl$PR_SET_MM(0x23, 0x1, &(0x7f0000ffb000/0x4000)=nil) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r1, 0x2}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) creat(&(0x7f0000000600)='./file0\x00', 0xe5) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000001340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x2) 100.286879ms ago: executing program 2 (id=2733): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @private, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @multicast2}, "09eeb315b0e18750"}}}}}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) 63.566989ms ago: executing program 6 (id=2734): r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000140)='1', 0xf}], 0x1) preadv(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/54, 0x36}], 0x1, 0xbbb, 0x24) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000380)=""/176) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x80000000000}, 0x18) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x108, 0x28, 0x1, 0x40000004, 0x25dfdbfc, "", [@nested={0xf7, 0xf2, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@private1}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x108}], 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_int(r0, 0x0, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x202, 0x0) sendfile(r10, r10, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) 17.68281ms ago: executing program 2 (id=2735): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10024, 0x9f, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc, 0xfffe, 0x0, 0x8001, 0x0, 0xffff}, r1, 0x0, 0xffffffffffffffff, 0x0) (fail_nth: 2) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xb1b, 0x0, 0x0, 0x0) 0s ago: executing program 7 (id=2736): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x8) sendmmsg$inet6(r0, &(0x7f0000001b80)=[{{&(0x7f0000000a00)={0xa, 0x4e20, 0x1, @loopback, 0x3}, 0x1c, 0x0}}], 0x1, 0x4095) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r1) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x169142, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) kernel console output (not intermixed with test programs): xe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe0c64ad1d7 code=0x7ffc0000 [ 111.790952][ T7209] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 111.802831][ T29] audit: type=1326 audit(1748813675.427:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe0c64b010a code=0x7ffc0000 [ 111.837151][ T7209] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.1163: lblock 2 mapped to illegal pblock 2 (length 1) [ 111.853129][ T7209] EXT4-fs (loop3): Remounting filesystem read-only [ 111.859682][ T7209] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 111.867845][ T7209] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 111.876979][ T7209] EXT4-fs (loop3): 1 orphan inode deleted [ 111.896990][ T7209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.904241][ T7226] bpf: Bad value for 'mode' [ 111.912165][ T7209] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.950794][ T29] audit: type=1326 audit(1748813675.727:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7208 comm="syz.3.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0c64ad2d0 code=0x7ffc0000 [ 112.033952][ T7066] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.081263][ T7066] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.113394][ T6346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.139782][ T7066] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.156499][ T7066] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.286564][ T6346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.606915][ T6346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.781190][ T7265] netlink: 'syz.3.1171': attribute type 4 has an invalid length. [ 112.789037][ T7265] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1171'. [ 112.885749][ T6346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.914185][ T7270] loop3: detected capacity change from 0 to 1024 [ 112.925844][ T7066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.943252][ T7270] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.970539][ T7270] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.992668][ T7270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 113.023636][ T7270] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.1172: lblock 2 mapped to illegal pblock 2 (length 1) [ 113.046728][ T7217] chnl_net:caif_netlink_parms(): no params data found [ 113.073468][ T7066] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.095824][ T7270] EXT4-fs (loop3): Remounting filesystem read-only [ 113.113198][ T7270] EXT4-fs (loop3): 1 orphan inode deleted [ 113.130893][ T7270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.146429][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.153550][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.164032][ T7270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.170948][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.180231][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.210595][ T6346] bridge_slave_1: left allmulticast mode [ 113.216301][ T6346] bridge_slave_1: left promiscuous mode [ 113.222002][ T6346] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.246750][ T6346] bridge_slave_0: left allmulticast mode [ 113.252476][ T6346] bridge_slave_0: left promiscuous mode [ 113.258263][ T6346] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.363172][ T6346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.375321][ T6346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.394462][ T6346] bond0 (unregistering): Released all slaves [ 113.474483][ T6346] hsr_slave_0: left promiscuous mode [ 113.486690][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1176'. [ 113.495605][ T6346] hsr_slave_1: left promiscuous mode [ 113.496331][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.508511][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.523007][ T6346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.530567][ T6346] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.546384][ T6346] veth1_macvtap: left promiscuous mode [ 113.552352][ T6346] veth0_macvtap: left promiscuous mode [ 113.558142][ T6346] veth1_vlan: left promiscuous mode [ 113.563717][ T6346] veth0_vlan: left promiscuous mode [ 113.667853][ T6346] team0 (unregistering): Port device team_slave_1 removed [ 113.690824][ T6346] team0 (unregistering): Port device team_slave_0 removed [ 113.749199][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.756448][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.798875][ T7316] bpf: Bad value for 'mode' [ 113.812233][ T7318] netlink: 'syz.3.1178': attribute type 4 has an invalid length. [ 113.820051][ T7318] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1178'. [ 113.820648][ T7217] bridge_slave_0: entered allmulticast mode [ 113.854057][ T7217] bridge_slave_0: entered promiscuous mode [ 113.876177][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.883438][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.911390][ T7217] bridge_slave_1: entered allmulticast mode [ 113.918081][ T7217] bridge_slave_1: entered promiscuous mode [ 113.962161][ T7329] dvmrp1: entered allmulticast mode [ 113.990054][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.009757][ T7066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.026224][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.038614][ T7336] geneve2: entered promiscuous mode [ 114.043973][ T7336] geneve2: entered allmulticast mode [ 114.097142][ T7217] team0: Port device team_slave_0 added [ 114.113789][ T7217] team0: Port device team_slave_1 added [ 114.156398][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.163416][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.189482][ T7217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.355014][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.362089][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.388520][ T7217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.476780][ T7217] hsr_slave_0: entered promiscuous mode [ 114.489092][ T7217] hsr_slave_1: entered promiscuous mode [ 114.500833][ T7217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.510642][ T7217] Cannot create hsr debugfs directory [ 114.619139][ T7355] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1183'. [ 114.686668][ T7066] veth0_vlan: entered promiscuous mode [ 114.734868][ T7066] veth1_vlan: entered promiscuous mode [ 114.772700][ T7217] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.788278][ T7066] veth0_macvtap: entered promiscuous mode [ 114.800765][ T7217] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.819706][ T7217] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.833938][ T7217] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 114.857726][ T7066] veth1_macvtap: entered promiscuous mode [ 114.885368][ T7066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.916330][ T7066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.947394][ T7066] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.956332][ T7066] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.965526][ T7066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.974406][ T7066] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.001474][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.017503][ T7217] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.035038][ T6346] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.042312][ T6346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.055773][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.062907][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.128632][ T7217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.139153][ T7217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.164349][ T7381] dvmrp1: entered allmulticast mode [ 115.180692][ T7381] dvmrp1: left allmulticast mode [ 115.272091][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.298469][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1187'. [ 115.478801][ T7417] geneve2: entered promiscuous mode [ 115.484229][ T7417] geneve2: entered allmulticast mode [ 115.643354][ T7446] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 115.651257][ T7446] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1194'. [ 115.671302][ T7436] loop6: detected capacity change from 0 to 1024 [ 115.679125][ T7436] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 115.695432][ T7436] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.837743][ T7436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 115.870575][ T7217] veth0_vlan: entered promiscuous mode [ 115.907164][ T7436] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 2: comm syz.6.1195: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.923746][ T7217] veth1_vlan: entered promiscuous mode [ 115.946273][ T7465] bpf: Bad value for 'mode' [ 115.951601][ T7436] EXT4-fs (loop6): Remounting filesystem read-only [ 115.966185][ T7217] veth0_macvtap: entered promiscuous mode [ 115.988557][ T7436] EXT4-fs (loop6): 1 orphan inode deleted [ 116.011886][ T7217] veth1_macvtap: entered promiscuous mode [ 116.050903][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.064622][ T7436] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.083656][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.104439][ T7436] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.110822][ T7217] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.122228][ T7217] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.131017][ T7217] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.139874][ T7217] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.165300][ T7477] dvmrp1: entered allmulticast mode [ 116.211036][ T7482] dvmrp1: left allmulticast mode [ 116.467455][ T7496] loop7: detected capacity change from 0 to 512 [ 116.481964][ T7509] dvmrp1: entered allmulticast mode [ 116.500199][ T7509] dvmrp1: left allmulticast mode [ 116.521978][ T7496] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 116.557710][ T7496] EXT4-fs (loop7): 1 truncate cleaned up [ 116.598100][ T7496] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.618829][ T7520] loop6: detected capacity change from 0 to 256 [ 116.654630][ T7520] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.689998][ T7496] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.746038][ T7520] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 116.752603][ T7496] geneve2: entered promiscuous mode [ 116.761849][ T7496] geneve2: entered allmulticast mode [ 116.874596][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 116.874610][ T29] audit: type=1326 audit(1748813680.667:5974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 116.925087][ T7535] loop6: detected capacity change from 0 to 1024 [ 116.946431][ T7535] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.990601][ T7535] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.991459][ T7538] dvmrp1: entered allmulticast mode [ 117.020992][ T29] audit: type=1326 audit(1748813680.707:5975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.044516][ T29] audit: type=1326 audit(1748813680.707:5976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.053061][ T7535] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 117.068045][ T29] audit: type=1326 audit(1748813680.707:5977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.099591][ T29] audit: type=1326 audit(1748813680.707:5978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.113857][ T7535] EXT4-fs error (device loop6): ext4_map_blocks:675: inode #3: block 2: comm syz.6.1211: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.123188][ T29] audit: type=1326 audit(1748813680.707:5979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.151094][ T7538] dvmrp1: left allmulticast mode [ 117.160684][ T29] audit: type=1326 audit(1748813680.707:5980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.189321][ T29] audit: type=1326 audit(1748813680.707:5981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.200642][ T7535] EXT4-fs (loop6): Remounting filesystem read-only [ 117.212737][ T29] audit: type=1326 audit(1748813680.707:5982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7534 comm="syz.6.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 117.219260][ T7535] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 117.301993][ T7535] EXT4-fs (loop6): 1 orphan inode deleted [ 117.308226][ T7535] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.362047][ T7535] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.492937][ T7558] bpf: Bad value for 'mode' [ 117.558039][ T7566] bpf: Bad value for 'mode' [ 117.676460][ T7584] bpf: Bad value for 'mode' [ 117.812229][ T7592] geneve2: entered promiscuous mode [ 117.817551][ T7592] geneve2: entered allmulticast mode [ 117.864262][ T7603] dvmrp1: entered allmulticast mode [ 117.877733][ T7603] dvmrp1: left allmulticast mode [ 118.005528][ T7611] loop3: detected capacity change from 0 to 1024 [ 118.038701][ T7611] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 118.089874][ T7611] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 118.124662][ T7611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 118.155099][ T7611] EXT4-fs error (device loop3): ext4_map_blocks:675: inode #3: block 2: comm syz.3.1229: lblock 2 mapped to illegal pblock 2 (length 1) [ 118.197111][ T7611] EXT4-fs (loop3): Remounting filesystem read-only [ 118.218206][ T7611] EXT4-fs (loop3): 1 orphan inode deleted [ 118.240022][ T7611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.257650][ T7611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.609638][ T7664] geneve2: entered promiscuous mode [ 118.615027][ T7664] geneve2: entered allmulticast mode [ 118.679400][ T7684] loop7: detected capacity change from 0 to 512 [ 118.705805][ T7684] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 118.750334][ T7684] EXT4-fs (loop7): 1 truncate cleaned up [ 118.761968][ T7692] dvmrp1: left allmulticast mode [ 118.768728][ T7684] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.803917][ T7684] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.854713][ T7684] geneve2: entered promiscuous mode [ 118.859982][ T7684] geneve2: entered allmulticast mode [ 119.032771][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'. [ 119.477925][ T7736] netlink: 'syz.7.1246': attribute type 1 has an invalid length. [ 119.485890][ T7736] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1246'. [ 119.497789][ T7738] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1249'. [ 119.850974][ T7759] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 119.858861][ T7759] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1256'. [ 120.054927][ T7777] bpf: Bad value for 'mode' [ 120.094767][ T7781] bpf: Bad value for 'mode' [ 120.164033][ T7785] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 120.170601][ T7785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.178263][ T7785] vhci_hcd vhci_hcd.0: Device attached [ 120.183963][ T7783] loop3: detected capacity change from 0 to 512 [ 120.191461][ T7786] vhci_hcd: connection closed [ 120.202556][ T6330] vhci_hcd: stop threads [ 120.211617][ T6330] vhci_hcd: release socket [ 120.216071][ T6330] vhci_hcd: disconnect device [ 120.224901][ T7783] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.246083][ T7783] EXT4-fs (loop3): 1 truncate cleaned up [ 120.255693][ T7783] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.275519][ T7783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.304534][ T7783] geneve2: entered promiscuous mode [ 120.309920][ T7783] geneve2: entered allmulticast mode [ 120.348350][ T7793] bpf: Bad value for 'mode' [ 120.397236][ T7798] loop6: detected capacity change from 0 to 1024 [ 120.423613][ T7798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.620873][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1271'. [ 120.798792][ T7829] bpf: Bad value for 'mode' [ 120.950337][ T7842] netlink: 'syz.7.1283': attribute type 1 has an invalid length. [ 120.958184][ T7842] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1283'. [ 121.043276][ T7850] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1284'. [ 121.086125][ T7850] netlink: 'syz.2.1284': attribute type 13 has an invalid length. [ 121.214528][ T7857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 121.302794][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1286'. [ 121.525640][ T7066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.587982][ T7865] loop6: detected capacity change from 0 to 1024 [ 121.617868][ T7865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.674861][ T7869] bpf: Bad value for 'mode' [ 121.700603][ T7871] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 121.708431][ T7871] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1290'. [ 121.807114][ T7850] bridge0: port 3(team0) entered disabled state [ 121.816616][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.826235][ T7850] bridge0: port 1() entered disabled state [ 121.967960][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 121.967975][ T29] audit: type=1326 audit(1748813685.757:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 121.999635][ T7850] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.008222][ T29] audit: type=1326 audit(1748813685.757:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.023674][ T7850] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.031803][ T29] audit: type=1326 audit(1748813685.757:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.062470][ T29] audit: type=1326 audit(1748813685.757:6399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=216 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.086374][ T29] audit: type=1326 audit(1748813685.767:6400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.109909][ T29] audit: type=1326 audit(1748813685.767:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.133610][ T29] audit: type=1326 audit(1748813685.767:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.157229][ T29] audit: type=1326 audit(1748813685.767:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.180671][ T29] audit: type=1326 audit(1748813685.767:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.204181][ T29] audit: type=1326 audit(1748813685.767:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7884 comm="syz.0.1294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 122.234230][ T7850] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.243331][ T7850] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.252342][ T7850] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.261509][ T7850] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.536270][ T7916] netlink: 'syz.7.1302': attribute type 1 has an invalid length. [ 122.613979][ T7922] bpf: Bad value for 'mode' [ 122.744465][ T7066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.294340][ T8012] netlink: 'syz.2.1315': attribute type 3 has an invalid length. [ 123.572938][ T8052] loop3: detected capacity change from 0 to 512 [ 123.588496][ T8052] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 123.602576][ T8052] EXT4-fs (loop3): 1 truncate cleaned up [ 123.609677][ T8052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.625313][ T8052] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.679627][ T8052] geneve2: entered promiscuous mode [ 123.684942][ T8052] geneve2: entered allmulticast mode [ 124.043639][ T8134] loop6: detected capacity change from 0 to 256 [ 124.241727][ T8157] netlink: 'syz.6.1332': attribute type 1 has an invalid length. [ 124.249647][ T8157] __nla_validate_parse: 3 callbacks suppressed [ 124.249663][ T8157] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1332'. [ 124.355658][ T8170] dvmrp1: entered allmulticast mode [ 124.376885][ T8170] dvmrp1: left allmulticast mode [ 124.508871][ T8194] loop6: detected capacity change from 0 to 1024 [ 124.528809][ T8194] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.588154][ T8188] loop7: detected capacity change from 0 to 512 [ 124.615881][ T8188] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 124.680512][ T8188] EXT4-fs (loop7): 1 truncate cleaned up [ 124.686701][ T8188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.724274][ T8188] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.748380][ T8216] netlink: 'syz.3.1344': attribute type 1 has an invalid length. [ 124.756224][ T8216] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1344'. [ 124.776723][ T8188] geneve2: entered promiscuous mode [ 124.782154][ T8188] geneve2: entered allmulticast mode [ 125.037495][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 125.442766][ T8250] loop3: detected capacity change from 0 to 8192 [ 125.453950][ T8268] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 125.460392][ T8268] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 125.530846][ T3309] loop3: p1 p3 p4 [ 125.538421][ T3309] loop3: p1 size 8390912 extends beyond EOD, truncated [ 125.563139][ T3309] loop3: p3 size 589824 extends beyond EOD, truncated [ 125.634030][ T8276] netlink: 'syz.6.1349': attribute type 10 has an invalid length. [ 125.670954][ T8276] syz_tun: entered promiscuous mode [ 125.690332][ T8276] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.715355][ T8250] loop3: p1 p3 p4 [ 125.721259][ T8250] loop3: p1 size 8390912 extends beyond EOD, truncated [ 125.738259][ T8282] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 125.746900][ T8250] loop3: p3 size 589824 extends beyond EOD, truncated [ 125.768740][ T8275] lo speed is unknown, defaulting to 1000 [ 125.774670][ T8275] lo speed is unknown, defaulting to 1000 [ 125.784521][ T8275] lo speed is unknown, defaulting to 1000 [ 125.794375][ T8268] wg1 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 125.829868][ T8275] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 125.859389][ T8275] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 125.907543][ T8275] lo speed is unknown, defaulting to 1000 [ 125.928148][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 125.930095][ T3559] udevd[3559]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 125.953343][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 125.963713][ T8275] lo speed is unknown, defaulting to 1000 [ 125.969846][ T8275] lo speed is unknown, defaulting to 1000 [ 125.977932][ T8275] lo speed is unknown, defaulting to 1000 [ 126.014042][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 126.017602][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 126.036419][ T8298] loop6: detected capacity change from 0 to 256 [ 126.051172][ T8275] lo speed is unknown, defaulting to 1000 [ 126.063385][ T8298] FAT-fs (loop6): bogus sectors per cluster 0 [ 126.069541][ T8298] FAT-fs (loop6): Can't find a valid FAT filesystem [ 126.135179][ T8294] geneve2: entered promiscuous mode [ 126.140654][ T8294] geneve2: entered allmulticast mode [ 126.187550][ T8301] dvmrp1: entered allmulticast mode [ 126.193806][ T8301] dvmrp1: left allmulticast mode [ 126.218543][ T8308] netlink: 'syz.7.1362': attribute type 1 has an invalid length. [ 126.226375][ T8308] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1362'. [ 126.288869][ T8314] netlink: 'syz.7.1364': attribute type 1 has an invalid length. [ 126.296714][ T8314] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1364'. [ 126.476119][ T8326] netlink: 'syz.7.1368': attribute type 1 has an invalid length. [ 126.483944][ T8326] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1368'. [ 126.624168][ T8342] bpf: Bad value for 'mode' [ 126.693101][ T8349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 126.775271][ T8354] geneve2: entered promiscuous mode [ 126.780627][ T8354] geneve2: entered allmulticast mode [ 126.805274][ T8357] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.1380'. [ 126.846797][ T8340] loop6: detected capacity change from 0 to 32768 [ 126.901036][ T3309] loop6: p1 p2 p3 < p5 p6 > [ 126.905805][ T3309] loop6: p1 size 242222080 extends beyond EOD, truncated [ 126.922756][ T3309] loop6: p2 start 4294967295 is beyond EOD, truncated [ 126.935267][ T8340] loop6: p1 p2 p3 < p5 p6 > [ 126.940355][ T8340] loop6: p1 size 242222080 extends beyond EOD, truncated [ 126.948199][ T8340] loop6: p2 start 4294967295 is beyond EOD, truncated [ 126.986795][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1381'. [ 127.057656][ T3559] udevd[3559]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 127.069272][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 127.069301][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 127.090330][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 127.106862][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 127.237586][ T8373] bpf: Bad value for 'mode' [ 127.301079][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 127.301096][ T29] audit: type=1326 audit(1748813691.097:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.331196][ T29] audit: type=1326 audit(1748813691.097:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.355992][ T29] audit: type=1326 audit(1748813691.097:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8378 comm="syz.6.1389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.394902][ T29] audit: type=1326 audit(1748813691.187:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.439652][ T29] audit: type=1326 audit(1748813691.187:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.458527][ T8388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.463299][ T29] audit: type=1326 audit(1748813691.207:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.471923][ T8388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.471998][ T8388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.472101][ T8388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.495542][ T29] audit: type=1326 audit(1748813691.207:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.520852][ T8388] geneve2: entered promiscuous mode [ 127.521789][ T29] audit: type=1326 audit(1748813691.207:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.545182][ T8388] geneve2: entered allmulticast mode [ 127.550322][ T29] audit: type=1326 audit(1748813691.207:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.602754][ T29] audit: type=1326 audit(1748813691.207:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8380 comm="syz.6.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb75148e969 code=0x7ffc0000 [ 127.703878][ T8388] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.712889][ T8388] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.721843][ T8388] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.730898][ T8388] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.789975][ T8386] lo speed is unknown, defaulting to 1000 [ 127.867710][ T8395] bpf: Bad value for 'mode' [ 127.907607][ T8397] Cannot find add_set index 0 as target [ 128.171541][ T8422] dvmrp1: entered allmulticast mode [ 128.190702][ T8422] dvmrp1: left allmulticast mode [ 128.191546][ T8426] loop6: detected capacity change from 0 to 512 [ 128.211091][ T8426] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.252783][ T8417] loop3: detected capacity change from 0 to 512 [ 128.267497][ T8426] EXT4-fs (loop6): 1 truncate cleaned up [ 128.280692][ T8417] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 128.304900][ T8417] EXT4-fs (loop3): 1 truncate cleaned up [ 128.315370][ T8426] geneve2: entered promiscuous mode [ 128.320784][ T8426] geneve2: entered allmulticast mode [ 128.365304][ T8417] geneve2: entered promiscuous mode [ 128.370653][ T8417] geneve2: entered allmulticast mode [ 128.732368][ T8475] netlink: 'syz.0.1415': attribute type 4 has an invalid length. [ 128.740164][ T8475] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1415'. [ 129.189010][ T8483] netlink: 'syz.7.1421': attribute type 1 has an invalid length. [ 129.305423][ T8493] loop3: detected capacity change from 0 to 1024 [ 129.420853][ T8500] dvmrp1: entered allmulticast mode [ 129.428817][ T8500] dvmrp1: left allmulticast mode [ 129.457389][ T8502] __nla_validate_parse: 1 callbacks suppressed [ 129.457404][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 129.476868][ T8505] dvmrp1: entered allmulticast mode [ 129.483717][ T8505] dvmrp1: left allmulticast mode [ 129.618618][ T8518] netlink: 'syz.7.1435': attribute type 1 has an invalid length. [ 129.626526][ T8518] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1435'. [ 129.850291][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1440'. [ 130.044739][ T8554] geneve2: entered promiscuous mode [ 130.050093][ T8554] geneve2: entered allmulticast mode [ 130.103136][ T8561] bpf: Bad value for 'mode' [ 130.207987][ T8568] loop7: detected capacity change from 0 to 164 [ 130.241022][ T8568] ISOFS: unable to read i-node block [ 130.246387][ T8568] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 130.270773][ T8568] isofs_fill_super: get root inode failed [ 130.434818][ T8580] xt_TCPMSS: Only works on TCP SYN packets [ 130.547510][ T8580] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1449'. [ 130.664736][ T8600] netlink: 'syz.7.1451': attribute type 1 has an invalid length. [ 130.672530][ T8600] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1451'. [ 130.752514][ T8612] netlink: 'syz.3.1450': attribute type 4 has an invalid length. [ 130.760390][ T8612] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1450'. [ 130.882266][ T8620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1456'. [ 130.974250][ T8627] dvmrp1: entered allmulticast mode [ 130.997589][ T8627] dvmrp1: left allmulticast mode [ 131.057680][ T8634] netlink: 'syz.6.1464': attribute type 1 has an invalid length. [ 131.065568][ T8634] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1464'. [ 131.198306][ T8646] netlink: 'syz.6.1467': attribute type 1 has an invalid length. [ 131.206128][ T8646] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1467'. [ 131.756521][ T8691] netlink: 'syz.6.1475': attribute type 1 has an invalid length. [ 131.764541][ T8691] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1475'. [ 132.106159][ T8737] dvmrp1: entered allmulticast mode [ 132.114543][ T8737] dvmrp1: left allmulticast mode [ 132.425405][ T8778] netlink: 'syz.0.1488': attribute type 4 has an invalid length. [ 132.926287][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 132.926306][ T29] audit: type=1326 audit(1748813696.717:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 132.957459][ T29] audit: type=1326 audit(1748813696.717:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 132.988785][ T29] audit: type=1326 audit(1748813696.747:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.012459][ T29] audit: type=1326 audit(1748813696.747:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.035946][ T29] audit: type=1326 audit(1748813696.747:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.059491][ T29] audit: type=1326 audit(1748813696.777:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.083062][ T29] audit: type=1326 audit(1748813696.777:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.106570][ T29] audit: type=1326 audit(1748813696.777:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.130123][ T29] audit: type=1326 audit(1748813696.777:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.153814][ T29] audit: type=1326 audit(1748813696.777:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8802 comm="syz.2.1489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 133.181810][ T8807] SELinux: Context : is not valid (left unmapped). [ 133.197379][ T8807] loop3: detected capacity change from 0 to 512 [ 133.227245][ T8810] xt_hashlimit: max too large, truncated to 1048576 [ 133.251079][ T8807] EXT4-fs (loop3): too many log groups per flexible block group [ 133.258821][ T8807] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 133.258975][ T8810] loop6: detected capacity change from 0 to 2048 [ 133.281522][ T8807] EXT4-fs (loop3): mount failed [ 133.302311][ T8810] EXT4-fs (loop6): failed to initialize system zone (-117) [ 133.320311][ T8810] EXT4-fs (loop6): mount failed [ 133.420348][ T8827] ªªªªªª: renamed from vlan0 (while UP) [ 133.625047][ T8867] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 133.631674][ T8867] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.639300][ T8867] vhci_hcd vhci_hcd.0: Device attached [ 133.649553][ T8868] vhci_hcd: connection closed [ 133.649736][ T6333] vhci_hcd: stop threads [ 133.658883][ T6333] vhci_hcd: release socket [ 133.663494][ T6333] vhci_hcd: disconnect device [ 133.974900][ T8878] netlink: 'syz.7.1517': attribute type 4 has an invalid length. [ 134.365047][ T8882] loop6: detected capacity change from 0 to 164 [ 134.375729][ T8882] ISOFS: unable to read i-node block [ 134.381147][ T8882] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 134.437403][ T8882] isofs_fill_super: get root inode failed [ 134.537425][ T8896] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.546353][ T8896] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.555345][ T8896] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.564129][ T8896] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.603393][ T8896] geneve2: entered promiscuous mode [ 134.608693][ T8896] geneve2: entered allmulticast mode [ 134.641270][ T8896] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.650237][ T8896] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.659330][ T8896] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.668282][ T8896] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.708338][ T8913] dvmrp1: entered allmulticast mode [ 134.722447][ T8920] dvmrp1: left allmulticast mode [ 134.880301][ T8939] loop3: detected capacity change from 0 to 164 [ 134.908202][ T8939] ISOFS: unable to read i-node block [ 134.913735][ T8939] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 134.917830][ T8943] __nla_validate_parse: 8 callbacks suppressed [ 134.917850][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1535'. [ 134.939531][ T8939] isofs_fill_super: get root inode failed [ 134.952584][ T8944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1533'. [ 134.979566][ T8948] loop6: detected capacity change from 0 to 1024 [ 135.056603][ T8948] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 135.095278][ T8948] EXT4-fs mount: 7 callbacks suppressed [ 135.095296][ T8948] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.153091][ T7066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.276729][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1538'. [ 135.693354][ T9026] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9026 comm=syz.0.1544 [ 135.710363][ T9026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1544'. [ 135.868600][ T9041] dvmrp1: entered allmulticast mode [ 135.876870][ T9041] dvmrp1: left allmulticast mode [ 136.080000][ T9054] loop6: detected capacity change from 0 to 164 [ 136.104242][ T9054] ISOFS: unable to read i-node block [ 136.109593][ T9054] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 136.137108][ T9054] isofs_fill_super: get root inode failed [ 136.272715][ T9074] loop6: detected capacity change from 0 to 512 [ 136.293800][ T9074] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 136.327452][ T9074] EXT4-fs (loop6): 1 truncate cleaned up [ 136.374865][ T9074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.435714][ T9074] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.456375][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1567'. [ 136.495639][ T9074] geneve2: entered promiscuous mode [ 136.500954][ T9074] geneve2: entered allmulticast mode [ 136.544604][ T9092] netlink: 'syz.3.1569': attribute type 1 has an invalid length. [ 136.574754][ T9092] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.601134][ T9092] bond3: (slave veth3): Enslaving as an active interface with a down link [ 136.674277][ T9092] bond1: (slave veth0_to_bond): Releasing active interface [ 136.693660][ T9092] bond3: (slave veth0_to_bond): making interface the new active one [ 136.705147][ T9092] veth0_to_bond: entered promiscuous mode [ 136.711462][ T9092] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 137.182506][ T9120] loop3: detected capacity change from 0 to 512 [ 137.192710][ T9120] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 137.216026][ T9120] EXT4-fs (loop3): 1 truncate cleaned up [ 137.225514][ T9120] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.238826][ T9120] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.274627][ T9120] geneve2: entered promiscuous mode [ 137.279995][ T9120] geneve2: entered allmulticast mode [ 137.452398][ T9135] netlink: 'syz.2.1581': attribute type 4 has an invalid length. [ 137.460265][ T9135] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1581'. [ 138.001069][ T29] kauditd_printk_skb: 769 callbacks suppressed [ 138.001088][ T29] audit: type=1326 audit(1748813701.797:7844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.062602][ T29] audit: type=1326 audit(1748813701.797:7845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.086174][ T29] audit: type=1326 audit(1748813701.797:7846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.109695][ T29] audit: type=1326 audit(1748813701.797:7847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.133135][ T29] audit: type=1326 audit(1748813701.797:7848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.156739][ T29] audit: type=1326 audit(1748813701.797:7849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.181861][ T29] audit: type=1326 audit(1748813701.797:7850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.205584][ T29] audit: type=1326 audit(1748813701.797:7851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.228944][ T29] audit: type=1326 audit(1748813701.797:7852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.252376][ T29] audit: type=1326 audit(1748813701.807:7853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9146 comm="syz.7.1589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 138.474466][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1596'. [ 138.536069][ T9166] netlink: 'syz.3.1597': attribute type 1 has an invalid length. [ 138.544048][ T9166] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1597'. [ 138.735478][ T9187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1602'. [ 138.739856][ T9185] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.1605'. [ 138.855115][ T9204] loop6: detected capacity change from 0 to 1024 [ 138.880934][ T9204] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.685800][ T9235] dvmrp1: entered allmulticast mode [ 139.694107][ T9235] dvmrp1: left allmulticast mode [ 139.708506][ T7066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.765398][ T9237] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 139.771955][ T9237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.779567][ T9237] vhci_hcd vhci_hcd.0: Device attached [ 139.823182][ T9238] vhci_hcd: connection closed [ 139.823609][ T6333] vhci_hcd: stop threads [ 139.832664][ T6333] vhci_hcd: release socket [ 139.837089][ T6333] vhci_hcd: disconnect device [ 140.072608][ T9259] loop7: detected capacity change from 0 to 512 [ 140.081813][ T9259] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 140.094683][ T9259] EXT4-fs (loop7): 1 truncate cleaned up [ 140.101028][ T9259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.114889][ T9259] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.144528][ T9259] geneve2: entered promiscuous mode [ 140.149834][ T9259] geneve2: entered allmulticast mode [ 140.619201][ T9283] netlink: 'syz.0.1638': attribute type 4 has an invalid length. [ 140.627052][ T9283] __nla_validate_parse: 2 callbacks suppressed [ 140.627068][ T9283] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1638'. [ 140.975514][ T9286] loop3: detected capacity change from 0 to 164 [ 141.017639][ T9288] loop6: detected capacity change from 0 to 512 [ 141.028902][ T9288] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 141.047842][ T9286] ISOFS: unable to read i-node block [ 141.048484][ T9288] EXT4-fs (loop6): 1 truncate cleaned up [ 141.053266][ T9286] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 141.076205][ T9286] isofs_fill_super: get root inode failed [ 141.096530][ T9288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.137074][ T9288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.178847][ T9294] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.187740][ T9294] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.196560][ T9294] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.205374][ T9294] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.223671][ T9294] geneve2: entered promiscuous mode [ 141.228942][ T9294] geneve2: entered allmulticast mode [ 141.303902][ T9294] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.307176][ T9298] netlink: '+}[@': attribute type 10 has an invalid length. [ 141.312893][ T9294] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.329278][ T9294] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.338244][ T9294] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.534934][ T9288] geneve2: entered promiscuous mode [ 141.540310][ T9288] geneve2: entered allmulticast mode [ 141.572750][ T9298] batman_adv: batadv0: Adding interface: team0 [ 141.578973][ T9298] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.604186][ T9298] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 142.094111][ T9328] netlink: 'syz.6.1656': attribute type 1 has an invalid length. [ 142.101939][ T9328] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1656'. [ 142.260019][ T9338] netlink: 'syz.3.1657': attribute type 4 has an invalid length. [ 142.267852][ T9338] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1657'. [ 142.413616][ T9343] loop6: detected capacity change from 0 to 512 [ 142.498387][ T9343] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 142.585128][ T9351] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.1659'. [ 142.684665][ T9343] EXT4-fs (loop6): 1 truncate cleaned up [ 142.699344][ T9343] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.715109][ T9343] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.745902][ T9336] geneve2: entered promiscuous mode [ 142.751310][ T9336] geneve2: entered allmulticast mode [ 142.845381][ T9370] netlink: 'syz.7.1669': attribute type 1 has an invalid length. [ 142.853241][ T9370] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1669'. [ 142.950975][ T9365] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.1668'. [ 143.026590][ T9388] program syz.7.1672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 143.036544][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 143.036561][ T29] audit: type=1326 audit(1748813706.827:8450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.066354][ T29] audit: type=1326 audit(1748813706.827:8451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.112664][ T9392] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.1674'. [ 143.134978][ T29] audit: type=1326 audit(1748813706.887:8452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.158510][ T29] audit: type=1326 audit(1748813706.887:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.182005][ T29] audit: type=1326 audit(1748813706.887:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.205586][ T29] audit: type=1326 audit(1748813706.887:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.229236][ T29] audit: type=1326 audit(1748813706.887:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.252971][ T29] audit: type=1326 audit(1748813706.887:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.276710][ T29] audit: type=1326 audit(1748813706.887:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.300291][ T29] audit: type=1326 audit(1748813706.887:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9376 comm="syz.3.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 143.306121][ T9399] loop3: detected capacity change from 0 to 512 [ 143.360200][ T9399] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.463752][ T9399] EXT4-fs (loop3): 1 truncate cleaned up [ 143.479937][ T9399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.525735][ T9407] loop7: detected capacity change from 0 to 512 [ 143.534491][ T9407] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 143.545779][ T9399] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.562679][ T9407] EXT4-fs (loop7): 1 truncate cleaned up [ 143.569169][ T9407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.587636][ T9407] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.592560][ T9395] geneve2: entered promiscuous mode [ 143.602122][ T9395] geneve2: entered allmulticast mode [ 143.683181][ T9407] geneve2: entered promiscuous mode [ 143.688669][ T9407] geneve2: entered allmulticast mode [ 144.002818][ T9435] loop3: detected capacity change from 0 to 512 [ 144.015541][ T9435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.042256][ T9435] EXT4-fs (loop3): 1 truncate cleaned up [ 144.048630][ T9435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.072421][ T9435] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.131508][ T9435] geneve2: entered promiscuous mode [ 144.136886][ T9435] geneve2: entered allmulticast mode [ 144.296484][ T9444] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.1692'. [ 144.395829][ T9448] netlink: 'syz.7.1693': attribute type 1 has an invalid length. [ 144.403743][ T9448] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1693'. [ 144.468783][ T9452] netlink: 'syz.7.1695': attribute type 1 has an invalid length. [ 144.476742][ T9452] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1695'. [ 144.667133][ T9467] loop7: detected capacity change from 0 to 512 [ 144.674879][ T9467] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 144.695412][ T9467] EXT4-fs (loop7): 1 truncate cleaned up [ 144.721144][ T9467] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.752143][ T9467] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.794484][ T9467] geneve2: entered promiscuous mode [ 144.799765][ T9467] geneve2: entered allmulticast mode [ 144.915087][ T9488] loop6: detected capacity change from 0 to 164 [ 144.926309][ T9488] ISOFS: unable to read i-node block [ 144.931816][ T9488] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 144.971932][ T9488] isofs_fill_super: get root inode failed [ 145.037156][ T9493] netlink: 'syz.3.1710': attribute type 1 has an invalid length. [ 145.507001][ T9515] netlink: 'syz.3.1717': attribute type 1 has an invalid length. [ 145.677741][ T9533] netlink: 'syz.3.1725': attribute type 1 has an invalid length. [ 145.685700][ T9533] __nla_validate_parse: 3 callbacks suppressed [ 145.685715][ T9533] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1725'. [ 145.891866][ T9554] loop3: detected capacity change from 0 to 164 [ 145.908942][ T9554] ISOFS: unable to read i-node block [ 145.914333][ T9554] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 145.937701][ T9554] isofs_fill_super: get root inode failed [ 146.056209][ T9558] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.1734'. [ 146.161235][ T9576] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.1741'. [ 146.298231][ T9596] loop7: detected capacity change from 0 to 164 [ 146.437763][ T9596] ISOFS: unable to read i-node block [ 146.443248][ T9596] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 146.472768][ T9596] isofs_fill_super: get root inode failed [ 146.745002][ T9628] dvmrp1: entered allmulticast mode [ 146.754735][ T9628] dvmrp1: left allmulticast mode [ 147.159753][ T9689] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1772'. [ 147.221995][ T9709] loop6: detected capacity change from 0 to 164 [ 147.257473][ T9709] ISOFS: unable to read i-node block [ 147.262969][ T9709] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 147.290842][ T9709] isofs_fill_super: get root inode failed [ 147.369239][ T9729] dvmrp1: entered allmulticast mode [ 147.395559][ T9729] dvmrp1: left allmulticast mode [ 147.439229][ T9733] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.1782'. [ 147.593579][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1786'. [ 147.659326][ T9768] wireguard0: entered promiscuous mode [ 147.664920][ T9768] wireguard0: entered allmulticast mode [ 147.955157][ T9810] netlink: 'syz.6.1792': attribute type 4 has an invalid length. [ 147.963250][ T9810] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1792'. [ 148.019433][ T9812] 9pnet_virtio: no channels available for device 127.0.0.1 [ 148.254596][ T9818] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.263469][ T9818] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.272445][ T9818] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.281289][ T9818] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.312396][ T9818] geneve2: entered promiscuous mode [ 148.317730][ T9818] geneve2: entered allmulticast mode [ 148.328202][ T9818] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.337372][ T9818] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.346309][ T9818] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.355368][ T9818] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.543055][ T6330] veth0_to_bond: left promiscuous mode [ 148.587484][ T9850] loop3: detected capacity change from 0 to 1024 [ 148.636651][ T9850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.658211][ T9857] netlink: 'syz.6.1806': attribute type 10 has an invalid length. [ 148.668295][ T9857] team0: Device hsr_slave_0 failed to register rx_handler [ 148.678664][ T29] kauditd_printk_skb: 991 callbacks suppressed [ 148.678683][ T29] audit: type=1326 audit(1748813712.467:9451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.708418][ T29] audit: type=1326 audit(1748813712.467:9452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.732351][ T29] audit: type=1326 audit(1748813712.467:9453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.756037][ T29] audit: type=1326 audit(1748813712.467:9454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.779553][ T29] audit: type=1326 audit(1748813712.467:9455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.783661][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 148.803341][ T29] audit: type=1326 audit(1748813712.467:9456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.835598][ T29] audit: type=1326 audit(1748813712.467:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.859059][ T29] audit: type=1326 audit(1748813712.467:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.882576][ T29] audit: type=1326 audit(1748813712.467:9459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 148.906059][ T29] audit: type=1326 audit(1748813712.467:9460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9859 comm="syz.0.1807" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 149.049159][ T9875] 9pnet_virtio: no channels available for device 127.0.0.1 [ 149.292944][ T9888] loop6: detected capacity change from 0 to 512 [ 149.312288][ T9888] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 149.340392][ T9888] EXT4-fs (loop6): 1 truncate cleaned up [ 149.347113][ T9888] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.489695][ T9904] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.1826'. [ 149.492567][ T9888] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.624046][ T9888] geneve2: entered promiscuous mode [ 149.629298][ T9888] geneve2: entered allmulticast mode [ 149.642312][ T9912] loop7: detected capacity change from 0 to 164 [ 149.660410][ T9912] ISOFS: unable to read i-node block [ 149.665835][ T9912] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 149.683011][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.700910][ T9912] isofs_fill_super: get root inode failed [ 149.726573][ T9922] 9pnet_virtio: no channels available for device 127.0.0.1 [ 149.752451][ T9924] netlink: 'syz.3.1831': attribute type 1 has an invalid length. [ 149.760288][ T9924] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1831'. [ 149.833840][ T9932] dvmrp1: entered allmulticast mode [ 149.974732][ T9938] loop3: detected capacity change from 0 to 1024 [ 150.002986][ T9938] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.127120][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.200408][ T9965] dvmrp1: entered allmulticast mode [ 150.510650][T10015] 9pnet_virtio: no channels available for device 127.0.0.1 [ 150.628502][T10033] loop7: detected capacity change from 0 to 164 [ 150.644949][T10033] ISOFS: unable to read i-node block [ 150.650307][T10033] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 150.668614][T10033] isofs_fill_super: get root inode failed [ 150.827812][T10058] __nla_validate_parse: 5 callbacks suppressed [ 150.827834][T10058] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.1880'. [ 151.032913][T10106] netlink: 'syz.6.1884': attribute type 1 has an invalid length. [ 151.040776][T10106] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1884'. [ 151.093579][T10115] loop6: detected capacity change from 0 to 1024 [ 151.113301][T10115] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.183687][ T7066] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.195382][T10126] netlink: 'syz.3.1887': attribute type 1 has an invalid length. [ 151.203303][T10126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1887'. [ 151.262483][T10137] netlink: 'syz.6.1888': attribute type 1 has an invalid length. [ 151.270276][T10137] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1888'. [ 151.595102][T10173] netlink: 'syz.3.1892': attribute type 4 has an invalid length. [ 151.602924][T10173] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.1892'. [ 151.625511][T10170] loop6: detected capacity change from 0 to 512 [ 151.664163][T10170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 151.775671][T10170] EXT4-fs (loop6): 1 truncate cleaned up [ 151.800081][T10170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.847795][T10179] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.1895'. [ 151.864331][T10170] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.006207][T10170] geneve2: entered promiscuous mode [ 152.011528][T10170] geneve2: entered allmulticast mode [ 152.122949][T10199] loop7: detected capacity change from 0 to 164 [ 152.133361][T10199] ISOFS: unable to read i-node block [ 152.138705][T10199] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 152.148807][T10199] isofs_fill_super: get root inode failed [ 152.301913][T10212] loop3: detected capacity change from 0 to 1024 [ 152.326848][T10212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.393744][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.476966][T10226] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 152.509064][T10234] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1910'. [ 152.592354][T10246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1909'. [ 152.596923][T10236] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.1911'. [ 152.625258][T10248] 9pnet_virtio: no channels available for device 127.0.0.1 [ 153.022798][T10299] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10299 comm=syz.7.1936 [ 153.323118][T10339] loop7: detected capacity change from 0 to 512 [ 153.331172][T10339] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 153.347461][T10339] EXT4-fs (loop7): 1 truncate cleaned up [ 153.420360][T10339] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.475635][T10339] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.510050][T10339] geneve2: entered promiscuous mode [ 153.515371][T10339] geneve2: entered allmulticast mode [ 153.711220][ T29] kauditd_printk_skb: 942 callbacks suppressed [ 153.711240][ T29] audit: type=1326 audit(1748813717.507:10403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.755077][ T29] audit: type=1326 audit(1748813717.507:10404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.778884][ T29] audit: type=1326 audit(1748813717.507:10405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.802561][ T29] audit: type=1326 audit(1748813717.507:10406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.826149][ T29] audit: type=1326 audit(1748813717.507:10407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.849753][ T29] audit: type=1326 audit(1748813717.507:10408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.873506][ T29] audit: type=1326 audit(1748813717.507:10409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.897306][ T29] audit: type=1326 audit(1748813717.507:10410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 153.920887][ T29] audit: type=1326 audit(1748813717.507:10411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10372 comm="syz.2.1967" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 154.004035][ T29] audit: type=1326 audit(1748813717.777:10412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10382 comm="syz.2.1970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 154.251971][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop7, 10) failed: No such file or directory [ 154.273632][T10412] geneve2: entered promiscuous mode [ 154.278890][T10412] geneve2: entered allmulticast mode [ 154.567213][T10441] FAULT_INJECTION: forcing a failure. [ 154.567213][T10441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.580504][T10441] CPU: 1 UID: 0 PID: 10441 Comm: syz.6.1996 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 154.580533][T10441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 154.580585][T10441] Call Trace: [ 154.580593][T10441] [ 154.580603][T10441] __dump_stack+0x1d/0x30 [ 154.580625][T10441] dump_stack_lvl+0xe8/0x140 [ 154.580708][T10441] dump_stack+0x15/0x1b [ 154.580730][T10441] should_fail_ex+0x265/0x280 [ 154.580774][T10441] should_fail+0xb/0x20 [ 154.580888][T10441] should_fail_usercopy+0x1a/0x20 [ 154.580913][T10441] strncpy_from_user+0x25/0x230 [ 154.580949][T10441] ? kmem_cache_alloc_noprof+0x186/0x310 [ 154.580969][T10441] ? getname_flags+0x80/0x3b0 [ 154.581010][T10441] getname_flags+0xae/0x3b0 [ 154.581075][T10441] user_path_at+0x28/0x130 [ 154.581097][T10441] __se_sys_mount+0x25b/0x2e0 [ 154.581196][T10441] ? fput+0x8f/0xc0 [ 154.581275][T10441] __x64_sys_mount+0x67/0x80 [ 154.581311][T10441] x64_sys_call+0xd36/0x2fb0 [ 154.581346][T10441] do_syscall_64+0xd0/0x1a0 [ 154.581450][T10441] ? clear_bhb_loop+0x40/0x90 [ 154.581477][T10441] ? clear_bhb_loop+0x40/0x90 [ 154.581500][T10441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.581527][T10441] RIP: 0033:0x7fb75148e969 [ 154.581554][T10441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.581630][T10441] RSP: 002b:00007fb74faf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 154.581655][T10441] RAX: ffffffffffffffda RBX: 00007fb7516b5fa0 RCX: 00007fb75148e969 [ 154.581668][T10441] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 154.581681][T10441] RBP: 00007fb74faf7090 R08: 0000200000000180 R09: 0000000000000000 [ 154.581693][T10441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.581705][T10441] R13: 0000000000000000 R14: 00007fb7516b5fa0 R15: 00007ffd6edfd638 [ 154.581730][T10441] [ 154.924043][T10456] geneve2: entered promiscuous mode [ 154.929330][T10456] geneve2: entered allmulticast mode [ 155.001329][T10464] netlink: 'syz.3.1997': attribute type 4 has an invalid length. [ 155.861722][T10523] __nla_validate_parse: 10 callbacks suppressed [ 155.861740][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 156.018138][T10550] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.2017'. [ 156.231675][T10576] netlink: 'syz.7.2018': attribute type 4 has an invalid length. [ 156.239563][T10576] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2018'. [ 157.252567][T10687] geneve2: entered promiscuous mode [ 157.257839][T10687] geneve2: entered allmulticast mode [ 157.680193][T10741] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.2054'. [ 157.863404][T10772] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2060'. [ 157.928346][T10790] geneve2: entered promiscuous mode [ 157.933695][T10790] geneve2: entered allmulticast mode [ 158.184144][T10824] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.2068'. [ 158.263290][T10833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2070'. [ 158.280189][T10833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.287853][T10833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.315505][T10833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.323059][T10833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.339136][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'. [ 158.443237][T10861] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 158.443237][T10861] program syz.6.2073 not setting count and/or reply_len properly [ 158.456838][T10859] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.469150][T10859] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.477945][T10859] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.486814][T10859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.498766][T10859] geneve2: entered promiscuous mode [ 158.504051][T10859] geneve2: entered allmulticast mode [ 158.522923][T10859] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.532135][T10859] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.541207][T10859] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.550101][T10859] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.860284][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 158.860302][ T29] audit: type=1326 audit(1748813722.647:11029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 158.872374][T10891] netlink: 'syz.6.2083': attribute type 1 has an invalid length. [ 158.890152][ T29] audit: type=1326 audit(1748813722.647:11030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 158.921750][T10891] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2083'. [ 158.922755][ T29] audit: type=1326 audit(1748813722.687:11031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 158.954600][ T29] audit: type=1326 audit(1748813722.687:11032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 158.978535][ T29] audit: type=1326 audit(1748813722.687:11033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10888 comm="syz.0.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 159.034415][T10899] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.043262][T10899] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.052078][T10899] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.060905][T10899] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.070186][T10899] geneve2: entered promiscuous mode [ 159.075469][T10899] geneve2: entered allmulticast mode [ 159.082644][T10899] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.091667][T10899] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.100602][T10899] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.109540][T10899] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.190719][T10907] geneve2: entered promiscuous mode [ 159.195972][T10907] geneve2: entered allmulticast mode [ 159.603319][ T29] audit: type=1326 audit(1748813723.397:11034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.7.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 159.626982][ T29] audit: type=1326 audit(1748813723.397:11035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.7.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 159.650770][ T29] audit: type=1326 audit(1748813723.397:11036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.7.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 159.674471][ T29] audit: type=1326 audit(1748813723.397:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.7.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 159.698078][ T29] audit: type=1326 audit(1748813723.397:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10920 comm="syz.7.2094" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 159.833701][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2099'. [ 160.039671][T10958] bridge0: entered promiscuous mode [ 160.061873][T10958] bridge0: port 3(macvlan2) entered blocking state [ 160.068506][T10958] bridge0: port 3(macvlan2) entered disabled state [ 160.100597][T10958] macvlan2: entered allmulticast mode [ 160.106231][T10958] bridge0: entered allmulticast mode [ 160.117600][T10958] macvlan2: left allmulticast mode [ 160.122817][T10958] bridge0: left allmulticast mode [ 160.128648][T10958] bridge0: left promiscuous mode [ 160.441122][T10985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.449983][T10985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.458748][T10985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.467564][T10985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.480619][T10985] geneve2: entered promiscuous mode [ 160.485881][T10985] geneve2: entered allmulticast mode [ 160.493926][T10985] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.502916][T10985] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.511946][T10985] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.521067][T10985] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.970464][T11006] geneve2: entered promiscuous mode [ 160.975752][T11006] geneve2: entered allmulticast mode [ 161.014825][T11004] geneve2: entered promiscuous mode [ 161.020120][T11004] geneve2: entered allmulticast mode [ 161.202587][T11014] __nla_validate_parse: 1 callbacks suppressed [ 161.202602][T11014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2131'. [ 161.323359][T11024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11024 comm=syz.3.2136 [ 161.417867][T11031] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.2138'. [ 161.589997][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2141'. [ 161.690411][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2145'. [ 162.116433][T11080] FAULT_INJECTION: forcing a failure. [ 162.116433][T11080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.129735][T11080] CPU: 0 UID: 0 PID: 11080 Comm: syz.3.2156 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 162.129763][T11080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.129776][T11080] Call Trace: [ 162.129863][T11080] [ 162.129873][T11080] __dump_stack+0x1d/0x30 [ 162.129901][T11080] dump_stack_lvl+0xe8/0x140 [ 162.129924][T11080] dump_stack+0x15/0x1b [ 162.129979][T11080] should_fail_ex+0x265/0x280 [ 162.130022][T11080] should_fail+0xb/0x20 [ 162.130113][T11080] should_fail_usercopy+0x1a/0x20 [ 162.130134][T11080] _copy_from_user+0x1c/0xb0 [ 162.130180][T11080] dev_ethtool+0x52/0x1650 [ 162.130209][T11080] ? full_name_hash+0x92/0xe0 [ 162.130229][T11080] ? strcmp+0x22/0x50 [ 162.130265][T11080] dev_ioctl+0x2e0/0x960 [ 162.130294][T11080] sock_do_ioctl+0x197/0x220 [ 162.130405][T11080] sock_ioctl+0x41b/0x610 [ 162.130440][T11080] ? __pfx_sock_ioctl+0x10/0x10 [ 162.130474][T11080] __se_sys_ioctl+0xce/0x140 [ 162.130576][T11080] __x64_sys_ioctl+0x43/0x50 [ 162.130603][T11080] x64_sys_call+0x19a8/0x2fb0 [ 162.130631][T11080] do_syscall_64+0xd0/0x1a0 [ 162.130658][T11080] ? clear_bhb_loop+0x40/0x90 [ 162.130680][T11080] ? clear_bhb_loop+0x40/0x90 [ 162.130743][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.130781][T11080] RIP: 0033:0x7fe0c64ae969 [ 162.130801][T11080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.130825][T11080] RSP: 002b:00007fe0c4b17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.130849][T11080] RAX: ffffffffffffffda RBX: 00007fe0c66d5fa0 RCX: 00007fe0c64ae969 [ 162.130929][T11080] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000026 [ 162.130984][T11080] RBP: 00007fe0c4b17090 R08: 0000000000000000 R09: 0000000000000000 [ 162.131001][T11080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.131017][T11080] R13: 0000000000000000 R14: 00007fe0c66d5fa0 R15: 00007ffe9fa29de8 [ 162.131044][T11080] [ 162.532769][T11104] netlink: 2564 bytes leftover after parsing attributes in process `syz.0.2164'. [ 162.567386][T11110] FAULT_INJECTION: forcing a failure. [ 162.567386][T11110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.580558][T11110] CPU: 1 UID: 0 PID: 11110 Comm: syz.3.2165 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 162.580590][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.580607][T11110] Call Trace: [ 162.580614][T11110] [ 162.580623][T11110] __dump_stack+0x1d/0x30 [ 162.580673][T11110] dump_stack_lvl+0xe8/0x140 [ 162.580695][T11110] dump_stack+0x15/0x1b [ 162.580712][T11110] should_fail_ex+0x265/0x280 [ 162.580754][T11110] should_fail+0xb/0x20 [ 162.580799][T11110] should_fail_usercopy+0x1a/0x20 [ 162.580826][T11110] _copy_from_iter+0xcf/0xdd0 [ 162.580851][T11110] ? __build_skb_around+0x1a0/0x200 [ 162.580971][T11110] ? __alloc_skb+0x223/0x320 [ 162.581055][T11110] netlink_sendmsg+0x471/0x6b0 [ 162.581077][T11110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.581100][T11110] __sock_sendmsg+0x142/0x180 [ 162.581238][T11110] ____sys_sendmsg+0x31e/0x4e0 [ 162.581303][T11110] ___sys_sendmsg+0x17b/0x1d0 [ 162.581346][T11110] __x64_sys_sendmsg+0xd4/0x160 [ 162.581371][T11110] x64_sys_call+0x2999/0x2fb0 [ 162.581403][T11110] do_syscall_64+0xd0/0x1a0 [ 162.581434][T11110] ? clear_bhb_loop+0x40/0x90 [ 162.581463][T11110] ? clear_bhb_loop+0x40/0x90 [ 162.581493][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.581587][T11110] RIP: 0033:0x7fe0c64ae969 [ 162.581607][T11110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.581631][T11110] RSP: 002b:00007fe0c4b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.581658][T11110] RAX: ffffffffffffffda RBX: 00007fe0c66d5fa0 RCX: 00007fe0c64ae969 [ 162.581713][T11110] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 162.581725][T11110] RBP: 00007fe0c4b17090 R08: 0000000000000000 R09: 0000000000000000 [ 162.581736][T11110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.581747][T11110] R13: 0000000000000000 R14: 00007fe0c66d5fa0 R15: 00007ffe9fa29de8 [ 162.581766][T11110] [ 162.912262][T11127] netlink: 'syz.6.2174': attribute type 1 has an invalid length. [ 162.920333][T11127] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2174'. [ 162.995735][T11131] geneve2: entered promiscuous mode [ 163.001190][T11131] geneve2: entered allmulticast mode [ 163.042796][T11137] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.2177'. [ 163.210870][T11145] netlink: 'syz.3.2178': attribute type 4 has an invalid length. [ 163.218776][T11145] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2178'. [ 163.648406][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2184'. [ 163.802444][T11164] geneve2: entered promiscuous mode [ 163.807821][T11164] geneve2: entered allmulticast mode [ 163.957988][ T29] kauditd_printk_skb: 556 callbacks suppressed [ 163.958005][ T29] audit: type=1326 audit(1748813727.747:11595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.063396][ T29] audit: type=1326 audit(1748813727.777:11596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.087100][ T29] audit: type=1326 audit(1748813727.777:11597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.110878][ T29] audit: type=1326 audit(1748813727.777:11598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.134498][ T29] audit: type=1326 audit(1748813727.777:11599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.158818][ T29] audit: type=1326 audit(1748813727.787:11600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.182601][ T29] audit: type=1326 audit(1748813727.787:11601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.261557][ T29] audit: type=1326 audit(1748813728.047:11602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.285434][ T29] audit: type=1326 audit(1748813728.047:11603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.309056][ T29] audit: type=1326 audit(1748813728.047:11604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11185 comm="syz.2.2198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 164.425612][T11193] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.2200'. [ 166.205911][T11341] netlink: 'syz.0.2251': attribute type 4 has an invalid length. [ 166.213725][T11341] __nla_validate_parse: 4 callbacks suppressed [ 166.213776][T11341] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2251'. [ 166.919210][T11361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 167.293045][T11388] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.2280'. [ 167.335059][T11372] capability: warning: `syz.6.2273' uses 32-bit capabilities (legacy support in use) [ 167.382710][T11396] geneve2: entered promiscuous mode [ 167.388132][T11396] geneve2: entered allmulticast mode [ 167.564625][T11408] netlink: 2564 bytes leftover after parsing attributes in process `syz.6.2287'. [ 167.623198][T11418] geneve2: entered promiscuous mode [ 167.624311][T11420] netlink: 'syz.3.2292': attribute type 1 has an invalid length. [ 167.628425][T11418] geneve2: entered allmulticast mode [ 167.641540][T11420] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2292'. [ 167.998330][T11443] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.2301'. [ 168.220955][T11475] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.2315'. [ 168.587906][T11507] netlink: 'syz.2.2322': attribute type 4 has an invalid length. [ 168.595969][T11507] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2322'. [ 169.007515][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 169.007533][ T29] audit: type=1326 audit(1748813732.797:12267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.037645][ T29] audit: type=1326 audit(1748813732.797:12268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.061404][ T29] audit: type=1326 audit(1748813732.797:12269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.085169][ T29] audit: type=1326 audit(1748813732.797:12270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.108794][ T29] audit: type=1326 audit(1748813732.797:12271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.132495][ T29] audit: type=1326 audit(1748813732.797:12272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.156347][ T29] audit: type=1326 audit(1748813732.797:12273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.180669][ T29] audit: type=1326 audit(1748813732.797:12274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.204403][ T29] audit: type=1326 audit(1748813732.797:12275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11521 comm="syz.3.2334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 169.228201][ T29] audit: type=1326 audit(1748813732.807:12276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11519 comm="syz.7.2335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3b71be969 code=0x7ffc0000 [ 169.272400][T11529] geneve2: entered promiscuous mode [ 169.277651][T11529] geneve2: entered allmulticast mode [ 169.534575][T11547] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.2347'. [ 169.543121][T11558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'. [ 170.013319][T11613] geneve2: entered promiscuous mode [ 170.018604][T11613] geneve2: entered allmulticast mode [ 170.435029][T11663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 170.564275][T11678] geneve2: entered promiscuous mode [ 170.569768][T11678] geneve2: entered allmulticast mode [ 170.862054][T11701] netlink: 'syz.0.2407': attribute type 21 has an invalid length. [ 170.882474][T11701] atomic_op ffff88811297f128 conn xmit_atomic 0000000000000000 [ 171.220918][T11723] netlink: 'syz.7.2413': attribute type 1 has an invalid length. [ 171.228797][T11723] __nla_validate_parse: 9 callbacks suppressed [ 171.228840][T11723] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2413'. [ 171.258503][T11725] openvswitch: netlink: Message has 6 unknown bytes. [ 171.319198][T11733] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.2419'. [ 171.784410][T11759] netlink: 'syz.7.2429': attribute type 1 has an invalid length. [ 171.792273][T11759] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2429'. [ 172.103562][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2439'. [ 172.134030][T11783] geneve2: entered promiscuous mode [ 172.139384][T11783] geneve2: entered allmulticast mode [ 172.483586][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2445'. [ 172.597562][T11811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2450'. [ 172.610507][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.618062][T11811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.628571][T11811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.636166][T11811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.694028][T11817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.702954][T11817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.711740][T11817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.720766][T11817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.730128][T11817] geneve2: entered promiscuous mode [ 172.735423][T11817] geneve2: entered allmulticast mode [ 172.759991][T11817] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.769073][T11817] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.778026][T11817] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.787001][T11817] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.856939][T11836] geneve2: entered promiscuous mode [ 172.862253][T11836] geneve2: entered allmulticast mode [ 173.438619][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2482'. [ 173.544094][T11897] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2489'. [ 173.792408][T11918] geneve2: entered promiscuous mode [ 173.797754][T11918] geneve2: entered allmulticast mode [ 174.134072][ T29] kauditd_printk_skb: 1001 callbacks suppressed [ 174.134090][ T29] audit: type=1326 audit(1748813737.927:13278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.164098][ T29] audit: type=1326 audit(1748813737.927:13279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.189695][ T29] audit: type=1326 audit(1748813737.937:13280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.213497][ T29] audit: type=1326 audit(1748813737.937:13281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.237300][ T29] audit: type=1326 audit(1748813737.937:13282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.261123][ T29] audit: type=1326 audit(1748813737.937:13283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.284825][ T29] audit: type=1326 audit(1748813737.937:13284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.308484][ T29] audit: type=1326 audit(1748813737.937:13285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.332120][ T29] audit: type=1326 audit(1748813737.937:13286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11931 comm="syz.0.2503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92cdf2e969 code=0x7ffc0000 [ 174.356275][ T29] audit: type=1326 audit(1748813737.977:13287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11933 comm="syz.2.2504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0df559e969 code=0x7ffc0000 [ 174.436004][T11944] netlink: 2564 bytes leftover after parsing attributes in process `syz.2.2506'. [ 174.518119][T11960] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2516'. [ 174.652564][T11967] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 174.772458][T11979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.782346][T11982] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.801320][T11979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.094078][T11991] FAULT_INJECTION: forcing a failure. [ 175.094078][T11991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.107373][T11991] CPU: 1 UID: 0 PID: 11991 Comm: syz.6.2530 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 175.107402][T11991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.107419][T11991] Call Trace: [ 175.107427][T11991] [ 175.107437][T11991] __dump_stack+0x1d/0x30 [ 175.107491][T11991] dump_stack_lvl+0xe8/0x140 [ 175.107516][T11991] dump_stack+0x15/0x1b [ 175.107532][T11991] should_fail_ex+0x265/0x280 [ 175.107645][T11991] should_fail+0xb/0x20 [ 175.107702][T11991] should_fail_usercopy+0x1a/0x20 [ 175.107864][T11991] _copy_to_user+0x20/0xa0 [ 175.107894][T11991] simple_read_from_buffer+0xb5/0x130 [ 175.107930][T11991] proc_fail_nth_read+0x100/0x140 [ 175.107967][T11991] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.108034][T11991] vfs_read+0x19d/0x6f0 [ 175.108132][T11991] ? __rcu_read_unlock+0x4f/0x70 [ 175.108162][T11991] ? __fget_files+0x184/0x1c0 [ 175.108200][T11991] ksys_read+0xda/0x1a0 [ 175.108257][T11991] __x64_sys_read+0x40/0x50 [ 175.108293][T11991] x64_sys_call+0x2d77/0x2fb0 [ 175.108322][T11991] do_syscall_64+0xd0/0x1a0 [ 175.108354][T11991] ? clear_bhb_loop+0x40/0x90 [ 175.108402][T11991] ? clear_bhb_loop+0x40/0x90 [ 175.108426][T11991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.108447][T11991] RIP: 0033:0x7fb75148d37c [ 175.108471][T11991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.108496][T11991] RSP: 002b:00007fb74faf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.108521][T11991] RAX: ffffffffffffffda RBX: 00007fb7516b5fa0 RCX: 00007fb75148d37c [ 175.108592][T11991] RDX: 000000000000000f RSI: 00007fb74faf70a0 RDI: 0000000000000007 [ 175.108604][T11991] RBP: 00007fb74faf7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.108617][T11991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.108688][T11991] R13: 0000000000000000 R14: 00007fb7516b5fa0 R15: 00007ffd6edfd638 [ 175.108714][T11991] [ 175.680842][T12035] FAULT_INJECTION: forcing a failure. [ 175.680842][T12035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.694032][T12035] CPU: 0 UID: 0 PID: 12035 Comm: syz.7.2549 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 175.694065][T12035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.694162][T12035] Call Trace: [ 175.694169][T12035] [ 175.694178][T12035] __dump_stack+0x1d/0x30 [ 175.694241][T12035] dump_stack_lvl+0xe8/0x140 [ 175.694267][T12035] dump_stack+0x15/0x1b [ 175.694288][T12035] should_fail_ex+0x265/0x280 [ 175.694333][T12035] should_fail+0xb/0x20 [ 175.694433][T12035] should_fail_usercopy+0x1a/0x20 [ 175.694477][T12035] _copy_from_user+0x1c/0xb0 [ 175.694545][T12035] ___sys_sendmsg+0xc1/0x1d0 [ 175.694621][T12035] __x64_sys_sendmsg+0xd4/0x160 [ 175.694702][T12035] x64_sys_call+0x2999/0x2fb0 [ 175.694731][T12035] do_syscall_64+0xd0/0x1a0 [ 175.694763][T12035] ? clear_bhb_loop+0x40/0x90 [ 175.694792][T12035] ? clear_bhb_loop+0x40/0x90 [ 175.694902][T12035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.694925][T12035] RIP: 0033:0x7ff3b71be969 [ 175.694940][T12035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.694960][T12035] RSP: 002b:00007ff3b5827038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.694986][T12035] RAX: ffffffffffffffda RBX: 00007ff3b73e5fa0 RCX: 00007ff3b71be969 [ 175.695040][T12035] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 175.695058][T12035] RBP: 00007ff3b5827090 R08: 0000000000000000 R09: 0000000000000000 [ 175.695074][T12035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.695090][T12035] R13: 0000000000000000 R14: 00007ff3b73e5fa0 R15: 00007fff296da298 [ 175.695131][T12035] [ 175.869352][T12039] 9pnet_fd: Insufficient options for proto=fd [ 175.911967][T12039] xt_CT: No such helper "snmp_trap" [ 175.941711][T12046] geneve2: entered promiscuous mode [ 175.947073][T12046] geneve2: entered allmulticast mode [ 176.347827][T12067] __nla_validate_parse: 3 callbacks suppressed [ 176.347848][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2557'. [ 176.532126][T12076] geneve2: entered promiscuous mode [ 176.537386][T12076] geneve2: entered allmulticast mode [ 176.645847][T12089] geneve2: entered promiscuous mode [ 176.651353][T12089] geneve2: entered allmulticast mode [ 177.788553][T12120] lo speed is unknown, defaulting to 1000 [ 177.885358][T12120] chnl_net:caif_netlink_parms(): no params data found [ 177.929676][T12158] geneve2: entered promiscuous mode [ 177.935038][T12158] geneve2: entered allmulticast mode [ 177.955040][ T6330] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.982297][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.989404][T12120] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.997443][T12120] bridge_slave_0: entered allmulticast mode [ 178.004449][T12120] bridge_slave_0: entered promiscuous mode [ 178.014369][ T6330] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.025465][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.032579][T12120] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.040150][T12120] bridge_slave_1: entered allmulticast mode [ 178.046776][T12120] bridge_slave_1: entered promiscuous mode [ 178.065693][T12120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.077883][ T6330] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.090916][T12120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.112790][T12120] team0: Port device team_slave_0 added [ 178.119607][T12120] team0: Port device team_slave_1 added [ 178.145707][ T6330] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.165133][T12120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.172239][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.198192][T12120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.209732][T12120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.216779][T12120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.242922][T12120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.275663][T12120] hsr_slave_0: entered promiscuous mode [ 178.281906][T12120] hsr_slave_1: entered promiscuous mode [ 178.288111][T12120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.296207][T12120] Cannot create hsr debugfs directory [ 178.393856][ T6330] bridge_slave_1: left allmulticast mode [ 178.399564][ T6330] bridge_slave_1: left promiscuous mode [ 178.405374][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.420746][ T6330] bridge_slave_0: left allmulticast mode [ 178.426514][ T6330] bridge_slave_0: left promiscuous mode [ 178.432423][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.508927][ T6330] dvmrp1 (unregistering): left allmulticast mode [ 178.613085][ T6330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.619256][T12184] x_tables: duplicate underflow at hook 2 [ 178.628666][ T6330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.638628][ T6330] bond0 (unregistering): Released all slaves [ 178.649797][ T6330] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 178.661547][ T6330] bond1 (unregistering): Released all slaves [ 178.757275][ T6330] hsr_slave_0: left promiscuous mode [ 178.764681][ T6330] hsr_slave_1: left promiscuous mode [ 178.780962][ T6330] veth1_vlan: left promiscuous mode [ 178.792660][ T6330] veth0_vlan: left promiscuous mode [ 178.862392][ T6330] team0 (unregistering): Port device team_slave_1 removed [ 178.875236][ T6330] team0 (unregistering): Port device team_slave_0 removed [ 178.899518][T12208] netlink: 2564 bytes leftover after parsing attributes in process `syz.3.2608'. [ 179.181906][T12221] netlink: 'syz.7.2613': attribute type 4 has an invalid length. [ 179.189683][T12221] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2613'. [ 179.565684][T12120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.599174][T12120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.635691][T12120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.658810][T12120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.683647][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 179.683665][ T29] audit: type=1326 audit(1748813743.477:13541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.769228][ T29] audit: type=1326 audit(1748813743.507:13542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.783420][T12120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.792994][ T29] audit: type=1326 audit(1748813743.507:13543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.823291][ T29] audit: type=1326 audit(1748813743.507:13544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.847045][ T29] audit: type=1326 audit(1748813743.507:13545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.870645][ T29] audit: type=1326 audit(1748813743.507:13546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.894327][ T29] audit: type=1326 audit(1748813743.507:13547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.895166][T12120] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.917867][ T29] audit: type=1326 audit(1748813743.507:13548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.948076][ T29] audit: type=1326 audit(1748813743.507:13549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 179.971582][ T29] audit: type=1326 audit(1748813743.507:13550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12236 comm="syz.3.2617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0c64ae969 code=0x7ffc0000 [ 180.021828][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.029012][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.082052][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.089355][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.153169][T12246] netlink: 2564 bytes leftover after parsing attributes in process `syz.7.2621'. [ 180.208946][T12254] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2620'. [ 180.288708][T12120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.306270][T12266] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.315250][T12266] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.324010][T12266] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.332927][T12266] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.351266][T12266] geneve2: entered promiscuous mode [ 180.356554][T12266] geneve2: entered allmulticast mode [ 180.364590][T12266] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.373627][T12266] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.382702][T12266] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.391696][T12266] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.709014][T12299] netlink: 'syz.7.2630': attribute type 4 has an invalid length. [ 180.716855][T12299] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2630'. [ 180.854525][T12120] veth0_vlan: entered promiscuous mode [ 180.885882][T12120] veth1_vlan: entered promiscuous mode [ 180.943176][T12120] veth0_macvtap: entered promiscuous mode [ 180.974076][T12120] veth1_macvtap: entered promiscuous mode [ 181.013642][T12120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.045102][T12120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.061514][T12120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.070255][T12120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.079087][T12120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.087976][T12120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.893926][T12362] geneve2: entered promiscuous mode [ 182.899231][T12362] geneve2: entered allmulticast mode [ 182.906732][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2655'. [ 183.074273][T12383] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 183.193155][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2659'. [ 183.341379][T12391] xt_TPROXY: Can be used only with -p tcp or -p udp [ 183.530274][ T3395] hid (null): global environment stack underflow [ 183.536726][ T3395] hid (null): report_id 2241170255 is invalid [ 183.542876][ T3395] hid (null): unknown global tag 0xd [ 183.552753][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2674'. [ 183.562965][ T3395] hid-generic 0031:0002:0005.0002: unknown main item tag 0x3 [ 183.573460][ T3395] hid-generic 0031:0002:0005.0002: unknown main item tag 0x0 [ 183.580966][ T3395] hid-generic 0031:0002:0005.0002: unknown main item tag 0x6 [ 183.588422][ T3395] hid-generic 0031:0002:0005.0002: reserved main item tag 0xd [ 183.596260][ T3395] hid-generic 0031:0002:0005.0002: global environment stack underflow [ 183.604534][ T3395] hid-generic 0031:0002:0005.0002: item 0 1 1 11 parsing failed [ 183.623826][ T3395] hid-generic 0031:0002:0005.0002: probe with driver hid-generic failed with error -22 [ 184.075999][T12450] sg_write: data in/out 3843/14 bytes for SCSI command 0x4-- guessing data in; [ 184.075999][T12450] program syz.3.2686 not setting count and/or reply_len properly [ 184.707523][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 184.707542][ T29] audit: type=1326 audit(1748813748.497:14021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.738622][ T29] audit: type=1326 audit(1748813748.497:14022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.762326][ T29] audit: type=1326 audit(1748813748.507:14023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.786053][ T29] audit: type=1326 audit(1748813748.507:14024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.809766][ T29] audit: type=1326 audit(1748813748.507:14025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.833515][ T29] audit: type=1326 audit(1748813748.507:14026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.857334][ T29] audit: type=1326 audit(1748813748.507:14027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.881004][ T29] audit: type=1326 audit(1748813748.507:14028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.904735][ T29] audit: type=1326 audit(1748813748.507:14029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 184.928366][ T29] audit: type=1326 audit(1748813748.507:14030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12460 comm="syz.0.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80b15e969 code=0x7ffc0000 [ 185.150223][T12482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2701'. [ 186.327061][T12529] geneve2: entered promiscuous mode [ 186.332407][T12529] geneve2: entered allmulticast mode [ 186.358536][T12533] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2721'. [ 186.476316][T12543] netlink: 'syz.3.2723': attribute type 27 has an invalid length. [ 186.534392][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.541620][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.614483][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.662771][T12543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.779050][T12543] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.788046][T12543] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.797322][T12543] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.806467][T12543] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.932883][T12547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.943898][ T3324] ================================================================== [ 186.952054][ T3324] BUG: KCSAN: data-race in shmem_add_to_page_cache / shmem_getattr [ 186.959999][ T3324] [ 186.962353][ T3324] read-write to 0xffff88811be4e810 of 8 bytes by task 12571 on cpu 1: [ 186.970537][ T3324] shmem_add_to_page_cache+0x37f/0x490 [ 186.976053][ T3324] shmem_get_folio_gfp+0x4e8/0xd40 [ 186.981207][ T3324] shmem_write_begin+0xa8/0x190 [ 186.986092][ T3324] generic_perform_write+0x181/0x490 [ 186.991423][ T3324] shmem_file_write_iter+0xc5/0xf0 [ 186.996580][ T3324] __kernel_write_iter+0x253/0x4c0 [ 187.001730][ T3324] dump_user_range+0x5f4/0x8d0 [ 187.006511][ T3324] elf_core_dump+0x1dc2/0x1f80 [ 187.011307][ T3324] do_coredump+0x1836/0x1f40 [ 187.015929][ T3324] get_signal+0xd85/0xf70 [ 187.020269][ T3324] arch_do_signal_or_restart+0x97/0x480 [ 187.025843][ T3324] irqentry_exit_to_user_mode+0x5e/0xa0 [ 187.031416][ T3324] irqentry_exit+0x12/0x50 [ 187.035941][ T3324] asm_exc_page_fault+0x26/0x30 [ 187.040802][ T3324] [ 187.043134][ T3324] read to 0xffff88811be4e810 of 8 bytes by task 3324 on cpu 0: [ 187.050683][ T3324] shmem_getattr+0x68/0x200 [ 187.055210][ T3324] vfs_getattr_nosec+0x146/0x1e0 [ 187.060171][ T3324] vfs_statx+0x11a/0x380 [ 187.064436][ T3324] vfs_fstatat+0xe1/0x160 [ 187.068786][ T3324] __se_sys_newfstatat+0x55/0x260 [ 187.073817][ T3324] __x64_sys_newfstatat+0x55/0x70 [ 187.078852][ T3324] x64_sys_call+0x2c22/0x2fb0 [ 187.083541][ T3324] do_syscall_64+0xd0/0x1a0 [ 187.088062][ T3324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.093968][ T3324] [ 187.096292][ T3324] value changed: 0x000000000000005e -> 0x0000000000000062 [ 187.103585][ T3324] [ 187.105931][ T3324] Reported by Kernel Concurrency Sanitizer on: [ 187.112108][ T3324] CPU: 0 UID: 0 PID: 3324 Comm: syz-executor Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 187.122710][ T3324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 187.132778][ T3324] ================================================================== [ 187.142695][T12547] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.149791][T12547] batman_adv: batadv0: Interface activated: team0 [ 187.175506][T12547] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.