last executing test programs: 5.376015246s ago: executing program 1 (id=3057): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2c040000) 4.427767729s ago: executing program 1 (id=3071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) unshare(0x8000000) unshare(0x2c040000) 3.474302582s ago: executing program 1 (id=3095): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) socket$inet(0x2, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 3.390232803s ago: executing program 1 (id=3096): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)="59cd2b9a0b0077f682073015fe02000000000000008e6e49aa07c31b4bea59bce260b3578fcd18cba37a48ada670fd00a9455784144a643dc9b98831a96090ce160eaef81bbc90b89f37159e31ebfe4f05f799880100002f4a15511c364de47400dd997ca0bf00"/117, 0x75}}, 0x24048016) 3.369698423s ago: executing program 1 (id=3097): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup, 0xffffffffffffffff, 0x13, 0x0, 0x0, @void, @value}, 0x10) syz_open_dev$evdev(&(0x7f0000000740), 0x0, 0xab42) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000000c0)={0x15, {{0x29, 0x0, 0x3e000000, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) 2.416722927s ago: executing program 1 (id=3123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) socket$inet(0x2, 0x2, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x4}, 0x18) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0]) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 1.969714083s ago: executing program 2 (id=3136): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e8162120960001", 0xe5}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffabb08ff67cb98266eeb1fbf81ec1e06", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3d", 0xf3}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83", 0x49}], 0x6}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f84", 0x29}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789", 0x67}, {&(0x7f0000000e80)="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", 0x14d}], 0x3}}], 0x2, 0xc0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.952711053s ago: executing program 2 (id=3137): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000640)='stack\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000300)=""/254, 0xfe}], 0x1, 0x2000000, 0x2000000) 1.771469016s ago: executing program 2 (id=3138): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) creat(0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0x40045304, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002"], 0x118}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.50004663s ago: executing program 2 (id=3141): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) unshare(0x8000000) semtimedop(0x0, &(0x7f0000000440)=[{0x0, 0x0, 0x1000}], 0xf, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2c040000) 1.049781156s ago: executing program 0 (id=3149): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) inotify_init1(0x0) 1.049139086s ago: executing program 0 (id=3150): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) 1.046060016s ago: executing program 0 (id=3151): r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) tkill(r0, 0x9) r4 = gettid() r5 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r5, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) pipe2$9p(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',debug=']) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) lseek(r8, 0x8000000000008, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) 868.569829ms ago: executing program 3 (id=3155): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) r3 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18", @ANYRES32=r2, @ANYRESHEX=r2], 0xa0}, 0x4004881) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e22, 0x4, @empty}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c) 844.852439ms ago: executing program 3 (id=3156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 782.414479ms ago: executing program 3 (id=3157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840), 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r5, &(0x7f0000000780)}, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) dup(r9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000009385000000710000"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 734.93911ms ago: executing program 3 (id=3158): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r1, 0x7, 0x0, 0x8, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0xb23, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000000004, 0x2ffffffff}, 0x1904, 0x0, 0x3, 0x5, 0x0, 0x800001, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000850000000800000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) r6 = syz_open_dev$loop(&(0x7f00000003c0), 0x2, 0x40000) ioctl$IOC_PR_PREEMPT_ABORT(r6, 0x401870cc, &(0x7f0000000440)={0x0, 0x1, 0x0, 0xb}) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000880), 0x4, 0x523, &(0x7f00000018c0)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x800, &(0x7f0000000700)={[{@jqfmt_vfsv1}, {@nouid32}, {@block_validity}, {@norecovery}, {@nobarrier}, {@dioread_lock}, {}, {@data_journal}], [{@flag='nolazytime'}, {@dont_appraise}, {@hash}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@hash}]}, 0x3, 0x546, &(0x7f0000000180)="$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") creat(&(0x7f0000000000)='./file0\x00', 0x1a0) getsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000800), 0x0) mount$9p_rdma(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x148c2, &(0x7f00000001c0)=ANY=[@ANYBLOB=',ro']) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14c) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) 486.803294ms ago: executing program 2 (id=3159): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={0x0, r1}, 0x18) timerfd_create(0x0, 0x800) 281.891446ms ago: executing program 2 (id=3160): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) 228.232018ms ago: executing program 3 (id=3161): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0xb, 0x5, @mcast1, 0x634}}}, &(0x7f00000000c0)=0x84) 185.499808ms ago: executing program 3 (id=3163): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x8, 0xcc38b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_config_ext={0x4, 0x100000003}, 0x3323, 0x4, 0x3, 0x0, 0x9, 0x800001, 0xfff7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0), 0x0, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 184.977998ms ago: executing program 4 (id=3164): bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) creat(0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) dup(r1) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0x40045304, &(0x7f0000000200)={0x7, 0x2, 0x1, 'queue0\x00', 0x996a}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x5}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "fc79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001006c696d697400000024000280"], 0x118}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 135.047629ms ago: executing program 0 (id=3165): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat(r2, &(0x7f0000000080)='./mnt\x00', r2, &(0x7f0000000100)='./mnt\x00') unlinkat(r2, &(0x7f00000000c0)='./mnt\x00', 0x200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c80)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3f0, 0x3d8, 0x3d8, 0x3f0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x4001, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4001, 0x1, 0x3, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0000229ac9d99901d7d8b38bfa2abd7000fedbc9250200000002ade7c550b604dd93ab69a1fb7c852d795258aab01ee15cc329cc07030d507ee56a68f8a8c4cb8e5c46"], 0x1c}, 0x1, 0x0, 0x0, 0x10d0}, 0x20010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x6, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x8100, @remote}}}, 0x108) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="7c010000190001000000000003000000ac141425000000000000000000000000fe8000000000000000000000000000aa00000000fffd00060a00008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000c4000500fe880000000000000000000000000101000004d62b000000020000000a0101020000000000000000000000000000000004030700080000000400000001000000fe80000000000000000000000000004c000004d66c00000002000000fc0000000000000000000000000000010135000002007300018000000400000006000000ff010000000000000000000000000001000004d43200000002000000fe8000000000000000000000000000bb02350000b90107000500000003000000050000006d56df5e3f5c6b848d497e41e5fa7f4e0d7be989dc8754d4cd4ec9c45a688850c36d8edbb9bc7e822de0ef16ed673b6f2be3122d8f3cf65f9beffdd036c169a4c40aa604ef87d676dcd93aafd28442e1429ab347f2f947b3aa6d57fb319d13307bc877f74079d3e981eedd66d3d3a9a30fc70725b87d8f9f6e8c4fc545b8ce7659952af76292eec3922c297f0b8e5543373320d5f12ab2cfb1ca81ad71bb4d3799871d3a983dd6ebcc89dcc1f9165066829f6bfacf014bfc9234680eccf64eb5c32bbf0380ff4c6bc15a35e092a7c44bec49dd38fd652bffb5ec764f3fc0d2ba3f279a159677a5ab919812eb2ea9f752b44ebe4eb7d8102ebd2106e5716c613015926645ad19215f9bb663810b3e3e1e7d8acac32894585aab7cc0e201be02824b8b98548f0002d4c82a9349f051698d531ecb33639f926325b900f68700f04a51f229d840800c02011287121db64f"], 0x17c}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000259400"], 0x118}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r10, &(0x7f0000001240)=ANY=[@ANYBLOB="0000001907000100000014000000452000280068000003069078e0000002e00000014e204e23", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="084031ef65134008"], 0x36) 131.255028ms ago: executing program 4 (id=3166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x400}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 111.374179ms ago: executing program 4 (id=3167): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x72, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$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") prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x80207450, &(0x7f00000003c0)=0xc446806) 45.90608ms ago: executing program 4 (id=3168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=0x0, @ANYBLOB="ca412a7d5db2d97acf84ec8268b931998bb6b1394a7087af280630866f823c1dd565bd2474cb2d8109ac2b244272766adf4c71196a5deef8c9022887f0f1", @ANYRES16=r0], 0x0, 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30000000000000000000000008000300000000001400"], 0x58}}, 0x0) rmdir(0x0) 31.18824ms ago: executing program 0 (id=3169): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40004) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x181101, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, 0x0) ioctl$PPPIOCSMRU1(r1, 0x80047453, &(0x7f0000000000)=0x10000) 28.343431ms ago: executing program 4 (id=3170): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000040)) r3 = gettid() sendmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)='>', 0x1}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="e5ffff6e18", @ANYRES32=r2, @ANYRESHEX=r2], 0xa0}, 0x4004881) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000340)={0xa, 0x4e22, 0x4, @empty}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c) 368.111µs ago: executing program 0 (id=3171): socket$netlink(0x10, 0x3, 0x0) r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000040)='environ\x00') 0s ago: executing program 4 (id=3172): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280), &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r2, @in6={{0xa, 0xb, 0x5, @mcast1, 0x634}}}, &(0x7f00000000c0)=0x84) kernel console output (not intermixed with test programs): udit(1749074001.076:5215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.4.2006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 149.675299][ T8498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2008'. [ 149.772224][ T8516] syz_tun: entered allmulticast mode [ 149.778051][ T8516] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 149.786608][ T8516] net_ratelimit: 11 callbacks suppressed [ 149.786699][ T8516] mroute: pending queue full, dropping entries [ 149.799848][ T8513] syz_tun: left allmulticast mode [ 149.889298][ T8375] veth1_to_bond: left allmulticast mode [ 150.646530][ T8528] 9pnet_fd: Insufficient options for proto=fd [ 150.752733][ T8544] FAULT_INJECTION: forcing a failure. [ 150.752733][ T8544] name failslab, interval 1, probability 0, space 0, times 0 [ 150.765614][ T8544] CPU: 0 UID: 0 PID: 8544 Comm: syz.4.2029 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 150.765650][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 150.765662][ T8544] Call Trace: [ 150.765668][ T8544] [ 150.765676][ T8544] __dump_stack+0x1d/0x30 [ 150.765696][ T8544] dump_stack_lvl+0xe8/0x140 [ 150.765810][ T8544] dump_stack+0x15/0x1b [ 150.765826][ T8544] should_fail_ex+0x265/0x280 [ 150.765851][ T8544] should_failslab+0x8c/0xb0 [ 150.765881][ T8544] __kvmalloc_node_noprof+0x123/0x4e0 [ 150.765923][ T8544] ? xt_alloc_entry_offsets+0x48/0x50 [ 150.765957][ T8544] ? __account_obj_stock+0x211/0x350 [ 150.765988][ T8544] xt_alloc_entry_offsets+0x48/0x50 [ 150.766053][ T8544] translate_table+0xa9/0xf90 [ 150.766082][ T8544] ? __rcu_read_unlock+0x4f/0x70 [ 150.766149][ T8544] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 150.766317][ T8544] ? should_fail_ex+0xdb/0x280 [ 150.766369][ T8544] ? _copy_from_user+0x89/0xb0 [ 150.766403][ T8544] do_ipt_set_ctl+0x66f/0x820 [ 150.766433][ T8544] ? _raw_spin_unlock_bh+0x36/0x40 [ 150.766527][ T8544] ? tcp_release_cb+0xf1/0x370 [ 150.766562][ T8544] nf_setsockopt+0x196/0x1b0 [ 150.766719][ T8544] ip_setsockopt+0x102/0x110 [ 150.766748][ T8544] tcp_setsockopt+0x98/0xb0 [ 150.766775][ T8544] sock_common_setsockopt+0x66/0x80 [ 150.766817][ T8544] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 150.766906][ T8544] smc_setsockopt+0x183/0x750 [ 150.766948][ T8544] ? __pfx_smc_setsockopt+0x10/0x10 [ 150.766989][ T8544] __sys_setsockopt+0x184/0x200 [ 150.767026][ T8544] __x64_sys_setsockopt+0x64/0x80 [ 150.767148][ T8544] x64_sys_call+0x2bd5/0x2fb0 [ 150.767174][ T8544] do_syscall_64+0xd2/0x200 [ 150.767210][ T8544] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 150.767236][ T8544] ? clear_bhb_loop+0x40/0x90 [ 150.767261][ T8544] ? clear_bhb_loop+0x40/0x90 [ 150.767381][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.767408][ T8544] RIP: 0033:0x7fa63818e929 [ 150.767422][ T8544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.767439][ T8544] RSP: 002b:00007fa6367f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.767456][ T8544] RAX: ffffffffffffffda RBX: 00007fa6383b5fa0 RCX: 00007fa63818e929 [ 150.767470][ T8544] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 150.767481][ T8544] RBP: 00007fa6367f7090 R08: 0000000000000550 R09: 0000000000000000 [ 150.767527][ T8544] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.767538][ T8544] R13: 0000000000000000 R14: 00007fa6383b5fa0 R15: 00007ffe74f6ef28 [ 150.767563][ T8544] [ 151.340134][ T8561] netlink: 'syz.1.2035': attribute type 27 has an invalid length. [ 151.358838][ T8561] bridge0: port 3(dummy0) entered disabled state [ 151.370065][ T3392] lo speed is unknown, defaulting to 1000 [ 151.375873][ T3392] syz0: Port: 1 Link DOWN [ 151.394449][ T8561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.402483][ T8561] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.411068][ T8561] bridge0: port 3(dummy0) entered blocking state [ 151.417498][ T8561] bridge0: port 3(dummy0) entered forwarding state [ 151.426170][ T8561] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 151.441683][ T3389] lo speed is unknown, defaulting to 1000 [ 151.447513][ T3389] syz0: Port: 1 Link ACTIVE [ 152.036539][ T8589] netlink: 'syz.0.2047': attribute type 1 has an invalid length. [ 152.040270][ T8591] __nla_validate_parse: 2 callbacks suppressed [ 152.040302][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2048'. [ 152.051482][ T8589] bond2: entered promiscuous mode [ 152.064830][ T8589] bond2: entered allmulticast mode [ 152.065142][ T8593] 9pnet_fd: Insufficient options for proto=fd [ 152.080164][ T8591] IPVS: Error joining to the multicast group [ 152.160022][ T8589] geneve2: entered allmulticast mode [ 152.168402][ T8589] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.177196][ T8589] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.183773][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2051'. [ 152.186172][ T8589] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.186223][ T8589] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.214052][ T8589] bond2: (slave geneve2): making interface the new active one [ 152.221562][ T8589] geneve2: entered promiscuous mode [ 152.227619][ T8589] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 152.679480][ T8624] syz_tun: entered allmulticast mode [ 152.736643][ T8626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2063'. [ 153.012065][ T8648] netlink: 'syz.1.2074': attribute type 27 has an invalid length. [ 153.033752][ T8648] bridge0: port 3(dummy0) entered disabled state [ 153.044918][ T3392] lo speed is unknown, defaulting to 1000 [ 153.050814][ T3392] syz0: Port: 1 Link DOWN [ 153.069714][ T8648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.078137][ T8648] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.086585][ T8648] bridge0: port 3(dummy0) entered blocking state [ 153.092955][ T8648] bridge0: port 3(dummy0) entered forwarding state [ 153.102081][ T8648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.117685][ T3389] lo speed is unknown, defaulting to 1000 [ 153.123591][ T3389] syz0: Port: 1 Link ACTIVE [ 153.140195][ T8648] syzkaller1: entered promiscuous mode [ 153.145731][ T8648] syzkaller1: entered allmulticast mode [ 153.264728][ T8667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.311410][ T8669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2083'. [ 153.320544][ T8669] IPVS: Error joining to the multicast group [ 153.631362][ T8695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.770230][ T8699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2096'. [ 154.206874][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.215336][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.337589][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2105'. [ 154.346807][ T8719] IPVS: Error joining to the multicast group [ 154.431784][ T8723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2107'. [ 154.451568][ T8717] veth1_to_bond: entered allmulticast mode [ 154.548908][ T8736] syz_tun: entered allmulticast mode [ 154.554877][ T8736] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 154.563470][ T8736] mroute: pending queue full, dropping entries [ 154.571041][ T8735] syz_tun: left allmulticast mode [ 154.610496][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 154.610514][ T29] audit: type=1326 audit(1749074006.145:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.3.2115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa45e08e929 code=0x0 [ 155.269922][ T29] audit: type=1326 audit(1749074006.772:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.293411][ T29] audit: type=1326 audit(1749074006.772:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.319424][ T29] audit: type=1326 audit(1749074006.772:5392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.343121][ T29] audit: type=1326 audit(1749074006.772:5393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.366685][ T29] audit: type=1326 audit(1749074006.772:5394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.390327][ T29] audit: type=1326 audit(1749074006.772:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.413801][ T29] audit: type=1326 audit(1749074006.772:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8744 comm="syz.1.2117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.446530][ T8749] xt_hashlimit: max too large, truncated to 1048576 [ 155.465828][ T29] audit: type=1326 audit(1749074006.950:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8751 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.489532][ T29] audit: type=1326 audit(1749074006.950:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8751 comm="syz.1.2120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 155.703640][ T8766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2126'. [ 155.713086][ T8766] IPVS: Error joining to the multicast group [ 155.752304][ T8768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 155.914141][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2128'. [ 156.010956][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2137'. [ 156.020127][ T8789] IPVS: Error joining to the multicast group [ 156.385580][ T8804] FAULT_INJECTION: forcing a failure. [ 156.385580][ T8804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.398757][ T8804] CPU: 1 UID: 0 PID: 8804 Comm: syz.1.2142 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 156.398793][ T8804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.398815][ T8804] Call Trace: [ 156.398823][ T8804] [ 156.398831][ T8804] __dump_stack+0x1d/0x30 [ 156.398856][ T8804] dump_stack_lvl+0xe8/0x140 [ 156.398880][ T8804] dump_stack+0x15/0x1b [ 156.398953][ T8804] should_fail_ex+0x265/0x280 [ 156.398981][ T8804] should_fail+0xb/0x20 [ 156.399001][ T8804] should_fail_usercopy+0x1a/0x20 [ 156.399025][ T8804] _copy_from_user+0x1c/0xb0 [ 156.399114][ T8804] __sys_bpf+0x178/0x790 [ 156.399149][ T8804] __x64_sys_bpf+0x41/0x50 [ 156.399182][ T8804] x64_sys_call+0x2478/0x2fb0 [ 156.399226][ T8804] do_syscall_64+0xd2/0x200 [ 156.399302][ T8804] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.399326][ T8804] ? clear_bhb_loop+0x40/0x90 [ 156.399345][ T8804] ? clear_bhb_loop+0x40/0x90 [ 156.399364][ T8804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.399443][ T8804] RIP: 0033:0x7faeeee3e929 [ 156.399456][ T8804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.399482][ T8804] RSP: 002b:00007faeed4a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 156.399505][ T8804] RAX: ffffffffffffffda RBX: 00007faeef065fa0 RCX: 00007faeeee3e929 [ 156.399517][ T8804] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 156.399527][ T8804] RBP: 00007faeed4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.399538][ T8804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.399549][ T8804] R13: 0000000000000000 R14: 00007faeef065fa0 R15: 00007ffdc0e5e7c8 [ 156.399566][ T8804] [ 156.654123][ T8810] xt_hashlimit: max too large, truncated to 1048576 [ 156.704762][ T8818] syz_tun: entered allmulticast mode [ 156.712822][ T8818] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 156.721389][ T8818] mroute: pending queue full, dropping entries [ 156.730626][ T8817] syz_tun: left allmulticast mode [ 156.758652][ T8824] syz_tun: entered allmulticast mode [ 156.764469][ T8824] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 156.773066][ T8824] mroute: pending queue full, dropping entries [ 156.782453][ T8823] syz_tun: left allmulticast mode [ 156.807611][ T8827] FAULT_INJECTION: forcing a failure. [ 156.807611][ T8827] name failslab, interval 1, probability 0, space 0, times 0 [ 156.820383][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.3.2152 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 156.820432][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 156.820487][ T8827] Call Trace: [ 156.820494][ T8827] [ 156.820503][ T8827] __dump_stack+0x1d/0x30 [ 156.820557][ T8827] dump_stack_lvl+0xe8/0x140 [ 156.820577][ T8827] dump_stack+0x15/0x1b [ 156.820592][ T8827] should_fail_ex+0x265/0x280 [ 156.820612][ T8827] should_failslab+0x8c/0xb0 [ 156.820707][ T8827] __kmalloc_cache_node_noprof+0x54/0x320 [ 156.820743][ T8827] ? __get_vm_area_node+0x106/0x1d0 [ 156.820857][ T8827] __get_vm_area_node+0x106/0x1d0 [ 156.820888][ T8827] __vmalloc_node_range_noprof+0x273/0xe00 [ 156.820924][ T8827] ? copy_process+0x399/0x1fe0 [ 156.820962][ T8827] ? __rcu_read_unlock+0x4f/0x70 [ 156.821053][ T8827] __vmalloc_node_noprof+0x89/0xc0 [ 156.821091][ T8827] ? copy_process+0x399/0x1fe0 [ 156.821126][ T8827] ? copy_process+0x399/0x1fe0 [ 156.821178][ T8827] dup_task_struct+0x449/0x6a0 [ 156.821206][ T8827] ? _parse_integer+0x27/0x40 [ 156.821263][ T8827] copy_process+0x399/0x1fe0 [ 156.821363][ T8827] ? kstrtouint+0x76/0xc0 [ 156.821402][ T8827] ? kstrtouint_from_user+0x9f/0xf0 [ 156.821440][ T8827] ? __rcu_read_unlock+0x4f/0x70 [ 156.821478][ T8827] kernel_clone+0x16c/0x5b0 [ 156.821505][ T8827] ? vfs_write+0x75e/0x8e0 [ 156.821532][ T8827] __x64_sys_clone+0xe6/0x120 [ 156.821587][ T8827] x64_sys_call+0x2c59/0x2fb0 [ 156.821618][ T8827] do_syscall_64+0xd2/0x200 [ 156.821660][ T8827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 156.821693][ T8827] ? clear_bhb_loop+0x40/0x90 [ 156.821736][ T8827] ? clear_bhb_loop+0x40/0x90 [ 156.821762][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.821904][ T8827] RIP: 0033:0x7fa45e08e929 [ 156.821919][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.822014][ T8827] RSP: 002b:00007fa45c6f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 156.822031][ T8827] RAX: ffffffffffffffda RBX: 00007fa45e2b5fa0 RCX: 00007fa45e08e929 [ 156.822046][ T8827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000047043011 [ 156.822061][ T8827] RBP: 00007fa45c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.822076][ T8827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 156.822094][ T8827] R13: 0000000000000001 R14: 00007fa45e2b5fa0 R15: 00007ffd7306efb8 [ 156.822118][ T8827] [ 156.822127][ T8827] syz.3.2152: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 157.082816][ T8827] CPU: 0 UID: 0 PID: 8827 Comm: syz.3.2152 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 157.082844][ T8827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.082856][ T8827] Call Trace: [ 157.082862][ T8827] [ 157.082869][ T8827] __dump_stack+0x1d/0x30 [ 157.082891][ T8827] dump_stack_lvl+0xe8/0x140 [ 157.082916][ T8827] dump_stack+0x15/0x1b [ 157.082935][ T8827] warn_alloc+0x12b/0x1a0 [ 157.083082][ T8827] __vmalloc_node_range_noprof+0x297/0xe00 [ 157.083123][ T8827] ? __rcu_read_unlock+0x4f/0x70 [ 157.083148][ T8827] __vmalloc_node_noprof+0x89/0xc0 [ 157.083180][ T8827] ? copy_process+0x399/0x1fe0 [ 157.083201][ T8827] ? copy_process+0x399/0x1fe0 [ 157.083266][ T8827] dup_task_struct+0x449/0x6a0 [ 157.083287][ T8827] ? _parse_integer+0x27/0x40 [ 157.083316][ T8827] copy_process+0x399/0x1fe0 [ 157.083336][ T8827] ? kstrtouint+0x76/0xc0 [ 157.083513][ T8827] ? kstrtouint_from_user+0x9f/0xf0 [ 157.083530][ T8827] ? __rcu_read_unlock+0x4f/0x70 [ 157.083551][ T8827] kernel_clone+0x16c/0x5b0 [ 157.083573][ T8827] ? vfs_write+0x75e/0x8e0 [ 157.083612][ T8827] __x64_sys_clone+0xe6/0x120 [ 157.083648][ T8827] x64_sys_call+0x2c59/0x2fb0 [ 157.083669][ T8827] do_syscall_64+0xd2/0x200 [ 157.083751][ T8827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.083774][ T8827] ? clear_bhb_loop+0x40/0x90 [ 157.083797][ T8827] ? clear_bhb_loop+0x40/0x90 [ 157.083815][ T8827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.083896][ T8827] RIP: 0033:0x7fa45e08e929 [ 157.083909][ T8827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.083924][ T8827] RSP: 002b:00007fa45c6f6fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 157.083940][ T8827] RAX: ffffffffffffffda RBX: 00007fa45e2b5fa0 RCX: 00007fa45e08e929 [ 157.083951][ T8827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000047043011 [ 157.083961][ T8827] RBP: 00007fa45c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.084025][ T8827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 157.084036][ T8827] R13: 0000000000000001 R14: 00007fa45e2b5fa0 R15: 00007ffd7306efb8 [ 157.084097][ T8827] [ 157.084112][ T8827] Mem-Info: [ 157.308165][ T8827] active_anon:3321 inactive_anon:0 isolated_anon:0 [ 157.308165][ T8827] active_file:6530 inactive_file:2230 isolated_file:0 [ 157.308165][ T8827] unevictable:8200 dirty:117 writeback:0 [ 157.308165][ T8827] slab_reclaimable:2826 slab_unreclaimable:13507 [ 157.308165][ T8827] mapped:29206 shmem:183 pagetables:947 [ 157.308165][ T8827] sec_pagetables:0 bounce:0 [ 157.308165][ T8827] kernel_misc_reclaimable:0 [ 157.308165][ T8827] free:1901252 free_pcp:4350 free_cma:0 [ 157.353448][ T8827] Node 0 active_anon:13284kB inactive_anon:0kB active_file:26120kB inactive_file:8920kB unevictable:32800kB isolated(anon):0kB isolated(file):0kB mapped:116824kB dirty:468kB writeback:0kB shmem:732kB writeback_tmp:0kB kernel_stack:3040kB pagetables:3788kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 157.382924][ T8827] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 157.411508][ T8827] lowmem_reserve[]: 0 2882 7860 7860 [ 157.416850][ T8827] Node 0 DMA32 free:2947772kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951400kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 157.447376][ T8827] lowmem_reserve[]: 0 0 4978 4978 [ 157.452675][ T8827] Node 0 Normal free:4641872kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:13084kB inactive_anon:0kB active_file:26120kB inactive_file:8920kB unevictable:32800kB writepending:512kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:13956kB local_pcp:6232kB free_cma:0kB [ 157.485116][ T8827] lowmem_reserve[]: 0 0 0 0 [ 157.489912][ T8827] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.502756][ T8827] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947772kB [ 157.518951][ T8827] Node 0 Normal: 773*4kB (UME) 159*8kB (ME) 275*16kB (UM) 310*32kB (UM) 145*64kB (UME) 152*128kB (UME) 63*256kB (UME) 38*512kB (UM) 20*1024kB (UME) 14*2048kB (UME) 1101*4096kB (UM) = 4641852kB [ 157.538140][ T8827] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 157.547469][ T8827] 17120 total pagecache pages [ 157.552198][ T8827] 0 pages in swap cache [ 157.556357][ T8827] Free swap = 124996kB [ 157.560499][ T8827] Total swap = 124996kB [ 157.564667][ T8827] 2097051 pages RAM [ 157.568465][ T8827] 0 pages HighMem/MovableOnly [ 157.573255][ T8827] 80803 pages reserved [ 157.579634][ T8717] veth1_to_bond: left allmulticast mode [ 157.624328][ T8835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.692163][ T8843] FAULT_INJECTION: forcing a failure. [ 157.692163][ T8843] name failslab, interval 1, probability 0, space 0, times 0 [ 157.703096][ T8839] __nla_validate_parse: 1 callbacks suppressed [ 157.703116][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2157'. [ 157.704993][ T8843] CPU: 1 UID: 0 PID: 8843 Comm: syz.0.2159 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 157.705030][ T8843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 157.705046][ T8843] Call Trace: [ 157.705054][ T8843] [ 157.705130][ T8843] __dump_stack+0x1d/0x30 [ 157.705159][ T8843] dump_stack_lvl+0xe8/0x140 [ 157.705184][ T8843] dump_stack+0x15/0x1b [ 157.705279][ T8843] should_fail_ex+0x265/0x280 [ 157.705304][ T8843] ? alloc_mnt_ns+0x72/0x270 [ 157.705332][ T8843] should_failslab+0x8c/0xb0 [ 157.705363][ T8843] __kmalloc_cache_noprof+0x4c/0x320 [ 157.705502][ T8843] ? inc_ucount+0xcb/0x140 [ 157.705545][ T8843] alloc_mnt_ns+0x72/0x270 [ 157.705573][ T8843] __se_sys_fsmount+0x398/0x580 [ 157.705682][ T8843] __x64_sys_fsmount+0x43/0x50 [ 157.705710][ T8843] x64_sys_call+0x2a6a/0x2fb0 [ 157.705738][ T8843] do_syscall_64+0xd2/0x200 [ 157.705777][ T8843] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 157.705813][ T8843] ? clear_bhb_loop+0x40/0x90 [ 157.705841][ T8843] ? clear_bhb_loop+0x40/0x90 [ 157.705870][ T8843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.705905][ T8843] RIP: 0033:0x7fe58996e929 [ 157.705925][ T8843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.705961][ T8843] RSP: 002b:00007fe587fd7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 157.705978][ T8843] RAX: ffffffffffffffda RBX: 00007fe589b95fa0 RCX: 00007fe58996e929 [ 157.706003][ T8843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 157.706014][ T8843] RBP: 00007fe587fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 157.706030][ T8843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.706045][ T8843] R13: 0000000000000000 R14: 00007fe589b95fa0 R15: 00007ffcba4f7468 [ 157.706069][ T8843] [ 157.943026][ T8856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2164'. [ 157.960571][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 157.987609][ T8856] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2164'. [ 158.046148][ T8865] xt_hashlimit: max too large, truncated to 1048576 [ 158.066891][ T8871] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.368968][ T8898] FAULT_INJECTION: forcing a failure. [ 158.368968][ T8898] name failslab, interval 1, probability 0, space 0, times 0 [ 158.381790][ T8898] CPU: 0 UID: 0 PID: 8898 Comm: syz.1.2185 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 158.381826][ T8898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.381893][ T8898] Call Trace: [ 158.381900][ T8898] [ 158.381910][ T8898] __dump_stack+0x1d/0x30 [ 158.381936][ T8898] dump_stack_lvl+0xe8/0x140 [ 158.381962][ T8898] dump_stack+0x15/0x1b [ 158.382000][ T8898] should_fail_ex+0x265/0x280 [ 158.382027][ T8898] should_failslab+0x8c/0xb0 [ 158.382058][ T8898] __kmalloc_noprof+0xa5/0x3e0 [ 158.382109][ T8898] ? tls_get_rec+0x75/0x410 [ 158.382216][ T8898] tls_get_rec+0x75/0x410 [ 158.382244][ T8898] tls_sw_sendmsg+0x31d/0x1580 [ 158.382342][ T8898] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 158.382385][ T8898] inet6_sendmsg+0xc5/0xd0 [ 158.382425][ T8898] __sock_sendmsg+0x8b/0x180 [ 158.382468][ T8898] __sys_sendto+0x268/0x330 [ 158.382589][ T8898] __x64_sys_sendto+0x76/0x90 [ 158.382696][ T8898] x64_sys_call+0x2eb6/0x2fb0 [ 158.382773][ T8898] do_syscall_64+0xd2/0x200 [ 158.382810][ T8898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 158.382982][ T8898] ? clear_bhb_loop+0x40/0x90 [ 158.383110][ T8898] ? clear_bhb_loop+0x40/0x90 [ 158.383194][ T8898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.383239][ T8898] RIP: 0033:0x7faeeee3e929 [ 158.383258][ T8898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.383285][ T8898] RSP: 002b:00007faeed4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 158.383308][ T8898] RAX: ffffffffffffffda RBX: 00007faeef065fa0 RCX: 00007faeeee3e929 [ 158.383323][ T8898] RDX: 0000000000000009 RSI: 0000200000000400 RDI: 0000000000000003 [ 158.383338][ T8898] RBP: 00007faeed4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 158.383354][ T8898] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000001 [ 158.383402][ T8898] R13: 0000000000000000 R14: 00007faeef065fa0 R15: 00007ffdc0e5e7c8 [ 158.383427][ T8898] [ 158.728110][ T8914] netlink: 'syz.4.2191': attribute type 13 has an invalid length. [ 158.860980][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2195'. [ 158.874575][ T8922] IPVS: Error joining to the multicast group [ 158.885802][ T8924] syz_tun: entered allmulticast mode [ 158.908793][ T8924] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 158.917373][ T8924] mroute: pending queue full, dropping entries [ 158.936232][ T8923] syz_tun: left allmulticast mode [ 158.949359][ T8928] syz_tun: entered allmulticast mode [ 158.974450][ T8926] bond2: entered promiscuous mode [ 158.979607][ T8926] bond2: entered allmulticast mode [ 158.985322][ T8926] 8021q: adding VLAN 0 to HW filter on device bond2 [ 158.995539][ T8926] bond2 (unregistering): Released all slaves [ 159.005554][ T8928] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 159.014109][ T8928] mroute: pending queue full, dropping entries [ 159.021252][ T8927] syz_tun: left allmulticast mode [ 159.070470][ T8932] lo speed is unknown, defaulting to 1000 [ 159.095170][ T8939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2203'. [ 159.123316][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2203'. [ 159.162782][ T8945] syz_tun: entered allmulticast mode [ 159.173329][ T8945] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 159.181894][ T8945] mroute: pending queue full, dropping entries [ 159.207444][ T8944] syz_tun: left allmulticast mode [ 159.209748][ T8950] FAULT_INJECTION: forcing a failure. [ 159.209748][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.225700][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.2.2207 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 159.225807][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 159.225823][ T8950] Call Trace: [ 159.225831][ T8950] [ 159.225839][ T8950] __dump_stack+0x1d/0x30 [ 159.225863][ T8950] dump_stack_lvl+0xe8/0x140 [ 159.225882][ T8950] dump_stack+0x15/0x1b [ 159.225898][ T8950] should_fail_ex+0x265/0x280 [ 159.225939][ T8950] should_fail+0xb/0x20 [ 159.225960][ T8950] should_fail_usercopy+0x1a/0x20 [ 159.226027][ T8950] _copy_from_user+0x1c/0xb0 [ 159.226098][ T8950] ___sys_sendmsg+0xc1/0x1d0 [ 159.226151][ T8950] __x64_sys_sendmsg+0xd4/0x160 [ 159.226260][ T8950] x64_sys_call+0x2999/0x2fb0 [ 159.226282][ T8950] do_syscall_64+0xd2/0x200 [ 159.226340][ T8950] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 159.226366][ T8950] ? clear_bhb_loop+0x40/0x90 [ 159.226386][ T8950] ? clear_bhb_loop+0x40/0x90 [ 159.226409][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.226513][ T8950] RIP: 0033:0x7fef8d13e929 [ 159.226527][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.226544][ T8950] RSP: 002b:00007fef8b7a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.226562][ T8950] RAX: ffffffffffffffda RBX: 00007fef8d365fa0 RCX: 00007fef8d13e929 [ 159.226574][ T8950] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 159.226585][ T8950] RBP: 00007fef8b7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 159.226600][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.226760][ T8950] R13: 0000000000000000 R14: 00007fef8d365fa0 R15: 00007ffdb90fe528 [ 159.226780][ T8950] [ 159.493626][ T8960] loop0: detected capacity change from 0 to 1024 [ 159.519522][ T8960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.538585][ T8967] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2212'. [ 159.580249][ T8960] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2212'. [ 159.638542][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.710284][ T8978] loop0: detected capacity change from 0 to 2048 [ 159.775784][ T8978] Alternate GPT is invalid, using primary GPT. [ 159.782209][ T8978] loop0: p1 p2 p3 [ 159.830107][ T8981] syz_tun: entered allmulticast mode [ 159.836058][ T8981] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 159.844606][ T8981] mroute: pending queue full, dropping entries [ 159.852922][ T8980] syz_tun: left allmulticast mode [ 159.980491][ T8994] loop0: detected capacity change from 0 to 512 [ 159.987117][ T8994] ext4: Unknown parameter 'fsmagic' [ 160.057318][ T29] kauditd_printk_skb: 294 callbacks suppressed [ 160.057345][ T29] audit: type=1400 audit(1749074011.253:5693): avc: denied { ioctl } for pid=9001 comm="syz.1.2229" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 160.103886][ T9004] syz_tun: entered allmulticast mode [ 160.110207][ T9004] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 160.118772][ T9004] mroute: pending queue full, dropping entries [ 160.129721][ T9003] syz_tun: left allmulticast mode [ 160.173447][ T29] audit: type=1326 audit(1749074011.356:5694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 160.205898][ T29] audit: type=1326 audit(1749074011.374:5695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 160.229760][ T29] audit: type=1326 audit(1749074011.374:5696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9013 comm="syz.1.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 160.358987][ T9022] xt_hashlimit: max too large, truncated to 1048576 [ 160.389242][ T9024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2239'. [ 160.525584][ T9035] SELinux: failed to load policy [ 160.547678][ T9038] syz_tun: entered allmulticast mode [ 160.553630][ T9038] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 160.565441][ T9037] syz_tun: left allmulticast mode [ 160.631752][ T29] audit: type=1326 audit(1749074011.786:5697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 160.655466][ T29] audit: type=1326 audit(1749074011.786:5698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 160.678918][ T29] audit: type=1326 audit(1749074011.786:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 160.702381][ T29] audit: type=1326 audit(1749074011.786:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9047 comm="syz.1.2249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 160.853669][ T29] audit: type=1326 audit(1749074011.992:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 160.897318][ T29] audit: type=1326 audit(1749074011.992:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9064 comm="syz.2.2256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 161.008107][ T9079] bond2: entered promiscuous mode [ 161.013226][ T9079] bond2: entered allmulticast mode [ 161.018797][ T9079] 8021q: adding VLAN 0 to HW filter on device bond2 [ 161.038820][ T9079] bond2 (unregistering): Released all slaves [ 161.153186][ T9090] FAULT_INJECTION: forcing a failure. [ 161.153186][ T9090] name failslab, interval 1, probability 0, space 0, times 0 [ 161.166064][ T9090] CPU: 0 UID: 0 PID: 9090 Comm: syz.3.2266 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 161.166099][ T9090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.166118][ T9090] Call Trace: [ 161.166125][ T9090] [ 161.166134][ T9090] __dump_stack+0x1d/0x30 [ 161.166173][ T9090] dump_stack_lvl+0xe8/0x140 [ 161.166195][ T9090] dump_stack+0x15/0x1b [ 161.166212][ T9090] should_fail_ex+0x265/0x280 [ 161.166238][ T9090] should_failslab+0x8c/0xb0 [ 161.166314][ T9090] kmem_cache_alloc_node_noprof+0x57/0x320 [ 161.166345][ T9090] ? __alloc_skb+0x101/0x320 [ 161.166404][ T9090] __alloc_skb+0x101/0x320 [ 161.166437][ T9090] alloc_skb_with_frags+0x7d/0x470 [ 161.166483][ T9090] ? __rcu_read_unlock+0x4f/0x70 [ 161.166575][ T9090] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 161.166654][ T9090] sock_alloc_send_pskb+0x43a/0x4f0 [ 161.166724][ T9090] ? __scm_send+0x8f6/0xae0 [ 161.166763][ T9090] queue_oob+0x69/0x4f0 [ 161.166790][ T9090] unix_stream_sendmsg+0x7e0/0x8e0 [ 161.166809][ T9090] ? selinux_socket_sendmsg+0x175/0x1b0 [ 161.166892][ T9090] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 161.166920][ T9090] __sock_sendmsg+0x145/0x180 [ 161.166943][ T9090] ____sys_sendmsg+0x31e/0x4e0 [ 161.166974][ T9090] ___sys_sendmsg+0x17b/0x1d0 [ 161.167032][ T9090] __x64_sys_sendmsg+0xd4/0x160 [ 161.167065][ T9090] x64_sys_call+0x2999/0x2fb0 [ 161.167157][ T9090] do_syscall_64+0xd2/0x200 [ 161.167192][ T9090] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 161.167225][ T9090] ? clear_bhb_loop+0x40/0x90 [ 161.167355][ T9090] ? clear_bhb_loop+0x40/0x90 [ 161.167377][ T9090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.167397][ T9090] RIP: 0033:0x7fa45e08e929 [ 161.167415][ T9090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.167438][ T9090] RSP: 002b:00007fa45c6f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.167511][ T9090] RAX: ffffffffffffffda RBX: 00007fa45e2b5fa0 RCX: 00007fa45e08e929 [ 161.167566][ T9090] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000004 [ 161.167582][ T9090] RBP: 00007fa45c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 161.167597][ T9090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.167610][ T9090] R13: 0000000000000000 R14: 00007fa45e2b5fa0 R15: 00007ffd7306efb8 [ 161.167629][ T9090] [ 161.415528][ T9092] syz_tun: entered allmulticast mode [ 161.421273][ T9092] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 161.429807][ T9092] net_ratelimit: 1 callbacks suppressed [ 161.429823][ T9092] mroute: pending queue full, dropping entries [ 161.446940][ T9094] xt_hashlimit: max too large, truncated to 1048576 [ 161.448366][ T9091] syz_tun: left allmulticast mode [ 161.481377][ T9088] loop0: detected capacity change from 0 to 512 [ 161.497866][ T9088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.511306][ T9088] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.525195][ T9088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.559394][ T9088] loop0: detected capacity change from 0 to 512 [ 161.572851][ T9088] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 161.598994][ T9109] syz_tun: entered allmulticast mode [ 161.607845][ T9109] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 161.616496][ T9109] mroute: pending queue full, dropping entries [ 161.625080][ T9111] siw: device registration error -23 [ 161.632969][ T9108] syz_tun: left allmulticast mode [ 161.720978][ T9121] xt_hashlimit: max too large, truncated to 1048576 [ 161.820148][ T9135] syz_tun: entered allmulticast mode [ 161.826049][ T9135] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 161.834627][ T9135] mroute: pending queue full, dropping entries [ 161.843062][ T9133] syz_tun: left allmulticast mode [ 161.986491][ T9150] veth1_to_bond: entered allmulticast mode [ 161.993333][ T9150] veth1_to_bond: left allmulticast mode [ 162.423248][ T9163] syz_tun: entered allmulticast mode [ 162.435733][ T9165] FAULT_INJECTION: forcing a failure. [ 162.435733][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 162.448664][ T9165] CPU: 0 UID: 0 PID: 9165 Comm: syz.3.2299 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 162.448692][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.448753][ T9165] Call Trace: [ 162.448761][ T9165] [ 162.448770][ T9165] __dump_stack+0x1d/0x30 [ 162.448797][ T9165] dump_stack_lvl+0xe8/0x140 [ 162.448818][ T9165] dump_stack+0x15/0x1b [ 162.448833][ T9165] should_fail_ex+0x265/0x280 [ 162.448914][ T9165] ? rdma_restrack_init+0x31/0x220 [ 162.448955][ T9165] should_failslab+0x8c/0xb0 [ 162.448983][ T9165] __kmalloc_cache_noprof+0x4c/0x320 [ 162.449022][ T9165] rdma_restrack_init+0x31/0x220 [ 162.449117][ T9165] _ib_alloc_device+0x49/0x440 [ 162.449146][ T9165] siw_newlink+0xcf/0x680 [ 162.449168][ T9165] nldev_newlink+0x369/0x3f0 [ 162.449233][ T9165] ? __pfx_nldev_newlink+0x10/0x10 [ 162.449256][ T9165] rdma_nl_rcv+0x479/0x5a0 [ 162.449354][ T9165] ? selinux_nlmsg_lookup+0x99/0x890 [ 162.449438][ T9165] netlink_unicast+0x59e/0x670 [ 162.449538][ T9165] netlink_sendmsg+0x58b/0x6b0 [ 162.449578][ T9165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.449611][ T9165] __sock_sendmsg+0x145/0x180 [ 162.449661][ T9165] ____sys_sendmsg+0x31e/0x4e0 [ 162.449700][ T9165] ___sys_sendmsg+0x17b/0x1d0 [ 162.449766][ T9165] __x64_sys_sendmsg+0xd4/0x160 [ 162.449801][ T9165] x64_sys_call+0x2999/0x2fb0 [ 162.449865][ T9165] do_syscall_64+0xd2/0x200 [ 162.449893][ T9165] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.449921][ T9165] ? clear_bhb_loop+0x40/0x90 [ 162.449941][ T9165] ? clear_bhb_loop+0x40/0x90 [ 162.450043][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.450076][ T9165] RIP: 0033:0x7fa45e08e929 [ 162.450091][ T9165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.450112][ T9165] RSP: 002b:00007fa45c6f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.450135][ T9165] RAX: ffffffffffffffda RBX: 00007fa45e2b5fa0 RCX: 00007fa45e08e929 [ 162.450181][ T9165] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000007 [ 162.450195][ T9165] RBP: 00007fa45c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.450210][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.450224][ T9165] R13: 0000000000000000 R14: 00007fa45e2b5fa0 R15: 00007ffd7306efb8 [ 162.450294][ T9165] [ 162.820043][ T9188] loop0: detected capacity change from 0 to 512 [ 162.838648][ T9188] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.841622][ T9192] syz_tun: entered allmulticast mode [ 162.924332][ T9196] FAULT_INJECTION: forcing a failure. [ 162.924332][ T9196] name failslab, interval 1, probability 0, space 0, times 0 [ 162.937480][ T9196] CPU: 0 UID: 0 PID: 9196 Comm: syz.1.2309 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 162.937508][ T9196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.937523][ T9196] Call Trace: [ 162.937528][ T9196] [ 162.937536][ T9196] __dump_stack+0x1d/0x30 [ 162.937557][ T9196] dump_stack_lvl+0xe8/0x140 [ 162.937580][ T9196] dump_stack+0x15/0x1b [ 162.937599][ T9196] should_fail_ex+0x265/0x280 [ 162.937624][ T9196] should_failslab+0x8c/0xb0 [ 162.937728][ T9196] kmem_cache_alloc_noprof+0x50/0x310 [ 162.937763][ T9196] ? skb_clone+0x151/0x1f0 [ 162.937934][ T9196] skb_clone+0x151/0x1f0 [ 162.937965][ T9196] nfnetlink_rcv+0x305/0x1690 [ 162.937989][ T9196] ? __kfree_skb+0x109/0x150 [ 162.938081][ T9196] ? nlmon_xmit+0x4f/0x60 [ 162.938114][ T9196] ? nlmon_xmit+0x4f/0x60 [ 162.938142][ T9196] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 162.938178][ T9196] ? __dev_queue_xmit+0x11c0/0x1fb0 [ 162.938221][ T9196] ? __dev_queue_xmit+0x182/0x1fb0 [ 162.938264][ T9196] ? __account_obj_stock+0x211/0x350 [ 162.938295][ T9196] ? ref_tracker_free+0x37d/0x3e0 [ 162.938351][ T9196] netlink_unicast+0x59e/0x670 [ 162.938433][ T9196] netlink_sendmsg+0x58b/0x6b0 [ 162.938475][ T9196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.938550][ T9196] __sock_sendmsg+0x145/0x180 [ 162.938615][ T9196] ____sys_sendmsg+0x31e/0x4e0 [ 162.938656][ T9196] ___sys_sendmsg+0x17b/0x1d0 [ 162.938837][ T9196] __x64_sys_sendmsg+0xd4/0x160 [ 162.938873][ T9196] x64_sys_call+0x2999/0x2fb0 [ 162.938894][ T9196] do_syscall_64+0xd2/0x200 [ 162.938935][ T9196] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.939007][ T9196] ? clear_bhb_loop+0x40/0x90 [ 162.939096][ T9196] ? clear_bhb_loop+0x40/0x90 [ 162.939125][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.939183][ T9196] RIP: 0033:0x7faeeee3e929 [ 162.939200][ T9196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.939230][ T9196] RSP: 002b:00007faeed486038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.939253][ T9196] RAX: ffffffffffffffda RBX: 00007faeef066080 RCX: 00007faeeee3e929 [ 162.939268][ T9196] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 162.939283][ T9196] RBP: 00007faeed486090 R08: 0000000000000000 R09: 0000000000000000 [ 162.939295][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.939317][ T9196] R13: 0000000000000000 R14: 00007faeef066080 R15: 00007ffdc0e5e7c8 [ 162.939343][ T9196] [ 162.990866][ T9188] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.115043][ T9204] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 163.119946][ T9188] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.268404][ T9179] loop0: detected capacity change from 0 to 512 [ 163.275195][ T9179] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 163.290701][ T9213] __nla_validate_parse: 5 callbacks suppressed [ 163.290719][ T9213] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2319'. [ 163.306664][ T6414] page_pool_release_retry() stalled pool shutdown: id 64, 1 inflight 60 sec [ 163.484765][ T9227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2325'. [ 163.542691][ T9227] bridge_slave_0: left allmulticast mode [ 163.548513][ T9227] bridge_slave_0: left promiscuous mode [ 163.554208][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.566755][ T9227] bridge_slave_1: left allmulticast mode [ 163.572492][ T9227] bridge_slave_1: left promiscuous mode [ 163.578234][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.593704][ T9227] bond0: (slave bond_slave_0): Releasing backup interface [ 163.620653][ T9227] bond0: (slave bond_slave_1): Releasing backup interface [ 163.762650][ T9227] team0: Port device team_slave_1 removed [ 163.793224][ T9227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.825175][ T9227] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.842496][ T9236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2327'. [ 163.876444][ T9236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.124944][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2332'. [ 164.168422][ T9250] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2334'. [ 164.265095][ T9264] SELinux: failed to load policy [ 164.291538][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2332'. [ 164.387670][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2342'. [ 164.404746][ T9274] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 164.441510][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.450116][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.575508][ T9286] syz_tun: entered allmulticast mode [ 164.581362][ T9286] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 164.589981][ T9286] mroute: pending queue full, dropping entries [ 164.597130][ T9285] syz_tun: left allmulticast mode [ 164.622623][ T9288] xt_hashlimit: max too large, truncated to 1048576 [ 164.673734][ T9282] veth1_to_bond: entered allmulticast mode [ 164.720449][ T9293] SELinux: failed to load policy [ 164.830003][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2358'. [ 164.908402][ T9308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2359'. [ 164.967154][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 164.995758][ T9312] bond2: entered promiscuous mode [ 165.000907][ T9312] bond2: entered allmulticast mode [ 165.006328][ T9312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.018033][ T9312] bond2 (unregistering): Released all slaves [ 165.045406][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.054106][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.070256][ T9318] lo speed is unknown, defaulting to 1000 [ 165.229449][ T9321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.279975][ T9317] veth1_to_bond: entered allmulticast mode [ 165.310322][ T9325] IPVS: Error joining to the multicast group [ 165.376995][ T9334] xt_hashlimit: max too large, truncated to 1048576 [ 165.428827][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 165.428871][ T29] audit: type=1326 audit(1749074016.266:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.461695][ T29] audit: type=1326 audit(1749074016.266:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.485270][ T29] audit: type=1326 audit(1749074016.295:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.508659][ T29] audit: type=1326 audit(1749074016.295:6061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.532474][ T29] audit: type=1326 audit(1749074016.295:6062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.558848][ T29] audit: type=1326 audit(1749074016.304:6063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.563228][ T9342] bond1: entered promiscuous mode [ 165.582277][ T29] audit: type=1326 audit(1749074016.304:6064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.587307][ T9342] bond1: entered allmulticast mode [ 165.610702][ T29] audit: type=1326 audit(1749074016.304:6065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.639412][ T29] audit: type=1326 audit(1749074016.304:6066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.662881][ T29] audit: type=1326 audit(1749074016.304:6067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9341 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeeee3e929 code=0x7ffc0000 [ 165.687056][ T9342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.719393][ T9342] bond1 (unregistering): Released all slaves [ 165.737120][ T9353] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.755180][ T9346] lo speed is unknown, defaulting to 1000 [ 165.908851][ T9368] xt_hashlimit: max too large, truncated to 1048576 [ 166.104482][ T9380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.212472][ T9388] bond2: entered promiscuous mode [ 166.217597][ T9388] bond2: entered allmulticast mode [ 166.223652][ T9388] 8021q: adding VLAN 0 to HW filter on device bond2 [ 166.232617][ T9388] bond2 (unregistering): Released all slaves [ 166.285039][ T9393] lo speed is unknown, defaulting to 1000 [ 166.308579][ T9397] xt_hashlimit: max too large, truncated to 1048576 [ 166.377811][ T9402] bond1: entered promiscuous mode [ 166.383170][ T9402] bond1: entered allmulticast mode [ 166.388590][ T9402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 166.397704][ T9402] bond1 (unregistering): Released all slaves [ 166.522298][ T9408] IPVS: Error joining to the multicast group [ 166.677863][ T9417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.791802][ T9427] $Hÿ: renamed from bond0 (while UP) [ 166.800752][ T9427] $Hÿ: entered promiscuous mode [ 166.806003][ T9427] bond_slave_0: entered promiscuous mode [ 166.812021][ T9427] bond_slave_1: entered promiscuous mode [ 166.846508][ T9435] FAULT_INJECTION: forcing a failure. [ 166.846508][ T9435] name failslab, interval 1, probability 0, space 0, times 0 [ 166.859471][ T9435] CPU: 1 UID: 0 PID: 9435 Comm: syz.1.2414 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 166.859507][ T9435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.859520][ T9435] Call Trace: [ 166.859525][ T9435] [ 166.859534][ T9435] __dump_stack+0x1d/0x30 [ 166.859555][ T9435] dump_stack_lvl+0xe8/0x140 [ 166.859578][ T9435] dump_stack+0x15/0x1b [ 166.859611][ T9435] should_fail_ex+0x265/0x280 [ 166.859641][ T9435] ? mac802154_llsec_key_add+0x364/0x8d0 [ 166.859669][ T9435] should_failslab+0x8c/0xb0 [ 166.859742][ T9435] __kmalloc_cache_noprof+0x4c/0x320 [ 166.859781][ T9435] mac802154_llsec_key_add+0x364/0x8d0 [ 166.859805][ T9435] ieee802154_add_llsec_key+0x4a/0x70 [ 166.859835][ T9435] nl802154_add_llsec_key+0x33a/0x420 [ 166.859896][ T9435] genl_family_rcv_msg_doit+0x140/0x1b0 [ 166.859927][ T9435] genl_rcv_msg+0x422/0x460 [ 166.860007][ T9435] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 166.860034][ T9435] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 166.860117][ T9435] ? __pfx_nl802154_post_doit+0x10/0x10 [ 166.860147][ T9435] netlink_rcv_skb+0x123/0x220 [ 166.860180][ T9435] ? __pfx_genl_rcv_msg+0x10/0x10 [ 166.860216][ T9435] genl_rcv+0x28/0x40 [ 166.860236][ T9435] netlink_unicast+0x59e/0x670 [ 166.860263][ T9435] netlink_sendmsg+0x58b/0x6b0 [ 166.860294][ T9435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.860390][ T9435] __sock_sendmsg+0x145/0x180 [ 166.860417][ T9435] ____sys_sendmsg+0x31e/0x4e0 [ 166.860459][ T9435] ___sys_sendmsg+0x17b/0x1d0 [ 166.860530][ T9435] __x64_sys_sendmsg+0xd4/0x160 [ 166.860570][ T9435] x64_sys_call+0x2999/0x2fb0 [ 166.860591][ T9435] do_syscall_64+0xd2/0x200 [ 166.860636][ T9435] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 166.860741][ T9435] ? clear_bhb_loop+0x40/0x90 [ 166.860815][ T9435] ? clear_bhb_loop+0x40/0x90 [ 166.860843][ T9435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.860866][ T9435] RIP: 0033:0x7faeeee3e929 [ 166.860883][ T9435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.860976][ T9435] RSP: 002b:00007faeed4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.860994][ T9435] RAX: ffffffffffffffda RBX: 00007faeef065fa0 RCX: 00007faeeee3e929 [ 166.861005][ T9435] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 166.861040][ T9435] RBP: 00007faeed4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 166.861056][ T9435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.861070][ T9435] R13: 0000000000000000 R14: 00007faeef065fa0 R15: 00007ffdc0e5e7c8 [ 166.861091][ T9435] [ 166.871608][ T9433] bond0: entered promiscuous mode [ 167.128016][ T9433] bond0: entered allmulticast mode [ 167.133489][ T9433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.144824][ T9433] bond0 (unregistering): Released all slaves [ 167.658542][ T9294] veth1_to_bond: left allmulticast mode [ 167.698062][ T9467] SELinux: failed to load policy [ 167.856529][ T9472] xt_hashlimit: max too large, truncated to 1048576 [ 168.131077][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.140648][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.257825][ T9317] veth1_to_bond: left allmulticast mode [ 168.368973][ T9486] veth1_to_bond: entered allmulticast mode [ 168.533542][ T9511] FAULT_INJECTION: forcing a failure. [ 168.533542][ T9511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 168.546877][ T9511] CPU: 0 UID: 0 PID: 9511 Comm: syz.3.2447 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 168.546976][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.546988][ T9511] Call Trace: [ 168.546994][ T9511] [ 168.547001][ T9511] __dump_stack+0x1d/0x30 [ 168.547027][ T9511] dump_stack_lvl+0xe8/0x140 [ 168.547052][ T9511] dump_stack+0x15/0x1b [ 168.547072][ T9511] should_fail_ex+0x265/0x280 [ 168.547137][ T9511] should_fail+0xb/0x20 [ 168.547153][ T9511] should_fail_usercopy+0x1a/0x20 [ 168.547219][ T9511] _copy_to_user+0x20/0xa0 [ 168.547300][ T9511] simple_read_from_buffer+0xb5/0x130 [ 168.547335][ T9511] proc_fail_nth_read+0x100/0x140 [ 168.547357][ T9511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 168.547435][ T9511] vfs_read+0x19d/0x6f0 [ 168.547454][ T9511] ? __rcu_read_unlock+0x4f/0x70 [ 168.547481][ T9511] ? __fget_files+0x184/0x1c0 [ 168.547509][ T9511] ksys_read+0xda/0x1a0 [ 168.547580][ T9511] __x64_sys_read+0x40/0x50 [ 168.547606][ T9511] x64_sys_call+0x2d77/0x2fb0 [ 168.547633][ T9511] do_syscall_64+0xd2/0x200 [ 168.547666][ T9511] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.547712][ T9511] ? clear_bhb_loop+0x40/0x90 [ 168.547734][ T9511] ? clear_bhb_loop+0x40/0x90 [ 168.547762][ T9511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.547913][ T9511] RIP: 0033:0x7fa45e08d33c [ 168.547932][ T9511] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 168.547956][ T9511] RSP: 002b:00007fa45c6f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 168.548050][ T9511] RAX: ffffffffffffffda RBX: 00007fa45e2b5fa0 RCX: 00007fa45e08d33c [ 168.548064][ T9511] RDX: 000000000000000f RSI: 00007fa45c6f70a0 RDI: 0000000000000005 [ 168.548075][ T9511] RBP: 00007fa45c6f7090 R08: 0000000000000000 R09: 0000000000000000 [ 168.548087][ T9511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.548098][ T9511] R13: 0000000000000000 R14: 00007fa45e2b5fa0 R15: 00007ffd7306efb8 [ 168.548117][ T9511] [ 168.799361][ T9517] syz_tun: entered allmulticast mode [ 168.805308][ T9517] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 168.813869][ T9517] mroute: pending queue full, dropping entries [ 168.822445][ T9519] bond0: entered promiscuous mode [ 168.827590][ T9519] bond0: entered allmulticast mode [ 168.833946][ T9519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.843441][ T9519] bond0 (unregistering): Released all slaves [ 168.855314][ T9516] syz_tun: left allmulticast mode [ 168.903442][ T9521] lo speed is unknown, defaulting to 1000 [ 169.015527][ T9541] syz_tun: entered allmulticast mode [ 169.021245][ T9541] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 169.029853][ T9541] mroute: pending queue full, dropping entries [ 169.037089][ T9540] syz_tun: left allmulticast mode [ 169.144737][ T9554] loop0: detected capacity change from 0 to 512 [ 169.177777][ T9554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.216234][ T9554] ext4 filesystem being mounted at /file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.261718][ T9554] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.325801][ T9545] loop0: detected capacity change from 0 to 512 [ 169.335004][ T9545] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 169.998244][ T9574] syz_tun: entered allmulticast mode [ 170.004196][ T9574] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 170.012770][ T9574] mroute: pending queue full, dropping entries [ 170.022132][ T9573] syz_tun: left allmulticast mode [ 170.073120][ T9578] bond0: entered promiscuous mode [ 170.078194][ T9578] bond0: entered allmulticast mode [ 170.083903][ T9578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.093663][ T9578] bond0 (unregistering): Released all slaves [ 170.140100][ T9580] lo speed is unknown, defaulting to 1000 [ 170.339136][ T9587] __nla_validate_parse: 7 callbacks suppressed [ 170.339225][ T9587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2479'. [ 170.425920][ T9595] xt_hashlimit: max too large, truncated to 1048576 [ 170.479038][ T9605] 9pnet_fd: Insufficient options for proto=fd [ 170.505347][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2488'. [ 170.519120][ T9607] $Hÿ: left promiscuous mode [ 170.523934][ T9607] bond_slave_0: left promiscuous mode [ 170.529591][ T9607] bond_slave_1: left promiscuous mode [ 170.540785][ T9607] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 170.553268][ T9607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.633686][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2489'. [ 170.648107][ T9611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.894894][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2493'. [ 170.952165][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 170.952182][ T29] audit: type=1326 audit(1749074021.439:6511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 170.982306][ T29] audit: type=1326 audit(1749074021.458:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.006073][ T29] audit: type=1326 audit(1749074021.458:6513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.007426][ T9628] FAULT_INJECTION: forcing a failure. [ 171.007426][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.029650][ T29] audit: type=1326 audit(1749074021.467:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.042991][ T9628] CPU: 1 UID: 0 PID: 9628 Comm: syz.3.2497 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 171.043028][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.043044][ T9628] Call Trace: [ 171.043053][ T9628] [ 171.043063][ T9628] __dump_stack+0x1d/0x30 [ 171.043182][ T9628] dump_stack_lvl+0xe8/0x140 [ 171.043207][ T9628] dump_stack+0x15/0x1b [ 171.043230][ T9628] should_fail_ex+0x265/0x280 [ 171.043354][ T9628] should_fail+0xb/0x20 [ 171.043391][ T9628] should_fail_usercopy+0x1a/0x20 [ 171.043419][ T9628] _copy_from_user+0x1c/0xb0 [ 171.043452][ T9628] __sys_sendto+0x19e/0x330 [ 171.043501][ T9628] __x64_sys_sendto+0x76/0x90 [ 171.043556][ T9628] x64_sys_call+0x2eb6/0x2fb0 [ 171.043587][ T9628] do_syscall_64+0xd2/0x200 [ 171.043624][ T9628] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.043660][ T9628] ? clear_bhb_loop+0x40/0x90 [ 171.043688][ T9628] ? clear_bhb_loop+0x40/0x90 [ 171.043765][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.043792][ T9628] RIP: 0033:0x7fa45e08e929 [ 171.043813][ T9628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.043836][ T9628] RSP: 002b:00007fa45c6f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.043860][ T9628] RAX: ffffffffffffffda RBX: 00007fa45e2b5fa0 RCX: 00007fa45e08e929 [ 171.043877][ T9628] RDX: 00000000000005dc RSI: 0000200000000000 RDI: 0000000000000003 [ 171.043893][ T9628] RBP: 00007fa45c6f7090 R08: 0000200000000340 R09: 0000000000000014 [ 171.043971][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.043999][ T9628] R13: 0000000000000000 R14: 00007fa45e2b5fa0 R15: 00007ffd7306efb8 [ 171.044024][ T9628] [ 171.114200][ T9632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2499'. [ 171.117105][ T29] audit: type=1326 audit(1749074021.467:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.136084][ T29] audit: type=1326 audit(1749074021.467:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.145310][ T29] audit: type=1326 audit(1749074021.467:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.145344][ T29] audit: type=1326 audit(1749074021.467:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9623 comm="syz.4.2495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.353884][ T9632] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.389289][ T9486] veth1_to_bond: left allmulticast mode [ 171.403041][ T9637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 171.435659][ T9637] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.503959][ T9651] netlink: 'syz.0.2507': attribute type 27 has an invalid length. [ 171.531757][ T29] audit: type=1326 audit(1749074021.982:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9654 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.561025][ T9651] bond2: left promiscuous mode [ 171.565852][ T9651] geneve2: left promiscuous mode [ 171.571114][ T9651] bond2: left allmulticast mode [ 171.575343][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2504'. [ 171.585212][ T29] audit: type=1326 audit(1749074021.982:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9654 comm="syz.4.2508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa63818e929 code=0x7ffc0000 [ 171.587271][ T9651] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.618054][ T9651] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.627015][ T9651] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.636037][ T9651] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.645584][ T9651] geneve2: left allmulticast mode [ 171.665925][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.674489][ T9656] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.686348][ T9656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.711339][ T9651] syzkaller1: entered promiscuous mode [ 171.717179][ T9651] syzkaller1: entered allmulticast mode [ 171.767423][ T9667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.776025][ T9667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.781195][ T9669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 171.792918][ T9669] IPVS: Error joining to the multicast group [ 171.878963][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2518'. [ 171.896673][ T9678] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.917722][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2520'. [ 171.933936][ T9682] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.002364][ T9667] veth1_to_bond: entered allmulticast mode [ 172.172979][ T9696] bond2: entered promiscuous mode [ 172.178137][ T9696] bond2: entered allmulticast mode [ 172.185950][ T9696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.203951][ T9696] bond2 (unregistering): Released all slaves [ 172.569697][ T9730] syz_tun: entered allmulticast mode [ 172.576150][ T9730] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 172.587438][ T9729] syz_tun: left allmulticast mode [ 172.627199][ T9736] bond2: entered promiscuous mode [ 172.632283][ T9736] bond2: entered allmulticast mode [ 172.638156][ T9736] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.647553][ T9736] bond2 (unregistering): Released all slaves [ 172.694780][ T9738] lo speed is unknown, defaulting to 1000 [ 173.404872][ T9760] loop0: detected capacity change from 0 to 512 [ 173.411564][ T9760] ext4: Unknown parameter 'fsmagic' [ 173.445014][ T9763] bond0: entered promiscuous mode [ 173.450123][ T9763] bond0: entered allmulticast mode [ 173.455498][ T9763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.464634][ T9763] bond0 (unregistering): Released all slaves [ 173.519263][ T9765] lo speed is unknown, defaulting to 1000 [ 174.075609][ T9800] bond2: entered promiscuous mode [ 174.080877][ T9800] bond2: entered allmulticast mode [ 174.086284][ T9800] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.095976][ T9800] bond2 (unregistering): Released all slaves [ 174.143566][ T9802] lo speed is unknown, defaulting to 1000 [ 174.340503][ T9812] net_ratelimit: 4 callbacks suppressed [ 174.340513][ T9812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 174.979939][ T9691] veth1_to_bond: left allmulticast mode [ 175.003551][ T9844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 175.425033][ T9862] IPVS: Error joining to the multicast group [ 175.540371][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.549305][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.774226][ T9866] veth1_to_bond: entered allmulticast mode [ 176.210028][ T9914] __nla_validate_parse: 16 callbacks suppressed [ 176.210048][ T9914] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2617'. [ 176.234731][ T9914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.566748][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 177.566763][ T29] audit: type=1326 audit(1749074027.632:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.642858][ T9938] bond2: entered promiscuous mode [ 177.647999][ T9938] bond2: entered allmulticast mode [ 177.655733][ T29] audit: type=1326 audit(1749074027.669:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.679201][ T29] audit: type=1326 audit(1749074027.669:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.702635][ T29] audit: type=1326 audit(1749074027.669:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.726069][ T29] audit: type=1326 audit(1749074027.669:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.749516][ T29] audit: type=1326 audit(1749074027.669:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.772849][ T29] audit: type=1326 audit(1749074027.669:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.796391][ T29] audit: type=1326 audit(1749074027.669:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.805323][ T9938] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.819744][ T29] audit: type=1326 audit(1749074027.669:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.819787][ T29] audit: type=1326 audit(1749074027.669:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9937 comm="syz.2.2625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef8d13e929 code=0x7ffc0000 [ 177.897198][ T9938] bond2 (unregistering): Released all slaves [ 177.918567][ T9940] lo speed is unknown, defaulting to 1000 [ 178.021909][ T9951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 178.055374][ T9951] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.292372][ T9964] netlink: 'syz.2.2634': attribute type 27 has an invalid length. [ 178.382314][ T9964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.391097][ T9964] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.403674][ T9964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.432983][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2638'. [ 178.452797][ T9972] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.476121][ T9964] syzkaller1: entered promiscuous mode [ 178.481707][ T9964] syzkaller1: entered allmulticast mode [ 178.757118][ T9895] veth1_to_bond: left allmulticast mode [ 178.915032][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2642'. [ 178.934498][ T9987] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.044520][ T9991] netlink: 'syz.4.2644': attribute type 27 has an invalid length. [ 179.093690][ T9991] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 179.102194][ T9991] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.147354][ T9991] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.204642][ T9991] syzkaller1: entered promiscuous mode [ 179.210313][ T9991] syzkaller1: entered allmulticast mode [ 179.596772][T10005] bond3: entered promiscuous mode [ 179.601852][T10005] bond3: entered allmulticast mode [ 179.607793][T10005] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.617585][T10005] bond3 (unregistering): Released all slaves [ 179.643360][T10010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.651982][T10010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.688449][T10005] lo speed is unknown, defaulting to 1000 [ 179.877979][T10010] veth1_to_bond: entered allmulticast mode [ 179.922086][T10020] syzkaller0: entered promiscuous mode [ 179.927673][T10020] syzkaller0: entered allmulticast mode [ 179.995904][T10020] netlink: 'syz.4.2655': attribute type 1 has an invalid length. [ 180.010205][T10020] 8021q: adding VLAN 0 to HW filter on device bond3 [ 180.022086][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2655'. [ 180.032416][T10020] bond3 (unregistering): Released all slaves [ 180.190399][T10028] netlink: 'syz.4.2658': attribute type 27 has an invalid length. [ 180.251914][T10028] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 180.266193][T10028] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.278879][T10028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 180.321745][T10028] syzkaller1: entered promiscuous mode [ 180.327411][T10028] syzkaller1: entered allmulticast mode [ 180.385332][T10042] bond2: entered promiscuous mode [ 180.390447][T10042] bond2: entered allmulticast mode [ 180.396357][T10042] 8021q: adding VLAN 0 to HW filter on device bond2 [ 180.405999][T10042] bond2 (unregistering): Released all slaves [ 180.455596][T10049] lo speed is unknown, defaulting to 1000 [ 180.950698][T10072] syz_tun: entered allmulticast mode [ 180.956741][T10072] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 180.965321][T10072] mroute: pending queue full, dropping entries [ 180.972228][T10071] syz_tun: left allmulticast mode [ 181.212149][T10091] netlink: 'syz.1.2685': attribute type 37 has an invalid length. [ 181.270506][T10099] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 181.282510][T10100] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2686'. [ 181.302162][T10100] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10100 comm=syz.3.2686 [ 181.366157][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2693'. [ 181.692613][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2700'. [ 181.734420][T10127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2701'. [ 181.774942][ T6410] kernel write not supported for file /snd/seq (pid: 6410 comm: kworker/1:7) [ 183.170891][ T6410] IPVS: starting estimator thread 0... [ 183.183721][T10021] veth1_to_bond: left allmulticast mode [ 183.202614][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 183.202632][ T29] audit: type=1400 audit(1749074032.898:6910): avc: denied { getopt } for pid=10165 comm="syz.1.2716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.256856][T10173] loop0: detected capacity change from 0 to 512 [ 183.273953][T10173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 183.306479][T10173] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 183.323171][T10173] EXT4-fs (loop0): 1 truncate cleaned up [ 183.330432][T10163] IPVS: using max 2496 ests per chain, 124800 per kthread [ 183.340490][T10173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.355457][ T29] audit: type=1400 audit(1749074033.048:6911): avc: denied { read write } for pid=10172 comm="syz.0.2719" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.378458][ T29] audit: type=1400 audit(1749074033.048:6912): avc: denied { open } for pid=10172 comm="syz.0.2719" path="/468/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 183.460215][T10184] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2721'. [ 183.472645][ T29] audit: type=1400 audit(1749074033.150:6913): avc: denied { ioctl } for pid=10176 comm="syz.1.2721" path="socket:[30096]" dev="sockfs" ino=30096 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 183.521777][T10185] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2723'. [ 183.626620][ T29] audit: type=1400 audit(1749074033.216:6914): avc: denied { execute } for pid=10186 comm="syz.2.2725" path="/564/rdma.current" dev="tmpfs" ino=2944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 183.685437][T10193] mmap: syz.3.2728 (10193): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 183.773440][ T29] audit: type=1400 audit(1749074033.366:6915): avc: denied { connect } for pid=10189 comm="syz.4.2726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 183.862435][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.410905][T10221] loop0: detected capacity change from 0 to 512 [ 184.432569][T10221] EXT4-fs (loop0): 1 orphan inode deleted [ 184.439044][T10221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.507290][ T377] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.517358][ T377] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 1 [ 184.529478][T10221] ext4 filesystem being mounted at /472/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.597299][T10232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2744'. [ 184.628036][ T29] audit: type=1400 audit(1749074034.226:6916): avc: denied { mounton } for pid=10235 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 184.694000][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.706296][ T6754] syz_tun (unregistering): left allmulticast mode [ 184.719903][ T29] audit: type=1400 audit(1749074034.320:6917): avc: denied { mount } for pid=10237 comm="syz.2.2746" name="/" dev="mqueue" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 184.745596][ T29] audit: type=1400 audit(1749074034.338:6918): avc: denied { watch_reads } for pid=10237 comm="syz.2.2746" path="/" dev="mqueue" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 185.484802][T10235] lo speed is unknown, defaulting to 1000 [ 185.572373][ T377] bridge_slave_1: left allmulticast mode [ 185.578212][ T377] bridge_slave_1: left promiscuous mode [ 185.583981][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.633342][T10259] ieee802154 phy0 wpan0: encryption failed: -90 [ 185.647543][ T377] bridge_slave_0: left allmulticast mode [ 185.653305][ T377] bridge_slave_0: left promiscuous mode [ 185.658989][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.747022][ T3392] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 185.938735][ T377] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.950332][ T377] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.959563][ T377] $Hÿ (unregistering): Released all slaves [ 185.971504][ T377] bond1 (unregistering): Released all slaves [ 185.983778][ T377] bond0 (unregistering): Released all slaves [ 185.995318][ T377] bond2 (unregistering): Released all slaves [ 186.014081][T10271] batman_adv: batadv0: Adding interface: ip6gretap1 [ 186.020754][T10271] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.046449][T10271] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 186.064529][T10276] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.098025][T10276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.131662][T10276] batman_adv: batadv0: Removing interface: ip6gretap1 [ 186.258707][T10235] chnl_net:caif_netlink_parms(): no params data found [ 186.278859][ T377] hsr_slave_0: left promiscuous mode [ 186.284657][ T377] hsr_slave_1: left promiscuous mode [ 186.293366][ T377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.301211][ T377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.346899][ T377] team0 (unregistering): Port device team_slave_1 removed [ 186.450676][T10235] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.458023][T10235] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.469205][T10235] bridge_slave_0: entered allmulticast mode [ 186.475867][T10235] bridge_slave_0: entered promiscuous mode [ 186.493053][T10235] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.500165][T10235] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.509625][T10235] bridge_slave_1: entered allmulticast mode [ 186.516798][T10235] bridge_slave_1: entered promiscuous mode [ 186.539033][T10235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.549991][T10235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.704247][T10235] team0: Port device team_slave_0 added [ 186.777528][T10235] team0: Port device team_slave_1 added [ 186.946477][T10235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.953754][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.979732][T10235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.992016][T10235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.999017][T10235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.025040][T10235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.195592][T10235] hsr_slave_0: entered promiscuous mode [ 187.248550][T10235] hsr_slave_1: entered promiscuous mode [ 187.254859][T10235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.264140][T10235] Cannot create hsr debugfs directory [ 187.511209][T10376] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 8 [ 187.514211][T10378] netlink: 'syz.0.2795': attribute type 2 has an invalid length. [ 187.558850][T10235] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.571363][T10235] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.580604][T10235] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.598985][T10235] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.672794][T10235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.688593][T10235] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.698970][ T125] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.706118][ T125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.752262][ T125] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.759462][ T125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.944793][ T6414] IPVS: starting estimator thread 0... [ 188.040714][T10405] IPVS: using max 2496 ests per chain, 124800 per kthread [ 188.065327][T10235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.342183][T10440] ipip0: entered promiscuous mode [ 188.368201][T10235] veth0_vlan: entered promiscuous mode [ 188.476425][T10235] veth1_vlan: entered promiscuous mode [ 188.490413][T10235] veth0_macvtap: entered promiscuous mode [ 188.498056][T10235] veth1_macvtap: entered promiscuous mode [ 188.551037][T10235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.597012][T10235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.605995][T10235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.614795][T10235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.623719][T10235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.632497][T10235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.693820][T10464] random: crng reseeded on system resumption [ 188.700076][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 188.700090][ T29] audit: type=1400 audit(1749074038.043:6923): avc: denied { append } for pid=10462 comm="syz.3.2827" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 188.729550][ T29] audit: type=1400 audit(1749074038.043:6924): avc: denied { open } for pid=10462 comm="syz.3.2827" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 188.941221][ T29] audit: type=1400 audit(1749074038.258:6925): avc: denied { mounton } for pid=10235 comm="syz-executor" path="/root/syzkaller.RJdByf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 189.160460][ T29] audit: type=1400 audit(1749074038.464:6926): avc: denied { mounton } for pid=10494 comm="syz.1.2839" path="/proc/1327/task" dev="proc" ino=31802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 189.214491][T10503] netlink: 'syz.3.2842': attribute type 1 has an invalid length. [ 190.571670][ T3315] syz_tun (unregistering): left allmulticast mode [ 190.645522][T10553] capability: warning: `syz.0.2864' uses 32-bit capabilities (legacy support in use) [ 190.673715][T10553] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10553 comm=syz.0.2864 [ 190.812473][T10554] lo speed is unknown, defaulting to 1000 [ 190.889655][ T1382] bridge_slave_1: left allmulticast mode [ 190.895373][ T1382] bridge_slave_1: left promiscuous mode [ 190.901121][ T1382] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.909792][ T1382] bridge_slave_0: left allmulticast mode [ 190.915564][ T1382] bridge_slave_0: left promiscuous mode [ 190.921312][ T1382] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.657904][ T1382] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.678281][ T1382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.690248][ T1382] bond0 (unregistering): Released all slaves [ 191.704931][ T1382] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 191.716034][ T1382] bond1 (unregistering): Released all slaves [ 191.866856][T10610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.868910][T10554] chnl_net:caif_netlink_parms(): no params data found [ 191.894893][T10610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.917014][ T29] audit: type=1400 audit(1749074041.045:6927): avc: denied { bind } for pid=10609 comm="syz.1.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 191.941733][ T1382] hsr_slave_0: left promiscuous mode [ 191.950632][ T1382] hsr_slave_1: left promiscuous mode [ 191.956934][ T1382] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.965147][ T1382] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.021827][ T1382] team0 (unregistering): Port device team_slave_1 removed [ 192.059534][ T29] audit: type=1326 audit(1749074041.176:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10624 comm="syz.4.2888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb2772be929 code=0x0 [ 192.088753][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.095889][T10554] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.103367][T10554] bridge_slave_0: entered allmulticast mode [ 192.109854][T10554] bridge_slave_0: entered promiscuous mode [ 192.116938][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.124001][T10554] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.131270][T10554] bridge_slave_1: entered allmulticast mode [ 192.137874][T10554] bridge_slave_1: entered promiscuous mode [ 192.155661][T10554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.166268][T10554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.175469][T10614] veth1_to_bond: entered allmulticast mode [ 192.185345][ T29] audit: type=1326 audit(1749074041.298:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10613 comm="syz.0.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58996e929 code=0x7ffc0000 [ 192.208967][ T29] audit: type=1326 audit(1749074041.298:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10613 comm="syz.0.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58996e929 code=0x7ffc0000 [ 192.232659][ T29] audit: type=1326 audit(1749074041.298:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10613 comm="syz.0.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58996e929 code=0x7ffc0000 [ 192.256351][ T29] audit: type=1326 audit(1749074041.298:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10613 comm="syz.0.2883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe58996e929 code=0x7ffc0000 [ 192.287005][T10554] team0: Port device team_slave_0 added [ 192.293929][T10554] team0: Port device team_slave_1 added [ 192.310615][T10554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.317719][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.343758][T10554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.355226][T10554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.362295][T10554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.388454][T10554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.414928][T10554] hsr_slave_0: entered promiscuous mode [ 192.421126][T10554] hsr_slave_1: entered promiscuous mode [ 192.427061][T10554] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.434684][T10554] Cannot create hsr debugfs directory [ 192.498749][T10635] 9pnet_fd: Insufficient options for proto=fd [ 192.553778][T10641] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10641 comm=syz.3.2893 [ 192.741625][T10554] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 192.751712][T10554] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 192.761152][T10554] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.770534][T10554] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.788217][T10554] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.795352][T10554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.802729][T10554] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.809888][T10554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.842424][T10554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.854706][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.864174][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.877923][T10554] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.888588][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.895758][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.907202][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.914329][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 192.978207][T10666] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10666 comm=syz.4.2903 [ 193.020474][T10554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.117418][T10554] veth0_vlan: entered promiscuous mode [ 193.128590][ T6414] IPVS: starting estimator thread 0... [ 193.130609][T10554] veth1_vlan: entered promiscuous mode [ 193.153725][T10554] veth0_macvtap: entered promiscuous mode [ 193.161477][T10554] veth1_macvtap: entered promiscuous mode [ 193.174414][T10554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.187915][T10554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.198217][T10554] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.206988][T10554] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.215729][T10554] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.224489][T10554] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.257851][T10680] IPVS: using max 2304 ests per chain, 115200 per kthread [ 193.406688][T10695] netlink: 'syz.2.2912': attribute type 27 has an invalid length. [ 193.430934][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.438216][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.453436][T10697] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10697 comm=syz.4.2913 [ 193.494868][T10695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.506243][T10695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.550353][T10695] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.559539][T10695] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.568623][T10695] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.577762][T10695] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.621827][T10698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.630807][T10698] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.641072][T10698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.671617][T10708] syzkaller1: entered promiscuous mode [ 193.677471][T10708] syzkaller1: entered allmulticast mode [ 193.686327][T10713] syz_tun: entered allmulticast mode [ 193.701579][T10707] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 193.710253][T10707] mroute: pending queue full, dropping entries [ 193.729802][T10706] syz_tun: left allmulticast mode [ 193.742641][T10725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10725 comm=syz.3.2924 [ 193.893780][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'. [ 193.989316][T10740] lo speed is unknown, defaulting to 1000 [ 194.047856][T10740] chnl_net:caif_netlink_parms(): no params data found [ 194.086742][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.093996][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.101234][T10740] bridge_slave_0: entered allmulticast mode [ 194.107757][T10740] bridge_slave_0: entered promiscuous mode [ 194.114578][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.121726][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.129095][T10740] bridge_slave_1: entered allmulticast mode [ 194.135584][T10740] bridge_slave_1: entered promiscuous mode [ 194.154540][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.165243][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.185445][T10740] team0: Port device team_slave_0 added [ 194.192222][T10740] team0: Port device team_slave_1 added [ 194.208429][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.215527][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.241733][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.253123][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.260140][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.286316][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.382203][ T37] bond0 (unregistering): Released all slaves [ 194.390387][ T37] bond1 (unregistering): Released all slaves [ 194.400035][T10740] hsr_slave_0: entered promiscuous mode [ 194.406401][T10740] hsr_slave_1: entered promiscuous mode [ 194.412607][T10740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.420244][T10740] Cannot create hsr debugfs directory [ 194.435859][ T37] hsr_slave_0: left promiscuous mode [ 194.441656][ T37] hsr_slave_1: left promiscuous mode [ 194.596883][T10772] netlink: 'syz.2.2939': attribute type 27 has an invalid length. [ 194.630581][T10772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.639059][T10772] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.648715][T10772] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.670610][T10772] syzkaller1: entered promiscuous mode [ 194.676170][T10772] syzkaller1: entered allmulticast mode [ 194.848101][T10740] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 194.858854][T10740] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 194.868492][T10740] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.879403][T10740] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.901458][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.908664][T10740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.915994][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.923079][T10740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.960251][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.972814][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2943'. [ 194.982134][ T3417] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.990306][ T3417] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.001795][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.012265][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.019337][ T6012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.033056][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.040168][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.052644][T10784] syz_tun: entered allmulticast mode [ 195.061175][T10784] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 195.069741][T10784] mroute: pending queue full, dropping entries [ 195.071968][T10740] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 195.086465][T10740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 195.098094][T10783] syz_tun: left allmulticast mode [ 195.138806][T10614] veth1_to_bond: left allmulticast mode [ 195.169147][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.266700][T10740] veth0_vlan: entered promiscuous mode [ 195.275291][T10740] veth1_vlan: entered promiscuous mode [ 195.291368][T10740] veth0_macvtap: entered promiscuous mode [ 195.300820][T10740] veth1_macvtap: entered promiscuous mode [ 195.311564][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.323286][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.332940][T10740] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.341768][T10740] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.350654][T10740] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.359549][T10740] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.896560][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2954'. [ 195.973186][T10825] xt_hashlimit: max too large, truncated to 1048576 [ 196.001466][T10827] syz_tun: entered allmulticast mode [ 196.007545][T10827] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 196.016130][T10827] mroute: pending queue full, dropping entries [ 196.024509][T10826] syz_tun: left allmulticast mode [ 196.048994][T10829] netlink: 'syz.3.2959': attribute type 27 has an invalid length. [ 196.072112][T10829] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.079474][T10829] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.136646][T10829] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.147286][T10829] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.172699][T10829] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.181771][T10829] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.190918][T10829] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.200102][T10829] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.215209][T10836] syz_tun: entered allmulticast mode [ 196.223691][T10834] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 196.232287][T10834] mroute: pending queue full, dropping entries [ 196.241320][T10833] syz_tun: left allmulticast mode [ 196.471206][T10860] syz_tun: entered allmulticast mode [ 196.479097][T10860] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 196.487706][T10860] mroute: pending queue full, dropping entries [ 196.494518][T10859] syz_tun: left allmulticast mode [ 196.960215][T10871] netlink: 'syz.1.2976': attribute type 27 has an invalid length. [ 196.981617][T10871] bridge0: port 3(dummy0) entered disabled state [ 196.993621][ T6414] lo speed is unknown, defaulting to 1000 [ 196.999491][ T6414] syz0: Port: 1 Link DOWN [ 197.161958][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2980'. [ 197.372907][T10906] netlink: 'syz.0.2992': attribute type 27 has an invalid length. [ 197.515170][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2996'. [ 197.732405][T10945] syz_tun: entered allmulticast mode [ 197.741323][T10944] syz_tun: left allmulticast mode [ 197.869610][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3014'. [ 198.085229][T10979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3026'. [ 198.524062][T11001] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.866438][T11006] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3038'. [ 198.876350][T11006] netlink: 'syz.4.3038': attribute type 27 has an invalid length. [ 198.905107][T11006] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.912403][T11006] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.951891][T11006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.963176][T11006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.991893][T11006] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.000929][T11006] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.009896][T11006] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.018766][T11006] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.045872][T11007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.054343][T11007] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.072421][T11007] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 199.116309][T11006] syzkaller1: entered promiscuous mode [ 199.121843][T11006] syzkaller1: entered allmulticast mode [ 199.342223][T11020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3042'. [ 199.438103][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 199.438152][ T29] audit: type=1326 audit(1749074048.089:6940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.467833][ T29] audit: type=1326 audit(1749074048.089:6941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.546105][ T29] audit: type=1326 audit(1749074048.136:6942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.569701][ T29] audit: type=1326 audit(1749074048.136:6943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.593276][ T29] audit: type=1326 audit(1749074048.136:6944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.616791][ T29] audit: type=1326 audit(1749074048.145:6945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.640371][ T29] audit: type=1326 audit(1749074048.145:6946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.663864][ T29] audit: type=1326 audit(1749074048.145:6947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.687721][ T29] audit: type=1326 audit(1749074048.323:6948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 199.722438][ T29] audit: type=1326 audit(1749074048.341:6949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11027 comm="syz.3.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 200.007344][T11032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3047'. [ 200.028343][T11032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.036474][T11032] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.045832][T11032] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.151503][T11044] bond4: entered promiscuous mode [ 200.156685][T11044] bond4: entered allmulticast mode [ 200.162193][T11044] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.173224][T11044] bond4 (unregistering): Released all slaves [ 200.221270][T11057] lo speed is unknown, defaulting to 1000 [ 200.358169][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3061'. [ 200.373292][T11065] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 200.512489][T11073] syz_tun: entered allmulticast mode [ 200.518761][T11073] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 200.527334][T11073] mroute: pending queue full, dropping entries [ 200.535119][T11072] syz_tun: left allmulticast mode [ 200.578605][T11077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11077 comm=syz.0.3065 [ 200.925654][T11083] syz_tun: entered allmulticast mode [ 200.931768][T11082] syz_tun: left allmulticast mode [ 201.545956][T11098] xt_hashlimit: max too large, truncated to 1048576 [ 201.547783][T11094] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3072'. [ 201.581263][T11100] syz_tun: entered allmulticast mode [ 201.587152][T11100] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 201.595684][T11100] mroute: pending queue full, dropping entries [ 201.603908][T11099] syz_tun: left allmulticast mode [ 201.662506][ T3392] IPVS: starting estimator thread 0... [ 201.767460][T11112] IPVS: using max 2112 ests per chain, 105600 per kthread [ 201.789041][T11122] ieee802154 phy0 wpan0: encryption failed: -22 [ 201.981598][T11138] syz_tun: entered allmulticast mode [ 201.989016][T11137] syz_tun: left allmulticast mode [ 202.034311][ T3392] IPVS: starting estimator thread 0... [ 202.130886][T11143] IPVS: using max 2208 ests per chain, 110400 per kthread [ 202.172896][T11151] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.646013][T11159] netlink: 'syz.0.3099': attribute type 27 has an invalid length. [ 202.751830][T11159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.760147][T11159] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.769400][T11159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.790767][T11162] syz_tun: entered allmulticast mode [ 202.796800][T11162] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 202.805384][T11162] mroute: pending queue full, dropping entries [ 202.818416][T11161] syz_tun: left allmulticast mode [ 202.851475][T11171] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11171 comm=syz.2.3104 [ 202.892044][T11179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3107'. [ 202.906417][T11183] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 202.935822][T11186] netlink: 'syz.2.3110': attribute type 27 has an invalid length. [ 202.980262][T11193] syz_tun: entered allmulticast mode [ 202.986583][T11192] syz_tun: left allmulticast mode [ 203.013203][T11195] xt_hashlimit: max too large, truncated to 1048576 [ 203.014437][T11186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.028002][T11186] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.045884][T11186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.135278][T11210] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11210 comm=syz.0.3121 [ 203.195548][T11216] syz_tun: entered allmulticast mode [ 203.202057][T11216] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 203.210620][T11216] mroute: pending queue full, dropping entries [ 203.217755][T11215] syz_tun: left allmulticast mode [ 203.336347][T11228] lo speed is unknown, defaulting to 1000 [ 203.520112][ T3313] syz_tun (unregistering): left allmulticast mode [ 203.739642][T11241] lo speed is unknown, defaulting to 1000 [ 203.834833][T11256] syz_tun: entered allmulticast mode [ 203.873608][T11256] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 203.882282][T11256] mroute: pending queue full, dropping entries [ 204.011827][T11255] syz_tun: left allmulticast mode [ 204.020120][T11261] syz_tun: entered allmulticast mode [ 204.025917][T11261] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 204.035047][ T37] dummy0: left allmulticast mode [ 204.043382][ T37] dummy0: left promiscuous mode [ 204.048463][ T37] bridge0: port 3(dummy0) entered disabled state [ 204.058189][ T37] bridge_slave_1: left allmulticast mode [ 204.063918][ T37] bridge_slave_1: left promiscuous mode [ 204.069774][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.082614][ T37] bridge_slave_0: left allmulticast mode [ 204.088491][ T37] bridge_slave_0: left promiscuous mode [ 204.094323][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.229042][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.231252][T11276] netlink: 'syz.3.3145': attribute type 27 has an invalid length. [ 204.246330][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.256799][ T37] bond0 (unregistering): Released all slaves [ 204.268863][T11241] chnl_net:caif_netlink_parms(): no params data found [ 204.413645][T11260] syz_tun: left allmulticast mode [ 204.493183][ T37] hsr_slave_0: left promiscuous mode [ 204.519468][ T37] hsr_slave_1: left promiscuous mode [ 204.578654][ T37] team0 (unregistering): Port device team_slave_1 removed [ 204.737058][T11241] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.744317][T11241] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.753679][T11241] bridge_slave_0: entered allmulticast mode [ 204.760327][T11241] bridge_slave_0: entered promiscuous mode [ 204.767681][T11241] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.775124][T11241] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.783103][T11241] bridge_slave_1: entered allmulticast mode [ 204.789696][T11241] bridge_slave_1: entered promiscuous mode [ 204.798790][T11306] xt_hashlimit: max too large, truncated to 1048576 [ 204.813358][T11241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.826267][T11241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.839505][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 204.839521][ T29] audit: type=1326 audit(1749074053.140:7063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 204.869520][ T29] audit: type=1326 audit(1749074053.140:7064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 204.893072][ T29] audit: type=1326 audit(1749074053.140:7065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 204.916636][ T29] audit: type=1326 audit(1749074053.140:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 204.940198][ T29] audit: type=1326 audit(1749074053.140:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 204.963874][ T29] audit: type=1326 audit(1749074053.140:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 204.987437][ T29] audit: type=1326 audit(1749074053.140:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 205.010979][ T29] audit: type=1326 audit(1749074053.140:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 205.034485][ T29] audit: type=1326 audit(1749074053.140:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 205.058102][ T29] audit: type=1326 audit(1749074053.140:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11307 comm="syz.3.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625173e929 code=0x7ffc0000 [ 205.089947][T11241] team0: Port device team_slave_0 added [ 205.097406][T11241] team0: Port device team_slave_1 added [ 205.117869][T11241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.125072][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.151160][T11241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.177155][T11241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.184273][T11241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.210461][T11241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.240522][T11241] hsr_slave_0: entered promiscuous mode [ 205.246609][T11241] hsr_slave_1: entered promiscuous mode [ 205.260279][ T37] IPVS: stop unused estimator thread 0... [ 205.379533][T11323] syz_tun: entered allmulticast mode [ 205.388334][T11323] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 205.396881][T11323] net_ratelimit: 1 callbacks suppressed [ 205.396892][T11323] mroute: pending queue full, dropping entries [ 205.409262][T11322] syz_tun: left allmulticast mode [ 205.432110][T11325] netlink: 'syz.0.3165': attribute type 27 has an invalid length. [ 205.469861][T11325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.476384][T11331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 205.478698][T11325] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.495247][T11325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.525522][T11332] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 205.559869][T11338] ================================================================== [ 205.568037][T11338] BUG: KCSAN: data-race in __percpu_counter_init_many / copy_mm [ 205.575731][T11338] [ 205.578084][T11338] write to 0xffff8881039e5a48 of 8 bytes by task 10235 on cpu 1: [ 205.585829][T11338] __percpu_counter_init_many+0x292/0x310 [ 205.591585][T11338] mm_init+0x6ac/0x850 [ 205.595679][T11338] copy_mm+0x101/0x370 [ 205.599771][T11338] copy_process+0xcf1/0x1fe0 [ 205.604469][T11338] kernel_clone+0x16c/0x5b0 [ 205.609003][T11338] __x64_sys_clone+0xe6/0x120 [ 205.613719][T11338] x64_sys_call+0x2c59/0x2fb0 [ 205.618425][T11338] do_syscall_64+0xd2/0x200 [ 205.622956][T11338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.628873][T11338] [ 205.631206][T11338] read to 0xffff8881039e5640 of 1408 bytes by task 11338 on cpu 0: [ 205.639111][T11338] copy_mm+0xe2/0x370 [ 205.643118][T11338] copy_process+0xcf1/0x1fe0 [ 205.647753][T11338] kernel_clone+0x16c/0x5b0 [ 205.652271][T11338] __x64_sys_clone+0xe6/0x120 [ 205.656979][T11338] x64_sys_call+0x2c59/0x2fb0 [ 205.661674][T11338] do_syscall_64+0xd2/0x200 [ 205.666199][T11338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.672107][T11338] [ 205.674441][T11338] Reported by Kernel Concurrency Sanitizer on: [ 205.680596][T11338] CPU: 0 UID: 0 PID: 11338 Comm: syz.0.3171 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 205.692764][T11338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.702845][T11338] ================================================================== [ 205.737478][T11241] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 205.747434][T11241] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 205.758383][T11241] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.767805][T11241] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.812600][T11241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.827195][T11241] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.837691][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.844844][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.865969][T11241] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 205.876473][T11241] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 205.890047][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.897209][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.959820][T11241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.033770][T11241] veth0_vlan: entered promiscuous mode [ 206.041792][T11241] veth1_vlan: entered promiscuous mode [ 206.057693][T11241] veth0_macvtap: entered promiscuous mode [ 206.065248][T11241] veth1_macvtap: entered promiscuous mode [ 206.076304][T11241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.087996][T11241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.097493][T11241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.106324][T11241] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.115096][T11241] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.124000][T11241] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0