last executing test programs: 4.756688608s ago: executing program 2 (id=2773): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 2.577892183s ago: executing program 4 (id=2814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dd}], 0x1}}], 0x6, 0x20004095) 2.381564239s ago: executing program 1 (id=2820): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600", 0x34}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc001) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x13c, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffff6fb3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffff931}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1400000}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc8, 0xa8, @random="79a2ee798790bcb9b1a673fce20da4e8ce5f13a0fce85f85ae82c3ce7a8a2c72089ec8887af2a2b8016977dd8dcd80b2e38ef01d44ae8e8e84cb2924fdf20ea871197c5a6be962fcfa94ea73df41abcb5e7579eb6fca5d7d7a98ebe3194800f2adff5563729817c3c20c6f09e9012af9402ec54b2c3bdf3852bea02a441b7d97fe86e4735412687f122ae5c9d6753e67e3c3b50758d00b6fe0e1cd81bbb4e1366ff39ae36176ba9097dcdedd649e952e4fa040cd1f57584e137e6acabc58532f207d60a2"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') dup(r6) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") 1.87151134s ago: executing program 2 (id=2827): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x12, 0x18}, [@ldst={0x4, 0x3, 0x5, 0x0, 0x2, 0x10}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 1.850136581s ago: executing program 2 (id=2828): syz_open_dev$evdev(&(0x7f0000000180), 0xb7ea, 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x80}, 0x0) 1.803660675s ago: executing program 2 (id=2830): socket(0x10, 0x6, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1.767572158s ago: executing program 4 (id=2831): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) 1.754402059s ago: executing program 1 (id=2832): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000200)='xen_mmu_set_pud\x00', r1, 0x0, 0x3}, 0x18) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x49c0, 0x80, 0x11}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x3, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_STATUS={0x8}, @CTA_NAT_DST={0x30, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0x1a010101}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40014}, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x8}, 0x50) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb89080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd80003742f1a2222f19935e6996c7096fb7e40300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000040)=@ethtool_cmd={0x15, 0x6, 0xff, 0x3, 0xfa, 0x5, 0x0, 0x8, 0xc, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x8]}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x60}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f00000008c0)={0x0, 0x4, {0x3, @usage=0x1, 0x0, 0x3ff, 0x2, 0x0, 0x0, 0x1ff, 0x4a4, @usage=0x7c, 0x0, 0x1, [0x2, 0x7f, 0x20000000000000, 0x7, 0x3f7, 0x5]}, {0x88, @struct={0x4, 0x5}, 0x0, 0x6, 0x4, 0x3, 0xebe, 0x9, 0x2, @struct={0xfffeffff, 0xffff}, 0x9, 0x5, [0x81, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0xe]}, {0x80000000, @usage=0x10001, 0x0, 0x100, 0xff, 0xfffffffffffffff7, 0x6, 0x7fffffff, 0x202, @usage=0x1000, 0x7d989949, 0x8, [0xffff, 0x8, 0xa, 0x4, 0x7fffffffffffffff, 0x8]}, {0x2, 0x4, 0x6}}) socket$kcm(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x50) 1.707283403s ago: executing program 2 (id=2833): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000040)='./file1\x00', 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.706776873s ago: executing program 4 (id=2834): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1.608627641s ago: executing program 2 (id=2836): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000), 0x0, 0xffffffffffbffff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 1.603312411s ago: executing program 4 (id=2837): socket(0xa, 0x3, 0xff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000200)={&(0x7f0000000340)=@in={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) 933.799385ms ago: executing program 1 (id=2839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) tkill(0x0, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 888.385569ms ago: executing program 1 (id=2840): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000040)='./file1\x00', 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 824.039874ms ago: executing program 1 (id=2841): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="4bd203afa8a0a820573831475cc1ca6053bd0284b52b6bcd4c502be0ff09b7129c217f3c9d67ba184004f2bf0b7f03b31257bf6d6812b36e1f51908ef687e8251bfbb0b9f69e302edc28ecffd45e833222c77c05fc230977e0d617288a2e66caaaa8778bfa68feadf212a2d744713b1384039886323d0ed34984459e40c4f186588a738c54cbf74af7a6216faa39c19fcfe445a434f39b46800f46b454b868dbbe072b5629a22e12f874b9f2991994434354be6ffd4d80e1f1230011874785146729a948328f155cedb5122aab4347840eb1f13e0b2d6ec445209f07110df6391737694972f66c41281c68a0744e51bcb90e6249946b6c213bb85d6a791235805ec9ddeb03afbbd3a57e2e122a8ec318c8926489e71cc276776d5d0ffc0f16ed590c076c8fd7640738268450aeec1011de0d913ccf3f68395ce63256677302dff0b176686ed4868618d677a5e52ab1996f64e499fb942cf04d0024ec633560d4eec2b71fb6bd774c501b87715f3e1df55ae1f7aa065dece77394069492ad8365e8ea39ead9538d48fb50a08e2af84312b3b30384ff8441c2f51fcabbfe76aee565f413237b77cf3f95ee0884077db0724c195a4d40cf903402da79cf8161bdae5e39f557e67be556424deda2982344edcad4f36f03e197c50c88929e887f57e3b0836e9cd58e1132df47f52e15177e3ed5d9908bdfe42b6fe282f670d2a44165775d19958d5e689c47e444b16911dbc5f0ade56c679aecedfbb9eef16572fdd117f921f9f89c504b4fc1dd6ab8939f2ac7b8057498ad5a9ab09c99f540aa9784767fde91c92fd7209dfa6ba78e9953d5b8cfebfeacde6763af29193601d9a7fc6b73148c3aa3b483297f4881ad2d95b492f1476d4b218ac49c7cfb867b1650ba16d91e9412c1762ceb66531113956096bca757a2fd8cc1ad9a8cdf9615121d5f0d636cfa222fb21deae21f9f1982a8d0ace1f9104785eeb015ad1792b26d475b1bc4a454b63e7c8346a5b2bd40bc7541b2f6c02895f54e2fdb88ec2d678aaa9c783d61473afa2c8f6c2df83cd7491f26c7f527a38f71d4924225fc4ae77ef33d46012fba2d0ef723e39c75908a66e884b936cd17e20d3f59bf48f5cbf9ef2542ef9af618fc7df6daa30de39934acf70c8309382c266761966beec9ee78aecdb6623102776a04ee83b6193c0e4492665092d8c872fd355012d9fa65e4bac319b19e95baefae67b20de2dd3c43c4c5f1708ed0fcfba9fc192bf0868f4490c41befc09a5dd744b028c3ea20cdaa738c272ec7a816eed47bfad2121ebdbb8415755148330fc6778313d9831131c5c0c6ac8dc3f2fd678e4f20ff1e0fcf82d4795797936401b0cdbfd23fcc9c1e76d1d063a23d126faab2a225f0174d39446bc4215d2cece1997b233e4a807b161626aa9c5d507cc260cb7bbc22ae36e8f7b3862e841bdb19a31a5eb169804aaa04c898f14056a04e7089be42fafd5d6bf6f2471546beaf8db492c76482a7acea8eee3dddf017e209f9f99343036236ac6b198b90a78ff1a50eba379940de611ddf06f6eda290f2bde25c9573d105ac8a0fb286f7deaeac6e56d065d198f61daccef695890a5f840222899a55adc6d0cea1b5c296096aafc9f598fa4869edcdf047d72feee3a7c60ef5859f4ad96084160d550a109eaea639e01dab9b98cd7dc54b55d7eb2d213331bba4dee7c2029d47339e68c31800d77f370b42d2497f66907db06a2de988dbd14cd157836ebbc7239a8d218a797c5ba6816b28cf11576b5e4ddacc5ade05848ede263cd0d8d65f112c294309aac0bc76e58f7d99a704ced501795c57db6615ec6128090fc61698dd5d7210f30c05faf505ae0641899faf1babb36789c83d7ed723a9e1f7400a94da511899da552d782a43f42623af305a7284b538b2579db694347f8fc9db65dbac055dfa3333a3c0aceaf054b8576d7b3d14769b0ab0147bc3506310bf91e0ece8a6bd1bd878a4559cff9f8074f9bbaa6a034eaccf1a13a2dcef5cf991b457b7bc68f5a4e65114aa3e79fa732200f29d925a9fbc5ba377771837166ebe749332627f0e6e898ac3dc22df2356eccaa03ee00cf890d951e8fdd32834256ec3cf0eaa2141", 0x5dd}], 0x1}}], 0x6, 0x20004095) 772.971698ms ago: executing program 4 (id=2843): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 723.065722ms ago: executing program 3 (id=2845): r0 = add_key$user(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @auto=[0x3a, 0x66, 0x63, 0x35, 0x66, 0x39, 0x62, 0x36, 0x31, 0x31, 0x61, 0x30, 0x62, 0x39, 0x32, 0x32]}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56", 0x26}, 0x48, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x13220c28) keyctl$search(0xa, r0, &(0x7f0000000200)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x1}, r1) 722.264812ms ago: executing program 4 (id=2846): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59cf0000008000000000080000001400018006000100020000dd070005"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000800), 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000780)={[{@journal_checksum}, {@inlinecrypt}, {@data_writeback}, {@resuid}]}, 0x2, 0x5ad, &(0x7f0000000180)="$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") 703.713174ms ago: executing program 3 (id=2847): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000040)='./file1\x00', 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 673.043926ms ago: executing program 3 (id=2848): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 640.321009ms ago: executing program 3 (id=2849): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000140)=@framed={{}, [@jmp={0x5, 0x1, 0x6, 0xa, 0x6, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000015850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3, 0x0, 0x400007}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c3}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1000}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xee}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x10001}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600", 0x34}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040", 0x30}], 0x1}, 0xc001) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x11) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000bc0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a40)={0x13c, r10, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xffffffffffff6fb3}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xfffffffffffff931}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x9000}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1400000}, @DEVLINK_ATTR_RATE_NODE_NAME={0xc8, 0xa8, @random="79a2ee798790bcb9b1a673fce20da4e8ce5f13a0fce85f85ae82c3ce7a8a2c72089ec8887af2a2b8016977dd8dcd80b2e38ef01d44ae8e8e84cb2924fdf20ea871197c5a6be962fcfa94ea73df41abcb5e7579eb6fca5d7d7a98ebe3194800f2adff5563729817c3c20c6f09e9012af9402ec54b2c3bdf3852bea02a441b7d97fe86e4735412687f122ae5c9d6753e67e3c3b50758d00b6fe0e1cd81bbb4e1366ff39ae36176ba9097dcdedd649e952e4fa040cd1f57584e137e6acabc58532f207d60a2"}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r8, 0x0, 0xffffffffffffffff}, 0x18) r11 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') dup(r6) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x759, &(0x7f0000000780)={[{@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}, 0x0}, {@data_journal}, {@journal_dev={'journal_dev', 0x3d, 0xf}}, {@i_version}, {@nobarrier}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xb6a}}, {@data_err_ignore}], [], 0x2c}, 0x2, 0x4f9, &(0x7f0000000200)="$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") 515.073049ms ago: executing program 0 (id=2851): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x60000005}, 0x4) getsockname(0xffffffffffffffff, &(0x7f0000000180)=@x25={0x9, @remote}, &(0x7f00000000c0)=0xfffffffffffffd9e) fstat(r0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r3) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 306.490425ms ago: executing program 0 (id=2852): r0 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ptrace$poke(0x5, r0, 0x0, 0xe) socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x100}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5d0, 0xf8, 0x1d8, 0xf8, 0x0, 0x0, 0x500, 0x500, 0x500, 0x500, 0x500, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x2}, {0x0, 0x0, 0x3}}}}, {{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xffffffff], [0xff, 0xff, 0xff, 0xff], 'veth0\x00', '\x00', {0xff}, {}, 0x2f, 0x40, 0x6, 0x43}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x2}, {0x4, 0x4, 0x4}, {0x4, 0x6}, 0xa04}}}, {{@ipv6={@empty, @remote, [0xffff00, 0x62598bc42e0caa92, 0xff000000, 0xffffffff], [0xffffffff, 0xff000000, 0xff000000, 0xffffffff], 'ip_vti0\x00', 'veth1\x00', {0xff}, {0x270d040828e1254a}, 0x4, 0x3, 0x6, 0xd}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x4}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x38}, [0x0, 0xffffff00, 0x0, 0xffffff], [0xff, 0x0, 0x7fffffff, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x5c, 0x1, 0x1, 0x21}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0xfffc, 0x3, 0xada5, 0xfffc, 0x2, 0xe, 0x9, 0xe8, 0x9, 0x0, 0x81, 0x8, 0x3, 0xb, 0x4f0, 0x800], 0xc}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x32}, @empty, [0xffffffff, 0xffffffff, 0xff000000, 0xba0b3be71c2a0241], [0xffffffff, 0xffffff00, 0x807fff00, 0xff], 'ipvlan1\x00', 'macvlan1\x00', {}, {}, 0x87, 0xa6, 0x4, 0x44}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "8cb8"}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@dev={0xfe, 0x80, '\x00', 0x17}, 0x19, 0x5, 0xaa36}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) 245.484631ms ago: executing program 3 (id=2853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc085}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r6}, 0x10) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0xf9d, @private2}}}, 0x32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) readv(r8, &(0x7f0000000000)=[{0x0}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x45, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8000000}, 0x50) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 183.776875ms ago: executing program 3 (id=2854): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 159.350627ms ago: executing program 0 (id=2855): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) statx(0xffffffffffffffff, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x4, 0x0) 71.989595ms ago: executing program 0 (id=2856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="effdffff1400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 71.586634ms ago: executing program 0 (id=2857): socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x10, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r6, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[], 0x0) 37.799687ms ago: executing program 0 (id=2858): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)) renameat2(r0, &(0x7f00000000c0)='./cgroup\x00', r0, &(0x7f0000000040)='./file1\x00', 0x2) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000100)) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000002060300000000000000000000000007140007800800124000000000080008400000008f0500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./cgroup\x00', 0x1800040, &(0x7f0000000180), 0x1, 0x597, &(0x7f0000000b80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='Q', 0x1, 0x200980) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) pwritev2(r6, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) 0s ago: executing program 1 (id=2859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) kernel console output (not intermixed with test programs): d_unlock+0x4f/0x70 [ 99.261756][ T8061] ? __fget_files+0x184/0x1c0 [ 99.261810][ T8061] ? fput+0x8f/0xc0 [ 99.261914][ T8061] __x64_sys_msgsnd+0xa8/0xc0 [ 99.261943][ T8061] x64_sys_call+0x17c1/0x2ff0 [ 99.261972][ T8061] do_syscall_64+0xd2/0x200 [ 99.262087][ T8061] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 99.262120][ T8061] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 99.262155][ T8061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.262184][ T8061] RIP: 0033:0x7f49d520ebe9 [ 99.262249][ T8061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.262272][ T8061] RSP: 002b:00007f49d3c4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 99.262298][ T8061] RAX: ffffffffffffffda RBX: 00007f49d5436090 RCX: 00007f49d520ebe9 [ 99.262315][ T8061] RDX: 0000000000000401 RSI: 0000200000000d40 RDI: 0000000000000000 [ 99.262331][ T8061] RBP: 00007f49d3c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 99.262348][ T8061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.262365][ T8061] R13: 00007f49d5436128 R14: 00007f49d5436090 R15: 00007fffd03d82f8 [ 99.262392][ T8061] [ 99.505919][ T8065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 99.609175][ T8071] random: crng reseeded on system resumption [ 99.663013][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 99.663102][ T29] audit: type=1326 audit(1756059592.263:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.693219][ T29] audit: type=1326 audit(1756059592.263:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.716809][ T29] audit: type=1326 audit(1756059592.263:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.740578][ T29] audit: type=1326 audit(1756059592.263:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.764535][ T29] audit: type=1326 audit(1756059592.263:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.788287][ T29] audit: type=1326 audit(1756059592.263:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8080 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2993e514a5 code=0x7ffc0000 [ 99.811890][ T29] audit: type=1326 audit(1756059592.263:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.833377][ T8084] random: crng reseeded on system resumption [ 99.835742][ T29] audit: type=1326 audit(1756059592.263:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.865151][ T29] audit: type=1326 audit(1756059592.263:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.888657][ T29] audit: type=1326 audit(1756059592.263:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8077 comm="syz.0.1428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 99.914623][ T8045] tipc: Resetting bearer [ 99.924567][ T8045] tipc: Disabling bearer [ 100.026005][ T8093] can0: slcan on ttyS3. [ 100.046528][ T8098] netlink: 'syz.2.1434': attribute type 10 has an invalid length. [ 100.068797][ T8098] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 100.090038][ T8093] can0 (unregistered): slcan off ttyS3. [ 100.097702][ T8096] random: crng reseeded on system resumption [ 100.112293][ T8093] can0: slcan on ttyS3. [ 100.291534][ T8092] can0 (unregistered): slcan off ttyS3. [ 100.362170][ T8115] random: crng reseeded on system resumption [ 100.552558][ T8142] netlink: 'syz.4.1440': attribute type 1 has an invalid length. [ 100.739878][ T8148] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1442'. [ 100.781973][ T8142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.799952][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1440'. [ 100.822615][ T8143] bond0: (slave veth3): Enslaving as an active interface with a down link [ 100.835561][ T8145] vlan2: entered allmulticast mode [ 100.840775][ T8145] veth0_to_bond: entered allmulticast mode [ 100.847547][ T8145] veth0_to_bond: entered promiscuous mode [ 100.853719][ T8145] veth0_to_bond: left promiscuous mode [ 100.860616][ T8145] bond0: (slave vlan2): making interface the new active one [ 100.868691][ T8145] veth0_to_bond: entered promiscuous mode [ 100.875222][ T8145] vlan2: entered promiscuous mode [ 100.880588][ T8145] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 100.937840][ T8146] random: crng reseeded on system resumption [ 100.959204][ T8163] netlink: 'syz.4.1446': attribute type 10 has an invalid length. [ 100.985815][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.993619][ T8163] bridge_slave_1: left allmulticast mode [ 100.999412][ T8163] bridge_slave_1: left promiscuous mode [ 101.005270][ T8163] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.058658][ T8163] : (slave bridge_slave_1): Enslaving as an active interface with an up link [ 101.149277][ T8183] random: crng reseeded on system resumption [ 101.254989][ T8194] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1456'. [ 101.265885][ T8182] random: crng reseeded on system resumption [ 101.275510][ T8188] can0: slcan on ttyS3. [ 101.340829][ T8188] can0 (unregistered): slcan off ttyS3. [ 101.369920][ T8200] can0: slcan on ttyS3. [ 101.444536][ T8187] can0 (unregistered): slcan off ttyS3. [ 102.132808][ T8239] random: crng reseeded on system resumption [ 102.147658][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1024 with max blocks 64 with error 28 [ 102.157169][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 102.160563][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 102.160563][ T12] [ 102.173018][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 102.173018][ T31] [ 102.182792][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 102.192433][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 102.192455][ T31] EXT4-fs (loop2): Free/Dirty block details [ 102.198480][ T12] EXT4-fs (loop0): Free/Dirty block details [ 102.198495][ T12] EXT4-fs (loop0): free_blocks=0 [ 102.198508][ T12] EXT4-fs (loop0): dirty_blocks=64 [ 102.204642][ T31] EXT4-fs (loop2): free_blocks=0 [ 102.210555][ T12] EXT4-fs (loop0): Block reservation details [ 102.216564][ T31] EXT4-fs (loop2): dirty_blocks=16 [ 102.221435][ T12] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 102.226598][ T31] EXT4-fs (loop2): Block reservation details [ 102.231933][ T56] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 102.237590][ T31] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 102.242791][ T56] EXT4-fs (loop3): This should not happen!! Data will be lost [ 102.242791][ T56] [ 102.260997][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 102.267305][ T56] EXT4-fs (loop3): Total free blocks count 0 [ 102.273249][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.273249][ T51] [ 102.273271][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 102.283124][ T56] EXT4-fs (loop3): Free/Dirty block details [ 102.283142][ T56] EXT4-fs (loop3): free_blocks=0 [ 102.296033][ T51] EXT4-fs (loop4): Free/Dirty block details [ 102.302076][ T56] EXT4-fs (loop3): dirty_blocks=16 [ 102.311747][ T51] EXT4-fs (loop4): free_blocks=0 [ 102.317719][ T56] EXT4-fs (loop3): Block reservation details [ 102.323857][ T51] EXT4-fs (loop4): dirty_blocks=8080 [ 102.328771][ T56] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 102.334656][ T51] EXT4-fs (loop4): Block reservation details [ 102.369278][ T51] EXT4-fs (loop4): i_reserved_data_blocks=505 [ 102.386497][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2068 with max blocks 2048 with error 28 [ 102.399533][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.399533][ T37] [ 102.409334][ T37] EXT4-fs (loop1): Total free blocks count 0 [ 102.415422][ T37] EXT4-fs (loop1): Free/Dirty block details [ 102.421449][ T37] EXT4-fs (loop1): free_blocks=0 [ 102.426435][ T37] EXT4-fs (loop1): dirty_blocks=12112 [ 102.431846][ T37] EXT4-fs (loop1): Block reservation details [ 102.437874][ T37] EXT4-fs (loop1): i_reserved_data_blocks=757 [ 102.478719][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 4120 with max blocks 2048 with error 28 [ 102.491825][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.491825][ T37] [ 102.493975][ T8250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1464'. [ 102.540356][ T8250] netem: change failed [ 102.550287][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4120 with max blocks 2048 with error 28 [ 102.561193][ T8257] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1468'. [ 102.563109][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 102.563109][ T51] [ 102.573141][ T8258] netlink: 'syz.1.1465': attribute type 17 has an invalid length. [ 102.613704][ T8258] can0: slcan on ttyS3. [ 102.672414][ T8258] can0 (unregistered): slcan off ttyS3. [ 102.683693][ T8262] can0: slcan on ttyS3. [ 102.848271][ T8282] netlink: '+}[@': attribute type 3 has an invalid length. [ 103.014604][ T8262] can0 (unregistered): slcan off ttyS3. [ 103.071864][ T8288] can0: slcan on ttyS3. [ 103.177410][ T8261] can0 (unregistered): slcan off ttyS3. [ 103.230340][ T8300] random: crng reseeded on system resumption [ 103.261136][ T8319] openvswitch: netlink: Message has 6 unknown bytes. [ 103.435135][ T8336] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1485'. [ 103.448877][ T8323] random: crng reseeded on system resumption [ 103.627894][ T8348] can0: slcan on ttyS3. [ 103.680382][ T8356] openvswitch: netlink: Message has 6 unknown bytes. [ 103.690375][ T8348] can0 (unregistered): slcan off ttyS3. [ 103.711411][ T8359] can0: slcan on ttyS3. [ 103.856366][ T8347] can0 (unregistered): slcan off ttyS3. [ 103.902097][ T8383] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=35858 sclass=netlink_xfrm_socket pid=8383 comm=syz.1.1500 [ 103.918014][ T8385] openvswitch: netlink: Message has 6 unknown bytes. [ 103.983514][ T8396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1504'. [ 103.992742][ T8396] netem: change failed [ 104.048518][ T8403] openvswitch: netlink: Message has 6 unknown bytes. [ 104.107925][ T8391] random: crng reseeded on system resumption [ 104.145817][ T8416] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 104.155519][ T8416] netem: change failed [ 104.282311][ T8433] netlink: 'syz.0.1514': attribute type 17 has an invalid length. [ 104.292368][ T8433] can0: slcan on ttyS3. [ 104.325642][ T8441] netlink: '+}[@': attribute type 3 has an invalid length. [ 104.338483][ T8433] can0 (unregistered): slcan off ttyS3. [ 104.373557][ T8442] can0: slcan on ttyS3. [ 104.436769][ T8450] openvswitch: netlink: Message has 6 unknown bytes. [ 104.453743][ T8432] can0 (unregistered): slcan off ttyS3. [ 104.479346][ T8456] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 104.498813][ T8456] netem: change failed [ 104.620519][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 104.620596][ T29] audit: type=1400 audit(1756059597.460:2860): avc: denied { read } for pid=8474 comm="syz.3.1524" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.637167][ T8471] random: crng reseeded on system resumption [ 104.649790][ T29] audit: type=1400 audit(1756059597.460:2861): avc: denied { open } for pid=8474 comm="syz.3.1524" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 104.682719][ T29] audit: type=1400 audit(1756059597.534:2862): avc: denied { create } for pid=8474 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.702319][ T29] audit: type=1400 audit(1756059597.534:2863): avc: denied { connect } for pid=8474 comm="syz.3.1524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 104.766222][ T29] audit: type=1400 audit(1756059597.607:2864): avc: denied { create } for pid=8487 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.788580][ T8488] FAULT_INJECTION: forcing a failure. [ 104.788580][ T8488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.801931][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.0.1526 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.801988][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.802059][ T8488] Call Trace: [ 104.802065][ T8488] [ 104.802073][ T8488] __dump_stack+0x1d/0x30 [ 104.802093][ T8488] dump_stack_lvl+0xe8/0x140 [ 104.802112][ T8488] dump_stack+0x15/0x1b [ 104.802129][ T8488] should_fail_ex+0x265/0x280 [ 104.802155][ T8488] should_fail+0xb/0x20 [ 104.802177][ T8488] should_fail_usercopy+0x1a/0x20 [ 104.802211][ T8488] _copy_from_user+0x1c/0xb0 [ 104.802247][ T8488] ___sys_sendmsg+0xc1/0x1d0 [ 104.802285][ T8488] __x64_sys_sendmsg+0xd4/0x160 [ 104.802311][ T8488] x64_sys_call+0x191e/0x2ff0 [ 104.802354][ T8488] do_syscall_64+0xd2/0x200 [ 104.802408][ T8488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 104.802433][ T8488] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 104.802492][ T8488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.802513][ T8488] RIP: 0033:0x7f2993e1ebe9 [ 104.802578][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.802646][ T8488] RSP: 002b:00007f2992887038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.802670][ T8488] RAX: ffffffffffffffda RBX: 00007f2994045fa0 RCX: 00007f2993e1ebe9 [ 104.802685][ T8488] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 0000000000000007 [ 104.802701][ T8488] RBP: 00007f2992887090 R08: 0000000000000000 R09: 0000000000000000 [ 104.802715][ T8488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.802805][ T8488] R13: 00007f2994046038 R14: 00007f2994045fa0 R15: 00007fffaf4e9558 [ 104.802829][ T8488] [ 104.803115][ T29] audit: type=1400 audit(1756059597.639:2865): avc: denied { ioctl } for pid=8487 comm="syz.0.1526" path="socket:[21559]" dev="sockfs" ino=21559 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.838583][ T29] audit: type=1400 audit(1756059597.639:2866): avc: denied { bind } for pid=8487 comm="syz.0.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.948881][ T8500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1528'. [ 105.005903][ T29] audit: type=1400 audit(1756059597.870:2867): avc: denied { read } for pid=8501 comm="syz.0.1529" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.021561][ T8500] netem: change failed [ 105.027451][ T29] audit: type=1400 audit(1756059597.870:2868): avc: denied { open } for pid=8501 comm="syz.0.1529" path="net:[4026532495]" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 105.029943][ T29] audit: type=1400 audit(1756059597.891:2869): avc: denied { name_bind } for pid=8501 comm="syz.0.1529" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 105.303292][ T8513] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 105.314274][ T8513] netem: change failed [ 105.588778][ T8540] netlink: 'syz.3.1542': attribute type 1 has an invalid length. [ 105.602380][ T8543] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1543'. [ 105.606636][ T8540] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.625549][ T8544] can0: slcan on ttyS3. [ 105.645323][ T8540] bond1: (slave veth3): Enslaving as an active interface with a down link [ 105.660030][ T8540] vlan2: entered allmulticast mode [ 105.665222][ T8540] veth0_to_bond: entered allmulticast mode [ 105.671487][ T8540] bond1: (slave vlan2): Opening slave failed [ 105.691400][ T8547] tipc: Enabled bearer , priority 0 [ 105.698612][ T8547] syzkaller0: entered promiscuous mode [ 105.704177][ T8547] syzkaller0: entered allmulticast mode [ 105.707579][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 105.710009][ T8544] can0 (unregistered): slcan off ttyS3. [ 105.740381][ T8532] can0: slcan on ttyS3. [ 105.814459][ T8530] can0 (unregistered): slcan off ttyS3. [ 105.875270][ T8551] random: crng reseeded on system resumption [ 105.968436][ T8585] openvswitch: netlink: Message has 6 unknown bytes. [ 106.085306][ T8600] serio: Serial port ptm0 [ 106.150621][ T8606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=8606 comm=syz.1.1555 [ 106.397965][ T8542] tipc: Resetting bearer [ 106.412193][ T8542] tipc: Disabling bearer [ 106.727278][ T8621] random: crng reseeded on system resumption [ 106.742913][ T8627] openvswitch: netlink: Message has 6 unknown bytes. [ 106.772567][ T8631] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 106.781455][ T8631] netem: change failed [ 106.803951][ T8633] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 106.812609][ T8633] netem: change failed [ 106.835617][ T8636] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1568'. [ 106.923310][ T8650] tipc: Enabled bearer , priority 0 [ 106.930563][ T8650] syzkaller0: entered promiscuous mode [ 106.936057][ T8650] syzkaller0: entered allmulticast mode [ 106.950244][ T8652] FAULT_INJECTION: forcing a failure. [ 106.950244][ T8652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.950278][ T8652] CPU: 0 UID: 0 PID: 8652 Comm: syz.3.1573 Not tainted syzkaller #0 PREEMPT(voluntary) [ 106.950369][ T8652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.950381][ T8652] Call Trace: [ 106.950387][ T8652] [ 106.950394][ T8652] __dump_stack+0x1d/0x30 [ 106.950451][ T8652] dump_stack_lvl+0xe8/0x140 [ 106.950477][ T8652] dump_stack+0x15/0x1b [ 106.950497][ T8652] should_fail_ex+0x265/0x280 [ 106.950525][ T8652] should_fail+0xb/0x20 [ 106.950546][ T8652] should_fail_usercopy+0x1a/0x20 [ 106.950575][ T8652] _copy_from_user+0x1c/0xb0 [ 106.950669][ T8652] perf_copy_attr+0x145/0x610 [ 106.950789][ T8652] __se_sys_perf_event_open+0x67/0x11c0 [ 106.950827][ T8652] ? vfs_write+0x7e8/0x960 [ 106.950854][ T8652] ? __rcu_read_unlock+0x4f/0x70 [ 106.950892][ T8652] __x64_sys_perf_event_open+0x67/0x80 [ 106.950990][ T8652] x64_sys_call+0x7bd/0x2ff0 [ 106.951018][ T8652] do_syscall_64+0xd2/0x200 [ 106.951054][ T8652] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 106.951084][ T8652] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 106.951118][ T8652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.951198][ T8652] RIP: 0033:0x7f49d520ebe9 [ 106.951217][ T8652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.951242][ T8652] RSP: 002b:00007f49d3c6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 106.951265][ T8652] RAX: ffffffffffffffda RBX: 00007f49d5435fa0 RCX: 00007f49d520ebe9 [ 106.951281][ T8652] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 106.951297][ T8652] RBP: 00007f49d3c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 106.951313][ T8652] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 106.951328][ T8652] R13: 00007f49d5436038 R14: 00007f49d5435fa0 R15: 00007fffd03d82f8 [ 106.951358][ T8652] [ 106.973003][ T8653] tipc: Enabled bearer , priority 0 [ 107.161917][ T8659] syzkaller0: entered promiscuous mode [ 107.161939][ T8659] syzkaller0: entered allmulticast mode [ 107.216718][ T8660] random: crng reseeded on system resumption [ 107.224524][ T8662] netlink: 'syz.2.1576': attribute type 10 has an invalid length. [ 107.329433][ T8665] random: crng reseeded on system resumption [ 107.469548][ T8679] FAULT_INJECTION: forcing a failure. [ 107.469548][ T8679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.482746][ T8679] CPU: 1 UID: 0 PID: 8679 Comm: syz.2.1583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.482818][ T8679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.482833][ T8679] Call Trace: [ 107.482841][ T8679] [ 107.482851][ T8679] __dump_stack+0x1d/0x30 [ 107.482877][ T8679] dump_stack_lvl+0xe8/0x140 [ 107.482908][ T8679] dump_stack+0x15/0x1b [ 107.482928][ T8679] should_fail_ex+0x265/0x280 [ 107.483007][ T8679] should_fail+0xb/0x20 [ 107.483063][ T8679] should_fail_usercopy+0x1a/0x20 [ 107.483086][ T8679] _copy_from_user+0x1c/0xb0 [ 107.483249][ T8679] __sys_bpf+0x178/0x7b0 [ 107.483287][ T8679] __x64_sys_bpf+0x41/0x50 [ 107.483378][ T8679] x64_sys_call+0x2aea/0x2ff0 [ 107.483399][ T8679] do_syscall_64+0xd2/0x200 [ 107.483474][ T8679] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 107.483499][ T8679] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 107.483526][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.483592][ T8679] RIP: 0033:0x7f85f863ebe9 [ 107.483612][ T8679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.483631][ T8679] RSP: 002b:00007f85f70a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.483650][ T8679] RAX: ffffffffffffffda RBX: 00007f85f8865fa0 RCX: 00007f85f863ebe9 [ 107.483663][ T8679] RDX: 0000000000000020 RSI: 00002000000008c0 RDI: 0000000000000009 [ 107.483676][ T8679] RBP: 00007f85f70a7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.483754][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.483766][ T8679] R13: 00007f85f8866038 R14: 00007f85f8865fa0 R15: 00007ffd44824f28 [ 107.483844][ T8679] [ 107.654429][ T8635] tipc: Resetting bearer [ 107.664635][ T8635] tipc: Disabling bearer [ 107.678258][ T8640] tipc: Resetting bearer [ 107.686698][ T8681] openvswitch: netlink: Message has 6 unknown bytes. [ 107.703904][ T8640] tipc: Disabling bearer [ 107.790202][ T8694] can0: slcan on ttyS3. [ 107.803659][ T8695] netlink: 'syz.3.1587': attribute type 17 has an invalid length. [ 107.862530][ T8683] can0 (unregistered): slcan off ttyS3. [ 107.871425][ T8694] can0: slcan on ttyS3. [ 107.954449][ T8707] random: crng reseeded on system resumption [ 107.967692][ T8686] can0 (unregistered): slcan off ttyS3. [ 108.234589][ T8752] tipc: Enabled bearer , priority 0 [ 108.317037][ T8743] random: crng reseeded on system resumption [ 108.431100][ T8774] FAULT_INJECTION: forcing a failure. [ 108.431100][ T8774] name failslab, interval 1, probability 0, space 0, times 0 [ 108.443894][ T8774] CPU: 0 UID: 0 PID: 8774 Comm: syz.1.1608 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.444009][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.444025][ T8774] Call Trace: [ 108.444078][ T8774] [ 108.444088][ T8774] __dump_stack+0x1d/0x30 [ 108.444111][ T8774] dump_stack_lvl+0xe8/0x140 [ 108.444150][ T8774] dump_stack+0x15/0x1b [ 108.444171][ T8774] should_fail_ex+0x265/0x280 [ 108.444197][ T8774] ? __se_sys_memfd_create+0x1cc/0x590 [ 108.444231][ T8774] should_failslab+0x8c/0xb0 [ 108.444332][ T8774] __kmalloc_cache_noprof+0x4c/0x320 [ 108.444387][ T8774] ? fput+0x8f/0xc0 [ 108.444419][ T8774] __se_sys_memfd_create+0x1cc/0x590 [ 108.444446][ T8774] __x64_sys_memfd_create+0x31/0x40 [ 108.444539][ T8774] x64_sys_call+0x2abe/0x2ff0 [ 108.444562][ T8774] do_syscall_64+0xd2/0x200 [ 108.444635][ T8774] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 108.444665][ T8774] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 108.444698][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.444775][ T8774] RIP: 0033:0x7fc3b053ebe9 [ 108.444793][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.444815][ T8774] RSP: 002b:00007fc3aef9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 108.444834][ T8774] RAX: ffffffffffffffda RBX: 00007fc3b0765fa0 RCX: 00007fc3b053ebe9 [ 108.444846][ T8774] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000000 [ 108.444860][ T8774] RBP: 00007fc3aef9f090 R08: 0000000000000000 R09: 0000000000000000 [ 108.444872][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.444965][ T8774] R13: 00007fc3b0766038 R14: 00007fc3b0765fa0 R15: 00007ffdd2f92898 [ 108.444990][ T8774] [ 108.462666][ T8775] can0: slcan on ttyS3. [ 108.681437][ T8770] can0 (unregistered): slcan off ttyS3. [ 108.706298][ T8775] can0: slcan on ttyS3. [ 108.727653][ T8797] random: crng reseeded on system resumption [ 108.815947][ T8769] can0 (unregistered): slcan off ttyS3. [ 108.836201][ T8808] random: crng reseeded on system resumption [ 108.912747][ T8729] tipc: Disabling bearer [ 108.985475][ T8839] geneve0: entered allmulticast mode [ 108.999002][ T8839] geneve0: entered promiscuous mode [ 109.119010][ T8838] geneve0: left promiscuous mode [ 109.124297][ T8838] geneve0: left allmulticast mode [ 109.174530][ T8866] __nla_validate_parse: 7 callbacks suppressed [ 109.174544][ T8866] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 109.183878][ T8865] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1624'. [ 109.190822][ T8866] netem: change failed [ 109.212124][ T8865] can0: slcan on ttyS3. [ 109.319278][ T8857] can0 (unregistered): slcan off ttyS3. [ 109.333674][ T8865] can0: slcan on ttyS3. [ 109.386458][ T29] kauditd_printk_skb: 1126 callbacks suppressed [ 109.386477][ T29] audit: type=1400 audit(1756059602.468:3996): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 109.420806][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.427502][ T3033] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 109.429348][ T3301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.435526][ T3033] audit: backlog limit exceeded [ 109.441762][ T3301] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 109.441780][ T3301] audit: backlog limit exceeded [ 109.449615][ T8888] audit: audit_backlog=65 > audit_backlog_limit=64 [ 109.454518][ T29] audit: type=1400 audit(1756059602.468:3997): avc: denied { prog_load } for pid=8883 comm="syz.2.1635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.459385][ T8888] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 109.535504][ T8855] can0 (unregistered): slcan off ttyS3. [ 109.640572][ T8903] netlink: 'syz.3.1642': attribute type 10 has an invalid length. [ 109.658283][ T8903] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 109.723639][ T8908] netlink: 'syz.2.1644': attribute type 1 has an invalid length. [ 109.739111][ T8912] FAULT_INJECTION: forcing a failure. [ 109.739111][ T8912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.749928][ T8908] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.752451][ T8912] CPU: 0 UID: 0 PID: 8912 Comm: syz.3.1646 Not tainted syzkaller #0 PREEMPT(voluntary) [ 109.752488][ T8912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.752506][ T8912] Call Trace: [ 109.752514][ T8912] [ 109.752577][ T8912] __dump_stack+0x1d/0x30 [ 109.752608][ T8912] dump_stack_lvl+0xe8/0x140 [ 109.752634][ T8912] dump_stack+0x15/0x1b [ 109.752715][ T8912] should_fail_ex+0x265/0x280 [ 109.752746][ T8912] should_fail+0xb/0x20 [ 109.752769][ T8912] should_fail_usercopy+0x1a/0x20 [ 109.752801][ T8912] _copy_from_user+0x1c/0xb0 [ 109.752839][ T8912] kstrtouint_from_user+0x69/0xf0 [ 109.752936][ T8912] ? 0xffffffff81000000 [ 109.752949][ T8912] ? selinux_file_permission+0x1e4/0x320 [ 109.752979][ T8912] proc_fail_nth_write+0x50/0x160 [ 109.753129][ T8912] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 109.753165][ T8912] vfs_write+0x269/0x960 [ 109.753193][ T8912] ? vfs_read+0x4e6/0x770 [ 109.753219][ T8912] ? __rcu_read_unlock+0x4f/0x70 [ 109.753250][ T8912] ? __fget_files+0x184/0x1c0 [ 109.753312][ T8912] ksys_write+0xda/0x1a0 [ 109.753389][ T8912] __x64_sys_write+0x40/0x50 [ 109.753419][ T8912] x64_sys_call+0x27fe/0x2ff0 [ 109.753494][ T8912] do_syscall_64+0xd2/0x200 [ 109.753532][ T8912] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 109.753568][ T8912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.753599][ T8912] RIP: 0033:0x7f49d520d69f [ 109.753619][ T8912] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 109.753707][ T8912] RSP: 002b:00007f49d3c6f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 109.753734][ T8912] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49d520d69f [ 109.753751][ T8912] RDX: 0000000000000001 RSI: 00007f49d3c6f0a0 RDI: 0000000000000003 [ 109.753768][ T8912] RBP: 00007f49d3c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.753808][ T8912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 109.753823][ T8912] R13: 00007f49d5436038 R14: 00007f49d5435fa0 R15: 00007fffd03d82f8 [ 109.753851][ T8912] [ 109.894742][ T8924] netlink: 'syz.3.1649': attribute type 10 has an invalid length. [ 109.988922][ T8914] bond1: (slave veth3): Enslaving as an active interface with a down link [ 110.081654][ T8929] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 110.088269][ T8929] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 110.095967][ T8929] vhci_hcd vhci_hcd.0: Device attached [ 110.128130][ T8937] vhci_hcd: connection closed [ 110.136987][ T56] vhci_hcd: stop threads [ 110.146170][ T56] vhci_hcd: release socket [ 110.150693][ T56] vhci_hcd: disconnect device [ 110.259639][ T8961] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 110.282652][ T8961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.306905][ T8961] bond2: (slave veth5): Enslaving as an active interface with a down link [ 110.323416][ T8961] vlan2: entered allmulticast mode [ 110.328623][ T8961] veth0_to_bond: entered allmulticast mode [ 110.352080][ T8961] veth0_to_bond: entered promiscuous mode [ 110.381826][ T8961] veth0_to_bond: left promiscuous mode [ 110.437794][ T8961] bond2: (slave vlan2): making interface the new active one [ 110.445965][ T8961] veth0_to_bond: entered promiscuous mode [ 110.454225][ T8961] vlan2: entered promiscuous mode [ 110.468883][ T8961] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 110.477935][ T8975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1668'. [ 110.698132][ T8999] netlink: 'syz.4.1677': attribute type 10 has an invalid length. [ 111.581147][ T9056] can0: slcan on ttyS3. [ 111.634179][ T9056] can0 (unregistered): slcan off ttyS3. [ 111.657183][ T9058] can0: slcan on ttyS3. [ 111.719516][ T9055] can0 (unregistered): slcan off ttyS3. [ 111.751371][ T9062] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 111.774520][ T9062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.837678][ T9062] bond0: (slave veth3): Enslaving as an active interface with a down link [ 111.886126][ T9068] vlan2: entered allmulticast mode [ 111.891340][ T9068] veth0_to_bond: entered allmulticast mode [ 111.913114][ T9068] veth0_to_bond: entered promiscuous mode [ 111.923817][ T9068] veth0_to_bond: left promiscuous mode [ 111.957465][ T9068] bond0: (slave vlan2): making interface the new active one [ 111.987440][ T9068] veth0_to_bond: entered promiscuous mode [ 111.997581][ T9068] vlan2: entered promiscuous mode [ 112.012553][ T9068] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 112.030376][ T9072] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 112.092348][ T9072] netem: change failed [ 112.183761][ T9080] veth0_to_team: entered promiscuous mode [ 112.195635][ T31] vlan2: left promiscuous mode [ 112.493980][ T9110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1722'. [ 112.505538][ T9110] netem: change failed [ 112.682219][ T9132] veth0_to_team: entered promiscuous mode [ 112.731210][ T9140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1736'. [ 112.748908][ T9140] netem: change failed [ 112.940357][ T9165] FAULT_INJECTION: forcing a failure. [ 112.940357][ T9165] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.953534][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.3.1747 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.953567][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.953583][ T9165] Call Trace: [ 112.953592][ T9165] [ 112.953601][ T9165] __dump_stack+0x1d/0x30 [ 112.953626][ T9165] dump_stack_lvl+0xe8/0x140 [ 112.953649][ T9165] dump_stack+0x15/0x1b [ 112.953740][ T9165] should_fail_ex+0x265/0x280 [ 112.953766][ T9165] should_fail+0xb/0x20 [ 112.953788][ T9165] should_fail_usercopy+0x1a/0x20 [ 112.953816][ T9165] _copy_to_user+0x20/0xa0 [ 112.953913][ T9165] simple_read_from_buffer+0xb5/0x130 [ 112.953939][ T9165] proc_fail_nth_read+0x10e/0x150 [ 112.954041][ T9165] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 112.954073][ T9165] vfs_read+0x1a8/0x770 [ 112.954156][ T9165] ? __fget_files+0x184/0x1c0 [ 112.954183][ T9165] ? __rcu_read_unlock+0x4f/0x70 [ 112.954207][ T9165] ? __fget_files+0x184/0x1c0 [ 112.954339][ T9165] ksys_read+0xda/0x1a0 [ 112.954369][ T9165] __x64_sys_read+0x40/0x50 [ 112.954457][ T9165] x64_sys_call+0x27bc/0x2ff0 [ 112.954485][ T9165] do_syscall_64+0xd2/0x200 [ 112.954520][ T9165] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.954544][ T9165] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.954642][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.954669][ T9165] RIP: 0033:0x7f49d520d5fc [ 112.954687][ T9165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 112.954708][ T9165] RSP: 002b:00007f49d3c6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.954726][ T9165] RAX: ffffffffffffffda RBX: 00007f49d5435fa0 RCX: 00007f49d520d5fc [ 112.954738][ T9165] RDX: 000000000000000f RSI: 00007f49d3c6f0a0 RDI: 0000000000000003 [ 112.954790][ T9165] RBP: 00007f49d3c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 112.954806][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.954821][ T9165] R13: 00007f49d5436038 R14: 00007f49d5435fa0 R15: 00007fffd03d82f8 [ 112.954844][ T9165] [ 113.228570][ T9174] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1752'. [ 113.255792][ T9173] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1750'. [ 113.267732][ T9173] can0: slcan on ttyS3. [ 113.310283][ T9173] can0 (unregistered): slcan off ttyS3. [ 113.332161][ T9178] $H˙: left promiscuous mode [ 113.337005][ T9178] bond_slave_0: left promiscuous mode [ 113.342641][ T9178] bond_slave_1: left promiscuous mode [ 113.422775][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.433348][ T9178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.478838][ T9178] vlan2: left allmulticast mode [ 113.483840][ T9178] veth0_to_bond: left allmulticast mode [ 113.499841][ T9173] can0: slcan on ttyS3. [ 113.504104][ T1647] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.517568][ T1647] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.537690][ T1647] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.553351][ T1647] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.567510][ T9169] can0 (unregistered): slcan off ttyS3. [ 113.820305][ T9220] netlink: 'syz.0.1772': attribute type 1 has an invalid length. [ 113.832340][ T9221] can0: slcan on ttyS3. [ 113.848268][ T9220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.891975][ T9220] bond1: (slave veth5): Enslaving as an active interface with a down link [ 113.904453][ T9221] can0 (unregistered): slcan off ttyS3. [ 113.951190][ T9234] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 113.951919][ T9221] can0: slcan on ttyS3. [ 113.994163][ T9234] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.043672][ T9219] can0 (unregistered): slcan off ttyS3. [ 114.066458][ T9240] bond2: (slave veth7): Enslaving as an active interface with a down link [ 114.160001][ T29] kauditd_printk_skb: 23442 callbacks suppressed [ 114.160018][ T29] audit: type=1400 audit(1756059607.477:23005): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 114.203128][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.205533][ T9248] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.209910][ T3033] audit: audit_lost=1482 audit_rate_limit=0 audit_backlog_limit=64 [ 114.216420][ T9248] audit: audit_lost=1483 audit_rate_limit=0 audit_backlog_limit=64 [ 114.224386][ T3033] audit: backlog limit exceeded [ 114.234317][ T9250] audit: audit_backlog=65 > audit_backlog_limit=64 [ 114.237226][ T9248] audit: backlog limit exceeded [ 114.243816][ T9250] audit: audit_lost=1484 audit_rate_limit=0 audit_backlog_limit=64 [ 114.256879][ T9250] audit: backlog limit exceeded [ 114.266920][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.305265][ T9251] bridge0: entered allmulticast mode [ 114.316463][ T9258] netlink: 'syz.1.1787': attribute type 10 has an invalid length. [ 114.331025][ T9248] bridge_slave_0: left allmulticast mode [ 114.336742][ T9248] bridge_slave_0: left promiscuous mode [ 114.336936][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.373184][ T9261] FAULT_INJECTION: forcing a failure. [ 114.373184][ T9261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.386393][ T9261] CPU: 0 UID: 0 PID: 9261 Comm: syz.3.1788 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.386428][ T9261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 114.386451][ T9261] Call Trace: [ 114.386461][ T9261] [ 114.386471][ T9261] __dump_stack+0x1d/0x30 [ 114.386499][ T9261] dump_stack_lvl+0xe8/0x140 [ 114.386523][ T9261] dump_stack+0x15/0x1b [ 114.386549][ T9261] should_fail_ex+0x265/0x280 [ 114.386577][ T9261] should_fail+0xb/0x20 [ 114.386597][ T9261] should_fail_usercopy+0x1a/0x20 [ 114.386626][ T9261] _copy_to_user+0x20/0xa0 [ 114.386728][ T9261] simple_read_from_buffer+0xb5/0x130 [ 114.386752][ T9261] proc_fail_nth_read+0x10e/0x150 [ 114.386796][ T9261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.386912][ T9261] vfs_read+0x1a8/0x770 [ 114.387017][ T9261] ? __fget_files+0x184/0x1c0 [ 114.387044][ T9261] ? __rcu_read_unlock+0x4f/0x70 [ 114.387071][ T9261] ? __fget_files+0x184/0x1c0 [ 114.387105][ T9261] ksys_read+0xda/0x1a0 [ 114.387134][ T9261] __x64_sys_read+0x40/0x50 [ 114.387213][ T9261] x64_sys_call+0x27bc/0x2ff0 [ 114.387241][ T9261] do_syscall_64+0xd2/0x200 [ 114.387302][ T9261] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 114.387333][ T9261] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 114.387369][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.387390][ T9261] RIP: 0033:0x7f49d520d5fc [ 114.387404][ T9261] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 114.387429][ T9261] RSP: 002b:00007f49d3c6f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.387452][ T9261] RAX: ffffffffffffffda RBX: 00007f49d5435fa0 RCX: 00007f49d520d5fc [ 114.387464][ T9261] RDX: 000000000000000f RSI: 00007f49d3c6f0a0 RDI: 0000000000000003 [ 114.387476][ T9261] RBP: 00007f49d3c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.387559][ T9261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.387576][ T9261] R13: 00007f49d5436038 R14: 00007f49d5435fa0 R15: 00007fffd03d82f8 [ 114.387599][ T9261] [ 114.605583][ T9258] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 114.716602][ T9274] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 114.766601][ T9274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.776516][ T9278] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1795'. [ 114.814800][ T9278] can0: slcan on ttyS3. [ 114.837181][ T9291] netlink: 'syz.2.1801': attribute type 10 has an invalid length. [ 114.853237][ T9274] bond1: (slave veth3): Enslaving as an active interface with a down link [ 114.882081][ T9278] can0 (unregistered): slcan off ttyS3. [ 114.896769][ T9278] can0: slcan on ttyS3. [ 114.915065][ T9296] netlink: 'syz.2.1804': attribute type 1 has an invalid length. [ 114.928043][ T9274] vlan2: entered allmulticast mode [ 114.933277][ T9274] veth0_to_bond: entered allmulticast mode [ 114.949530][ T9274] bond1: (slave vlan2): Opening slave failed [ 114.976413][ T9296] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.049891][ T9296] bond3: (slave veth7): Enslaving as an active interface with a down link [ 115.053125][ T9276] can0 (unregistered): slcan off ttyS3. [ 115.143273][ T9322] netlink: 'syz.0.1815': attribute type 1 has an invalid length. [ 115.162631][ T9322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 115.188110][ T9322] bond3: (slave veth9): Enslaving as an active interface with a down link [ 115.223110][ T9330] FAULT_INJECTION: forcing a failure. [ 115.223110][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 115.235894][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.4.1820 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.236008][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.236024][ T9330] Call Trace: [ 115.236032][ T9330] [ 115.236041][ T9330] __dump_stack+0x1d/0x30 [ 115.236068][ T9330] dump_stack_lvl+0xe8/0x140 [ 115.236091][ T9330] dump_stack+0x15/0x1b [ 115.236189][ T9330] should_fail_ex+0x265/0x280 [ 115.236211][ T9330] should_failslab+0x8c/0xb0 [ 115.236235][ T9330] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 115.236267][ T9330] ? __d_alloc+0x3d/0x340 [ 115.236331][ T9330] __d_alloc+0x3d/0x340 [ 115.236466][ T9330] d_alloc_parallel+0x53/0xc60 [ 115.236508][ T9330] ? __rcu_read_unlock+0x4f/0x70 [ 115.236532][ T9330] ? __d_lookup+0x316/0x340 [ 115.236561][ T9330] ? try_to_unlazy+0x25e/0x3a0 [ 115.236660][ T9330] path_openat+0x6b5/0x2170 [ 115.236694][ T9330] do_filp_open+0x109/0x230 [ 115.236805][ T9330] do_sys_openat2+0xa6/0x110 [ 115.236846][ T9330] __x64_sys_openat+0xf2/0x120 [ 115.236887][ T9330] x64_sys_call+0x2e9c/0x2ff0 [ 115.236913][ T9330] do_syscall_64+0xd2/0x200 [ 115.236989][ T9330] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.237092][ T9330] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.237125][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.237157][ T9330] RIP: 0033:0x7f8761f8ebe9 [ 115.237175][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.237197][ T9330] RSP: 002b:00007f87609ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 115.237222][ T9330] RAX: ffffffffffffffda RBX: 00007f87621b5fa0 RCX: 00007f8761f8ebe9 [ 115.237238][ T9330] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 115.237276][ T9330] RBP: 00007f87609ef090 R08: 0000000000000000 R09: 0000000000000000 [ 115.237291][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.237305][ T9330] R13: 00007f87621b6038 R14: 00007f87621b5fa0 R15: 00007ffc7d14dd98 [ 115.237322][ T9330] [ 115.601905][ T9360] can0: slcan on ttyS3. [ 115.654223][ T9360] can0 (unregistered): slcan off ttyS3. [ 115.665236][ T9353] can0: slcan on ttyS3. [ 115.708190][ T9370] netlink: 'syz.4.1834': attribute type 10 has an invalid length. [ 115.739233][ T9351] can0 (unregistered): slcan off ttyS3. [ 117.265669][ T9478] netlink: 'syz.4.1878': attribute type 1 has an invalid length. [ 117.303608][ T9478] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.351797][ T9484] bond1: (slave veth5): Enslaving as an active interface with a down link [ 117.778778][ T9509] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 117.821755][ T9513] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 117.844717][ T9513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.877367][ T9513] bond2: (slave veth7): Enslaving as an active interface with a down link [ 118.026739][ T9536] netlink: 'syz.4.1902': attribute type 1 has an invalid length. [ 118.050739][ T9536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.098073][ T9536] bond3: (slave veth9): Enslaving as an active interface with a down link [ 118.116545][ T9548] netlink: 'syz.3.1906': attribute type 10 has an invalid length. [ 118.161283][ T9555] netlink: 'syz.3.1909': attribute type 1 has an invalid length. [ 118.180176][ T9555] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.206176][ T9555] bond2: (slave veth5): Enslaving as an active interface with a down link [ 118.226717][ T9555] vlan2: entered allmulticast mode [ 118.232774][ T9555] bond2: (slave vlan2): Opening slave failed [ 118.498928][ T9583] can0: slcan on ttyS3. [ 118.577611][ T9583] can0 (unregistered): slcan off ttyS3. [ 118.586129][ T9577] can0: slcan on ttyS3. [ 118.633917][ T9593] netlink: 'syz.2.1926': attribute type 10 has an invalid length. [ 118.643869][ T9576] can0 (unregistered): slcan off ttyS3. [ 118.860468][ T9622] can0: slcan on ttyS3. [ 118.930548][ T29] kauditd_printk_skb: 36633 callbacks suppressed [ 118.930566][ T29] audit: type=1400 audit(1756059612.495:43907): avc: denied { read } for pid=3033 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 118.966981][ T3033] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.970828][ T9635] audit: audit_backlog=65 > audit_backlog_limit=64 [ 118.973616][ T3033] audit: audit_lost=6729 audit_rate_limit=0 audit_backlog_limit=64 [ 118.980155][ T9635] audit: audit_lost=6730 audit_rate_limit=0 audit_backlog_limit=64 [ 118.980170][ T9635] audit: backlog limit exceeded [ 119.000946][ T3033] audit: backlog limit exceeded [ 119.000932][ T3315] audit: audit_backlog=65 > audit_backlog_limit=64 [ 119.000977][ T3315] audit: audit_lost=6731 audit_rate_limit=0 audit_backlog_limit=64 [ 119.000990][ T3315] audit: backlog limit exceeded [ 119.005942][ T9612] can0 (unregistered): slcan off ttyS3. [ 119.036375][ T9630] can0: slcan on ttyS3. [ 119.076941][ T9626] FAULT_INJECTION: forcing a failure. [ 119.076941][ T9626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.090186][ T9626] CPU: 0 UID: 0 PID: 9626 Comm: syz.1.1937 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.090217][ T9626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.090233][ T9626] Call Trace: [ 119.090240][ T9626] [ 119.090250][ T9626] __dump_stack+0x1d/0x30 [ 119.090272][ T9626] dump_stack_lvl+0xe8/0x140 [ 119.090403][ T9626] dump_stack+0x15/0x1b [ 119.090430][ T9626] should_fail_ex+0x265/0x280 [ 119.090457][ T9626] should_fail+0xb/0x20 [ 119.090526][ T9626] should_fail_usercopy+0x1a/0x20 [ 119.090552][ T9626] _copy_from_iter+0xd2/0xe80 [ 119.090587][ T9626] ? should_fail_ex+0xdb/0x280 [ 119.090613][ T9626] copy_page_from_iter+0x178/0x2a0 [ 119.090675][ T9626] process_vm_rw+0x659/0x960 [ 119.090719][ T9626] __x64_sys_process_vm_writev+0x78/0x90 [ 119.090833][ T9626] x64_sys_call+0x2a7c/0x2ff0 [ 119.090861][ T9626] do_syscall_64+0xd2/0x200 [ 119.090988][ T9626] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.091037][ T9626] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.091063][ T9626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.091143][ T9626] RIP: 0033:0x7fc3b053ebe9 [ 119.091163][ T9626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.091183][ T9626] RSP: 002b:00007fc3aef9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 119.091203][ T9626] RAX: ffffffffffffffda RBX: 00007fc3b0765fa0 RCX: 00007fc3b053ebe9 [ 119.091216][ T9626] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000361 [ 119.091253][ T9626] RBP: 00007fc3aef9f090 R08: 000000000000023a R09: 0000000000000000 [ 119.091269][ T9626] R10: 0000200000121000 R11: 0000000000000246 R12: 0000000000000001 [ 119.091285][ T9626] R13: 00007fc3b0766038 R14: 00007fc3b0765fa0 R15: 00007ffdd2f92898 [ 119.091357][ T9626] [ 119.304862][ T9647] FAULT_INJECTION: forcing a failure. [ 119.304862][ T9647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.304897][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.3.1946 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.305001][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 119.305016][ T9647] Call Trace: [ 119.305024][ T9647] [ 119.305031][ T9647] __dump_stack+0x1d/0x30 [ 119.305088][ T9647] dump_stack_lvl+0xe8/0x140 [ 119.305111][ T9647] dump_stack+0x15/0x1b [ 119.305129][ T9647] should_fail_ex+0x265/0x280 [ 119.305155][ T9647] should_fail+0xb/0x20 [ 119.305177][ T9647] should_fail_usercopy+0x1a/0x20 [ 119.305213][ T9647] _copy_from_user+0x1c/0xb0 [ 119.305295][ T9647] __sys_bpf+0x178/0x7b0 [ 119.305337][ T9647] __x64_sys_bpf+0x41/0x50 [ 119.305362][ T9647] x64_sys_call+0x2aea/0x2ff0 [ 119.305383][ T9647] do_syscall_64+0xd2/0x200 [ 119.305497][ T9647] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 119.305529][ T9647] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 119.305595][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.305625][ T9647] RIP: 0033:0x7f49d520ebe9 [ 119.305644][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.305672][ T9647] RSP: 002b:00007f49d3c6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 119.305696][ T9647] RAX: ffffffffffffffda RBX: 00007f49d5435fa0 RCX: 00007f49d520ebe9 [ 119.305781][ T9647] RDX: 0000000000000028 RSI: 0000200000000380 RDI: 0000000000000012 [ 119.305798][ T9647] RBP: 00007f49d3c6f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.305816][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.305843][ T9647] R13: 00007f49d5436038 R14: 00007f49d5435fa0 R15: 00007fffd03d82f8 [ 119.305866][ T9647] [ 119.348736][ T9630] can0 (unregistered): slcan off ttyS3. [ 119.646166][ T9635] can0: slcan on ttyS3. [ 119.691969][ T9629] can0 (unregistered): slcan off ttyS3. [ 119.964271][ T9692] openvswitch: netlink: Message has 6 unknown bytes. [ 120.076076][ T9696] can0: slcan on ttyS3. [ 120.093801][ T9706] netlink: 'syz.4.1971': attribute type 10 has an invalid length. [ 120.094712][ T9700] random: crng reseeded on system resumption [ 120.120684][ T9696] can0 (unregistered): slcan off ttyS3. [ 120.129468][ T9696] can0: slcan on ttyS3. [ 120.215755][ T9695] can0 (unregistered): slcan off ttyS3. [ 120.258701][ T9718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1975'. [ 120.410337][ T9744] openvswitch: netlink: Message has 6 unknown bytes. [ 120.421090][ T9740] random: crng reseeded on system resumption [ 120.523516][ T9755] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1982'. [ 120.657820][ T9755] syzkaller0: entered promiscuous mode [ 120.663441][ T9755] syzkaller0: entered allmulticast mode [ 120.693215][ T9763] netlink: 'syz.2.1984': attribute type 1 has an invalid length. [ 120.764041][ T9763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 120.821673][ T9763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1984'. [ 120.833909][ T9768] bond4: (slave veth9): Enslaving as an active interface with a down link [ 121.455116][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.466793][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.527269][ T9802] netlink: 'syz.4.1995': attribute type 10 has an invalid length. [ 121.559780][ T9806] sd 0:0:1:0: device reset [ 122.082290][ T56] vlan2: left promiscuous mode [ 122.289971][ T9827] openvswitch: netlink: Message has 6 unknown bytes. [ 122.326587][ T9823] random: crng reseeded on system resumption [ 122.414202][ T9834] sd 0:0:1:0: device reset [ 122.483985][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 122.732067][ T9856] netlink: 'syz.3.2015': attribute type 1 has an invalid length. [ 122.748138][ T9856] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.760120][ T9856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 122.765799][ T9859] can0: slcan on ttyS3. [ 122.883907][ T9854] can0 (unregistered): slcan off ttyS3. [ 122.904425][ T9859] can0: slcan on ttyS3. [ 122.983239][ T9848] random: crng reseeded on system resumption [ 123.047419][ T9884] random: crng reseeded on system resumption [ 123.054041][ T9853] can0 (unregistered): slcan off ttyS3. [ 123.130166][ T9898] openvswitch: netlink: Message has 6 unknown bytes. [ 123.215514][ T9908] can0: slcan on ttyS3. [ 123.245543][ T9902] random: crng reseeded on system resumption [ 123.265487][ T9904] can0 (unregistered): slcan off ttyS3. [ 123.268182][ T9901] random: crng reseeded on system resumption [ 123.284558][ T9904] can0: slcan on ttyS3. [ 123.339910][ T9903] can0 (unregistered): slcan off ttyS3. [ 123.347889][ T9919] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2026'. [ 123.374423][ T9925] sd 0:0:1:0: device reset [ 123.441594][ T9934] sd 0:0:1:0: device reset [ 123.518664][ T9937] veth0_to_team: entered promiscuous mode [ 123.562046][ T9949] sd 0:0:1:0: device reset [ 123.621527][ T9955] netlink: 'syz.3.2034': attribute type 10 has an invalid length. [ 123.670941][ T9960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9960 comm=syz.3.2035 [ 123.781515][ T29] kauditd_printk_skb: 3090 callbacks suppressed [ 123.781536][ T29] audit: type=1400 audit(1756059617.482:46956): avc: denied { execmem } for pid=9961 comm="syz.4.2036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.807478][ T29] audit: type=1400 audit(1756059617.482:46957): avc: denied { allowed } for pid=9959 comm="syz.3.2035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 123.827008][ T29] audit: type=1400 audit(1756059617.482:46958): avc: denied { create } for pid=9959 comm="syz.3.2035" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.848377][ T29] audit: type=1400 audit(1756059617.482:46959): avc: denied { map } for pid=9959 comm="syz.3.2035" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.872743][ T29] audit: type=1400 audit(1756059617.482:46960): avc: denied { read write } for pid=9959 comm="syz.3.2035" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=26314 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 123.881980][ T9969] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2037'. [ 123.909785][ T29] audit: type=1400 audit(1756059617.629:46961): avc: denied { getattr } for pid=9946 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.935191][ T29] audit: type=1400 audit(1756059617.629:46962): avc: denied { add_name } for pid=9946 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.957829][ T29] audit: type=1400 audit(1756059617.629:46963): avc: denied { create } for pid=9946 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 123.980311][ T29] audit: type=1400 audit(1756059617.629:46964): avc: denied { write } for pid=9946 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.can0.link" dev="tmpfs" ino=10349 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.006707][ T29] audit: type=1400 audit(1756059617.629:46965): avc: denied { append } for pid=9946 comm="dhcpcd-run-hook" name="resolv.conf.can0.link" dev="tmpfs" ino=10349 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 124.346648][ T9981] netlink: 'syz.3.2040': attribute type 1 has an invalid length. [ 124.365845][ T9981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 124.391380][ T9981] bond4: (slave veth7): Enslaving as an active interface with a down link [ 124.412839][ T9981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2040'. [ 124.527315][ T9993] openvswitch: netlink: Message has 6 unknown bytes. [ 124.572304][ T9995] sd 0:0:1:0: device reset [ 124.703748][T10005] netlink: 'syz.3.2050': attribute type 10 has an invalid length. [ 124.736465][T10008] can0: slcan on ttyS3. [ 124.796694][T10002] can0 (unregistered): slcan off ttyS3. [ 124.817116][T10007] can0: slcan on ttyS3. [ 124.964396][T10039] openvswitch: netlink: Message has 6 unknown bytes. [ 124.996776][T10006] can0 (unregistered): slcan off ttyS3. [ 125.025604][T10049] sd 0:0:1:0: device reset [ 125.142491][T10057] random: crng reseeded on system resumption [ 125.157449][T10059] can0: slcan on ttyS3. [ 125.197016][T10059] can0 (unregistered): slcan off ttyS3. [ 125.207888][T10059] can0: slcan on ttyS3. [ 125.263979][T10058] can0 (unregistered): slcan off ttyS3. [ 125.452638][T10096] can0: slcan on ttyS3. [ 125.467098][T10099] random: crng reseeded on system resumption [ 125.511374][T10082] can0 (unregistered): slcan off ttyS3. [ 125.523654][T10082] can0: slcan on ttyS3. [ 125.625500][T10081] can0 (unregistered): slcan off ttyS3. [ 125.677625][T10120] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2076'. [ 125.703356][T10114] can0: slcan on ttyS3. [ 125.708017][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2077'. [ 125.743769][T10127] sd 0:0:1:0: device reset [ 125.768127][T10114] can0 (unregistered): slcan off ttyS3. [ 125.776054][T10128] tipc: Enabled bearer , priority 0 [ 125.785710][T10109] can0: slcan on ttyS3. [ 125.798930][T10130] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2079'. [ 125.883035][T10108] can0 (unregistered): slcan off ttyS3. [ 126.324196][T10165] random: crng reseeded on system resumption [ 126.402164][T10167] can0: slcan on ttyS3. [ 126.464388][T10167] can0 (unregistered): slcan off ttyS3. [ 126.464480][T10118] tipc: Disabling bearer [ 126.482655][T10175] can0: slcan on ttyS3. [ 126.534771][T10182] sd 0:0:1:0: device reset [ 126.578110][T10166] can0 (unregistered): slcan off ttyS3. [ 126.687299][T10208] sd 0:0:1:0: device reset [ 126.741678][T10214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.751266][T10214] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.762390][T10214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 126.780280][T10222] sd 0:0:1:0: device reset [ 126.969442][T10246] sd 0:0:1:0: device reset [ 127.003617][T10249] openvswitch: netlink: Message has 6 unknown bytes. [ 127.018133][T10243] can0: slcan on ttyS3. [ 127.071763][T10255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2110'. [ 127.072572][T10253] sd 0:0:1:0: device reset [ 127.130370][T10234] can0 (unregistered): slcan off ttyS3. [ 127.154539][T10243] can0: slcan on ttyS3. [ 127.378164][T10230] can0 (unregistered): slcan off ttyS3. [ 127.449883][T10282] random: crng reseeded on system resumption [ 127.708837][T10309] openvswitch: netlink: Message has 6 unknown bytes. [ 127.842680][T10312] random: crng reseeded on system resumption [ 127.900938][T10327] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2128'. [ 127.949866][T10323] random: crng reseeded on system resumption [ 128.035255][T10342] sd 0:0:1:0: device reset [ 128.085299][T10352] netlink: 'syz.3.2139': attribute type 10 has an invalid length. [ 128.115256][T10354] sd 0:0:1:0: device reset [ 128.165139][T10364] random: crng reseeded on system resumption [ 128.183201][T10364] vhci_hcd: invalid port number 23 [ 128.634791][ T29] kauditd_printk_skb: 494 callbacks suppressed [ 128.634810][ T29] audit: type=1400 audit(1756059622.669:47460): avc: denied { write } for pid=10385 comm="syz.4.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.660830][ T29] audit: type=1400 audit(1756059622.669:47461): avc: denied { connect } for pid=10385 comm="syz.4.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 128.680698][ T29] audit: type=1400 audit(1756059622.669:47462): avc: denied { name_connect } for pid=10385 comm="syz.4.2151" dest=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 128.743869][ T29] audit: type=1326 audit(1756059622.795:47463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 128.768054][ T29] audit: type=1326 audit(1756059622.795:47464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 128.793192][ T29] audit: type=1326 audit(1756059622.805:47465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 128.817240][ T29] audit: type=1326 audit(1756059622.805:47466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 128.841234][ T29] audit: type=1326 audit(1756059622.805:47467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 128.865075][ T29] audit: type=1326 audit(1756059622.805:47468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10396 comm="syz.1.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 128.889466][ T29] audit: type=1326 audit(1756059622.837:47469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10394 comm="syz.0.2155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 128.932338][T10405] veth0_to_team: entered promiscuous mode [ 129.108995][T10414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2162'. [ 129.122789][T10416] sd 0:0:1:0: device reset [ 129.200869][T10429] sd 0:0:1:0: device reset [ 129.267437][T10427] can0: slcan on ttyS3. [ 129.381757][T10427] can0 (unregistered): slcan off ttyS3. [ 129.399853][T10418] can0: slcan on ttyS3. [ 129.530368][T10436] can0 (unregistered): slcan off ttyS3. [ 129.539593][T10436] can0: slcan on ttyS3. [ 129.564178][T10458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2177'. [ 129.597147][T10435] can0 (unregistered): slcan off ttyS3. [ 129.611285][T10465] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2179'. [ 129.646932][T10470] sd 0:0:1:0: device reset [ 129.705591][T10478] tipc: Enabled bearer , priority 0 [ 129.969658][T10498] random: crng reseeded on system resumption [ 130.012348][T10502] can0: slcan on ttyS3. [ 130.082748][T10502] can0 (unregistered): slcan off ttyS3. [ 130.099759][T10502] can0: slcan on ttyS3. [ 130.206828][T10506] can0 (unregistered): slcan off ttyS3. [ 130.281998][T10537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2195'. [ 130.351634][T10550] can0: slcan on ttyS3. [ 130.427891][T10463] tipc: Disabling bearer [ 130.445300][T10550] can0 (unregistered): slcan off ttyS3. [ 130.456644][T10524] can0: slcan on ttyS3. [ 130.552640][T10523] can0 (unregistered): slcan off ttyS3. [ 131.076485][T10608] sd 0:0:1:0: device reset [ 131.140843][T10614] openvswitch: netlink: Message has 6 unknown bytes. [ 131.323953][ T37] EXT4-fs: 14 callbacks suppressed [ 131.323972][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8224 with max blocks 2048 with error 28 [ 131.342066][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 131.342066][ T37] [ 131.351785][ T37] EXT4-fs (loop1): Total free blocks count 0 [ 131.357868][ T37] EXT4-fs (loop1): Free/Dirty block details [ 131.363884][ T37] EXT4-fs (loop1): free_blocks=0 [ 131.369012][ T37] EXT4-fs (loop1): dirty_blocks=5952 [ 131.374347][ T37] EXT4-fs (loop1): Block reservation details [ 131.380402][ T37] EXT4-fs (loop1): i_reserved_data_blocks=372 [ 131.410948][ T1647] EXT4-fs: 14 callbacks suppressed [ 131.410987][ T1647] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8224 with max blocks 1904 with error 28 [ 131.428951][ T1647] EXT4-fs (loop4): This should not happen!! Data will be lost [ 131.428951][ T1647] [ 131.438650][ T1647] EXT4-fs (loop4): Total free blocks count 0 [ 131.444787][ T1647] EXT4-fs (loop4): Free/Dirty block details [ 131.450820][ T1647] EXT4-fs (loop4): free_blocks=0 [ 131.455809][ T1647] EXT4-fs (loop4): dirty_blocks=1920 [ 131.461182][ T1647] EXT4-fs (loop4): Block reservation details [ 131.467202][ T1647] EXT4-fs (loop4): i_reserved_data_blocks=120 [ 131.534872][T10632] can0: slcan on ttyS3. [ 131.655388][T10632] can0 (unregistered): slcan off ttyS3. [ 131.665295][T10644] can0: slcan on ttyS3. [ 131.739069][T10649] openvswitch: netlink: Message has 6 unknown bytes. [ 131.769241][T10631] can0 (unregistered): slcan off ttyS3. [ 131.828374][T10664] sd 0:0:1:0: device reset [ 131.916960][T10670] can0: slcan on ttyS3. [ 132.000559][T10670] can0 (unregistered): slcan off ttyS3. [ 132.058293][T10686] can0: slcan on ttyS3. [ 132.147840][T10697] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2233'. [ 132.236491][T10668] can0 (unregistered): slcan off ttyS3. [ 132.333993][T10697] tipc: Enabled bearer , priority 0 [ 132.350132][T10708] FAULT_INJECTION: forcing a failure. [ 132.350132][T10708] name failslab, interval 1, probability 0, space 0, times 0 [ 132.363619][T10708] CPU: 0 UID: 0 PID: 10708 Comm: syz.4.2236 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.363669][T10708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.363684][T10708] Call Trace: [ 132.363692][T10708] [ 132.363701][T10708] __dump_stack+0x1d/0x30 [ 132.363729][T10708] dump_stack_lvl+0xe8/0x140 [ 132.363751][T10708] dump_stack+0x15/0x1b [ 132.363767][T10708] should_fail_ex+0x265/0x280 [ 132.363789][T10708] ? audit_log_d_path+0x8d/0x150 [ 132.363849][T10708] should_failslab+0x8c/0xb0 [ 132.363874][T10708] __kmalloc_cache_noprof+0x4c/0x320 [ 132.363907][T10708] audit_log_d_path+0x8d/0x150 [ 132.363983][T10708] audit_log_d_path_exe+0x42/0x70 [ 132.364015][T10708] audit_log_task+0x1e9/0x250 [ 132.364046][T10708] audit_seccomp+0x61/0x100 [ 132.364071][T10708] ? __seccomp_filter+0x68c/0x10d0 [ 132.364129][T10708] __seccomp_filter+0x69d/0x10d0 [ 132.364151][T10708] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 132.364180][T10708] ? vfs_write+0x7e8/0x960 [ 132.364202][T10708] ? kmem_cache_free+0xdf/0x300 [ 132.364277][T10708] __secure_computing+0x82/0x150 [ 132.364298][T10708] syscall_trace_enter+0xcf/0x1e0 [ 132.364323][T10708] do_syscall_64+0xac/0x200 [ 132.364383][T10708] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.364411][T10708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.364433][T10708] RIP: 0033:0x7f8761f8ebe9 [ 132.364454][T10708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.364494][T10708] RSP: 002b:00007f87609ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 132.364518][T10708] RAX: ffffffffffffffda RBX: 00007f87621b5fa0 RCX: 00007f8761f8ebe9 [ 132.364530][T10708] RDX: 0000200000000440 RSI: 0000000000000021 RDI: 0000000000000008 [ 132.364586][T10708] RBP: 00007f87609ef090 R08: 0000000000000000 R09: 0000000000000000 [ 132.364600][T10708] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 132.364684][T10708] R13: 00007f87621b6038 R14: 00007f87621b5fa0 R15: 00007ffc7d14dd98 [ 132.364704][T10708] [ 132.591555][T10711] openvswitch: netlink: Message has 6 unknown bytes. [ 132.653053][T10719] sd 0:0:1:0: device reset [ 132.679592][T10717] random: crng reseeded on system resumption [ 132.805267][T10731] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2246'. [ 132.908861][T10739] tipc: Enabling of bearer rejected, failed to enable media [ 132.928420][T10696] tipc: Disabling bearer [ 133.148504][T10747] netlink: 'syz.0.2251': attribute type 10 has an invalid length. [ 133.157884][T10747] $H˙: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 133.234188][T10754] sd 0:0:1:0: device reset [ 133.606088][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 133.606106][ T29] audit: type=1400 audit(1756059627.887:48059): avc: denied { read } for pid=10763 comm="syz.2.2257" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.606219][T10764] random: crng reseeded on system resumption [ 133.616434][ T29] audit: type=1400 audit(1756059627.887:48060): avc: denied { ioctl } for pid=10763 comm="syz.2.2257" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 133.647915][T10764] vhci_hcd: invalid port number 23 [ 133.713133][ T29] audit: type=1326 audit(1756059628.013:48061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.739197][ T29] audit: type=1326 audit(1756059628.034:48062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.762995][ T29] audit: type=1326 audit(1756059628.034:48063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.786800][ T29] audit: type=1326 audit(1756059628.034:48064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.810654][ T29] audit: type=1326 audit(1756059628.034:48065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.834277][ T29] audit: type=1326 audit(1756059628.034:48066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.858008][ T29] audit: type=1326 audit(1756059628.034:48067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.881863][ T29] audit: type=1326 audit(1756059628.034:48068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.2.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 133.970669][T10776] sd 0:0:1:0: device reset [ 133.995849][T10780] netlink: 'syz.4.2263': attribute type 10 has an invalid length. [ 134.022771][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2266'. [ 134.113474][T10793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2269'. [ 134.144731][T10795] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2271'. [ 134.231506][T10810] tipc: Enabling of bearer rejected, failed to enable media [ 134.257927][T10809] sd 0:0:1:0: device reset [ 134.928243][T10818] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2279'. [ 134.960414][T10821] pim6reg1: entered promiscuous mode [ 134.965948][T10821] pim6reg1: entered allmulticast mode [ 135.079844][T10842] syzkaller1: entered promiscuous mode [ 135.085557][T10842] syzkaller1: entered allmulticast mode [ 135.143042][T10848] sd 0:0:1:0: device reset [ 135.183541][T10851] vhci_hcd: invalid port number 23 [ 135.347430][T10853] random: crng reseeded on system resumption [ 135.603201][T10868] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2292'. [ 135.790915][T10874] netlink: 'syz.1.2294': attribute type 10 has an invalid length. [ 135.827241][T10868] tipc: Enabling of bearer rejected, failed to enable media [ 135.902916][T10883] FAULT_INJECTION: forcing a failure. [ 135.902916][T10883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.916109][T10883] CPU: 1 UID: 0 PID: 10883 Comm: syz.2.2296 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.916136][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.916207][T10883] Call Trace: [ 135.916214][T10883] [ 135.916222][T10883] __dump_stack+0x1d/0x30 [ 135.916242][T10883] dump_stack_lvl+0xe8/0x140 [ 135.916265][T10883] dump_stack+0x15/0x1b [ 135.916285][T10883] should_fail_ex+0x265/0x280 [ 135.916382][T10883] should_fail+0xb/0x20 [ 135.916403][T10883] should_fail_usercopy+0x1a/0x20 [ 135.916435][T10883] _copy_from_user+0x1c/0xb0 [ 135.916505][T10883] ___sys_sendmsg+0xc1/0x1d0 [ 135.916550][T10883] __x64_sys_sendmsg+0xd4/0x160 [ 135.916585][T10883] x64_sys_call+0x191e/0x2ff0 [ 135.916650][T10883] do_syscall_64+0xd2/0x200 [ 135.916696][T10883] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.916762][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.916782][T10883] RIP: 0033:0x7f85f863ebe9 [ 135.916865][T10883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.916883][T10883] RSP: 002b:00007f85f70a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.916942][T10883] RAX: ffffffffffffffda RBX: 00007f85f8865fa0 RCX: 00007f85f863ebe9 [ 135.916958][T10883] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 135.916974][T10883] RBP: 00007f85f70a7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.916988][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.917097][T10883] R13: 00007f85f8866038 R14: 00007f85f8865fa0 R15: 00007ffd44824f28 [ 135.917122][T10883] [ 136.125476][T10881] random: crng reseeded on system resumption [ 136.151797][T10890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10890 comm=syz.4.2298 [ 136.165269][T10890] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10890 comm=syz.4.2298 [ 136.201833][ T56] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10276 with max blocks 2048 with error 28 [ 136.215306][ T56] EXT4-fs (loop1): This should not happen!! Data will be lost [ 136.215306][ T56] [ 136.225009][ T56] EXT4-fs (loop1): Total free blocks count 0 [ 136.231046][ T56] EXT4-fs (loop1): Free/Dirty block details [ 136.237097][ T56] EXT4-fs (loop1): free_blocks=0 [ 136.242752][ T56] EXT4-fs (loop1): dirty_blocks=3904 [ 136.248136][ T56] EXT4-fs (loop1): Block reservation details [ 136.254146][ T56] EXT4-fs (loop1): i_reserved_data_blocks=244 [ 136.316553][T10890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.327573][T10890] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.370263][T10898] netlink: 'syz.1.2300': attribute type 1 has an invalid length. [ 136.378603][ T1647] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.408003][ T1647] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.419922][ T1647] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.429341][ T1647] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.602026][T10915] bridge0: entered allmulticast mode [ 136.618000][T10913] random: crng reseeded on system resumption [ 136.939671][T10922] random: crng reseeded on system resumption [ 137.076808][T10948] openvswitch: netlink: Message has 6 unknown bytes. [ 137.086537][T10945] random: crng reseeded on system resumption [ 137.184846][T10957] pimreg: entered allmulticast mode [ 137.287282][T10966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'. [ 137.328096][T10974] pimreg: left allmulticast mode [ 137.367543][T10979] can0: slcan on ttyS3. [ 137.408990][T10982] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2334'. [ 137.445237][T10987] random: crng reseeded on system resumption [ 137.451514][T10972] can0 (unregistered): slcan off ttyS3. [ 137.466308][T10979] can0: slcan on ttyS3. [ 137.569971][T10971] can0 (unregistered): slcan off ttyS3. [ 137.610794][T10999] random: crng reseeded on system resumption [ 137.661379][T11014] sd 0:0:1:0: device reset [ 137.872994][T11046] vhci_hcd: invalid port number 23 [ 138.032554][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2353'. [ 138.066777][T11061] sd 0:0:1:0: device reset [ 138.147642][T11071] netlink: 'syz.3.2360': attribute type 10 has an invalid length. [ 138.253075][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2366'. [ 138.345555][T11089] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 138.352562][T11089] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 138.360319][T11089] vhci_hcd vhci_hcd.0: Device attached [ 138.370817][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 138.370833][ T29] audit: type=1326 audit(1756059632.895:48555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8761f8ebe9 code=0x7ffc0000 [ 138.400939][ T29] audit: type=1326 audit(1756059632.895:48556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8761f8ebe9 code=0x7ffc0000 [ 138.424848][ T29] audit: type=1326 audit(1756059632.895:48557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8761f8ebe9 code=0x7ffc0000 [ 138.448991][ T29] audit: type=1326 audit(1756059632.895:48558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8761f8ebe9 code=0x7ffc0000 [ 138.472982][ T29] audit: type=1326 audit(1756059632.895:48559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8761f8ebe9 code=0x7ffc0000 [ 138.497472][ T29] audit: type=1326 audit(1756059632.895:48560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.4.2364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f8761f8ebe9 code=0x7ffc0000 [ 138.525839][ T29] audit: type=1326 audit(1756059632.990:48561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 138.549618][ T29] audit: type=1326 audit(1756059632.990:48562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 138.552186][T11100] tmpfs: Unknown parameter 'rootcontext˝ree' [ 138.573458][ T29] audit: type=1326 audit(1756059632.990:48563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 138.599404][T11108] FAULT_INJECTION: forcing a failure. [ 138.599404][T11108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.603289][ T29] audit: type=1326 audit(1756059632.990:48564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11099 comm="syz.1.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 138.616535][T11108] CPU: 1 UID: 0 PID: 11108 Comm: syz.3.2374 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.616568][T11108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.616588][T11108] Call Trace: [ 138.616595][T11108] [ 138.616602][T11108] __dump_stack+0x1d/0x30 [ 138.616622][T11108] dump_stack_lvl+0xe8/0x140 [ 138.616642][T11108] dump_stack+0x15/0x1b [ 138.616662][T11108] should_fail_ex+0x265/0x280 [ 138.616768][T11108] should_fail+0xb/0x20 [ 138.616791][T11108] should_fail_usercopy+0x1a/0x20 [ 138.616824][T11108] _copy_from_user+0x1c/0xb0 [ 138.616864][T11108] ___sys_sendmsg+0xc1/0x1d0 [ 138.616914][T11108] __x64_sys_sendmsg+0xd4/0x160 [ 138.616951][T11108] x64_sys_call+0x191e/0x2ff0 [ 138.617021][T11108] do_syscall_64+0xd2/0x200 [ 138.617068][T11108] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 138.617166][T11108] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.617201][T11108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.617230][T11108] RIP: 0033:0x7f49d520ebe9 [ 138.617278][T11108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.617301][T11108] RSP: 002b:00007f49d3c4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.617327][T11108] RAX: ffffffffffffffda RBX: 00007f49d5436090 RCX: 00007f49d520ebe9 [ 138.617345][T11108] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 138.617375][T11108] RBP: 00007f49d3c4e090 R08: 0000000000000000 R09: 0000000000000000 [ 138.617392][T11108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.617410][T11108] R13: 00007f49d5436128 R14: 00007f49d5436090 R15: 00007fffd03d82f8 [ 138.617435][T11108] [ 138.683334][ T36] usb 2-1: SetAddress Request (2) to port 0 [ 138.949048][T11092] vhci_hcd: connection closed [ 138.949280][ T1647] vhci_hcd: stop threads [ 138.958447][ T1647] vhci_hcd: release socket [ 138.962967][ T1647] vhci_hcd: disconnect device [ 139.018545][ T36] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 139.045249][ T36] usb 2-1: enqueue for inactive port 0 [ 139.050910][ T36] usb 2-1: enqueue for inactive port 0 [ 139.058212][ T36] usb 2-1: enqueue for inactive port 0 [ 139.066205][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2380'. [ 139.099371][T11127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2382'. [ 139.177575][ T36] usb 2-1: new SuperSpeed USB device number 2 using vhci_hcd [ 139.197688][ T36] usb 2-1: enqueue for inactive port 0 [ 139.206825][ T36] usb 2-1: enqueue for inactive port 0 [ 139.218984][ T36] usb 2-1: enqueue for inactive port 0 [ 139.232841][T11133] random: crng reseeded on system resumption [ 139.358532][T11145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2389'. [ 139.436628][ T51] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.437273][T11148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 139.497539][T11155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2393'. [ 139.739165][T11171] random: crng reseeded on system resumption [ 139.753170][T11171] vhci_hcd: invalid port number 23 [ 140.217311][ T36] usb usb2-port1: attempt power cycle [ 140.442139][T11205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2414'. [ 140.461591][T11203] can0: slcan on ttyS3. [ 140.522202][T11203] can0 (unregistered): slcan off ttyS3. [ 140.531733][T11206] can0: slcan on ttyS3. [ 140.618081][T11202] can0 (unregistered): slcan off ttyS3. [ 140.650766][T11227] random: crng reseeded on system resumption [ 140.710547][T11245] openvswitch: netlink: Message has 6 unknown bytes. [ 140.719705][T11232] vhci_hcd: invalid port number 23 [ 140.893163][T11259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2422'. [ 140.985825][T11261] can0: slcan on ttyS3. [ 141.074495][T11261] can0 (unregistered): slcan off ttyS3. [ 141.083248][ T292] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 12328 with max blocks 1840 with error 28 [ 141.096162][ T292] EXT4-fs (loop1): This should not happen!! Data will be lost [ 141.096162][ T292] [ 141.106143][ T292] EXT4-fs (loop1): Total free blocks count 0 [ 141.112202][ T292] EXT4-fs (loop1): Free/Dirty block details [ 141.118167][ T292] EXT4-fs (loop1): free_blocks=0 [ 141.123388][ T292] EXT4-fs (loop1): dirty_blocks=1856 [ 141.128819][ T292] EXT4-fs (loop1): Block reservation details [ 141.134901][ T292] EXT4-fs (loop1): i_reserved_data_blocks=116 [ 141.150405][T11266] can0: slcan on ttyS3. [ 141.248500][T11271] random: crng reseeded on system resumption [ 141.274419][T11260] can0 (unregistered): slcan off ttyS3. [ 141.300415][T11283] random: crng reseeded on system resumption [ 141.328490][T11283] vhci_hcd: invalid port number 23 [ 141.343314][T11287] netlink: 'syz.4.2429': attribute type 10 has an invalid length. [ 141.466772][T11302] IPVS: Error connecting to the multicast addr [ 141.587014][T11324] bond0: (slave bridge_slave_1): Releasing backup interface [ 141.599196][T11324] bond0: (slave bond_slave_0): Releasing backup interface [ 141.610651][T11324] bond0: (slave bond_slave_1): Releasing backup interface [ 141.626962][T11324] team0: Port device C removed [ 141.636552][T11324] team0: Port device team_slave_1 removed [ 141.643780][T11324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.651369][T11324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.660605][T11324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.668237][T11324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.689506][T11324] bond1: (slave veth3): Releasing active interface [ 141.700763][T11324] bond2: (slave veth5): Releasing active interface [ 141.707419][T11324] bond2: (slave veth5): the permanent HWaddr of slave - 8e:76:5f:5f:a8:83 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 141.724360][T11324] vlan2: entered promiscuous mode [ 141.734046][T11330] random: crng reseeded on system resumption [ 141.745408][T11324] bond2: (slave vlan2): Releasing active interface [ 141.752148][T11324] vlan2: left promiscuous mode [ 141.758350][T11324] veth0_to_bond: left promiscuous mode [ 141.766695][T11324] bond3: (slave veth7): Releasing active interface [ 141.776586][T11324] bond4: (slave veth9): Releasing active interface [ 141.821720][T11332] random: crng reseeded on system resumption [ 141.834575][T11332] vhci_hcd: invalid port number 23 [ 141.844992][T11334] netlink: 'syz.2.2441': attribute type 10 has an invalid length. [ 141.857626][T11334] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 141.949604][T11350] openvswitch: netlink: Message has 6 unknown bytes. [ 141.988594][ T36] usb usb2-port1: unable to enumerate USB device [ 142.016385][T11359] tipc: Enabled bearer , priority 0 [ 142.077738][T11365] tmpfs: Unknown parameter 'rootcontext˝ree' [ 142.108808][T11371] __nla_validate_parse: 6 callbacks suppressed [ 142.108827][T11371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2458'. [ 142.259234][T11373] can0: slcan on ttyS3. [ 142.312649][T11373] can0 (unregistered): slcan off ttyS3. [ 142.336349][T11373] can0: slcan on ttyS3. [ 142.616768][T11372] can0 (unregistered): slcan off ttyS3. [ 142.628901][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2466'. [ 142.706695][T11412] sd 0:0:1:0: device reset [ 142.748225][T11351] tipc: Disabling bearer [ 142.842186][T11435] sd 0:0:1:0: device reset [ 142.859982][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2474'. [ 142.904952][T11442] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2475'. [ 142.915899][T11429] random: crng reseeded on system resumption [ 143.015135][T11456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2479'. [ 143.029280][T11457] can0: slcan on ttyS3. [ 143.074716][T11461] random: crng reseeded on system resumption [ 143.084588][T11450] can0 (unregistered): slcan off ttyS3. [ 143.086790][T11461] vhci_hcd: invalid port number 23 [ 143.100164][T11450] can0: slcan on ttyS3. [ 143.126529][T11466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2481'. [ 143.159581][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 143.159598][ T29] audit: type=1326 audit(1756059637.924:49159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.201867][ T29] audit: type=1326 audit(1756059637.924:49160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.225626][ T29] audit: type=1326 audit(1756059637.924:49161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.228426][T11449] can0 (unregistered): slcan off ttyS3. [ 143.249446][ T29] audit: type=1326 audit(1756059637.935:49162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.278636][ T29] audit: type=1326 audit(1756059637.935:49163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.302359][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 143.310084][ T29] audit: type=1326 audit(1756059637.935:49164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.333713][ T29] audit: type=1326 audit(1756059637.935:49165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.357489][ T29] audit: type=1326 audit(1756059637.935:49166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.381127][ T29] audit: type=1326 audit(1756059637.935:49167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.404902][ T29] audit: type=1326 audit(1756059637.935:49168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11465 comm="syz.0.2481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2993e1ebe9 code=0x7ffc0000 [ 143.478346][T11486] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2485'. [ 143.510430][T11490] random: crng reseeded on system resumption [ 143.568327][T11490] vhci_hcd: invalid port number 23 [ 143.590577][T11486] tipc: Enabled bearer , priority 0 [ 144.268200][T11485] tipc: Disabling bearer [ 144.370410][T11532] random: crng reseeded on system resumption [ 144.399181][T11536] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2495'. [ 144.409870][T11530] openvswitch: netlink: Message has 6 unknown bytes. [ 144.446861][T11539] sd 0:0:1:0: device reset [ 144.501920][T11551] sd 0:0:1:0: device reset [ 144.517378][T11550] netlink: 'syz.4.2503': attribute type 10 has an invalid length. [ 144.596305][T11557] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2505'. [ 144.628698][T11554] random: crng reseeded on system resumption [ 144.713784][T11574] lo speed is unknown, defaulting to 1000 [ 144.735963][T11574] lo speed is unknown, defaulting to 1000 [ 144.744439][T11574] lo speed is unknown, defaulting to 1000 [ 144.750737][T11574] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.759009][T11574] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 144.772093][T11574] lo speed is unknown, defaulting to 1000 [ 144.786970][T11574] lo speed is unknown, defaulting to 1000 [ 144.793317][T11574] lo speed is unknown, defaulting to 1000 [ 144.802975][T11574] lo speed is unknown, defaulting to 1000 [ 144.815716][T11574] lo speed is unknown, defaulting to 1000 [ 144.856476][T11586] netlink: 'syz.4.2516': attribute type 10 has an invalid length. [ 145.478843][T11597] random: crng reseeded on system resumption [ 145.530233][T11597] vhci_hcd: invalid port number 23 [ 145.565770][T11597] lo speed is unknown, defaulting to 1000 [ 145.708835][T11604] lo speed is unknown, defaulting to 1000 [ 145.791495][T11609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2522'. [ 146.065425][T11622] can0: slcan on ttyS3. [ 146.114364][T11622] can0 (unregistered): slcan off ttyS3. [ 146.134629][T11622] can0: slcan on ttyS3. [ 146.178753][T11637] openvswitch: netlink: Message has 6 unknown bytes. [ 146.187182][T11626] random: crng reseeded on system resumption [ 146.274385][T11621] can0 (unregistered): slcan off ttyS3. [ 146.372540][T11664] : (slave bridge_slave_1): Releasing backup interface [ 146.382870][T11664] : (slave bond_slave_0): Releasing backup interface [ 146.393062][T11664] : (slave bond_slave_1): Releasing backup interface [ 146.402579][T11664] team0: Port device C removed [ 146.409381][T11664] team0: Port device team_slave_1 removed [ 146.415469][T11664] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.430069][T11664] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.444883][T11664] bond0: (slave veth3): Releasing active interface [ 146.451567][T11664] bond0: (slave veth3): the permanent HWaddr of slave - 7e:a8:17:63:41:5b - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 146.468326][T11664] vlan2: entered promiscuous mode [ 146.631594][T11664] bond0: (slave vlan2): Releasing active interface [ 146.638325][T11664] vlan2: left promiscuous mode [ 146.644592][T11664] bond1: (slave veth5): Releasing active interface [ 146.652632][T11664] bond2: (slave veth7): Releasing active interface [ 146.675738][T11687] random: crng reseeded on system resumption [ 146.687637][T11687] vhci_hcd: invalid port number 23 [ 146.743645][T11664] bond3: (slave veth9): Releasing active interface [ 146.759139][T11669] can0: slcan on ttyS3. [ 146.794651][T11694] openvswitch: netlink: Message has 6 unknown bytes. [ 146.807693][T11691] random: crng reseeded on system resumption [ 146.815246][T11684] can0 (unregistered): slcan off ttyS3. [ 146.823961][T11657] can0: slcan on ttyS3. [ 146.872239][T11702] 9pnet: p9_errstr2errno: server reported unknown error [ 146.884268][T11703] openvswitch: netlink: Message has 6 unknown bytes. [ 146.961250][T11655] can0 (unregistered): slcan off ttyS3. [ 146.973972][T11716] sd 0:0:1:0: device reset [ 147.175319][T11756] __nla_validate_parse: 3 callbacks suppressed [ 147.175340][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2560'. [ 147.237351][T11751] random: crng reseeded on system resumption [ 147.298920][T11765] openvswitch: netlink: Message has 6 unknown bytes. [ 147.337909][T11769] sd 0:0:1:0: device reset [ 147.648312][T11787] random: crng reseeded on system resumption [ 147.688324][T11787] vhci_hcd: invalid port number 23 [ 147.766113][T11787] lo speed is unknown, defaulting to 1000 [ 147.790844][T11791] random: crng reseeded on system resumption [ 147.847770][T11797] bond0: (slave bridge_slave_1): Releasing backup interface [ 147.856910][T11797] bond0: (slave bond_slave_0): Releasing backup interface [ 147.867092][T11797] bond0: (slave bond_slave_1): Releasing backup interface [ 147.877569][T11797] team0: Port device C removed [ 147.883786][T11797] team0: Port device team_slave_1 removed [ 147.890322][T11797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.909222][T11797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.986904][T11797] bond1: (slave veth3): Releasing active interface [ 148.073113][T11805] sd 0:0:1:0: device reset [ 148.090432][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 148.090450][ T29] audit: type=1326 audit(1756059643.100:49641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11762 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 148.201445][ T29] audit: type=1326 audit(1756059643.100:49642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11762 comm="syz.3.2562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 148.225243][ T29] audit: type=1326 audit(1756059643.163:49643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.249266][ T29] audit: type=1326 audit(1756059643.163:49644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.273087][ T29] audit: type=1326 audit(1756059643.163:49645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.296983][ T29] audit: type=1326 audit(1756059643.163:49646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.320970][ T29] audit: type=1326 audit(1756059643.174:49647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.345067][ T29] audit: type=1326 audit(1756059643.174:49648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.368876][ T29] audit: type=1326 audit(1756059643.174:49649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.392642][ T29] audit: type=1326 audit(1756059643.174:49650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11808 comm="syz.2.2577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f85f863ebe9 code=0x7ffc0000 [ 148.531021][T11826] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2583'. [ 148.572408][T11828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2584'. [ 148.625706][T11825] random: crng reseeded on system resumption [ 148.697655][T11839] sd 0:0:1:0: device reset [ 148.725218][T11843] random: crng reseeded on system resumption [ 148.738560][T11843] vhci_hcd: invalid port number 23 [ 148.825950][T11852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2594'. [ 148.849668][T11857] openvswitch: netlink: Message has 6 unknown bytes. [ 148.910902][T11860] sd 0:0:1:0: device reset [ 149.001778][T11869] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2601'. [ 149.114406][T11875] tipc: Enabled bearer , priority 0 [ 149.591874][T11885] lo speed is unknown, defaulting to 1000 [ 149.601734][T11887] lo speed is unknown, defaulting to 1000 [ 149.738802][T11897] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2610'. [ 149.783541][T11897] tipc: Enabled bearer , priority 0 [ 149.796262][T11868] tipc: Disabling bearer [ 149.804570][T11896] tipc: Disabling bearer [ 149.815221][T11907] sd 0:0:1:0: device reset [ 149.841640][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2615'. [ 149.984976][T11919] siw: device registration error -23 [ 150.363131][T11938] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2625'. [ 150.390609][T11941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2627'. [ 150.416401][T11943] openvswitch: netlink: Message has 6 unknown bytes. [ 150.438307][T11946] siw: device registration error -23 [ 150.516986][T11948] can0: slcan on ttyS3. [ 150.570011][T11948] can0 (unregistered): slcan off ttyS3. [ 150.586450][T11956] can0: slcan on ttyS3. [ 150.621280][T11963] random: crng reseeded on system resumption [ 150.635820][T11963] vhci_hcd: invalid port number 23 [ 150.675491][T11947] can0 (unregistered): slcan off ttyS3. [ 150.685410][T11963] lo speed is unknown, defaulting to 1000 [ 150.915507][T11996] sd 0:0:1:0: device reset [ 151.009977][T12000] openvswitch: netlink: Message has 6 unknown bytes. [ 151.056710][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 151.138502][T12006] bond0: (slave bridge_slave_1): Releasing backup interface [ 151.197725][T12009] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2642'. [ 151.263229][T12011] sd 0:0:1:0: device reset [ 151.393572][T12022] sd 0:0:1:0: device reset [ 151.422338][T12016] can0: slcan on ttyS3. [ 151.473560][T12034] openvswitch: netlink: Message has 6 unknown bytes. [ 151.484894][T12016] can0 (unregistered): slcan off ttyS3. [ 151.498283][T12032] can0: slcan on ttyS3. [ 151.504521][T12037] siw: device registration error -23 [ 151.561182][T12048] sd 0:0:1:0: device reset [ 151.628267][T12032] can0 (unregistered): slcan off ttyS3. [ 151.642982][T12046] can0: slcan on ttyS3. [ 151.738355][T12057] random: crng reseeded on system resumption [ 151.762312][T12031] can0 (unregistered): slcan off ttyS3. [ 151.945641][T12098] netlink: 'syz.1.2670': attribute type 5 has an invalid length. [ 152.010879][T12104] openvswitch: netlink: Message has 6 unknown bytes. [ 152.032402][T12105] __nla_validate_parse: 6 callbacks suppressed [ 152.032484][T12105] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2672'. [ 152.096683][T12110] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2675'. [ 152.117417][T12112] siw: device registration error -23 [ 152.149085][T12114] sd 0:0:1:0: device reset [ 152.187713][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2680'. [ 152.253323][T12123] netlink: 'syz.4.2681': attribute type 5 has an invalid length. [ 152.664129][T12132] random: crng reseeded on system resumption [ 152.767663][T12141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2688'. [ 152.805702][T12143] openvswitch: netlink: Message has 6 unknown bytes. [ 152.847826][T12145] sd 0:0:1:0: device reset [ 152.877589][ T29] kauditd_printk_skb: 765 callbacks suppressed [ 152.877655][ T29] audit: type=1326 audit(1756059648.130:50416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 152.920774][ T29] audit: type=1326 audit(1756059648.130:50417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 152.937780][T12149] lo speed is unknown, defaulting to 1000 [ 152.944562][ T29] audit: type=1326 audit(1756059648.130:50418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 152.974030][ T29] audit: type=1326 audit(1756059648.130:50419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 152.997904][ T29] audit: type=1326 audit(1756059648.130:50420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 153.022316][ T29] audit: type=1326 audit(1756059648.130:50421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 153.046155][ T29] audit: type=1326 audit(1756059648.130:50422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 153.069968][ T29] audit: type=1326 audit(1756059648.130:50423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 153.093660][ T29] audit: type=1326 audit(1756059648.130:50424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 153.117449][ T29] audit: type=1326 audit(1756059648.130:50425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12146 comm="syz.1.2691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fc3b053ebe9 code=0x7ffc0000 [ 153.221920][T12153] can0: slcan on ttyS3. [ 153.255518][T12161] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2696'. [ 153.303824][T12152] can0 (unregistered): slcan off ttyS3. [ 153.317632][T12152] can0: slcan on ttyS3. [ 153.318180][T12158] random: crng reseeded on system resumption [ 153.412082][T12184] sd 0:0:1:0: device reset [ 153.426681][T12185] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2701'. [ 153.446523][T12151] can0 (unregistered): slcan off ttyS3. [ 153.521773][T12194] netlink: 'syz.2.2704': attribute type 5 has an invalid length. [ 153.627604][T12208] openvswitch: netlink: Message has 6 unknown bytes. [ 153.680729][T12214] random: crng reseeded on system resumption [ 153.694735][T12214] vhci_hcd: invalid port number 23 [ 153.738846][T12214] lo speed is unknown, defaulting to 1000 [ 153.898738][T12224] random: crng reseeded on system resumption [ 153.936229][T12231] random: crng reseeded on system resumption [ 153.947521][T12231] vhci_hcd: invalid port number 23 [ 154.161473][T12241] openvswitch: netlink: Message has 6 unknown bytes. [ 154.194119][T12243] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2719'. [ 154.216222][T12243] tipc: Enabled bearer , priority 0 [ 154.225330][T12242] tipc: Disabling bearer [ 154.300672][T12249] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2721'. [ 154.489636][T12259] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2725'. [ 154.514025][T12259] tipc: Enabled bearer , priority 0 [ 154.522487][T12258] tipc: Disabling bearer [ 154.591425][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2727'. [ 154.750811][T12279] netlink: 'syz.1.2734': attribute type 5 has an invalid length. [ 154.800178][T12281] random: crng reseeded on system resumption [ 154.814385][T12281] vhci_hcd: invalid port number 23 [ 154.846615][T12281] lo speed is unknown, defaulting to 1000 [ 154.873587][T12286] siw: device registration error -23 [ 154.992223][T12294] can0: slcan on ttyS3. [ 155.094602][T12292] can0 (unregistered): slcan off ttyS3. [ 155.107690][T12294] can0: slcan on ttyS3. [ 155.178150][T12319] openvswitch: netlink: Message has 6 unknown bytes. [ 155.186677][T12291] can0 (unregistered): slcan off ttyS3. [ 155.303685][T12334] tipc: Enabled bearer , priority 0 [ 155.318649][T12333] tipc: Disabling bearer [ 155.519220][T12353] sd 0:0:1:0: device reset [ 155.589480][T12357] openvswitch: netlink: Message has 6 unknown bytes. [ 155.600767][T12359] openvswitch: netlink: Message has 6 unknown bytes. [ 155.618236][T12355] can0: slcan on ttyS3. [ 155.694574][T12355] can0 (unregistered): slcan off ttyS3. [ 155.721687][T12371] can0: slcan on ttyS3. [ 155.782395][T12380] random: crng reseeded on system resumption [ 155.795121][T12380] vhci_hcd: invalid port number 23 [ 155.810154][T12354] can0 (unregistered): slcan off ttyS3. [ 156.031321][T12400] random: crng reseeded on system resumption [ 156.188603][T12419] sd 0:0:1:0: device reset [ 156.344202][T12425] random: crng reseeded on system resumption [ 156.517355][T12439] random: crng reseeded on system resumption [ 156.518962][T12445] sd 0:0:1:0: device reset [ 156.662369][T12454] random: crng reseeded on system resumption [ 156.779277][T12459] can0: slcan on ttyS3. [ 156.819808][T12459] can0 (unregistered): slcan off ttyS3. [ 156.830473][T12459] can0: slcan on ttyS3. [ 156.896591][T12458] can0 (unregistered): slcan off ttyS3. [ 157.006354][T12487] siw: device registration error -23 [ 157.195172][T12500] random: crng reseeded on system resumption [ 157.238614][T12502] openvswitch: netlink: Message has 6 unknown bytes. [ 157.383160][T12513] netlink: 'syz.1.2799': attribute type 5 has an invalid length. [ 157.545060][T12524] random: crng reseeded on system resumption [ 157.557853][T12524] vhci_hcd: invalid port number 23 [ 157.582246][T12524] lo speed is unknown, defaulting to 1000 [ 157.712337][T12528] random: crng reseeded on system resumption [ 157.735226][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 157.735244][ T29] audit: type=1326 audit(1756059653.232:50842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 157.766140][ T29] audit: type=1326 audit(1756059653.264:50843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 157.808022][T12532] siw: device registration error -23 [ 157.848598][ T29] audit: type=1326 audit(1756059653.348:50844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 157.872274][ T29] audit: type=1326 audit(1756059653.348:50845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 157.896132][ T29] audit: type=1326 audit(1756059653.348:50846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 157.923920][ T29] audit: type=1326 audit(1756059653.432:50847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 157.947887][ T29] audit: type=1326 audit(1756059653.432:50848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 157.972215][ T29] audit: type=1326 audit(1756059653.432:50849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 158.012657][ T8080] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.042512][ T29] audit: type=1326 audit(1756059653.484:50850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 158.066213][ T29] audit: type=1326 audit(1756059653.484:50851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12517 comm="syz.3.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d520ebe9 code=0x7ffc0000 [ 158.253499][T12534] lo speed is unknown, defaulting to 1000 [ 158.359408][T12534] chnl_net:caif_netlink_parms(): no params data found [ 158.388209][T12558] random: crng reseeded on system resumption [ 158.395499][T12557] sd 0:0:1:0: device reset [ 158.401727][ T37] $H˙ (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.414251][ T37] $H˙ (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.426241][ T37] $H˙ (unregistering): (slave bridge_slave_1): Releasing backup interface [ 158.441648][ T37] $H˙ (unregistering): Released all slaves [ 158.456898][ T37] bond0 (unregistering): (slave veth3): Releasing active interface [ 158.470572][ T37] bond0 (unregistering): (slave vlan2): Releasing active interface [ 158.479340][ T37] bond0 (unregistering): Released all slaves [ 158.494328][ T37] bond1 (unregistering): (slave veth5): Releasing active interface [ 158.496399][T12569] __nla_validate_parse: 7 callbacks suppressed [ 158.496421][T12569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2817'. [ 158.521811][ T37] bond1 (unregistering): Released all slaves [ 158.531413][ T37] bond2 (unregistering): (slave veth7): Releasing active interface [ 158.541796][ T37] bond2 (unregistering): Released all slaves [ 158.552572][ T37] bond3 (unregistering): (slave veth9): Releasing active interface [ 158.562045][ T37] bond3 (unregistering): Released all slaves [ 158.590248][T12573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2818'. [ 158.615747][ T37] tipc: Left network mode [ 158.645259][ T37] hsr_slave_0: left promiscuous mode [ 158.662467][ T37] hsr_slave_1: left promiscuous mode [ 158.668662][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.679250][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.701138][T12585] siw: device registration error -23 [ 158.775950][ T37] team0 (unregistering): Port device team_slave_1 removed [ 158.788269][ T37] team0 (unregistering): Port device C removed [ 158.795393][T12594] sd 0:0:1:0: device reset [ 158.848091][T12602] random: crng reseeded on system resumption [ 158.881944][T12534] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.889174][T12534] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.899253][T12534] bridge_slave_0: entered allmulticast mode [ 158.918969][T12534] bridge_slave_0: entered promiscuous mode [ 158.932307][T12595] can0: slcan on ttyS3. [ 158.941162][T12534] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.948454][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.956232][T12534] bridge_slave_1: entered allmulticast mode [ 158.963999][T12534] bridge_slave_1: entered promiscuous mode [ 158.998463][T12534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.013608][T12534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.023058][T12603] can0 (unregistered): slcan off ttyS3. [ 159.034755][T12612] bond0: (slave bridge_slave_1): Releasing backup interface [ 159.044333][T12612] bond0: (slave bond_slave_0): Releasing backup interface [ 159.055963][T12612] bond0: (slave bond_slave_1): Releasing backup interface [ 159.068919][T12612] team0: Port device C removed [ 159.077208][T12612] team0: Port device team_slave_1 removed [ 159.083919][T12612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.092114][T12612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.104469][T12612] bond1: (slave veth3): Releasing active interface [ 159.116135][T12612] bond2: (slave veth5): Releasing active interface [ 159.128029][T12612] bond4: (slave veth7): Releasing active interface [ 159.140068][T12607] can0: slcan on ttyS3. [ 159.196826][T12534] team0: Port device team_slave_0 added [ 159.219367][T12581] can0 (unregistered): slcan off ttyS3. [ 159.220178][T12534] team0: Port device team_slave_1 added [ 159.292147][T12534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.299355][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.325368][T12534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.338415][T12640] openvswitch: netlink: Message has 6 unknown bytes. [ 159.342877][T12534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.352345][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.362752][T12644] sd 0:0:1:0: device reset [ 159.378504][T12534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.407836][T12643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2835'. [ 159.436550][T12534] hsr_slave_0: entered promiscuous mode [ 159.442932][T12534] hsr_slave_1: entered promiscuous mode [ 159.453063][T12534] debugfs: 'hsr0' already exists in 'hsr' [ 159.458991][T12534] Cannot create hsr debugfs directory [ 159.716493][T12534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.730118][T12534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.739721][T12534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.749361][T12534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.796312][T12534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.812849][T12534] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.826009][ T1647] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.833155][ T1647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.856178][T12534] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 159.866678][T12534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.880713][ T1647] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.887938][ T1647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.954985][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.042136][T12534] veth0_vlan: entered promiscuous mode [ 160.050970][T12534] veth1_vlan: entered promiscuous mode [ 160.068398][T12534] veth0_macvtap: entered promiscuous mode [ 160.075852][T12534] veth1_macvtap: entered promiscuous mode [ 160.088536][T12534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.100763][T12534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.112967][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2839'. [ 160.113631][ T1647] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.139941][ T1647] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.148982][ T1647] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.158611][ T1647] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.165091][T12730] openvswitch: netlink: Message has 6 unknown bytes. [ 160.239537][T12737] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2842'. [ 160.289784][T12737] tipc: Started in network mode [ 160.294897][T12737] tipc: Node identity 8af2b7ecf37e, cluster identity 4711 [ 160.302075][T12737] tipc: Enabled bearer , priority 0 [ 160.315908][T12736] tipc: Disabling bearer [ 160.331721][T12748] netlink: 'syz.4.2846': attribute type 5 has an invalid length. [ 160.341170][T12750] openvswitch: netlink: Message has 6 unknown bytes. [ 160.460135][T12756] can0: slcan on ttyS3. [ 160.491848][T12758] sd 0:0:1:0: device reset [ 160.532725][T12754] can0 (unregistered): slcan off ttyS3. [ 160.549209][T12763] bridge_slave_0: left allmulticast mode [ 160.555047][T12763] bridge_slave_0: left promiscuous mode [ 160.560853][T12763] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.572372][T12763] bridge_slave_1: left allmulticast mode [ 160.578128][T12763] bridge_slave_1: left promiscuous mode [ 160.583914][T12763] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.596303][T12763] bond0: (slave bond_slave_0): Releasing backup interface [ 160.608312][T12763] bond0: (slave bond_slave_1): Releasing backup interface [ 160.620957][T12763] team0: Port device team_slave_0 removed [ 160.631921][T12763] team0: Port device team_slave_1 removed [ 160.639053][T12763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.646547][T12763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.655757][T12763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.663247][T12763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.683485][T12756] can0: slcan on ttyS3. [ 160.735923][T12753] can0 (unregistered): slcan off ttyS3. [ 160.772575][T12778] veth0_to_team: entered promiscuous mode [ 160.798152][T12786] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2853'. [ 161.004323][T12802] openvswitch: netlink: Message has 6 unknown bytes. [ 161.022740][T12802] loop0: detected capacity change from 0 to 1024 [ 161.040850][ T2994] ================================================================== [ 161.048989][ T2994] BUG: KCSAN: data-race in set_nlink / set_nlink [ 161.055423][ T2994] [ 161.057782][ T2994] read to 0xffff888107132c50 of 4 bytes by task 3272 on cpu 0: [ 161.065503][ T2994] set_nlink+0x29/0xb0 [ 161.069592][ T2994] kernfs_iop_permission+0x1e2/0x220 [ 161.074901][ T2994] inode_permission+0x1ca/0x310 [ 161.079771][ T2994] link_path_walk+0x162/0x900 [ 161.084574][ T2994] path_openat+0x1de/0x2170 [ 161.089100][ T2994] do_filp_open+0x109/0x230 [ 161.093635][ T2994] do_sys_openat2+0xa6/0x110 [ 161.098348][ T2994] __x64_sys_openat+0xf2/0x120 [ 161.103143][ T2994] x64_sys_call+0x2e9c/0x2ff0 [ 161.107833][ T2994] do_syscall_64+0xd2/0x200 [ 161.112368][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.118403][ T2994] [ 161.120747][ T2994] write to 0xffff888107132c50 of 4 bytes by task 2994 on cpu 1: [ 161.128581][ T2994] set_nlink+0x99/0xb0 [ 161.132761][ T2994] kernfs_iop_permission+0x1e2/0x220 [ 161.138097][ T2994] inode_permission+0x1ca/0x310 [ 161.142965][ T2994] link_path_walk+0x162/0x900 [ 161.147658][ T2994] path_lookupat+0x63/0x2a0 [ 161.152180][ T2994] filename_lookup+0x147/0x340 [ 161.156976][ T2994] vfs_statx+0x9d/0x390 [ 161.161172][ T2994] vfs_fstatat+0x115/0x170 [ 161.165613][ T2994] __se_sys_newfstatat+0x55/0x260 [ 161.170763][ T2994] __x64_sys_newfstatat+0x55/0x70 [ 161.175818][ T2994] x64_sys_call+0x135a/0x2ff0 [ 161.180511][ T2994] do_syscall_64+0xd2/0x200 [ 161.185055][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.190962][ T2994] [ 161.193323][ T2994] value changed: 0x00000008 -> 0x00000009 [ 161.199044][ T2994] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 161.201376][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 161.207552][ T2994] CPU: 1 UID: 0 PID: 2994 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 161.216850][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 161.227003][ T2994] ================================================================== [ 161.289511][T12806] sd 0:0:1:0: device reset [ 161.310469][T12802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.339671][T12802] ext4 filesystem being mounted at /syzcgroup/unified/syz0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.399395][T12645] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.409098][T12802] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.423050][T12793] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.453790][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.486947][T12804] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.819924][ T56]  (unregistering): Released all slaves [ 161.827827][ T56] bond0 (unregistering): Released all slaves [ 161.836464][ T56] bond1 (unregistering): Released all slaves [ 161.845850][ T56] bond2 (unregistering): Released all slaves [ 161.854415][ T56] bond3 (unregistering): Released all slaves [ 161.899733][ T56] tipc: Left network mode [ 161.907821][ T56] hsr_slave_0: left promiscuous mode [ 161.913558][ T56] hsr_slave_1: left promiscuous mode [ 162.242289][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.337228][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.383497][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.440054][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.757065][ T56] bond0 (unregistering): Released all slaves [ 162.765868][ T56] bond1 (unregistering): Released all slaves [ 162.774431][ T56] bond2 (unregistering): Released all slaves [ 162.783959][ T56] bond3 (unregistering): Released all slaves [ 162.793355][ T56] bond4 (unregistering): Released all slaves [ 162.815191][ T56] bond0 (unregistering): Released all slaves [ 162.823425][ T56] bond1 (unregistering): Released all slaves [ 162.881048][ T56] tipc: Left network mode [ 162.885901][ T56] tipc: Left network mode [ 162.894475][ T56] hsr_slave_0: left promiscuous mode [ 162.900565][ T56] hsr_slave_1: left promiscuous mode [ 162.912502][ T56] veth1_macvtap: left promiscuous mode [ 162.918337][ T56] veth0_macvtap: left promiscuous mode [ 162.923951][ T56] veth1_vlan: left promiscuous mode [ 162.929284][ T56] veth0_vlan: left promiscuous mode [ 163.537407][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.584578][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.622026][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.680280][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.811791][ T56] bond0 (unregistering): Released all slaves [ 163.850237][ T56] tipc: Left network mode [ 163.857192][ T56] hsr_slave_0: left promiscuous mode [ 163.863278][ T56] hsr_slave_1: left promiscuous mode [ 163.872020][ T56] veth1_macvtap: left promiscuous mode [ 163.877848][ T56] veth0_macvtap: left promiscuous mode [ 163.883482][ T56] veth1_vlan: left promiscuous mode [ 163.889071][ T56] veth0_vlan: left promiscuous mode [ 164.410447][ T56] bond0 (unregistering): Released all slaves [ 164.418824][ T56] bond1 (unregistering): Released all slaves [ 164.427093][ T56] bond2 (unregistering): Released all slaves [ 164.435335][ T56] bond3 (unregistering): Released all slaves [ 164.443726][ T56] bond4 (unregistering): Released all slaves [ 164.488372][ T56] tipc: Left network mode [ 164.496853][ T56] hsr_slave_0: left promiscuous mode [ 164.502840][ T56] hsr_slave_1: left promiscuous mode