last executing test programs: 1.681798567s ago: executing program 2 (id=5191): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x20040800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x44f0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 1.519491911s ago: executing program 4 (id=5193): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fchdir(r0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.518881571s ago: executing program 4 (id=5194): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000800)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0xec, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) pipe(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="34000000f71ff801c4b5bbbbdf241146bd38c9bf69c527e2abff965d9f86a488ec500ac0c666c1f82e2c481204a23887889ba93f91786be7dda39f0a84491f8226ccd0fde8cc95b10f70a94766efae458aafe6fb8a17e6be2e89d7a21ab655c28f7829bb3b1d70ed4c3e5ad4b85fbb40dc8c62d88a38ddb452eeb0a3eeaa6dbb03a4c1af4d7a79aa3c77ed1a835342430151f9c51ca4c77d9f4276ce24103aa51a918934360431d84dc5f3de2c66aec27f996c0952c79645e9d27cca8cd40b8a85d4487aab8a15ad4d19b3c5652640900cb0869a", @ANYRES16=r3, @ANYBLOB="000425bd7000fbdbdf251400000008000e00080000000800090015000000080006000008000008000f00ff7f0000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x50) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xf3a, 0x0) close(r4) write$binfmt_script(r5, 0x0, 0xd9) write(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@rand_addr=0x64010101, 0x4e26, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8, 0x0, 0xffffffffffffffff}, {0x20000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x800, 0x0, 0x6}, 0x0, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d6, 0x32}, 0x0, @in=@multicast2, 0x0, 0x1, 0x1}}, 0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$eJzs3cFvHFcZAPBvNl7HSZzaBQ5QqaWiRUkF2Y1r2locSpEQnCohyj0Ye2NZWXste93GVgXrvwAJIUDiBBcuSPwBSCgSF44IKRKcQSoCIUhBggN00OzO2mY9a2/SjTde/37SZN6b2Znvexu/2Zmdp9kAzq3nI+KNiPggTdOXImImX17Kp2h1pux17z94dymbkkjTt/6WRJIv6+4ryedX8s2mIuJrX4n4ZnI07tbO7p3Fer22mderzbWN6tbO7o3VtcWV2kptfX5+7tWF1xZeWbg5lHZejYjXv/Sn73/np19+/ZeffeePt/5y/VtZWtP5+sPteEgTx63sNL18capng81HDPYkytpT7lYuDbbN3mPMBwCA/rJz/I9ExKci4qWYiQvHn84CAAAAZ1D6hen4TxKRFpvssxwAAAA4Q0rtMbBJqZKPBZiOUqlS6Yzh/VhcLtUbW83P3G5sry93xsrORrl0e7Veu5mPFZ6NcpLV59rlg/rLPfX5iHg6Ir43c6ldryw16suj/vIDAAAAzokrPdf//5zpXP8DAAAAY2Z21AkAAAAAj53rfwAAABh/rv8BAABgrH31zTezKe3+/vXy2zvbdxpv31iubd2prG0vVZYamxuVlUZjpf3MvrWT9ldvNDY+F+vbd6vN2lazenVn99ZaY3u9eWs1pk6lQQAAAMART3/y3u+TiGh9/lJ7ykyOOingVEzsl5J8XtD7//BUZ/7eKSUFnIoLA7zmvYvFy50nwNk20bugT18Hxk951AkAI5ecsL7v4J3fdGalIecDAAAM37VPFN//P/l8vuWUH844nRjOr577/+nMqBIBTl37/v+gA3mcLMBYKQ80AhAYZx/2/v/J0vShEgIAAIZuuj0lpUr+9d50lEqVSsTV9s8ClJPbq/XazYh4KiJ+N1O+mNXn2lsmJ14zAAAAAAAAAAAAAAAAAAAAAAAAAAAdaZpECgAAAIy1iNKfk191nuV/bebF6d7vByaTf7d/EngyIt750Vs/uLvYbG7OZcv/vr+8+cN8+cuj+AYDAAAA6NW9Tm/P/zXqbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYN+8/eHepOw3w8kvDivvXL0bEbFH8iZhqz6eiHBGX/5HExKHtkoi4MIT4rb2I+HhR/CRLaz9kUfxhvAmtvaSVthXGj9n8XSiKf2UI8eE8u5cdf94o6v+leL49L+5/ExH/V39U/Y9/sX/8u9Cn/18dMMYz939e7Rt/L+KZieLjXzd+0if+CwPG/8bXd3f7rUt/HHGt+/nTPuIdjnBQqjbXNqpbO7s3VtcWV2ortfX5+blXF15beGXhZvX2ar2W/1sY47vP/uKD49p/ufDzL8mz6d/+Fwv2V/SZ9N/7dx98tFtpHY1//YWC+L/+Sf6Ko/FLeZxP5+Vs/bVuudUpH/bcz3773HHtXz5of/lh/v+v99tpryMd5dlB/3QAgMdga2f3zmK9Xtsc20J2lf4EpPEohcl4ItIY38K3s8L9Ye0wTdM061MFq+5FxCD7SWLILS0V53NQ6HsEGPWRCQAAGLaDk/5RZwIAAAAAAAAAAAAAAAAAAADn12k8Za035sEjkJNhPEIbAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAo/hcAAP//Yw3Xfw==") r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, 0xfffffffffffffffe, 0x29) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) 1.515911121s ago: executing program 2 (id=5195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018fe860000002020207b1af8ff00000000bfa100000000000007010000f8ffff11b80200000800deffb7030000000000a3850000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32, @ANYBLOB="5257f7da91d4249c786838030600400202002c001280110001006272696467655f736c617665000000001400058005001c000000000005001e0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 1.476662882s ago: executing program 2 (id=5196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000040)) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.476149842s ago: executing program 4 (id=5197): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) 1.208806187s ago: executing program 4 (id=5199): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_io_uring_submit(0x0, 0x0, 0x0) mount$9p_unix(0x0, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000280), 0x80b008, &(0x7f0000000840)=ANY=[]) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x48000, 0x0) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000340)=""/147, 0x93}], 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$NL80211_CMD_ADD_TX_TS(r6, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25690000000500d300020000000500d2000e0000000a000600ffffffffffff00000600d400ff7f00000500d300040000000600d400185f00000a000600ffffffffffff00000a0006000802110000bc9d5c0800d40009000000"], 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000740)={'veth0_virt_wifi\x00', &(0x7f00000006c0)=@ethtool_gstrings={0x1b, 0x5}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000000000000046400010073797a300000000044000000090a01040000000000000000010000000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900bcd55a7107cd99c54d65020073797a32000000000900010073797a30000000003800038061e9d8733fd1370b638f72a32d06b9b9296eff58afe8f71557eb284a16daa9874d90f882f94c16f2dc"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) mprotect(&(0x7f00004a4000/0x800000)=nil, 0x800000, 0x2) socket(0x10, 0x3, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x800000002, 0xfffffffbffffffff}) 1.197965467s ago: executing program 2 (id=5200): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) recvmsg(r1, 0x0, 0x500000000000000) 1.003375441s ago: executing program 2 (id=5203): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', 0x1c0) modify_ldt$write(0x1, &(0x7f0000000000)={0x1, 0x1000, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @private0={0xfc, 0x0, '\x00', 0x8}, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x10, r2, 0x2e226000) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e25, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) rt_sigsuspend(0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "5c8c0657778b1f88", "d0670c547ddfe94fee3343996e9721ff", "66f96596", "e58554bb26143529"}, 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x2000, 0x0) setsockopt$sock_int(r4, 0x1, 0x22, &(0x7f0000000080)=0x4, 0x4) sendto$inet6(r4, &(0x7f0000000240)="ae0df805b89eb4d194d0bbaab4b64d695c2a440bd02625cd03885940664d45fc9b2bc255382606c8451a8394e5971f832d31ffb13009e83ee983f70d7799210248b9e19ca34cdca1c6e340f444d0331ec88a879a84d3c49def7097566e6415f7bf4c289800b6ecf8356758fb7b162c7c3bd34c2104cad5370d4be06ff2a1aadbb2e1", 0x82, 0x1, &(0x7f0000000300)={0xa, 0x4e20, 0xb, @loopback, 0x9}, 0x1c) sendto$inet(r1, &(0x7f0000000000)="3cde342c12577d82299fe201f4d322957267080b42", 0x15, 0x805, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, &(0x7f0000000040)=0x8) 871.694343ms ago: executing program 3 (id=5207): socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) symlink(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file1\x00') readlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)=""/93, 0x5d) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xff}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f42607", 0x29}], 0x1) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000b80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 832.032694ms ago: executing program 3 (id=5209): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x20040800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x44f0) 813.516695ms ago: executing program 1 (id=5210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) 750.908126ms ago: executing program 1 (id=5211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = getpid() r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24040010) 749.729286ms ago: executing program 4 (id=5213): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) recvmsg(r1, 0x0, 0x500000000000000) 709.453717ms ago: executing program 4 (id=5214): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x3fb, 0x0, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4004040) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r3) kexec_load(0x8, 0x1, &(0x7f0000000040)=[{0x0, 0x0, 0xc000000000, 0x80000000}], 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r6, 0x0, 0x8000000000000}, 0x18) socket$kcm(0x10, 0x2, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x4030582a, &(0x7f00000001c0)={0x1, 0x8, 0x6b, 0x401, 0x6b, 0x7}) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x7, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000240100000000000000000000186100000d000000000000000600000018460000fcffffff000000000000e91011fec01e563c6fccfba63ac4b2e23b37ffa9baa47792732b4fa7982d5706ea9d075a3bcb3285ebecde105065852527f31a719f28f444a529e3c7b176846f4d1fb4a8f52f1e8663eb97487ea30983482587251f175af6d152a1df9e1af454caa6ce0398b7ff1821586d7851a0319bf8354da48400308bc56612723846b01123caaa37743851d54e4b4eb167eecae5b12dbfbd7c29ba24272949bfb79d279f1426de38ff6029fb36c6bc0df8032fad75d87f40706444db99a12115"], &(0x7f00000006c0)='syzkaller\x00', 0x34, 0x20, &(0x7f0000000700)=""/32, 0x40f00, 0xc, '\x00', 0x0, @sock_ops=0x3, r8, 0x8, &(0x7f0000000840)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xd, 0x23, 0x8}, 0x10, 0x0, r6, 0x8, 0x0, &(0x7f0000000a80)=[{0x3, 0x3, 0xe, 0x16}, {0x5, 0x2, 0xb, 0xa}, {0x2, 0x1, 0x3}, {0x2, 0x3, 0x10}, {0x4, 0x2, 0x5, 0x2}, {0x1, 0x3, 0xe}, {0x3, 0x5, 0x3, 0x2}, {0x2, 0x2, 0x1, 0x8}], 0x10, 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r8, &(0x7f0000000500)={0x11, 0xf5, r9, 0x1, 0x3, 0x6, @multicast}, 0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040084}, 0x488c4) sendmsg$nl_route_sched(r10, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r12}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209000902000000ffff0700"], 0x10}}, 0x0) 680.996377ms ago: executing program 3 (id=5216): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fchdir(r0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 555.5891ms ago: executing program 3 (id=5218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_pts(0xffffffffffffffff, 0x10000) ioctl$TCSBRKP(r1, 0x5425, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) ioctl$KDSETLED(r1, 0x4b32, 0x401) r2 = epoll_create(0x3ff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x16) socket$inet(0x2, 0x2, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r7, 0xd31, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x4080) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r12], 0x2c}}, 0x0) r13 = epoll_create1(0x80000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r14 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r14, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000cc0)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x4, {0x0, 0x0, 0x0, r15, {}, {0x5, 0x2}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r13, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r13, &(0x7f0000000280)={0x2000000}) 526.28495ms ago: executing program 3 (id=5219): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007160000f8ffffffb70300004608000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x25, 0x11, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf74, 0x1, @perf_config_ext={0xfffffffffffeffff, 0x6}, 0x548, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x4695, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB='\x00'/28], 0x50) r5 = epoll_create(0x9) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r10, 0x0, 0x5, &(0x7f0000000080)=0x9, 0x4) setsockopt$inet_int(r10, 0x0, 0x5, &(0x7f0000000000)=0xf, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendto$packet(r7, 0x0, 0x0, 0x4c001, 0x0, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) epoll_wait(r5, &(0x7f0000000080)=[{}], 0x1, 0x9) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', r12}, 0x18) 444.059652ms ago: executing program 0 (id=5221): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x58}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000003e80)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) 426.538872ms ago: executing program 0 (id=5222): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[], 0x50) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) getxattr(0x0, &(0x7f0000000300)=@known='user.incfs.size\x00', 0x0, 0x0) epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0x2, 0x1, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000280), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 410.377052ms ago: executing program 3 (id=5223): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x10}, 0x75) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = getpid() mkdir(&(0x7f00000009c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000100)={0x10000011}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}}) write$P9_RVERSION(r6, &(0x7f0000000000)=ANY=[], 0x13) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x3c, r8, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x24040010) 316.254314ms ago: executing program 0 (id=5224): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1}, 0x20000801) recvmsg(r1, 0x0, 0x500000000000000) 299.856184ms ago: executing program 1 (id=5225): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x800000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x2, 0x6}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000008000000000000000000018fe860000002020207b1af8ff00000000bfa100000000000007010000f8ffff11b80200000800deffb7030000000000a3850000000000"], &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000004}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf", @ANYRES32, @ANYBLOB="5257f7da91d4249c786838030600400202002c001280110001006272696467655f736c617665000000001400058005001c000000000005001e0001000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80c5}, 0x40040c4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 278.825765ms ago: executing program 1 (id=5226): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000006bc0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x34}}, 0x20040800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) r10 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r11, 0x0) write$selinux_load(r10, &(0x7f0000000000)=ANY=[], 0x44f0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 237.523656ms ago: executing program 0 (id=5227): creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r3}, 0x18) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x339f, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) chmod(&(0x7f0000000140)='./file0\x00', 0x4) 236.878896ms ago: executing program 0 (id=5228): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fchdir(r0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 221.718926ms ago: executing program 1 (id=5229): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, 0x0, 0x0, 0x9000) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000180)=0x2e7, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xfffffff8, 0x2, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0xffffffff, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffd, 0x0, 0x7, 0x70, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0xfffffffb]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x2, 0x40}}}]}}]}, 0x468}}, 0x0) 167.242857ms ago: executing program 2 (id=5230): r0 = open(&(0x7f0000000240)='./file0\x00', 0x145142, 0xe) ftruncate(r0, 0x2007ffc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r1, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x7}, 0x18) sendfile(r0, r0, 0x0, 0x800000009) 131.876398ms ago: executing program 1 (id=5231): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) 0s ago: executing program 0 (id=5232): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000002c0)='cachefiles_mark_failed\x00', r2, 0x0, 0xe50}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0xf0, 0xd215) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000100)="99b2ded0cc37c5af0c09874a92f7f4dd287a56c2d72ceb53a522955bdfdc2fbd8cd81b6dc671675f0c30c404b36c11a34c7747aae0a8b045650abd30464e516311306614e7e6d827a207847c8c1dde02f6524760bd92c6596259588f26d72f3b92e96afd0f7020d68980c9956df3dfd7c2a7a5cbcad5", 0x76}, {&(0x7f0000000480)="c4072e102ee499589882eb5ac2fa6cc7f86460dd3c438de28900224279c3974b6968068d25f239a5dfbcda70902e85abcb259f522c38ccb109927057ea3eac7f4e5776ecebf34a3e7a298cde5efd4c2bf65a4cbafb45075c09af1e3e3ff8586ecfacf0a4ac2303f6058f616719c3ca878695d29c77769d51b6ea12338873eee6fd5f3d1c0648003114de854c422fe4765ae4e45e1241f31a2adb746f5bbfa86dc219323f11683f114b66ae39f6af58351259143d1ec660f1", 0xb8}, {&(0x7f0000000580)="2d5d48c37d128f42832cb91f7340ef93dfc4bec3c63dda190e9e8f88a88668229848151f1f40c3101c95d18e090dbd8c22312ed6a15edda7b808c72f46a9d2f4568a28ce6fa3e8ebc36965136e911461d47e615e", 0x54}], 0x3, 0x4, 0x3) getdents64(r3, &(0x7f0000000600)=""/28, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000040)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xf1b}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f00000006c0)={r3, 0x1, 0x0, 0x99}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) kernel console output (not intermixed with test programs): 17] __x64_sys_write+0x40/0x50 [ 230.379707][T13917] x64_sys_call+0x27fe/0x2ff0 [ 230.379775][T13917] do_syscall_64+0xd2/0x200 [ 230.379805][T13917] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 230.379848][T13917] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 230.379886][T13917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.379907][T13917] RIP: 0033:0x7f7a773debe9 [ 230.379995][T13917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.380015][T13917] RSP: 002b:00007f7a75e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.380033][T13917] RAX: ffffffffffffffda RBX: 00007f7a77615fa0 RCX: 00007f7a773debe9 [ 230.380048][T13917] RDX: 000000000000fd44 RSI: 0000200000000000 RDI: 0000000000000003 [ 230.380064][T13917] RBP: 00007f7a75e47090 R08: 0000000000000000 R09: 0000000000000000 [ 230.380092][T13917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.380103][T13917] R13: 00007f7a77616038 R14: 00007f7a77615fa0 R15: 00007ffd77c746e8 [ 230.380120][T13917] [ 230.728136][T13917] SELinux: failed to load policy [ 231.598617][T13999] __nla_validate_parse: 8 callbacks suppressed [ 231.598655][T13999] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3738'. [ 231.615775][T13999] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3738'. [ 231.625291][T13999] 1ªX¹¦D: renamed from 30ªX¹¦D [ 231.633761][T13999] 1ªX¹¦D: left promiscuous mode [ 231.638678][T13999] 1ªX¹¦D: entered allmulticast mode [ 231.646446][T13999] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 231.717367][T13999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13999 comm=syz.4.3738 [ 231.735796][T13999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3738'. [ 232.593870][ T29] kauditd_printk_skb: 591 callbacks suppressed [ 232.593888][ T29] audit: type=1326 audit(744.570:18298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.814993][ T29] audit: type=1326 audit(744.600:18299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.838180][ T29] audit: type=1326 audit(744.640:18300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.861260][ T29] audit: type=1326 audit(744.640:18301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.884370][ T29] audit: type=1326 audit(744.640:18302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.907372][ T29] audit: type=1326 audit(744.690:18303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.930460][ T29] audit: type=1326 audit(744.690:18304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.953435][ T29] audit: type=1326 audit(744.740:18305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.976453][ T29] audit: type=1326 audit(744.750:18306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 232.999457][ T29] audit: type=1326 audit(744.750:18307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.2.3754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37384debe9 code=0x7ffc0000 [ 233.168594][T14058] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3759'. [ 233.178195][T14058] 1ªX¹¦D: entered promiscuous mode [ 233.183425][T14058] 1ªX¹¦D: left allmulticast mode [ 233.231206][T14058] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3759'. [ 233.241343][T14058] 0ªX¹¦D: renamed from 31ªX¹¦D [ 233.252839][T14058] 0ªX¹¦D: left promiscuous mode [ 233.257873][T14058] 0ªX¹¦D: entered allmulticast mode [ 233.269463][T14058] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 233.404914][T14058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14058 comm=syz.4.3759 [ 233.421453][T14058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3759'. [ 234.098663][T14125] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3786'. [ 234.117154][T14125] 0ªX¹¦D: entered promiscuous mode [ 234.122394][T14125] 0ªX¹¦D: left allmulticast mode [ 234.136255][T14125] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3786'. [ 234.146064][T14125] 1ªX¹¦D: renamed from 30ªX¹¦D [ 234.185226][T14125] 1ªX¹¦D: left promiscuous mode [ 234.190253][T14125] 1ªX¹¦D: entered allmulticast mode [ 234.204225][T14129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14129 comm=syz.4.3786 [ 234.242115][T14125] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 234.272859][T14125] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3786'. [ 235.044429][T14170] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 235.202721][T14188] 9pnet: Could not find request transport: rdma¤h?ZëNÛµzP%ÌÊž [ 235.358701][T14188] lo speed is unknown, defaulting to 1000 [ 235.364951][T14188] lo speed is unknown, defaulting to 1000 [ 235.413472][T14204] FAULT_INJECTION: forcing a failure. [ 235.413472][T14204] name failslab, interval 1, probability 0, space 0, times 0 [ 235.426254][T14204] CPU: 1 UID: 0 PID: 14204 Comm: syz.0.3818 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.426362][T14204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 235.426375][T14204] Call Trace: [ 235.426382][T14204] [ 235.426390][T14204] __dump_stack+0x1d/0x30 [ 235.426411][T14204] dump_stack_lvl+0xe8/0x140 [ 235.426430][T14204] dump_stack+0x15/0x1b [ 235.426446][T14204] should_fail_ex+0x265/0x280 [ 235.426494][T14204] should_failslab+0x8c/0xb0 [ 235.426525][T14204] kmem_cache_alloc_noprof+0x50/0x310 [ 235.426610][T14204] ? alloc_empty_file+0x76/0x200 [ 235.426654][T14204] alloc_empty_file+0x76/0x200 [ 235.426685][T14204] alloc_file_pseudo+0xc6/0x160 [ 235.426807][T14204] __shmem_file_setup+0x1de/0x210 [ 235.426926][T14204] shmem_file_setup+0x3b/0x50 [ 235.426965][T14204] __se_sys_memfd_create+0x2c3/0x590 [ 235.427051][T14204] __x64_sys_memfd_create+0x31/0x40 [ 235.427071][T14204] x64_sys_call+0x2abe/0x2ff0 [ 235.427093][T14204] do_syscall_64+0xd2/0x200 [ 235.427132][T14204] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 235.427168][T14204] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 235.427293][T14204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.427321][T14204] RIP: 0033:0x7fe71a17ebe9 [ 235.427339][T14204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.427361][T14204] RSP: 002b:00007fe718be6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 235.427424][T14204] RAX: ffffffffffffffda RBX: 0000000000000500 RCX: 00007fe71a17ebe9 [ 235.427437][T14204] RDX: 00007fe718be6ef0 RSI: 0000000000000000 RDI: 00007fe71a2027e8 [ 235.427448][T14204] RBP: 0000200000000500 R08: 00007fe718be6bb7 R09: 00007fe718be6e40 [ 235.427460][T14204] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 235.427472][T14204] R13: 00007fe718be6ef0 R14: 00007fe718be6eb0 R15: 0000200000001340 [ 235.427490][T14204] [ 235.835530][T14212] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3819'. [ 236.190497][T14226] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 236.355911][T14242] smc: net device bond0 applied user defined pnetid SYZ0 [ 236.364083][T14242] smc: net device bond0 erased user defined pnetid SYZ0 [ 236.428382][T14246] 1ªX¹¦D: entered promiscuous mode [ 236.433561][T14246] 1ªX¹¦D: left allmulticast mode [ 236.442047][T14246] 0ªX¹¦D: renamed from 31ªX¹¦D [ 236.449221][T14246] 0ªX¹¦D: left promiscuous mode [ 236.454202][T14246] 0ªX¹¦D: entered allmulticast mode [ 236.462282][T14246] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 236.479617][T14246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14246 comm=syz.0.3835 [ 236.663877][T14255] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 237.169644][T14279] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 237.259223][T14289] __nla_validate_parse: 4 callbacks suppressed [ 237.259238][T14289] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3847'. [ 237.281665][T14291] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.289016][T14291] smc: net device bond0 erased user defined pnetid SYZ0 [ 237.417418][T14300] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3857'. [ 237.426941][T14300] 1ªX¹¦D: entered promiscuous mode [ 237.432132][T14300] 1ªX¹¦D: left allmulticast mode [ 237.440770][T14300] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3857'. [ 237.450559][T14300] 0ªX¹¦D: renamed from 31ªX¹¦D [ 237.457489][T14300] 0ªX¹¦D: left promiscuous mode [ 237.462394][T14300] 0ªX¹¦D: entered allmulticast mode [ 237.471423][T14300] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 237.524575][T14298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14298 comm=syz.4.3857 [ 237.541337][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3857'. [ 237.557278][T14310] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 237.628540][T14320] smc: net device bond0 applied user defined pnetid SYZ0 [ 237.636308][T14320] smc: net device bond0 erased user defined pnetid SYZ0 [ 238.642440][T14351] smc: net device bond0 applied user defined pnetid SYZ0 [ 238.693359][T14351] smc: net device bond0 erased user defined pnetid SYZ0 [ 238.781453][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 238.781482][ T29] audit: type=1326 audit(750.760:18438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.826403][ T29] audit: type=1326 audit(750.800:18439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.849718][ T29] audit: type=1326 audit(750.800:18440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.872786][ T29] audit: type=1326 audit(750.800:18441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.895971][ T29] audit: type=1326 audit(750.800:18442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.919065][ T29] audit: type=1326 audit(750.800:18443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.942128][ T29] audit: type=1326 audit(750.800:18444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.965208][ T29] audit: type=1326 audit(750.800:18445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 238.988291][ T29] audit: type=1326 audit(750.800:18446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 239.011378][ T29] audit: type=1326 audit(750.800:18447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14359 comm="syz.4.3882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 239.076117][T14371] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 239.152296][T14384] smc: net device bond0 applied user defined pnetid SYZ0 [ 239.162939][T14384] smc: net device bond0 erased user defined pnetid SYZ0 [ 239.196400][T14390] 9pnet_fd: Insufficient options for proto=fd [ 239.262098][T14403] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 239.466698][T14419] smc: net device bond0 applied user defined pnetid SYZ0 [ 239.474369][T14419] smc: net device bond0 erased user defined pnetid SYZ0 [ 239.701554][T14429] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 239.769521][T14433] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3915'. [ 239.876357][T14438] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3917'. [ 240.227546][T14485] 9pnet_fd: Insufficient options for proto=fd [ 240.254224][T14490] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3937'. [ 240.267332][T14487] geneve2: entered promiscuous mode [ 240.272654][T14487] geneve2: entered allmulticast mode [ 240.280009][ T4630] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.289173][ T4630] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.300265][ T51] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.317047][T14490] 0ªX¹¦D: left allmulticast mode [ 240.339303][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.346604][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.386674][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.397062][T14490] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.429915][ T51] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 240.438879][T14494] smc: net device bond0 applied user defined pnetid SYZ0 [ 240.446464][ T51] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.456144][T14495] smc: net device bond0 erased user defined pnetid SYZ0 [ 240.463786][ T51] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.473660][ T51] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.492999][ T51] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.924159][T14515] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 240.924159][T14515] program syz.2.3948 not setting count and/or reply_len properly [ 241.111254][T14515] SELinux: ebitmap: truncated map [ 241.117074][T14515] SELinux: failed to load policy [ 241.159047][T14527] smc: net device bond0 applied user defined pnetid SYZ0 [ 241.171231][T14530] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 241.171350][T14523] IPVS: stopping master sync thread 14530 ... [ 241.191852][T14527] smc: net device bond0 erased user defined pnetid SYZ0 [ 241.216266][T14534] FAULT_INJECTION: forcing a failure. [ 241.216266][T14534] name failslab, interval 1, probability 0, space 0, times 0 [ 241.228962][T14534] CPU: 1 UID: 0 PID: 14534 Comm: syz.2.3957 Not tainted syzkaller #0 PREEMPT(voluntary) [ 241.228998][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.229013][T14534] Call Trace: [ 241.229020][T14534] [ 241.229028][T14534] __dump_stack+0x1d/0x30 [ 241.229054][T14534] dump_stack_lvl+0xe8/0x140 [ 241.229079][T14534] dump_stack+0x15/0x1b [ 241.229099][T14534] should_fail_ex+0x265/0x280 [ 241.229212][T14534] should_failslab+0x8c/0xb0 [ 241.229246][T14534] kmem_cache_alloc_noprof+0x50/0x310 [ 241.229284][T14534] ? prepare_creds+0x37/0x4c0 [ 241.229315][T14534] prepare_creds+0x37/0x4c0 [ 241.229412][T14534] lookup_user_key+0x1fa/0xd10 [ 241.229450][T14534] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 241.229500][T14534] __se_sys_request_key+0x174/0x290 [ 241.229571][T14534] ? fput+0x8f/0xc0 [ 241.229693][T14534] __x64_sys_request_key+0x55/0x70 [ 241.229776][T14534] x64_sys_call+0x1d98/0x2ff0 [ 241.229804][T14534] do_syscall_64+0xd2/0x200 [ 241.229845][T14534] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 241.229905][T14534] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 241.229942][T14534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.229970][T14534] RIP: 0033:0x7f37384debe9 [ 241.229989][T14534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.230014][T14534] RSP: 002b:00007f3736f3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 241.230038][T14534] RAX: ffffffffffffffda RBX: 00007f3738715fa0 RCX: 00007f37384debe9 [ 241.230126][T14534] RDX: 0000200000000140 RSI: 0000200000000080 RDI: 0000200000000040 [ 241.230142][T14534] RBP: 00007f3736f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 241.230159][T14534] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 241.230175][T14534] R13: 00007f3738716038 R14: 00007f3738715fa0 R15: 00007fffde41ce08 [ 241.230199][T14534] [ 241.527661][T14552] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3964'. [ 241.538185][T14552] 0ªX¹¦D: entered promiscuous mode [ 241.543383][T14552] 0ªX¹¦D: left allmulticast mode [ 241.550798][T14552] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3964'. [ 241.559862][T14552] 1ªX¹¦D: renamed from 30ªX¹¦D [ 241.566267][T14552] 1ªX¹¦D: left promiscuous mode [ 241.571333][T14552] 1ªX¹¦D: entered allmulticast mode [ 241.579490][T14552] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 241.595926][T14552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14552 comm=syz.0.3964 [ 241.610351][T14552] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3964'. [ 241.628482][T14550] netlink: 'syz.4.3963': attribute type 2 has an invalid length. [ 241.777501][T14567] lo speed is unknown, defaulting to 1000 [ 241.783712][T14567] lo speed is unknown, defaulting to 1000 [ 241.810044][T14568] bridge_slave_0: left allmulticast mode [ 241.815754][T14568] bridge_slave_0: left promiscuous mode [ 241.821406][T14568] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.831109][T14568] bridge_slave_1: left allmulticast mode [ 241.836850][T14568] bridge_slave_1: left promiscuous mode [ 241.842490][T14568] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.855371][T14568] bond0: (slave bond_slave_0): Releasing backup interface [ 241.866087][T14568] bond0: (slave bond_slave_1): Releasing backup interface [ 241.878140][T14568] team0: Port device team_slave_0 removed [ 241.889561][T14568] team0: Port device team_slave_1 removed [ 241.896394][T14568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.903807][T14568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.913479][T14568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.921015][T14568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.299383][T14585] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3975'. [ 242.350857][T14593] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3975'. [ 242.369734][T14594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3977'. [ 242.401923][T14595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14595 comm=syz.3.3975 [ 242.471042][T14596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3975'. [ 242.609973][T14585] 1ªX¹¦D: entered promiscuous mode [ 242.615156][T14585] 1ªX¹¦D: left allmulticast mode [ 242.625342][T14593] 0ªX¹¦D: renamed from 31ªX¹¦D [ 242.635758][T14593] 0ªX¹¦D: left promiscuous mode [ 242.640727][T14593] 0ªX¹¦D: entered allmulticast mode [ 242.653683][T14593] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 242.686897][T14608] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 242.937235][T14631] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3992'. [ 243.049894][T14647] smc: net device bond0 applied user defined pnetid SYZ0 [ 243.058346][T14647] smc: net device bond0 erased user defined pnetid SYZ0 [ 243.076858][T14649] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3993'. [ 243.119329][T14654] smc: net device bond0 applied user defined pnetid SYZ0 [ 243.127531][T14654] smc: net device bond0 erased user defined pnetid SYZ0 [ 243.318599][T14674] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 243.588199][T14695] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 243.608197][T14699] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4023'. [ 243.769513][T14709] smc: net device bond0 applied user defined pnetid SYZ0 [ 243.778391][T14709] smc: net device bond0 erased user defined pnetid SYZ0 [ 243.797746][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 243.797778][ T29] audit: type=1400 audit(755.780:18830): avc: denied { create } for pid=14710 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.827327][ T29] audit: type=1400 audit(755.780:18831): avc: denied { setopt } for pid=14710 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.846487][ T29] audit: type=1400 audit(755.780:18832): avc: denied { connect } for pid=14710 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.865852][ T29] audit: type=1400 audit(755.810:18833): avc: denied { setopt } for pid=14712 comm="syz.0.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 243.887740][ T29] audit: type=1400 audit(755.870:18834): avc: denied { bind } for pid=14710 comm="syz.3.4028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 243.908916][ T29] audit: type=1326 audit(755.870:18835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 243.932109][ T29] audit: type=1326 audit(755.870:18836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 243.955336][ T29] audit: type=1326 audit(755.890:18837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 243.978557][ T29] audit: type=1326 audit(755.890:18838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 244.001555][ T29] audit: type=1326 audit(755.890:18839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14710 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 244.078675][T14727] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 244.181834][T14736] FAULT_INJECTION: forcing a failure. [ 244.181834][T14736] name failslab, interval 1, probability 0, space 0, times 0 [ 244.194639][T14736] CPU: 0 UID: 0 PID: 14736 Comm: syz.2.4039 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.194734][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 244.194782][T14736] Call Trace: [ 244.194790][T14736] [ 244.194799][T14736] __dump_stack+0x1d/0x30 [ 244.194820][T14736] dump_stack_lvl+0xe8/0x140 [ 244.194838][T14736] dump_stack+0x15/0x1b [ 244.194853][T14736] should_fail_ex+0x265/0x280 [ 244.194882][T14736] ? security_load_policy+0x66/0x890 [ 244.195004][T14736] should_failslab+0x8c/0xb0 [ 244.195032][T14736] __kmalloc_cache_noprof+0x4c/0x320 [ 244.195061][T14736] ? exc_page_fault+0x62/0xa0 [ 244.195095][T14736] security_load_policy+0x66/0x890 [ 244.195210][T14736] ? rep_movs_alternative+0x4a/0x90 [ 244.195258][T14736] sel_write_load+0x1d4/0x380 [ 244.195287][T14736] ? __pfx_sel_write_load+0x10/0x10 [ 244.195342][T14736] vfs_write+0x269/0x960 [ 244.195370][T14736] ? __rcu_read_unlock+0x4f/0x70 [ 244.195390][T14736] ? __fget_files+0x184/0x1c0 [ 244.195424][T14736] ksys_write+0xda/0x1a0 [ 244.195518][T14736] __x64_sys_write+0x40/0x50 [ 244.195542][T14736] x64_sys_call+0x27fe/0x2ff0 [ 244.195617][T14736] do_syscall_64+0xd2/0x200 [ 244.195656][T14736] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 244.195687][T14736] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.195726][T14736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.195749][T14736] RIP: 0033:0x7f37384debe9 [ 244.195767][T14736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.195791][T14736] RSP: 002b:00007f3736f3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 244.195843][T14736] RAX: ffffffffffffffda RBX: 00007f3738715fa0 RCX: 00007f37384debe9 [ 244.195889][T14736] RDX: 000000000000606c RSI: 0000200000000000 RDI: 0000000000000003 [ 244.195905][T14736] RBP: 00007f3736f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.195921][T14736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.195936][T14736] R13: 00007f3738716038 R14: 00007f3738715fa0 R15: 00007fffde41ce08 [ 244.195960][T14736] [ 244.195997][T14736] SELinux: failed to load policy [ 244.471646][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.493152][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.558506][T14755] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 244.767285][T14762] lo speed is unknown, defaulting to 1000 [ 244.773678][T14762] lo speed is unknown, defaulting to 1000 [ 245.034964][T14781] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 245.133425][T14789] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4056'. [ 245.163527][T14789] 0ªX¹¦D: entered promiscuous mode [ 245.168752][T14789] 0ªX¹¦D: left allmulticast mode [ 245.177728][T14784] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4056'. [ 245.188715][T14784] 1ªX¹¦D: renamed from 30ªX¹¦D [ 245.198669][T14784] 1ªX¹¦D: left promiscuous mode [ 245.203562][T14784] 1ªX¹¦D: entered allmulticast mode [ 245.211273][T14784] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 245.233098][T14789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14789 comm=syz.3.4056 [ 245.246981][T14784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4056'. [ 245.610048][T14848] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 246.252216][T14887] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 246.907019][T14915] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 247.168855][T14948] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 247.463189][T14975] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 248.549750][T15032] netlink: 'syz.4.4158': attribute type 10 has an invalid length. [ 248.557922][T15032] FAULT_INJECTION: forcing a failure. [ 248.557922][T15032] name failslab, interval 1, probability 0, space 0, times 0 [ 248.570708][T15032] CPU: 0 UID: 0 PID: 15032 Comm: syz.4.4158 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.570734][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 248.570783][T15032] Call Trace: [ 248.570790][T15032] [ 248.570797][T15032] __dump_stack+0x1d/0x30 [ 248.570817][T15032] dump_stack_lvl+0xe8/0x140 [ 248.570890][T15032] dump_stack+0x15/0x1b [ 248.570906][T15032] should_fail_ex+0x265/0x280 [ 248.570932][T15032] should_failslab+0x8c/0xb0 [ 248.570961][T15032] kmem_cache_alloc_node_noprof+0x57/0x320 [ 248.571010][T15032] ? __alloc_skb+0x101/0x320 [ 248.571072][T15032] __alloc_skb+0x101/0x320 [ 248.571102][T15032] rtmsg_ifa+0xac/0x170 [ 248.571123][T15032] __inet_del_ifa+0x4d1/0x7f0 [ 248.571166][T15032] ? ip_mc_destroy_dev+0x275/0x2d0 [ 248.571251][T15032] inetdev_event+0x658/0xc10 [ 248.571277][T15032] ? __pfx_ib_netdevice_event+0x10/0x10 [ 248.571312][T15032] ? ib_netdevice_event+0x186/0x5f0 [ 248.571357][T15032] ? __pfx_inetdev_event+0x10/0x10 [ 248.571378][T15032] raw_notifier_call_chain+0x6c/0x1b0 [ 248.571397][T15032] ? call_netdevice_notifiers_info+0x9c/0x100 [ 248.571464][T15032] call_netdevice_notifiers_info+0xae/0x100 [ 248.571568][T15032] unregister_netdevice_many_notify+0xda9/0x15d0 [ 248.571609][T15032] ? __pfx_veth_dellink+0x10/0x10 [ 248.571709][T15032] rtnl_dellink+0x3cb/0x550 [ 248.571789][T15032] ? selinux_capable+0x31/0x40 [ 248.571826][T15032] ? security_capable+0x83/0x90 [ 248.571918][T15032] ? ns_capable+0x7d/0xb0 [ 248.571937][T15032] ? __pfx_rtnl_dellink+0x10/0x10 [ 248.571990][T15032] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 248.572025][T15032] ? avc_has_perm_noaudit+0x1b1/0x200 [ 248.572050][T15032] netlink_rcv_skb+0x120/0x220 [ 248.572118][T15032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 248.572228][T15032] rtnetlink_rcv+0x1c/0x30 [ 248.572253][T15032] netlink_unicast+0x5c0/0x690 [ 248.572274][T15032] netlink_sendmsg+0x58b/0x6b0 [ 248.572299][T15032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.572349][T15032] __sock_sendmsg+0x145/0x180 [ 248.572378][T15032] ____sys_sendmsg+0x31e/0x4e0 [ 248.572404][T15032] ___sys_sendmsg+0x17b/0x1d0 [ 248.572496][T15032] __x64_sys_sendmsg+0xd4/0x160 [ 248.572558][T15032] x64_sys_call+0x191e/0x2ff0 [ 248.572632][T15032] do_syscall_64+0xd2/0x200 [ 248.572659][T15032] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 248.572747][T15032] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 248.572772][T15032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.572791][T15032] RIP: 0033:0x7f7a773debe9 [ 248.572805][T15032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.572820][T15032] RSP: 002b:00007f7a75e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.572931][T15032] RAX: ffffffffffffffda RBX: 00007f7a77615fa0 RCX: 00007f7a773debe9 [ 248.572942][T15032] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 248.572952][T15032] RBP: 00007f7a75e47090 R08: 0000000000000000 R09: 0000000000000000 [ 248.572962][T15032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.572991][T15032] R13: 00007f7a77616038 R14: 00007f7a77615fa0 R15: 00007ffd77c746e8 [ 248.573009][T15032] [ 248.937969][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 248.937987][ T29] audit: type=1326 audit(760.920:19185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 248.969637][ T29] audit: type=1326 audit(760.920:19186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 248.992749][ T29] audit: type=1326 audit(760.960:19187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.015846][ T29] audit: type=1326 audit(760.960:19188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.038979][ T29] audit: type=1326 audit(760.960:19189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.062430][ T29] audit: type=1326 audit(760.960:19190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.085522][ T29] audit: type=1326 audit(760.960:19191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.108937][ T29] audit: type=1326 audit(760.960:19192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.132307][ T29] audit: type=1326 audit(760.960:19193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.155687][ T29] audit: type=1326 audit(760.960:19194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15033 comm="syz.1.4159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ca33ebe9 code=0x7ffc0000 [ 249.186268][T15038] __nla_validate_parse: 2 callbacks suppressed [ 249.186286][T15038] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4160'. [ 249.248194][T15043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15043 comm=syz.3.4165 [ 249.290524][T15043] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15043 comm=syz.3.4165 [ 249.308949][T15043] veth0: entered promiscuous mode [ 249.315174][T15043] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4165'. [ 249.326192][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4165'. [ 249.346320][T15056] netlink: 'syz.0.4163': attribute type 4 has an invalid length. [ 249.459139][T15067] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4171'. [ 249.469894][T15066] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4172'. [ 249.479466][T15066] 1ªX¹¦D: entered promiscuous mode [ 249.484678][T15066] 1ªX¹¦D: left allmulticast mode [ 249.492482][T15067] 1ªX¹¦D: entered promiscuous mode [ 249.497749][T15067] 1ªX¹¦D: left allmulticast mode [ 249.506493][T15066] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4172'. [ 249.518190][T15063] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4171'. [ 249.527272][T15066] 0ªX¹¦D: renamed from 31ªX¹¦D [ 249.534610][T15066] 0ªX¹¦D: left promiscuous mode [ 249.539569][T15066] 0ªX¹¦D: entered allmulticast mode [ 249.546524][T15066] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 249.562434][T15063] 0ªX¹¦D: renamed from 31ªX¹¦D [ 249.565216][T15066] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15066 comm=syz.1.4172 [ 249.583588][T15063] 0ªX¹¦D: left promiscuous mode [ 249.588570][T15063] 0ªX¹¦D: entered allmulticast mode [ 249.588587][T15067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15067 comm=syz.3.4171 [ 249.595655][T15063] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 249.623457][T15066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4172'. [ 249.657016][T15063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4171'. [ 249.706903][T15080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4178'. [ 250.059165][T15091] 0ªX¹¦D: entered promiscuous mode [ 250.064968][T15091] 1ªX¹¦D: renamed from 30ªX¹¦D [ 250.071503][T15091] 1ªX¹¦D: left promiscuous mode [ 250.076429][T15091] 1ªX¹¦D: entered allmulticast mode [ 250.116589][T15093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15093 comm=syz.4.4183 [ 250.188040][T15091] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 250.270108][T15098] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 250.309806][T15107] netlink: 'syz.1.4189': attribute type 10 has an invalid length. [ 250.333948][T15105] 1ªX¹¦D: entered promiscuous mode [ 250.339136][T15105] 1ªX¹¦D: left allmulticast mode [ 250.346095][T15105] 0ªX¹¦D: renamed from 31ªX¹¦D [ 250.353664][T15105] 0ªX¹¦D: left promiscuous mode [ 250.358601][T15105] 0ªX¹¦D: entered allmulticast mode [ 250.364476][T15105] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 250.383131][T15105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15105 comm=syz.4.4188 [ 250.461383][T15119] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 250.487337][T15117] can0: slcan on ttyS3. [ 250.546894][T15116] can0 (unregistered): slcan off ttyS3. [ 250.568089][T15133] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 250.571219][T15135] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 250.580058][ T4637] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 250.634080][T15144] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 250.658007][T15139] 0ªX¹¦D: entered promiscuous mode [ 250.663169][T15139] 0ªX¹¦D: left allmulticast mode [ 250.674018][T15139] 1ªX¹¦D: renamed from 30ªX¹¦D [ 250.682304][T15139] 1ªX¹¦D: left promiscuous mode [ 250.687240][T15139] 1ªX¹¦D: entered allmulticast mode [ 250.693901][T15139] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 250.710180][T15139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15139 comm=syz.1.4202 [ 251.207297][T15166] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 251.371531][T15174] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 251.492644][T15190] 1ªX¹¦D: entered promiscuous mode [ 251.497911][T15190] 1ªX¹¦D: left allmulticast mode [ 251.505998][T15178] 0ªX¹¦D: renamed from 31ªX¹¦D [ 251.514933][T15178] 0ªX¹¦D: left promiscuous mode [ 251.519884][T15178] 0ªX¹¦D: entered allmulticast mode [ 251.527373][T15178] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 251.543998][T15178] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15178 comm=syz.1.4217 [ 251.641101][T15207] smc: net device bond0 applied user defined pnetid SYZ0 [ 251.648931][T15207] smc: net device bond0 erased user defined pnetid SYZ0 [ 251.784435][T15215] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 251.942916][T15223] netlink: 'syz.3.4236': attribute type 10 has an invalid length. [ 252.038998][T15224] netlink: 'syz.1.4246': attribute type 4 has an invalid length. [ 252.168244][T15232] 1ªX¹¦D: entered promiscuous mode [ 252.173404][T15232] 1ªX¹¦D: left allmulticast mode [ 252.208282][T15232] 0ªX¹¦D: renamed from 31ªX¹¦D [ 252.214798][T15232] 0ªX¹¦D: left promiscuous mode [ 252.219944][T15232] 0ªX¹¦D: entered allmulticast mode [ 252.238210][T15232] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 252.309928][T15245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15245 comm=syz.0.4240 [ 252.522549][T15271] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 252.578196][T15275] 0ªX¹¦D: entered promiscuous mode [ 252.583571][T15275] 0ªX¹¦D: left allmulticast mode [ 252.658236][T15278] 1ªX¹¦D: renamed from 30ªX¹¦D [ 252.677009][T15278] 1ªX¹¦D: left promiscuous mode [ 252.681929][T15278] 1ªX¹¦D: entered allmulticast mode [ 252.696558][T15275] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15275 comm=syz.3.4261 [ 252.712003][T15278] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 252.935029][T15296] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 253.009895][T15307] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 253.110126][T15323] $Hÿ: renamed from bond0 (while UP) [ 253.124618][T15323] $Hÿ: entered promiscuous mode [ 253.129734][T15323] bond_slave_0: entered promiscuous mode [ 253.135556][T15323] bond_slave_1: entered promiscuous mode [ 253.143714][T15327] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 253.279047][T15344] $Hÿ: renamed from bond0 (while UP) [ 253.287908][T15344] $Hÿ: entered promiscuous mode [ 253.400280][T15354] 1ªX¹¦D: entered promiscuous mode [ 253.405452][T15354] 1ªX¹¦D: left allmulticast mode [ 253.413330][T15354] 0ªX¹¦D: renamed from 31ªX¹¦D [ 253.426979][T15354] 0ªX¹¦D: left promiscuous mode [ 253.431869][T15354] 0ªX¹¦D: entered allmulticast mode [ 253.441773][T15354] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 253.534742][T15377] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 253.950850][ T29] kauditd_printk_skb: 340 callbacks suppressed [ 253.950904][ T29] audit: type=1326 audit(765.920:19535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 253.980138][ T29] audit: type=1326 audit(765.920:19536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.004521][ T29] audit: type=1326 audit(765.940:19537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.027730][ T29] audit: type=1326 audit(765.940:19538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.050958][ T29] audit: type=1326 audit(765.940:19539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.074069][ T29] audit: type=1326 audit(765.940:19540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.097440][ T29] audit: type=1326 audit(765.940:19541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.120479][ T29] audit: type=1326 audit(765.940:19542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.143550][ T29] audit: type=1326 audit(765.940:19543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.166809][ T29] audit: type=1326 audit(765.940:19544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe71a17ebe9 code=0x7ffc0000 [ 254.342011][T15452] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 254.733675][T15493] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 255.299513][T15529] smc: net device bond0 applied user defined pnetid SYZ0 [ 255.346995][T15532] tbf_change: 3 callbacks suppressed [ 255.347015][T15532] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 255.581117][T15553] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 255.606721][T15555] __nla_validate_parse: 30 callbacks suppressed [ 255.606744][T15555] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4382'. [ 255.634460][T15557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4383'. [ 255.805301][T15575] lo speed is unknown, defaulting to 1000 [ 255.825835][T15575] lo speed is unknown, defaulting to 1000 [ 255.913475][T15587] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 255.953696][T15589] $Hÿ: renamed from bond0 [ 255.959967][T15589] $Hÿ: entered promiscuous mode [ 255.965132][T15589] bond_slave_0: entered promiscuous mode [ 255.970954][T15589] bond_slave_1: entered promiscuous mode [ 256.363581][T15611] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 256.631443][T15617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4405'. [ 256.656249][T15619] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4407'. [ 257.168459][T15649] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4412'. [ 257.273546][T15649] 0ªX¹¦D: entered promiscuous mode [ 257.278782][T15649] 0ªX¹¦D: left allmulticast mode [ 257.374597][T15637] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4412'. [ 257.496058][T15657] selinux_netlink_send: 1 callbacks suppressed [ 257.496080][T15657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15657 comm=syz.2.4412 [ 257.582342][T15637] 1ªX¹¦D: renamed from 30ªX¹¦D [ 257.599204][T15637] 1ªX¹¦D: left promiscuous mode [ 257.604126][T15637] 1ªX¹¦D: entered allmulticast mode [ 257.622219][T15637] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 257.654628][T15649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4412'. [ 258.218875][T15697] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4435'. [ 258.238857][T15697] 0ªX¹¦D: entered promiscuous mode [ 258.244029][T15697] 0ªX¹¦D: left allmulticast mode [ 258.264780][T15697] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4435'. [ 258.283622][T15697] 1ªX¹¦D: renamed from 30ªX¹¦D [ 258.291129][T15697] 1ªX¹¦D: left promiscuous mode [ 258.296216][T15697] 1ªX¹¦D: entered allmulticast mode [ 258.303633][T15697] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 258.323829][T15697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15697 comm=syz.4.4435 [ 258.338831][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4435'. [ 258.778501][T15729] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 258.950238][T15747] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 258.982871][T15755] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 259.101474][T15779] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 259.130964][T15784] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 259.248777][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 259.248792][ T29] audit: type=1400 audit(771.230:20045): avc: denied { create } for pid=15802 comm="syz.3.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.275308][ T29] audit: type=1400 audit(771.230:20046): avc: denied { setopt } for pid=15802 comm="syz.3.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.295047][ T29] audit: type=1400 audit(771.230:20047): avc: denied { write } for pid=15802 comm="syz.3.4482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 259.314650][ T29] audit: type=1326 audit(771.230:20048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.3.4482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 259.337718][ T29] audit: type=1326 audit(771.230:20049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.3.4482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 259.360720][ T29] audit: type=1326 audit(771.230:20050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.3.4482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 259.383747][ T29] audit: type=1326 audit(771.230:20051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.3.4482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 259.407406][ T29] audit: type=1326 audit(771.330:20052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.3.4482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 259.430448][ T29] audit: type=1326 audit(771.330:20053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.3.4482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 259.453434][ T29] audit: type=1326 audit(771.330:20054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15802 comm="syz.3.4482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 259.604004][T15811] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 259.782284][T15828] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 260.041216][T15854] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 260.217719][T15881] netlink: 'syz.3.4515': attribute type 4 has an invalid length. [ 260.241264][T15881] netlink: 'syz.3.4515': attribute type 4 has an invalid length. [ 260.308140][T15885] 1ªX¹¦D: entered promiscuous mode [ 260.313366][T15885] 1ªX¹¦D: left allmulticast mode [ 260.319965][T15885] 0ªX¹¦D: renamed from 31ªX¹¦D [ 260.328295][T15885] 0ªX¹¦D: left promiscuous mode [ 260.333197][T15885] 0ªX¹¦D: entered allmulticast mode [ 260.339472][T15885] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 260.356489][T15885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15885 comm=syz.4.4517 [ 260.440998][T15903] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 260.502671][T15905] lo speed is unknown, defaulting to 1000 [ 260.509387][T15905] lo speed is unknown, defaulting to 1000 [ 260.835737][T15906] Set syz1 is full, maxelem 65536 reached [ 260.863237][T15909] FAULT_INJECTION: forcing a failure. [ 260.863237][T15909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.876407][T15909] CPU: 0 UID: 0 PID: 15909 Comm: syz.4.4526 Not tainted syzkaller #0 PREEMPT(voluntary) [ 260.876434][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.876449][T15909] Call Trace: [ 260.876457][T15909] [ 260.876467][T15909] __dump_stack+0x1d/0x30 [ 260.876492][T15909] dump_stack_lvl+0xe8/0x140 [ 260.876551][T15909] dump_stack+0x15/0x1b [ 260.876572][T15909] should_fail_ex+0x265/0x280 [ 260.876600][T15909] should_fail+0xb/0x20 [ 260.876632][T15909] should_fail_usercopy+0x1a/0x20 [ 260.876661][T15909] _copy_to_user+0x20/0xa0 [ 260.876776][T15909] simple_read_from_buffer+0xb5/0x130 [ 260.876804][T15909] proc_fail_nth_read+0x10e/0x150 [ 260.876832][T15909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 260.876857][T15909] vfs_read+0x1a8/0x770 [ 260.876942][T15909] ? __rcu_read_unlock+0x4f/0x70 [ 260.876963][T15909] ? __fget_files+0x184/0x1c0 [ 260.876993][T15909] ksys_read+0xda/0x1a0 [ 260.877082][T15909] __x64_sys_read+0x40/0x50 [ 260.877143][T15909] x64_sys_call+0x27bc/0x2ff0 [ 260.877170][T15909] do_syscall_64+0xd2/0x200 [ 260.877210][T15909] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 260.877298][T15909] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 260.877359][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.877380][T15909] RIP: 0033:0x7f7a773dd5fc [ 260.877466][T15909] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 260.877490][T15909] RSP: 002b:00007f7a75e47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 260.877513][T15909] RAX: ffffffffffffffda RBX: 00007f7a77615fa0 RCX: 00007f7a773dd5fc [ 260.877527][T15909] RDX: 000000000000000f RSI: 00007f7a75e470a0 RDI: 0000000000000004 [ 260.877541][T15909] RBP: 00007f7a75e47090 R08: 0000000000000000 R09: 0000000000000000 [ 260.877645][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.877660][T15909] R13: 00007f7a77616038 R14: 00007f7a77615fa0 R15: 00007ffd77c746e8 [ 260.877680][T15909] [ 261.254880][T15935] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 261.553308][T15957] lo speed is unknown, defaulting to 1000 [ 261.560229][T15957] lo speed is unknown, defaulting to 1000 [ 262.067893][T15976] FAULT_INJECTION: forcing a failure. [ 262.067893][T15976] name failslab, interval 1, probability 0, space 0, times 0 [ 262.080815][T15976] CPU: 1 UID: 0 PID: 15976 Comm: syz.1.4551 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.080859][T15976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.080875][T15976] Call Trace: [ 262.080882][T15976] [ 262.080891][T15976] __dump_stack+0x1d/0x30 [ 262.080915][T15976] dump_stack_lvl+0xe8/0x140 [ 262.081005][T15976] dump_stack+0x15/0x1b [ 262.081026][T15976] should_fail_ex+0x265/0x280 [ 262.081054][T15976] should_failslab+0x8c/0xb0 [ 262.081163][T15976] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 262.081205][T15976] ? security_context_to_sid_core+0x69/0x3b0 [ 262.081294][T15976] kmemdup_nul+0x36/0xc0 [ 262.081323][T15976] security_context_to_sid_core+0x69/0x3b0 [ 262.081344][T15976] ? avc_has_perm_noaudit+0x1b1/0x200 [ 262.081396][T15976] security_context_to_sid+0x2e/0x40 [ 262.081422][T15976] sel_write_context+0xf8/0x200 [ 262.081481][T15976] selinux_transaction_write+0xc6/0x110 [ 262.081571][T15976] ? __pfx_selinux_transaction_write+0x10/0x10 [ 262.081602][T15976] vfs_write+0x269/0x960 [ 262.081645][T15976] ? __rcu_read_unlock+0x4f/0x70 [ 262.081674][T15976] ? __fget_files+0x184/0x1c0 [ 262.081775][T15976] ksys_write+0xda/0x1a0 [ 262.081798][T15976] __x64_sys_write+0x40/0x50 [ 262.081822][T15976] x64_sys_call+0x27fe/0x2ff0 [ 262.081946][T15976] do_syscall_64+0xd2/0x200 [ 262.082047][T15976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.082133][T15976] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 262.082170][T15976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.082201][T15976] RIP: 0033:0x7f87ca33ebe9 [ 262.082220][T15976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.082241][T15976] RSP: 002b:00007f87c8d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.082318][T15976] RAX: ffffffffffffffda RBX: 00007f87ca575fa0 RCX: 00007f87ca33ebe9 [ 262.082331][T15976] RDX: 000000000000001d RSI: 0000200000000340 RDI: 0000000000000005 [ 262.082342][T15976] RBP: 00007f87c8d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.082357][T15976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.082372][T15976] R13: 00007f87ca576038 R14: 00007f87ca575fa0 R15: 00007ffcf9f45d48 [ 262.082396][T15976] [ 262.900336][ T23] IPVS: starting estimator thread 0... [ 262.900897][T16022] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 262.917182][T16022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.925770][T16022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.987235][T16023] IPVS: using max 1872 ests per chain, 93600 per kthread [ 263.350714][T16040] FAULT_INJECTION: forcing a failure. [ 263.350714][T16040] name failslab, interval 1, probability 0, space 0, times 0 [ 263.363557][T16040] CPU: 1 UID: 0 PID: 16040 Comm: syz.0.4577 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.363589][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 263.363604][T16040] Call Trace: [ 263.363613][T16040] [ 263.363644][T16040] __dump_stack+0x1d/0x30 [ 263.363710][T16040] dump_stack_lvl+0xe8/0x140 [ 263.363738][T16040] dump_stack+0x15/0x1b [ 263.363827][T16040] should_fail_ex+0x265/0x280 [ 263.363859][T16040] should_failslab+0x8c/0xb0 [ 263.363889][T16040] kmem_cache_alloc_node_noprof+0x57/0x320 [ 263.363928][T16040] ? __alloc_skb+0x101/0x320 [ 263.364003][T16040] __alloc_skb+0x101/0x320 [ 263.364030][T16040] netlink_alloc_large_skb+0xba/0xf0 [ 263.364059][T16040] netlink_sendmsg+0x3cf/0x6b0 [ 263.364095][T16040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 263.364126][T16040] __sock_sendmsg+0x145/0x180 [ 263.364186][T16040] ____sys_sendmsg+0x345/0x4e0 [ 263.364224][T16040] ___sys_sendmsg+0x17b/0x1d0 [ 263.364283][T16040] __sys_sendmmsg+0x178/0x300 [ 263.364332][T16040] __x64_sys_sendmmsg+0x57/0x70 [ 263.364413][T16040] x64_sys_call+0x1c4a/0x2ff0 [ 263.364441][T16040] do_syscall_64+0xd2/0x200 [ 263.364531][T16040] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.364554][T16040] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 263.364632][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.364654][T16040] RIP: 0033:0x7fe71a17ebe9 [ 263.364673][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.364691][T16040] RSP: 002b:00007fe718be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 263.364709][T16040] RAX: ffffffffffffffda RBX: 00007fe71a3b5fa0 RCX: 00007fe71a17ebe9 [ 263.364723][T16040] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 263.364740][T16040] RBP: 00007fe718be7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.364755][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.364843][T16040] R13: 00007fe71a3b6038 R14: 00007fe71a3b5fa0 R15: 00007fff3b64b158 [ 263.364866][T16040] [ 264.064069][T16112] openvswitch: netlink: Flow key attr not present in new flow. [ 264.072342][T16112] netlink: 'syz.3.4609': attribute type 10 has an invalid length. [ 264.224796][T16124] netlink: 'syz.3.4614': attribute type 2 has an invalid length. [ 264.232728][T16124] netlink: 'syz.3.4614': attribute type 8 has an invalid length. [ 264.240583][T16124] __nla_validate_parse: 9 callbacks suppressed [ 264.240629][T16124] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4614'. [ 264.256734][ T29] kauditd_printk_skb: 597 callbacks suppressed [ 264.256751][ T29] audit: type=1326 audit(776.240:20652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 264.278862][T16132] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 264.293424][ T29] audit: type=1326 audit(776.270:20653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93d68b5ba7 code=0x7ffc0000 [ 264.316550][ T29] audit: type=1326 audit(776.270:20654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93d685adb9 code=0x7ffc0000 [ 264.340180][ T29] audit: type=1326 audit(776.270:20655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 264.363574][ T29] audit: type=1326 audit(776.300:20656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93d68b5ba7 code=0x7ffc0000 [ 264.386657][ T29] audit: type=1326 audit(776.300:20657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93d685adb9 code=0x7ffc0000 [ 264.409870][ T29] audit: type=1326 audit(776.300:20658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 264.432970][ T29] audit: type=1326 audit(776.300:20659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f93d68b5ba7 code=0x7ffc0000 [ 264.455988][ T29] audit: type=1326 audit(776.300:20660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f93d685adb9 code=0x7ffc0000 [ 264.479093][ T29] audit: type=1326 audit(776.300:20661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16123 comm="syz.3.4614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 264.865385][T16162] lo speed is unknown, defaulting to 1000 [ 264.872003][T16162] lo speed is unknown, defaulting to 1000 [ 265.196017][T16168] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 265.555098][T16200] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4645'. [ 265.664400][T16223] netlink: 'syz.0.4649': attribute type 1 has an invalid length. [ 265.909080][T16241] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4662'. [ 266.166108][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 266.177092][T16249] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4666'. [ 266.186234][T16249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 266.389285][T16261] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4672'. [ 266.430051][T16261] netlink: 'syz.4.4672': attribute type 63 has an invalid length. [ 266.547220][T16267] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4674'. [ 266.567538][T16267] 0ªX¹¦D: entered promiscuous mode [ 266.572707][T16267] 0ªX¹¦D: left allmulticast mode [ 266.594778][T16267] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4674'. [ 266.607815][T16267] 1ªX¹¦D: renamed from 30ªX¹¦D [ 266.615331][T16267] 1ªX¹¦D: left promiscuous mode [ 266.620405][T16267] 1ªX¹¦D: entered allmulticast mode [ 266.626563][T16267] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 266.643099][T16267] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16267 comm=syz.4.4674 [ 266.643619][T16279] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 266.656331][T16267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4674'. [ 267.062625][T16317] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 267.178374][T16324] FAULT_INJECTION: forcing a failure. [ 267.178374][T16324] name failslab, interval 1, probability 0, space 0, times 0 [ 267.191069][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.4.4695 Not tainted syzkaller #0 PREEMPT(voluntary) [ 267.191096][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.191110][T16324] Call Trace: [ 267.191118][T16324] [ 267.191127][T16324] __dump_stack+0x1d/0x30 [ 267.191154][T16324] dump_stack_lvl+0xe8/0x140 [ 267.191236][T16324] dump_stack+0x15/0x1b [ 267.191258][T16324] should_fail_ex+0x265/0x280 [ 267.191287][T16324] ? do_kimage_alloc_init+0x2f/0x170 [ 267.191339][T16324] should_failslab+0x8c/0xb0 [ 267.191371][T16324] __kmalloc_cache_noprof+0x4c/0x320 [ 267.191471][T16324] do_kimage_alloc_init+0x2f/0x170 [ 267.191545][T16324] do_kexec_load+0x8b/0x500 [ 267.191566][T16324] __se_sys_kexec_load+0x134/0x160 [ 267.191591][T16324] __x64_sys_kexec_load+0x55/0x70 [ 267.191614][T16324] x64_sys_call+0x2898/0x2ff0 [ 267.191643][T16324] do_syscall_64+0xd2/0x200 [ 267.191696][T16324] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 267.191740][T16324] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 267.191784][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.191809][T16324] RIP: 0033:0x7f7a773debe9 [ 267.191828][T16324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.191862][T16324] RSP: 002b:00007f7a75e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 267.191880][T16324] RAX: ffffffffffffffda RBX: 00007f7a77615fa0 RCX: 00007f7a773debe9 [ 267.191894][T16324] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000003e00 [ 267.191909][T16324] RBP: 00007f7a75e47090 R08: 0000000000000000 R09: 0000000000000000 [ 267.191923][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.191938][T16324] R13: 00007f7a77616038 R14: 00007f7a77615fa0 R15: 00007ffd77c746e8 [ 267.191956][T16324] [ 267.864463][T16344] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 268.075423][T16361] IPv6: Can't replace route, no match found [ 268.125767][T16361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16361 comm=syz.3.4709 [ 268.240822][T16370] can0: slcan on ttyS3. [ 268.326870][T16370] can0 (unregistered): slcan off ttyS3. [ 268.515555][T16399] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 268.550983][T16382] delete_channel: no stack [ 268.808629][T16418] lo speed is unknown, defaulting to 1000 [ 268.814727][T16418] lo speed is unknown, defaulting to 1000 [ 269.001142][T16439] FAULT_INJECTION: forcing a failure. [ 269.001142][T16439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.014421][T16439] CPU: 0 UID: 0 PID: 16439 Comm: syz.3.4743 Not tainted syzkaller #0 PREEMPT(voluntary) [ 269.014456][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.014473][T16439] Call Trace: [ 269.014481][T16439] [ 269.014490][T16439] __dump_stack+0x1d/0x30 [ 269.014516][T16439] dump_stack_lvl+0xe8/0x140 [ 269.014541][T16439] dump_stack+0x15/0x1b [ 269.014561][T16439] should_fail_ex+0x265/0x280 [ 269.014654][T16439] should_fail+0xb/0x20 [ 269.014679][T16439] should_fail_usercopy+0x1a/0x20 [ 269.014722][T16439] _copy_from_iter+0xd2/0xe80 [ 269.014812][T16439] ? should_failslab+0x8c/0xb0 [ 269.014846][T16439] ? __build_skb_around+0x1a0/0x200 [ 269.014875][T16439] ? __build_skb+0x59/0x70 [ 269.014899][T16439] ? is_vmalloc_addr+0x37/0x90 [ 269.014998][T16439] netlink_sendmsg+0x471/0x6b0 [ 269.015026][T16439] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.015052][T16439] __sock_sendmsg+0x145/0x180 [ 269.015084][T16439] ____sys_sendmsg+0x31e/0x4e0 [ 269.015181][T16439] ___sys_sendmsg+0x17b/0x1d0 [ 269.015222][T16439] __x64_sys_sendmsg+0xd4/0x160 [ 269.015255][T16439] x64_sys_call+0x191e/0x2ff0 [ 269.015340][T16439] do_syscall_64+0xd2/0x200 [ 269.015371][T16439] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 269.015395][T16439] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 269.015514][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.015610][T16439] RIP: 0033:0x7f93d68bebe9 [ 269.015625][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.015643][T16439] RSP: 002b:00007f93d531f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 269.015661][T16439] RAX: ffffffffffffffda RBX: 00007f93d6af5fa0 RCX: 00007f93d68bebe9 [ 269.015676][T16439] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 269.015689][T16439] RBP: 00007f93d531f090 R08: 0000000000000000 R09: 0000000000000000 [ 269.015757][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.015769][T16439] R13: 00007f93d6af6038 R14: 00007f93d6af5fa0 R15: 00007ffc33183b28 [ 269.015788][T16439] [ 269.227616][T16441] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 269.362760][T16452] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 269.405725][ T29] kauditd_printk_skb: 577 callbacks suppressed [ 269.405743][ T29] audit: type=1400 audit(781.380:21239): avc: denied { write } for pid=16451 comm="syz.2.4748" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.443369][T16452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.451726][ T29] audit: type=1400 audit(781.420:21240): avc: denied { ioctl } for pid=16451 comm="syz.2.4748" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.503685][T16452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.543000][ T29] audit: type=1400 audit(781.520:21241): avc: denied { setopt } for pid=16460 comm="syz.1.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 269.575164][ T29] audit: type=1400 audit(781.520:21242): avc: denied { bind } for pid=16460 comm="syz.1.4750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 269.594057][ T29] audit: type=1326 audit(781.550:21243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 269.617054][ T29] audit: type=1326 audit(781.550:21244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 269.640188][ T29] audit: type=1326 audit(781.550:21245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 269.677195][ T29] audit: type=1326 audit(781.650:21246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 269.700331][ T29] audit: type=1326 audit(781.650:21247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 269.723639][ T29] audit: type=1326 audit(781.650:21248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 269.766166][T16474] __nla_validate_parse: 6 callbacks suppressed [ 269.766183][T16474] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4755'. [ 269.878721][T16483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=16483 comm=syz.4.4756 [ 269.891342][T16483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16483 comm=syz.4.4756 [ 269.907111][T16483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4756'. [ 269.916083][T16483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4756'. [ 269.948013][T16489] FAULT_INJECTION: forcing a failure. [ 269.948013][T16489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.961266][T16489] CPU: 1 UID: 0 PID: 16489 Comm: syz.4.4762 Not tainted syzkaller #0 PREEMPT(voluntary) [ 269.961341][T16489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 269.961358][T16489] Call Trace: [ 269.961374][T16489] [ 269.961383][T16489] __dump_stack+0x1d/0x30 [ 269.961410][T16489] dump_stack_lvl+0xe8/0x140 [ 269.961507][T16489] dump_stack+0x15/0x1b [ 269.961529][T16489] should_fail_ex+0x265/0x280 [ 269.961561][T16489] should_fail+0xb/0x20 [ 269.961581][T16489] should_fail_usercopy+0x1a/0x20 [ 269.961610][T16489] strncpy_from_user+0x25/0x230 [ 269.961676][T16489] strncpy_from_user_nofault+0x68/0xf0 [ 269.961743][T16489] bpf_probe_read_compat_str+0xb4/0x130 [ 269.961823][T16489] bpf_prog_d73d3bb03d5a037f+0x3e/0x44 [ 269.961842][T16489] bpf_trace_run2+0x104/0x1c0 [ 269.961865][T16489] ? string_to_context_struct+0x20d/0x2f0 [ 269.961891][T16489] ? string_to_context_struct+0x20d/0x2f0 [ 269.961981][T16489] kfree+0x27b/0x320 [ 269.962009][T16489] string_to_context_struct+0x20d/0x2f0 [ 269.962039][T16489] security_context_to_sid_core+0x235/0x3b0 [ 269.962073][T16489] security_context_to_sid+0x2e/0x40 [ 269.962175][T16489] selinux_lsm_setattr+0x2dc/0x660 [ 269.962208][T16489] selinux_setprocattr+0x4f/0x70 [ 269.962318][T16489] security_setprocattr+0x1a7/0x1d0 [ 269.962353][T16489] proc_pid_attr_write+0x1eb/0x220 [ 269.962378][T16489] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 269.962416][T16489] vfs_write+0x269/0x960 [ 269.962515][T16489] ? __rcu_read_unlock+0x4f/0x70 [ 269.962542][T16489] ? __fget_files+0x184/0x1c0 [ 269.962576][T16489] ksys_write+0xda/0x1a0 [ 269.962622][T16489] __x64_sys_write+0x40/0x50 [ 269.962646][T16489] x64_sys_call+0x27fe/0x2ff0 [ 269.962726][T16489] do_syscall_64+0xd2/0x200 [ 269.962760][T16489] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 269.962861][T16489] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 269.962905][T16489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.962993][T16489] RIP: 0033:0x7f7a773debe9 [ 269.963042][T16489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.963110][T16489] RSP: 002b:00007f7a75e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.963161][T16489] RAX: ffffffffffffffda RBX: 00007f7a77615fa0 RCX: 00007f7a773debe9 [ 269.963173][T16489] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000005 [ 269.963184][T16489] RBP: 00007f7a75e47090 R08: 0000000000000000 R09: 0000000000000000 [ 269.963219][T16489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.963234][T16489] R13: 00007f7a77616038 R14: 00007f7a77615fa0 R15: 00007ffd77c746e8 [ 269.963257][T16489] [ 270.491048][T16510] lo speed is unknown, defaulting to 1000 [ 270.524908][T16510] lo speed is unknown, defaulting to 1000 [ 271.344074][T16560] 9pnet_virtio: no channels available for device 127.0.0.1 [ 271.395646][T16571] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4789'. [ 271.474944][T16578] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 271.486254][T16579] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4785'. [ 271.558429][T16585] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4794'. [ 271.569883][T16585] 1ªX¹¦D: entered promiscuous mode [ 271.575036][T16585] 1ªX¹¦D: left allmulticast mode [ 271.581219][T16585] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4794'. [ 271.590223][T16585] 0ªX¹¦D: renamed from 31ªX¹¦D [ 271.598702][T16585] 0ªX¹¦D: left promiscuous mode [ 271.603582][T16585] 0ªX¹¦D: entered allmulticast mode [ 271.610918][T16585] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 271.628500][T16585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16585 comm=syz.4.4794 [ 271.641980][T16585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4794'. [ 272.251120][T16606] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4801'. [ 272.366791][T16614] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4804'. [ 272.581944][T16644] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 272.665206][T16653] netlink: 'syz.1.4824': attribute type 12 has an invalid length. [ 272.673110][T16653] netlink: 'syz.1.4824': attribute type 29 has an invalid length. [ 272.837498][T16678] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 272.957832][T16693] $Hÿ: renamed from bond0 (while UP) [ 272.969565][T16693] $Hÿ: entered promiscuous mode [ 272.974642][T16693] bond_slave_0: entered promiscuous mode [ 272.980754][T16693] bond_slave_1: entered promiscuous mode [ 273.057420][T16698] netlink: 'syz.4.4841': attribute type 4 has an invalid length. [ 273.176115][T16708] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 273.453348][T16721] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 273.852728][T16741] lo speed is unknown, defaulting to 1000 [ 273.859259][T16741] lo speed is unknown, defaulting to 1000 [ 274.411743][T16753] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 274.487454][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 274.487470][ T29] audit: type=1326 audit(786.470:21722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16759 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.517350][ T29] audit: type=1326 audit(786.500:21723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16759 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.540444][ T29] audit: type=1326 audit(786.500:21724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16759 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.578360][ T29] audit: type=1326 audit(786.550:21725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16759 comm="syz.4.4869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.634450][ T29] audit: type=1326 audit(786.610:21726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16770 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.657607][ T29] audit: type=1326 audit(786.610:21727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16770 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.680669][ T29] audit: type=1326 audit(786.610:21728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16770 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.703681][ T29] audit: type=1326 audit(786.610:21729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16770 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.726784][ T29] audit: type=1326 audit(786.610:21730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16770 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.750004][ T29] audit: type=1326 audit(786.610:21731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16770 comm="syz.4.4875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 274.848642][T16776] netlink: 'syz.0.4876': attribute type 4 has an invalid length. [ 274.878638][T16780] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 274.998149][T16784] __nla_validate_parse: 8 callbacks suppressed [ 274.998206][T16784] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4880'. [ 275.015877][T16784] 0ªX¹¦D: entered promiscuous mode [ 275.021069][T16784] 0ªX¹¦D: left allmulticast mode [ 275.057209][T16784] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4880'. [ 275.075305][T16784] 1ªX¹¦D: renamed from 30ªX¹¦D [ 275.098096][T16784] 1ªX¹¦D: left promiscuous mode [ 275.103010][T16784] 1ªX¹¦D: entered allmulticast mode [ 275.117122][T16785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16785 comm=syz.4.4880 [ 275.128766][T16784] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 275.199863][T16784] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4880'. [ 275.242106][T16795] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4885'. [ 275.254790][T16793] netlink: 'syz.4.4884': attribute type 12 has an invalid length. [ 275.262702][T16793] netlink: 'syz.4.4884': attribute type 29 has an invalid length. [ 275.270706][T16793] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4884'. [ 275.406439][T16806] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 275.666847][T16825] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4898'. [ 275.713557][T16834] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 276.053451][T16858] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4908'. [ 276.186106][T16860] lo speed is unknown, defaulting to 1000 [ 276.192675][T16860] lo speed is unknown, defaulting to 1000 [ 276.397999][T16863] netlink: 'syz.3.4912': attribute type 4 has an invalid length. [ 276.585592][T16865] FAULT_INJECTION: forcing a failure. [ 276.585592][T16865] name failslab, interval 1, probability 0, space 0, times 0 [ 276.598396][T16865] CPU: 1 UID: 0 PID: 16865 Comm: syz.4.4913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 276.598441][T16865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 276.598517][T16865] Call Trace: [ 276.598525][T16865] [ 276.598534][T16865] __dump_stack+0x1d/0x30 [ 276.598557][T16865] dump_stack_lvl+0xe8/0x140 [ 276.598576][T16865] dump_stack+0x15/0x1b [ 276.598595][T16865] should_fail_ex+0x265/0x280 [ 276.598624][T16865] should_failslab+0x8c/0xb0 [ 276.598680][T16865] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 276.598716][T16865] ? sidtab_sid2str_get+0xa0/0x130 [ 276.598739][T16865] kmemdup_noprof+0x2b/0x70 [ 276.598834][T16865] sidtab_sid2str_get+0xa0/0x130 [ 276.598864][T16865] security_sid_to_context_core+0x1eb/0x2e0 [ 276.598888][T16865] security_sid_to_context+0x27/0x40 [ 276.598914][T16865] selinux_lsmprop_to_secctx+0x67/0xf0 [ 276.598943][T16865] security_lsmprop_to_secctx+0x43/0x80 [ 276.598971][T16865] audit_log_task_context+0x77/0x190 [ 276.599045][T16865] audit_log_task+0xf4/0x250 [ 276.599083][T16865] audit_seccomp+0x61/0x100 [ 276.599115][T16865] ? __seccomp_filter+0x68c/0x10d0 [ 276.599140][T16865] __seccomp_filter+0x69d/0x10d0 [ 276.599169][T16865] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 276.599257][T16865] ? vfs_write+0x7e8/0x960 [ 276.599357][T16865] __secure_computing+0x82/0x150 [ 276.599399][T16865] syscall_trace_enter+0xcf/0x1e0 [ 276.599428][T16865] do_syscall_64+0xac/0x200 [ 276.599457][T16865] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 276.599551][T16865] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 276.599606][T16865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.599633][T16865] RIP: 0033:0x7f7a773debe9 [ 276.599651][T16865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.599695][T16865] RSP: 002b:00007f7a75e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 276.599735][T16865] RAX: ffffffffffffffda RBX: 00007f7a77615fa0 RCX: 00007f7a773debe9 [ 276.599752][T16865] RDX: 0000000000000000 RSI: 0000000000004002 RDI: ffffffffffffffff [ 276.599837][T16865] RBP: 00007f7a75e47090 R08: 0000000000000000 R09: 0000000000000000 [ 276.599849][T16865] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 276.599863][T16865] R13: 00007f7a77616038 R14: 00007f7a77615fa0 R15: 00007ffd77c746e8 [ 276.599889][T16865] [ 276.955345][T16871] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 277.050928][T16885] sctp: [Deprecated]: syz.0.4924 (pid 16885) Use of int in max_burst socket option. [ 277.050928][T16885] Use struct sctp_assoc_value instead [ 277.271596][T16900] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 277.272385][T16900] tmpfs: Bad value for 'mpol' [ 277.480048][T16904] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 277.554846][T16922] sctp: [Deprecated]: syz.2.4937 (pid 16922) Use of int in max_burst socket option. [ 277.554846][T16922] Use struct sctp_assoc_value instead [ 278.603098][T16974] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 278.737213][T16987] netlink: 'syz.0.4963': attribute type 5 has an invalid length. [ 278.816886][T16992] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 278.849804][T16994] netlink: 'syz.3.4964': attribute type 12 has an invalid length. [ 278.857764][T16994] netlink: 'syz.3.4964': attribute type 29 has an invalid length. [ 278.865594][T16994] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4964'. [ 279.004347][T17006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4967'. [ 279.138425][T17020] lo speed is unknown, defaulting to 1000 [ 279.144731][T17020] lo speed is unknown, defaulting to 1000 [ 279.598135][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 279.598153][ T29] audit: type=1400 audit(791.580:22283): avc: denied { setattr } for pid=17029 comm="syz.3.4976" name="ptmx" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 279.702430][ T29] audit: type=1400 audit(791.680:22284): avc: denied { compute_member } for pid=17017 comm="syz.4.4973" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 279.815655][T17045] netlink: 'syz.1.4977': attribute type 21 has an invalid length. [ 279.888197][T17047] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4978'. [ 279.907165][T17047] 0ªX¹¦D: entered promiscuous mode [ 279.912370][T17047] 0ªX¹¦D: left allmulticast mode [ 279.943362][T17047] 1ªX¹¦D: renamed from 30ªX¹¦D [ 279.958421][T17047] 1ªX¹¦D: left promiscuous mode [ 279.963331][T17047] 1ªX¹¦D: entered allmulticast mode [ 279.975273][T17047] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 279.987351][T17053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17053 comm=syz.3.4978 [ 280.013888][T17047] __nla_validate_parse: 1 callbacks suppressed [ 280.013906][T17047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4978'. [ 280.038669][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4975'. [ 280.054043][T17057] netlink: 'syz.4.4982': attribute type 12 has an invalid length. [ 280.062010][T17057] netlink: 'syz.4.4982': attribute type 29 has an invalid length. [ 280.069885][T17057] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4982'. [ 280.081519][ T29] audit: type=1326 audit(792.040:22285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.104665][ T29] audit: type=1326 audit(792.040:22286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.127856][ T29] audit: type=1326 audit(792.040:22287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.151109][ T29] audit: type=1326 audit(792.040:22288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.174082][ T29] audit: type=1326 audit(792.040:22289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.197124][ T29] audit: type=1326 audit(792.040:22290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.220142][ T29] audit: type=1326 audit(792.040:22291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.243196][ T29] audit: type=1326 audit(792.040:22292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17056 comm="syz.4.4982" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 280.313456][T17073] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4987'. [ 280.334457][T17075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4988'. [ 280.439414][T17079] 9pnet_fd: Insufficient options for proto=fd [ 280.445902][T17079] 9pnet_fd: Insufficient options for proto=fd [ 280.551943][T17096] netlink: 'syz.1.4997': attribute type 12 has an invalid length. [ 280.559946][T17096] netlink: 'syz.1.4997': attribute type 29 has an invalid length. [ 280.567874][T17096] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4997'. [ 280.582193][T17099] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4994'. [ 280.592933][T17099] 1ªX¹¦D: entered promiscuous mode [ 280.598142][T17099] 1ªX¹¦D: left allmulticast mode [ 280.632960][T17090] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4994'. [ 280.642423][T17090] 0ªX¹¦D: renamed from 31ªX¹¦D [ 280.658426][T17090] 0ªX¹¦D: left promiscuous mode [ 280.663333][T17090] 0ªX¹¦D: entered allmulticast mode [ 280.673119][T17090] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 280.692261][T17103] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5000'. [ 280.719682][T17090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17090 comm=syz.4.4994 [ 280.736790][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4994'. [ 281.051229][T17129] lo speed is unknown, defaulting to 1000 [ 281.057727][T17129] lo speed is unknown, defaulting to 1000 [ 281.433943][T17133] random: crng reseeded on system resumption [ 281.526728][T17133] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(13) [ 281.533421][T17133] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 281.541027][T17133] vhci_hcd vhci_hcd.0: Device attached [ 281.647650][T17138] netlink: 'syz.4.5012': attribute type 12 has an invalid length. [ 281.655524][T17138] netlink: 'syz.4.5012': attribute type 29 has an invalid length. [ 281.822999][T17158] 0ªX¹¦D: entered promiscuous mode [ 281.828417][T17158] 0ªX¹¦D: left allmulticast mode [ 281.835106][T17147] 1ªX¹¦D: renamed from 30ªX¹¦D [ 281.856418][T17147] 1ªX¹¦D: left promiscuous mode [ 281.861664][T17147] 1ªX¹¦D: entered allmulticast mode [ 281.868863][T17147] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 281.895791][T17158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17158 comm=syz.4.5016 [ 281.909869][T17164] FAULT_INJECTION: forcing a failure. [ 281.909869][T17164] name failslab, interval 1, probability 0, space 0, times 0 [ 281.909897][T17164] CPU: 0 UID: 0 PID: 17164 Comm: syz.1.5024 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.909921][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.910003][T17164] Call Trace: [ 281.910010][T17164] [ 281.910016][T17164] __dump_stack+0x1d/0x30 [ 281.910037][T17164] dump_stack_lvl+0xe8/0x140 [ 281.910057][T17164] dump_stack+0x15/0x1b [ 281.910073][T17164] should_fail_ex+0x265/0x280 [ 281.910140][T17164] should_failslab+0x8c/0xb0 [ 281.910166][T17164] __kmalloc_cache_node_noprof+0x54/0x320 [ 281.910197][T17164] ? __get_vm_area_node+0x106/0x1d0 [ 281.910229][T17164] __get_vm_area_node+0x106/0x1d0 [ 281.910294][T17164] __vmalloc_node_range_noprof+0x273/0xe00 [ 281.910327][T17164] ? vc_do_resize+0x273/0xd70 [ 281.910424][T17164] ? handle_mm_fault+0x22a3/0x2c20 [ 281.910452][T17164] ? should_fail_ex+0xdb/0x280 [ 281.910475][T17164] ? vc_do_resize+0x273/0xd70 [ 281.910567][T17164] vzalloc_noprof+0x82/0xc0 [ 281.910673][T17164] ? vc_do_resize+0x273/0xd70 [ 281.910778][T17164] vc_do_resize+0x273/0xd70 [ 281.910825][T17164] ? __schedule+0x6b9/0xb30 [ 281.910917][T17164] __vc_resize+0x3c/0x50 [ 281.910980][T17164] vgacon_adjust_height+0x3cb/0x450 [ 281.911091][T17164] vgacon_font_set+0x191/0x1b0 [ 281.911119][T17164] ? __pfx_vgacon_font_set+0x10/0x10 [ 281.911304][T17164] con_font_op+0x8b9/0x930 [ 281.911323][T17164] ? selinux_capable+0x31/0x40 [ 281.911356][T17164] vt_ioctl+0x153c/0x1880 [ 281.911391][T17164] tty_ioctl+0x7db/0xb80 [ 281.911409][T17164] ? __pfx_tty_ioctl+0x10/0x10 [ 281.911483][T17164] __se_sys_ioctl+0xcb/0x140 [ 281.911503][T17164] __x64_sys_ioctl+0x43/0x50 [ 281.911590][T17164] x64_sys_call+0x1816/0x2ff0 [ 281.911612][T17164] do_syscall_64+0xd2/0x200 [ 281.911644][T17164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.911668][T17164] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.911750][T17164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.911772][T17164] RIP: 0033:0x7f87ca33ebe9 [ 281.911787][T17164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.911806][T17164] RSP: 002b:00007f87c8d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.911824][T17164] RAX: ffffffffffffffda RBX: 00007f87ca575fa0 RCX: 00007f87ca33ebe9 [ 281.911839][T17164] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000006 [ 281.911852][T17164] RBP: 00007f87c8d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.911864][T17164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.911876][T17164] R13: 00007f87ca576038 R14: 00007f87ca575fa0 R15: 00007ffcf9f45d48 [ 281.911896][T17164] [ 281.911905][T17164] syz.1.5024: vmalloc error: size 5824, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 281.911977][T17164] CPU: 0 UID: 0 PID: 17164 Comm: syz.1.5024 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.912003][T17164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.912018][T17164] Call Trace: [ 281.912025][T17164] [ 281.912033][T17164] __dump_stack+0x1d/0x30 [ 281.912053][T17164] dump_stack_lvl+0xe8/0x140 [ 281.912102][T17164] dump_stack+0x15/0x1b [ 281.912132][T17164] warn_alloc+0x12b/0x1a0 [ 281.912238][T17164] __vmalloc_node_range_noprof+0x297/0xe00 [ 281.912283][T17164] ? handle_mm_fault+0x22a3/0x2c20 [ 281.912370][T17164] ? should_fail_ex+0xdb/0x280 [ 281.912405][T17164] ? vc_do_resize+0x273/0xd70 [ 281.912437][T17164] vzalloc_noprof+0x82/0xc0 [ 281.912537][T17164] ? vc_do_resize+0x273/0xd70 [ 281.912566][T17164] vc_do_resize+0x273/0xd70 [ 281.912660][T17164] ? __schedule+0x6b9/0xb30 [ 281.912738][T17164] __vc_resize+0x3c/0x50 [ 281.912775][T17164] vgacon_adjust_height+0x3cb/0x450 [ 281.912805][T17164] vgacon_font_set+0x191/0x1b0 [ 281.912882][T17164] ? __pfx_vgacon_font_set+0x10/0x10 [ 281.912908][T17164] con_font_op+0x8b9/0x930 [ 281.912941][T17164] ? selinux_capable+0x31/0x40 [ 281.912981][T17164] vt_ioctl+0x153c/0x1880 [ 281.913012][T17164] tty_ioctl+0x7db/0xb80 [ 281.913028][T17164] ? __pfx_tty_ioctl+0x10/0x10 [ 281.913126][T17164] __se_sys_ioctl+0xcb/0x140 [ 281.913146][T17164] __x64_sys_ioctl+0x43/0x50 [ 281.913169][T17164] x64_sys_call+0x1816/0x2ff0 [ 281.913196][T17164] do_syscall_64+0xd2/0x200 [ 281.913317][T17164] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.913340][T17164] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.913373][T17164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.913479][T17164] RIP: 0033:0x7f87ca33ebe9 [ 281.913494][T17164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.913517][T17164] RSP: 002b:00007f87c8d9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 281.913540][T17164] RAX: ffffffffffffffda RBX: 00007f87ca575fa0 RCX: 00007f87ca33ebe9 [ 281.913583][T17164] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000006 [ 281.913596][T17164] RBP: 00007f87c8d9f090 R08: 0000000000000000 R09: 0000000000000000 [ 281.913612][T17164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.913703][T17164] R13: 00007f87ca576038 R14: 00007f87ca575fa0 R15: 00007ffcf9f45d48 [ 281.913727][T17164] [ 281.913746][T17164] Mem-Info: [ 281.913753][T17164] active_anon:26564 inactive_anon:12886 isolated_anon:0 [ 281.913753][T17164] active_file:25181 inactive_file:2337 isolated_file:0 [ 281.913753][T17164] unevictable:0 dirty:450 writeback:0 [ 281.913753][T17164] slab_reclaimable:3777 slab_unreclaimable:46035 [ 281.913753][T17164] mapped:34216 shmem:36262 pagetables:950 [ 281.913753][T17164] sec_pagetables:0 bounce:0 [ 281.913753][T17164] kernel_misc_reclaimable:0 [ 281.913753][T17164] free:1816862 free_pcp:9170 free_cma:0 [ 281.913834][T17164] Node 0 active_anon:106256kB inactive_anon:51544kB active_file:100724kB inactive_file:9348kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136864kB dirty:1800kB writeback:0kB shmem:145048kB kernel_stack:4976kB pagetables:3800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 281.913961][T17164] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 281.914188][T17164] lowmem_reserve[]: 0 2883 7862 7862 [ 281.914240][T17164] Node 0 DMA32 free:2949188kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 281.914318][T17164] lowmem_reserve[]: 0 0 4978 4978 [ 281.914423][T17164] Node 0 Normal free:4302900kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106256kB inactive_anon:51544kB active_file:100724kB inactive_file:9348kB unevictable:0kB writepending:1800kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:33044kB local_pcp:10808kB free_cma:0kB [ 281.914572][T17164] lowmem_reserve[]: 0 0 0 0 [ 281.914605][T17164] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 281.914849][T17164] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949188kB [ 281.915106][T17164] Node 0 Normal: 1105*4kB (UME) 423*8kB (UME) 619*16kB (UM) 286*32kB (UME) 180*64kB (UME) 431*128kB (UM) 503*256kB (UME) 372*512kB (UME) 253*1024kB (UM) 123*2048kB (UME) 825*4096kB (UME) = 4302956kB [ 281.915378][T17164] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 281.915397][T17164] 63787 total pagecache pages [ 281.915403][T17164] 16 pages in swap cache [ 281.915409][T17164] Free swap = 111192kB [ 281.915416][T17164] Total swap = 124996kB [ 281.915422][T17164] 2097051 pages RAM [ 281.915428][T17164] 0 pages HighMem/MovableOnly [ 281.915434][T17164] 80446 pages reserved [ 282.126902][T17167] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 282.197301][T17140] vhci_hcd: connection closed [ 282.202310][ T3462] vhci_hcd: stop threads [ 282.202322][ T3462] vhci_hcd: release socket [ 282.202334][ T3462] vhci_hcd: disconnect device [ 282.355425][T17186] lo speed is unknown, defaulting to 1000 [ 282.356188][T17186] lo speed is unknown, defaulting to 1000 [ 283.004425][T17201] hsr_slave_0: left promiscuous mode [ 283.010487][T17201] hsr_slave_1: left promiscuous mode [ 283.836882][T17241] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 283.889975][T17247] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 283.913379][T17249] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 284.353688][T17270] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 284.385153][T17268] validate_nla: 1 callbacks suppressed [ 284.385170][T17268] netlink: 'syz.4.5061': attribute type 12 has an invalid length. [ 284.398684][T17268] netlink: 'syz.4.5061': attribute type 29 has an invalid length. [ 284.572132][T17286] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 284.606861][ T29] kauditd_printk_skb: 741 callbacks suppressed [ 284.606878][ T29] audit: type=1326 audit(796.590:23032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.640889][ T29] audit: type=1326 audit(796.620:23033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.664115][ T29] audit: type=1326 audit(796.620:23034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.687380][ T29] audit: type=1326 audit(796.620:23035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.710372][ T29] audit: type=1326 audit(796.620:23036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.733780][ T29] audit: type=1326 audit(796.620:23037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.756743][ T29] audit: type=1326 audit(796.620:23038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.779842][ T29] audit: type=1326 audit(796.620:23039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.802838][ T29] audit: type=1326 audit(796.620:23040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.826111][ T29] audit: type=1326 audit(796.620:23041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17279 comm="syz.4.5067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a773debe9 code=0x7ffc0000 [ 284.863774][T17295] SELinux: policydb string length 8192 does not match expected length 8 [ 284.915616][T17295] SELinux: failed to load policy [ 284.974112][T17301] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 284.996319][T17303] SELinux: ebitmap: truncated map [ 285.006034][T17303] SELinux: failed to load policy [ 285.016680][T17307] netlink: 'syz.3.5078': attribute type 12 has an invalid length. [ 285.024508][T17307] netlink: 'syz.3.5078': attribute type 29 has an invalid length. [ 285.032413][T17307] __nla_validate_parse: 10 callbacks suppressed [ 285.032432][T17307] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5078'. [ 285.140169][T17300] lo speed is unknown, defaulting to 1000 [ 285.146467][T17300] lo speed is unknown, defaulting to 1000 [ 285.294107][T17316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5079'. [ 285.360561][T17320] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 285.392027][T17322] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 285.449538][T17326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5085'. [ 285.488004][T17326] netlink: 'syz.4.5085': attribute type 1 has an invalid length. [ 285.966878][T17342] lo speed is unknown, defaulting to 1000 [ 285.972968][T17342] lo speed is unknown, defaulting to 1000 [ 286.180443][T17348] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 286.258476][T17350] hub 2-0:1.0: USB hub found [ 286.287719][T17350] hub 2-0:1.0: 8 ports detected [ 286.404088][T17363] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 286.457935][T17382] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 286.630602][T17401] SELinux: ebitmap: truncated map [ 286.644844][T17401] SELinux: failed to load policy [ 286.737803][T17416] block device autoloading is deprecated and will be removed. [ 286.765159][T17418] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 286.785023][T17408] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 287.036112][T17447] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 287.064801][T17449] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 287.115435][T17451] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 287.241320][T17443] netlink: 'syz.3.5129': attribute type 21 has an invalid length. [ 287.249459][T17443] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5129'. [ 287.258673][T17443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5129'. [ 287.331026][T17468] FAULT_INJECTION: forcing a failure. [ 287.331026][T17468] name failslab, interval 1, probability 0, space 0, times 0 [ 287.343747][T17468] CPU: 0 UID: 0 PID: 17468 Comm: syz.4.5138 Not tainted syzkaller #0 PREEMPT(voluntary) [ 287.343780][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.343796][T17468] Call Trace: [ 287.343805][T17468] [ 287.343814][T17468] __dump_stack+0x1d/0x30 [ 287.343840][T17468] dump_stack_lvl+0xe8/0x140 [ 287.343871][T17468] dump_stack+0x15/0x1b [ 287.343891][T17468] should_fail_ex+0x265/0x280 [ 287.343943][T17468] should_failslab+0x8c/0xb0 [ 287.344016][T17468] __kmalloc_noprof+0xa5/0x3e0 [ 287.344049][T17468] ? kobject_get_path+0x92/0x1c0 [ 287.344131][T17468] kobject_get_path+0x92/0x1c0 [ 287.344153][T17468] kobject_uevent_env+0x1da/0x570 [ 287.344226][T17468] ? sysfs_remove_groups+0x64/0x80 [ 287.344254][T17468] kobject_uevent+0x1d/0x30 [ 287.344278][T17468] device_del+0x710/0x790 [ 287.344306][T17468] ? __try_to_del_timer_sync+0x152/0x170 [ 287.344346][T17468] device_unregister+0x15/0x40 [ 287.344372][T17468] wakeup_source_sysfs_remove+0x25/0x30 [ 287.344402][T17468] wakeup_source_unregister+0xf0/0x330 [ 287.344427][T17468] ep_destroy_wakeup_source+0x3a/0x50 [ 287.344572][T17468] ep_modify+0xb0/0x450 [ 287.344604][T17468] do_epoll_ctl+0x611/0x8a0 [ 287.344634][T17468] __x64_sys_epoll_ctl+0xcb/0x100 [ 287.344801][T17468] x64_sys_call+0x706/0x2ff0 [ 287.344843][T17468] do_syscall_64+0xd2/0x200 [ 287.344882][T17468] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 287.344907][T17468] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 287.344937][T17468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.345033][T17468] RIP: 0033:0x7f7a773debe9 [ 287.345048][T17468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.345067][T17468] RSP: 002b:00007f7a75e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 287.345087][T17468] RAX: ffffffffffffffda RBX: 00007f7a77615fa0 RCX: 00007f7a773debe9 [ 287.345165][T17468] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000005 [ 287.345177][T17468] RBP: 00007f7a75e47090 R08: 0000000000000000 R09: 0000000000000000 [ 287.345189][T17468] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 287.345202][T17468] R13: 00007f7a77616038 R14: 00007f7a77615fa0 R15: 00007ffd77c746e8 [ 287.345221][T17468] [ 287.581863][T17471] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5139'. [ 287.596593][T17471] 0ªX¹¦D: entered promiscuous mode [ 287.601777][T17471] 0ªX¹¦D: left allmulticast mode [ 287.627675][T17470] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5139'. [ 287.628451][T17475] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 287.654212][T17470] 1ªX¹¦D: renamed from 30ªX¹¦D [ 287.677196][T17470] 1ªX¹¦D: left promiscuous mode [ 287.682142][T17470] 1ªX¹¦D: entered allmulticast mode [ 287.691553][T17470] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 287.708687][T17477] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 287.709659][T17470] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17470 comm=syz.0.5139 [ 287.731225][T17470] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5139'. [ 287.790336][T17488] FAULT_INJECTION: forcing a failure. [ 287.790336][T17488] name failslab, interval 1, probability 0, space 0, times 0 [ 287.803335][T17488] CPU: 1 UID: 0 PID: 17488 Comm: syz.0.5147 Not tainted syzkaller #0 PREEMPT(voluntary) [ 287.803369][T17488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.803382][T17488] Call Trace: [ 287.803387][T17488] [ 287.803394][T17488] __dump_stack+0x1d/0x30 [ 287.803426][T17488] dump_stack_lvl+0xe8/0x140 [ 287.803450][T17488] dump_stack+0x15/0x1b [ 287.803496][T17488] should_fail_ex+0x265/0x280 [ 287.803527][T17488] should_failslab+0x8c/0xb0 [ 287.803559][T17488] kmem_cache_alloc_node_noprof+0x57/0x320 [ 287.803648][T17488] ? __alloc_skb+0x101/0x320 [ 287.803670][T17488] __alloc_skb+0x101/0x320 [ 287.803724][T17488] ? audit_log_start+0x365/0x6c0 [ 287.803835][T17488] audit_log_start+0x380/0x6c0 [ 287.803864][T17488] ? inode_maybe_inc_iversion+0xde/0x100 [ 287.803892][T17488] audit_seccomp+0x48/0x100 [ 287.803986][T17488] ? __seccomp_filter+0x68c/0x10d0 [ 287.804024][T17488] __seccomp_filter+0x69d/0x10d0 [ 287.804053][T17488] ? up_write+0x18/0x60 [ 287.804123][T17488] ? do_truncate+0x151/0x180 [ 287.804146][T17488] ? __rcu_read_unlock+0x4f/0x70 [ 287.804169][T17488] ? mntput_no_expire+0x6f/0x460 [ 287.804282][T17488] __secure_computing+0x82/0x150 [ 287.804310][T17488] syscall_trace_enter+0xcf/0x1e0 [ 287.804341][T17488] do_syscall_64+0xac/0x200 [ 287.804435][T17488] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 287.804467][T17488] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 287.804495][T17488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.804555][T17488] RIP: 0033:0x7fe71a17d5fc [ 287.804574][T17488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 287.804593][T17488] RSP: 002b:00007fe718be7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.804617][T17488] RAX: ffffffffffffffda RBX: 00007fe71a3b5fa0 RCX: 00007fe71a17d5fc [ 287.804667][T17488] RDX: 000000000000000f RSI: 00007fe718be70a0 RDI: 0000000000000005 [ 287.804681][T17488] RBP: 00007fe718be7090 R08: 0000000000000000 R09: 0000000000000000 [ 287.804693][T17488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.804704][T17488] R13: 00007fe71a3b6038 R14: 00007fe71a3b5fa0 R15: 00007fff3b64b158 [ 287.804727][T17488] [ 288.116139][T17494] lo speed is unknown, defaulting to 1000 [ 288.122523][T17494] lo speed is unknown, defaulting to 1000 [ 288.172774][T17509] netlink: 'syz.3.5153': attribute type 12 has an invalid length. [ 288.180824][T17509] netlink: 'syz.3.5153': attribute type 29 has an invalid length. [ 288.188661][T17509] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5153'. [ 288.232238][T17511] SELinux: failed to load policy [ 288.262762][T17513] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 288.351608][T17522] netlink: 'syz.2.5156': attribute type 4 has an invalid length. [ 288.658637][T17547] netlink: 'syz.4.5166': attribute type 12 has an invalid length. [ 288.666777][T17547] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5166'. [ 288.728783][T17550] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 288.847566][T17555] 1ªX¹¦D: entered promiscuous mode [ 288.852717][T17555] 1ªX¹¦D: left allmulticast mode [ 288.863367][T17555] 0ªX¹¦D: renamed from 31ªX¹¦D [ 288.870415][T17555] 0ªX¹¦D: left promiscuous mode [ 288.875363][T17555] 0ªX¹¦D: entered allmulticast mode [ 288.882843][T17555] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 288.900932][T17554] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17554 comm=syz.4.5169 [ 289.326113][T17573] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 289.342830][T17573] SELinux: failed to load policy [ 289.369062][T17578] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 289.465846][T17587] SELinux: policydb version -1859748077 does not match my version range 15-35 [ 289.475293][T17587] SELinux: failed to load policy [ 289.481777][T17582] 1ªX¹¦D: entered promiscuous mode [ 289.486987][T17582] 1ªX¹¦D: left allmulticast mode [ 289.505639][T17582] 0ªX¹¦D: renamed from 31ªX¹¦D [ 289.513668][T17582] 0ªX¹¦D: left promiscuous mode [ 289.518603][T17582] 0ªX¹¦D: entered allmulticast mode [ 289.528866][T17582] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 289.546114][T17582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17582 comm=syz.2.5180 [ 289.600762][T17602] loop2: detected capacity change from 0 to 1024 [ 289.618784][T17602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.627040][T17603] validate_nla: 1 callbacks suppressed [ 289.627059][T17603] netlink: 'syz.3.5187': attribute type 4 has an invalid length. [ 289.632701][ T29] kauditd_printk_skb: 791 callbacks suppressed [ 289.632716][ T29] audit: type=1400 audit(801.620:23831): avc: denied { mount } for pid=17601 comm="syz.2.5189" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 289.732083][T17602] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 289.781239][ T29] audit: type=1400 audit(801.700:23832): avc: denied { add_name } for pid=17601 comm="syz.2.5189" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 289.801478][ T29] audit: type=1400 audit(801.700:23833): avc: denied { create } for pid=17601 comm="syz.2.5189" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 289.821636][ T29] audit: type=1400 audit(801.700:23834): avc: denied { read write open } for pid=17601 comm="syz.2.5189" path="/506/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 289.864776][ T29] audit: type=1400 audit(801.810:23835): avc: denied { read } for pid=17601 comm="syz.2.5189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 289.886004][T11015] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.902229][ T29] audit: type=1400 audit(801.840:23836): avc: denied { unmount } for pid=11015 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 289.941324][T17616] SELinux: policydb magic number 0x74687465 does not match expected magic number 0xf97cff8c [ 289.953528][T17616] SELinux: failed to load policy [ 290.168245][T17628] lo speed is unknown, defaulting to 1000 [ 290.174358][T17628] lo speed is unknown, defaulting to 1000 [ 290.361624][T17632] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 290.428332][T17634] __nla_validate_parse: 6 callbacks suppressed [ 290.428352][T17634] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5199'. [ 290.466732][T17634] 0ªX¹¦D: entered promiscuous mode [ 290.471903][T17634] 0ªX¹¦D: left allmulticast mode [ 290.527228][T17637] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5199'. [ 290.531814][T17634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17634 comm=syz.4.5199 [ 290.536303][T17637] 1ªX¹¦D: renamed from 30ªX¹¦D [ 290.557862][T17637] 1ªX¹¦D: left promiscuous mode [ 290.562758][T17637] 1ªX¹¦D: entered allmulticast mode [ 290.570045][T17637] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 290.586228][T17634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5199'. [ 290.619471][ T29] audit: type=1326 audit(802.580:23837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.3.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 290.642725][ T29] audit: type=1326 audit(802.580:23838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.3.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 290.642770][ T29] audit: type=1326 audit(802.580:23839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.3.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 290.642796][ T29] audit: type=1326 audit(802.580:23840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17642 comm="syz.3.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93d68bebe9 code=0x7ffc0000 [ 290.805949][T17661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.816573][T17661] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.836578][T17657] SELinux: policydb magic number 0x74687465 does not match expected magic number 0xf97cff8c [ 290.847188][T17657] SELinux: failed to load policy [ 290.852408][T17663] SELinux: policydb magic number 0x74687465 does not match expected magic number 0xf97cff8c [ 290.863544][T17663] SELinux: failed to load policy [ 290.904963][T17661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.915408][T17661] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 290.939726][T17669] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 290.960741][T17674] netlink: 'syz.4.5214': attribute type 4 has an invalid length. [ 290.987889][T17661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.998257][T17661] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.085496][T17661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.095871][T17661] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 291.117282][T17682] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 291.168664][ T4670] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.177101][ T4670] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 291.189311][ T4641] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.197781][ T4641] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 291.223408][ T4641] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.231829][ T4641] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 291.245515][ T4641] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 291.253861][ T4641] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 291.288381][T17688] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.324819][T17695] SELinux: policydb magic number 0x74687465 does not match expected magic number 0xf97cff8c [ 291.339319][T17695] SELinux: failed to load policy [ 291.379541][T17688] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.422705][T17704] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 291.497173][T17688] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.666680][ C0] ================================================================== [ 291.674812][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 291.682021][ C0] [ 291.684358][ C0] read-write to 0xffff8881001b26b8 of 8 bytes by interrupt on cpu 1: [ 291.692430][ C0] wq_worker_tick+0x60/0x230 [ 291.697050][ C0] sched_tick+0x11a/0x270 [ 291.701409][ C0] update_process_times+0x15f/0x190 [ 291.706628][ C0] tick_nohz_handler+0x249/0x2d0 [ 291.711599][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 291.716835][ C0] hrtimer_interrupt+0x21a/0x460 [ 291.721826][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 291.727754][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 291.733428][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.739448][ C0] __sanitizer_cov_trace_pc+0x8/0x70 [ 291.744767][ C0] css_rstat_updated+0x60/0x240 [ 291.749646][ C0] mod_memcg_state+0xdb/0x2b0 [ 291.754439][ C0] uncharge_batch+0x75/0x190 [ 291.759050][ C0] __mem_cgroup_uncharge_folios+0x86/0xb0 [ 291.764786][ C0] folios_put_refs+0x26e/0x2d0 [ 291.769747][ C0] release_pages+0x2a8/0x2f0 [ 291.774367][ C0] io_free_region+0x7b/0x160 [ 291.778991][ C0] io_ring_ctx_free+0x1de/0x3a0 [ 291.783872][ C0] io_ring_exit_work+0x529/0x560 [ 291.788843][ C0] process_scheduled_works+0x4ce/0x9d0 [ 291.794338][ C0] worker_thread+0x582/0x770 [ 291.798952][ C0] kthread+0x486/0x510 [ 291.803046][ C0] ret_from_fork+0xda/0x150 [ 291.807585][ C0] ret_from_fork_asm+0x1a/0x30 [ 291.812498][ C0] [ 291.814851][ C0] read-write to 0xffff8881001b26b8 of 8 bytes by interrupt on cpu 0: [ 291.822931][ C0] wq_worker_tick+0x60/0x230 [ 291.828072][ C0] sched_tick+0x11a/0x270 [ 291.832438][ C0] update_process_times+0x15f/0x190 [ 291.837688][ C0] tick_nohz_handler+0x249/0x2d0 [ 291.842668][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 291.847884][ C0] hrtimer_interrupt+0x21a/0x460 [ 291.852894][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 291.858821][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 291.864529][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 291.870548][ C0] release_pages+0x106/0x2f0 [ 291.875204][ C0] io_free_region+0x7b/0x160 [ 291.879866][ C0] io_ring_ctx_free+0x1de/0x3a0 [ 291.884778][ C0] io_ring_exit_work+0x529/0x560 [ 291.889761][ C0] process_scheduled_works+0x4ce/0x9d0 [ 291.890043][T17715] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 291.895272][ C0] worker_thread+0x582/0x770 [ 291.906636][ C0] kthread+0x486/0x510 [ 291.910732][ C0] ret_from_fork+0xda/0x150 [ 291.915269][ C0] ret_from_fork_asm+0x1a/0x30 [ 291.920058][ C0] [ 291.922391][ C0] value changed: 0x000000000021dfe0 -> 0x00000000002206f0 [ 291.929507][ C0] [ 291.931851][ C0] Reported by Kernel Concurrency Sanitizer on: [ 291.938021][ C0] CPU: 0 UID: 0 PID: 4644 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(voluntary) [ 291.948022][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.958105][ C0] Workqueue: iou_exit io_ring_exit_work [ 291.963708][ C0] ================================================================== [ 291.980615][T17688] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.175894][ T4635] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.184891][ T4627] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.194153][ T4627] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.205631][ T4627] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0