last executing test programs: 1.954807292s ago: executing program 1 (id=8363): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_mount_image$ext4(0x0, &(0x7f0000000300)='./file0\x00', 0x3a0e04d, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYRES64], 0x28}}], 0x2, 0x4000000) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fchmodat(r1, &(0x7f0000000140)='./file0\x00', 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x20, 0x0, 0xc, 0x2}]}, {0x0, [0x5f, 0x5f]}}, 0x0, 0x28, 0x0, 0x1, 0xf518}, 0x28) r3 = syz_open_dev$vcsn(&(0x7f0000000080), 0x8, 0x501200) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000640)=0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x7ff, 0x100, 0x5, 0x40000, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1c, 0x22, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @ldst={0x0, 0x3, 0x3, 0x3, 0xb, 0x8, 0x10}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x1, 0x48, &(0x7f00000005c0)=""/72, 0x40f00, 0x42, '\x00', r4, @fallback=0x1f, r3, 0x8, &(0x7f0000000680)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x7, 0x8, 0xfffffff0}, 0x10, 0xffffffffffffffff, r3, 0x4, &(0x7f0000000780)=[r5], &(0x7f00000007c0)=[{0x3, 0x2, 0x8, 0x11}, {0x1, 0x5, 0xb, 0x6}, {0x3, 0x3, 0xc, 0xa}, {0x4, 0x2, 0x7, 0x5}], 0x10, 0x80000000}, 0x94) sendmsg$can_raw(r3, &(0x7f0000000240)={&(0x7f00000000c0), 0x10, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{0x2, 0x1}, 0xff, 0x7, 0x0, 0x0, "4e4acffe4cd43b75"}, 0x10}, 0x1, 0x0, 0x0, 0x5db720048a183ea8}, 0x4000) 1.905069983s ago: executing program 1 (id=8366): socket$pppoe(0x18, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ba}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x3}, 0x18) getuid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000380)=[@in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x81, 0x7fff0000}]}) utimes(0x0, 0x0) sync_file_range(r3, 0x3d, 0x7, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r5, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x30, r6, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x10) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r4, 0x5, 0x4002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000f10900240012800b00010067656e65766500001400028005000800000000ac1a7fdd004e200000"], 0x44}}, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'vxcan1\x00'}) 1.610720699s ago: executing program 3 (id=8378): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0xc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) (fail_nth: 4) 1.349437913s ago: executing program 3 (id=8380): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 1.312227094s ago: executing program 3 (id=8384): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000040)="aa1d484ea0000000f7fe08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) 1.161739797s ago: executing program 3 (id=8392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.125908188s ago: executing program 3 (id=8393): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000190000012bbd7000fbdbdf250a010900ca0808fa0931c3979ec2452301dc3df4"], 0x14}, 0x1, 0x0, 0x0, 0x40000045}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000180)={[{@errors_remount}, {@barrier}]}, 0x1, 0x4f2, &(0x7f0000000c80)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x10, [{0xb, 0x3, 0x9}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x1fb, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x52, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x44000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r5, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/17, 0x11}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=""/65, 0x41}, 0x9}], 0x2, 0x44, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000005000000020000000000000c03e4ffffff002e2e00b935fb4c0f139e4a07f61092e388a92c70e39a3e5c8ae0bc58ad0ec55f049b2c335ed784e9ed979e41dbc09d3e2ee17b"], 0x0, 0x29, 0x0, 0x1, 0xa426000}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000017c0)={'syztnl1\x00', &(0x7f0000001740)={'ip6tnl0\x00', 0x0, 0x4, 0x6, 0x5e, 0x8, 0xa, @ipv4={'\x00', '\xff\xff', @remote}, @private2, 0x40, 0x10, 0xfff, 0x4}}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001900)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0xfff, @empty, 0x1}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000005c0)="ab7a13dd5af2e6c0e187700af68786f51b9dd64a64ffe4b64f5e3da7177a5251d87475393b76bbb4554ce83fbabef8b57c9740f091d3d8a0f0192e9b8822fe41470d24e02257183774ed29161fe899350a886fb4eebf41995cf94fb6a7f0f7ca3d8f73095aed9ca4755b60f3c4e32917588059b5a6d95be0aafb7fd80cbc89ae2769553b24485ea4ff0d8da9e0ffb0339977423f45", 0x95}], 0x1, &(0x7f0000001c00)=[@rthdrdstopts={{0x150, 0x29, 0x37, {0x0, 0x26, '\x00', [@jumbo={0xc2, 0x4, 0x401}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x7}, @generic={0x23, 0xd4, "ff0aa31623f51c6e8822e90d43545f9dcbc599d05dfe9b37515616df05d6fa0c9ae9dd6b0e15bd2e81da27e8c204790d554ee0f900988bfac754dc3b805cf00f216e7a2b01fdecfb64a9ac46028c1763ad217f906d4557a9a38579960c62aee891b4e27fac0c86dcf61e87f86360dadcc2ada587d9b79bb7c84bba73a09c2950244aaed2f57c325816674eb0e99cd17def2fc61b801d776028392b1e97fdc7da2eb2caf7fea1fe782e97d796052d133258869f3b6a26769751224f54e1e78f5e5be247393aa991e38def721baf93dcedb2aa8fab"}, @calipso={0x7, 0x28, {0x1, 0x8, 0x4, 0x7, [0x1, 0x5, 0x93f8, 0xd620]}}, @hao={0xc9, 0x10, @loopback}, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0x150}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x74, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffb}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000a00)="c03c686189c88022b19e53be558b40591cd40f47686ab6b75056ee48d4620086f364dc2fa069cfa5f2fdcd4ed0401ad230aef3fe1fd2e561477f78afa98432e17f562412f4ba5d1b3e65b96c892e70957d4f41ea670c63b766002e2db1f55054e0c596023ee3a32a81ddd25a0f5d07d76f3d4f511131574cc3a4e7d8db031983dc939c7c82c5aaacbe03b71913854ac14fbd5933b332278de7006332445ca46fdc6f6ffd84172434798d5295e9f97ee7fbfab1a796f26fdec25da58af8edf8e1570639c98ed7e49aca656353baf2f8d37f882339665fbfc45601391fdb90c7dc0233", 0xe2}], 0x1, &(0x7f00000008c0)=[@hopopts_2292={{0x70, 0x29, 0x36, {0x2f, 0xa, '\x00', [@ra={0x5, 0x2, 0x1}, @calipso={0x7, 0x50, {0x3, 0x12, 0x3, 0x6, [0x9, 0x40000000000000, 0x1, 0x20, 0xb, 0x9, 0x2, 0x0, 0x0]}}]}}}], 0x70}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x200000, @mcast1, 0xff}, 0x1c, &(0x7f0000001200)=[{&(0x7f0000000b00)="1c359858342f8b2fa7f52a5371337d1d2c359b2822171f5658f5ccdb2ad08995f512744f97b4d8a7e0fc30e4768d2c9379a68318f13971839da80a1235b2c858dd88476d0516470268936e51011aa57f6083ba1b8de4cfe285b2e5ce732ad6b1d76347186ff8ea1deac93f88ca98dfffb094c204441c88a912f4eb081796c83d286cf1d6733a980dff8a37f4ea9f93bf9447b8a23f82702a2212b67183d2bc396114408d3742655163df79f40c9e194f17639cf9e9de34375a", 0xb9}, {&(0x7f0000000bc0)="1145c1b737d2dec56fa8ac37a4ee79834dd0991761a554e48eca99c398b6bfc2895d000c6425194133a9ff51f05d1e19ba3ae335cd04542586d62a3907d9b2f06148c46aa745ce10ca3cac937b509a49990aad3f3976ea3e329010362b26ce370ffbe1a5868171c07181bc1f63e69facdbda03230d3751baaf89eca29a99bca43a8ac7e144ec1084776fd7d92a410fcc2ba924ebcd9a4954b5e8d6836ac91c37d223cb43d31fd9465ce700a4f1cc1a50842b7a2c9f2037a918f6eb4ffa196a", 0xbf}, {&(0x7f0000001180)="8bdccdff65021e164c379d1014bdee79dd48b5d815760855b9ee31117ff25205def87801d0e613d400bf6b0d79c3d53a39bd688fc635dd8c232be7661e5c98361ff6227173fa00c04d7287ac498a175d08659f0faee1dff38440d321713f2efa8e9ccf7bb9d92f5019571dcc6af1e9", 0x6f}], 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="1400000000000000290000003e0000004000000000000000380000000000000029000000370000003303000000000000050201ff071800000003040803000600000000000000080000000000000000001400000000000000290000000b00000000000006000000002400000000000000290000003200000020010000000000000000000000000002", @ANYRES32=r7, @ANYBLOB="000000004e0000000000d597076ec845030000000000000000000000f0ffc810200100000000000000000000000000000000000000000000400000001f000000000000"], 0xe8}}, {{&(0x7f00000013c0)={0xa, 0x4e22, 0xe875, @dev={0xfe, 0x80, '\x00', 0x22}, 0x73}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001400)="3c8f9aeae0a8234970b6d2bad0fc451b8c4f572182a062800cf7853f7c331d5ecae2b6857250dbededabeb1120afa7362ec8a90df427eee8f57736d08be475b716896a5f6772b46021e09a31d191e5221b780083cb0b", 0x56}, {&(0x7f0000001480)="c1b923e3871ef85b9f7a3c69d43dedc4a550a615b024a2b84bf4e94e39e2eed5573fcbd4245bd72bd8a52d5c436f82ea21f841f4eef8ad63b5e338a246c82c41c64c37b8f771bfa7d1c9a84f1926168bf7e0b508f8e790ab879e744d457874793d3ced9d166984bd76c69f5050d36c5563d14ade740994eb39270a1719f892fb0f529bb70ba4260f937742a447cd2c894cf5c779ea2eb97c1a9ca140396a831f2430cea790ce1f594a93386607cf376afe6547f193d58fc61369c42cef744ff394a19f551a51fb0362d2c2eb9fd734a4d83a585f557a7a45ca87a8528ca05f", 0xdf}, {&(0x7f0000001580)="8a315858c02c1a17a3265fd04658815303d0f0e694ce63c107707b30a3daff285009e707ed78d56732954bfd6861bdb93224b46e31cd5b5fe549e3971227fe62b835dbe6022edb76db506c967a25f44e613c471f5c97794b2cd9a6cd86e0f3879851a3d0d8a1e7f6b75a1385f726d0631bb271d0a00fc028e774b90a0f2ed0f7504c736ecd3332f55e622f7cb6632daec44f8b640df2909bb04fc1f533ac6085e17c1d2f124080ecf44ff68b25c7d122f528e8e8db2c1e2cd1a73175c300db2fd46dd6ecb6070009c3fff978c58a3fbdf312a67819acf1c1", 0xd8}, {&(0x7f0000001680)="146e9e0d970c40ba42622455dae97424e0d66155d5c2054899d53c1be04c57082d4284e4d0b3c6a750d8f783242166fbd1c16ddad8179ea128b6b2cae662ce243f07ca5b86d653e8472324684da1af94c5a059acbaf94d4f03933dcff7e9d2f7cb0a5fe6fd35664112391384e1d23624", 0x70}], 0x4, &(0x7f0000001800)=[@rthdr={{0x88, 0x29, 0x39, {0x2b, 0xe, 0x1, 0xf8, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x36}, @remote, @private1]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x1, 0x0, '\x00', [@pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r8}}}], 0xd0}}], 0x4, 0x50) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 1.01212202s ago: executing program 1 (id=8397): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x18) r9 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10}) io_uring_register$IORING_REGISTER_CLOCK(r9, 0x1d, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800", @ANYRES32=r12, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x4, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x87, &(0x7f0000000740)=""/135, 0x41000, 0x41, '\x00', r11, @cgroup_sock=0x22, r9, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x2, 0x9, 0xa}, 0x10, 0xffffffffffffffff, r8, 0x6, &(0x7f0000000880)=[0x1, r1, r12, r13], &(0x7f00000008c0)=[{0x1, 0x3, 0x9}, {0x5, 0x1, 0x8, 0x8}, {0x4, 0x4, 0x3, 0x4}, {0x3, 0x5, 0x3, 0x3}, {0x5, 0x1, 0x5}, {0x2, 0x3, 0xc, 0x1}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r14}, 0x18) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 922.570702ms ago: executing program 1 (id=8401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000480)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fremovexattr(0xffffffffffffffff, 0x0) 867.904003ms ago: executing program 1 (id=8405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x3, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 843.482833ms ago: executing program 1 (id=8408): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c0000001400010125bd7000fddbdf25011f08104e244e23030000005b00000010000000c300000006000000000000000400000007000000", @ANYRES32=0x0, @ANYBLOB="0100000000000000f2"], 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x20040000) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES8=0x0, @ANYRESDEC, @ANYRES64=r0], 0x50) mq_timedsend(0xffffffffffffffff, 0x0, 0xffffff8d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = open$dir(&(0x7f0000000340)='./file0\x00', 0x1012c0, 0xf) linkat(r3, &(0x7f0000000300)='./file0\x00', r4, &(0x7f0000000380)='./file0\x00', 0x400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x1, @perf_bp={0x0, 0x3}, 0x6025, 0x7, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r6, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r8, 0x7}}, 0x48) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r9, &(0x7f0000000580)={0xe, 0x1, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, r10, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r9, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r10, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0xc, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r6, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 705.224726ms ago: executing program 2 (id=8413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01dfffffff9a260000"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 704.889236ms ago: executing program 4 (id=8414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xf, 0x1, &(0x7f00000000c0)=@raw=[@exit], &(0x7f00000006c0)='GPL\x00', 0xe, 0x7f, &(0x7f0000000700)=""/127, 0x41100, 0xa, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0xe, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r0, r0, r0, r0, r0, r0, r0, r0, r0], 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x348, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x240, 0x1, [@m_xt={0x130, 0xa, 0x0, 0x0, {{0x7}, {0x108, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x800}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x4d, 0x6, {0x2fe, 'nat\x00', 0x7, 0x1000, "32191f502c659f78524cedcb63159b9970fd761bd5a7356aa2eb78ed001acbeda2a4ab"}}, @TCA_IPT_TARG={0x56, 0x6, {0x8001, 'nat\x00', 0xe, 0x1000, "5b17aa89d80870c15066789ffc3b484ddb037d507299171c05cbd077a4e3492a17ecb2370233755138b3858b"}}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffd}, @TCA_IPT_TARG={0x2a, 0x6, {0x22, 'mangle\x00', 0x8, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0xdc, 0x34, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0xfffffffd, 0x6, 0x8, 0x9}, 0x43}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x4, 0x0, 0x136bcb9c}, 0x6c}}]}, {0x75, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a3729"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbmod={0x30, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, {0xf4, 0x1, [@m_gact={0xf0, 0x16, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x101, 0x3, 0x3, 0x10000}}]}, {0xaa, 0x6, "3b5787a933d0695a3c65e24e5c4c8a9428e87983fcb08e778c4c16d937c9d6cdd2b42f9e24f75184f7dfdc33389e6615d6aa21fe6ee7d9836096a2743418947b1a45472c40db288e9fd9c34c8ceed8fb34c3bb42b89f5d42e9ec5f7e781cf88ee98688cd4e3817aab179991acb608cb1c9d6602df0c66e9c85c04ed665949bc57820d143f2c35d2b11306076c500bca5dfe8a73bb5282cd3d23713e622e54ddf68775a8b65b4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4004000}, 0x50) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r6, &(0x7f00000000c0), 0x0, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0}}], 0x30}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) unshare(0x2c040000) unshare(0x2c020400) socket(0xa, 0x3, 0x3a) 704.698556ms ago: executing program 2 (id=8415): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) fadvise64(r0, 0x2, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000740)={0x3, {{0xa, 0x4e23, 0x200000c, @mcast1, 0x8}}}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3, 0xf, 0x0) 698.564847ms ago: executing program 0 (id=8416): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = add_key$user(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x1}, &(0x7f00000005c0)="2ada15cbc1164f81dcc2210945717d026497e08cad7fc06938a55b9773a4e2", 0x1f, 0x0) (rerun: 64) keyctl$update(0x2, r1, &(0x7f0000000600)="02df94db86246f7272653a74e7edb41d0ab1d42b94616f3a33640cc5c8afb9c486ab3ff81994c3912820457320901170b8a0ae222ef082937f1d43c5dcdb808aee528c47e0dce6b025079d033c616bb744689551cd1ec8f9f43a7b8c82a4139a5d68e3269460613e591082e48198a03410e62009eafda9c8b91e63d9ab3f1dcc2bbb6210928cadcb3005d6d9f3a7b62a6e17b0cf6a77e998b45aada0906e8a0187244da667cec928edbfac6752d04cbb4d9013", 0xb3) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r4, &(0x7f0000ff1000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000101010300000000000000000a0000030c0019800800010008000000100001800c0002"], 0x30}, 0x1, 0x0, 0x0, 0x8008001}, 0x24008854) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000007c0)=ANY=[@ANYBLOB="2c000000af3012b241a745da66075969a06bba6b78e5237b1abf902f3d080000000000000059fd39916735f047f5a96ea35cc6e58978cd346f59c61dd3e57891ff939e00f9d32b35da59bf26c1c79c1edc729d5419a8d4a98a79d89af6f293655ebfa47472824eb06efbab44e21c2e760eaad00543d20aeeed9f1aa76f633197b8fa33fc6fd8d7352364692774aee92fe0ca90e27d30dba535a68c141a60c63f653f6365946fd5d6b0af4d014100"/188, @ANYRES16=r6, @ANYBLOB="5fa22dbd7000fddbdf25010000001800018014000200766574683100"/38], 0x2c}, 0x1, 0x0, 0x0, 0x20008804}, 0xa4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r10, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac"], 0x50}}, 0x0) (async) getsockopt$WPAN_SECURITY(r9, 0x0, 0x1, &(0x7f0000000140), &(0x7f00000004c0)=0x4) (async, rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x9801}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc811}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x2a4, r6, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x178, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x57, 0x5, "f93933c7c1bf1e946627758f508e464f3def8f7fa5fb489bcea549610253ae01160beb0fbfc088d857983e7be42ab85f44f2ef1d0a603f18fad3dbc2a0c70553ff4cec6d54eec078592d0cd93f5cd0c3e704da"}, @ETHTOOL_A_BITSET_MASK={0x37, 0x5, "e508945ecd62b0ed1bb18c09b470da86f1f36ad3bae85f3f7329f9a2a5a03245c6134b3fc36bce5dc986f81884bf92ff4e016b"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2d, 0x4, "00348a08f0e359b274a7de9bd72e2354ffdab592854a6aa499b0ba592db92fcc54ab1a4d1e1d1f2ef8"}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "239674d27a910c3de39ee3e3f6a2491c17d86761f898ef34a6e128a622d6cc4259f2edf19e57f84338495fb688dc8ad68f9bbe81cc498d2761e1afd778f091e065e83884bc65f5dc45f9030d0a2a252399fbb8c4c94ab3ced2cf0dd2e4fd5ec2f4e73feffae904ba4f13135fdeb70487490c9dd5cf579fe67b024a9bed304628047b4c307a5c3058ccd06ecfc34ee2edc093246023c1650ee6d72234d1"}]}, @ETHTOOL_A_FEATURES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xba, 0x5, "bc0e3b0db1da0e4ffe1298df58ca0c8a2b0d3af884637db46e0bfcf777616b0aa634b2dd45e79c637b9a5a242ca9eda7591873c761cdf02dbee4033a485eb6e13debe3b65ca18946d0d51d636632a6fc31dbf7216f69e14fe79a77aab24c5bec96467bf83fc6a00bdf28e111c4b2396432b3239a4ec74e9d19343c6260413317a763548074c40c00fee1cf39317e9b7141b4eeab927ff952c2ba2b6a1fa8b26e6c735533729f725aaed07c617267036376a5ae159b95"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x20008040}, 0x20000000) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c0000000203010200000000000000000a0000010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x43044) (async, rerun: 32) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x28010) 644.497707ms ago: executing program 4 (id=8417): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000"], 0x110}}, 0x0) 644.197177ms ago: executing program 2 (id=8418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x3, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 643.668937ms ago: executing program 4 (id=8419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b400000000034000480200001800e000100636f6e6e6c696d69740000000c0002800800014000000000100001800b00010072656a65637400000900010073797a"], 0xd0}}, 0x0) 615.451138ms ago: executing program 4 (id=8420): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a00000000000000fe8000000000000000000000000000bb00000000000000000400040000000000000000000000000000000000000000000000000000000000020001000000000000000000000000ff05000500000000000a00000000000000fe8896380000000000000001000000010000000000000000030007000000000002004e24ac14141f0000000000000000020013"], 0xd8}}, 0x0) 614.516488ms ago: executing program 2 (id=8421): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0x63, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x1c, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r2, 0x6a, 0x3, 0x20000000, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c00010002000000000000000c000100bf000000000400000c00010002000000ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c00010002000000a400000014000300766c616e30"], 0xd0}}, 0x0) 597.555298ms ago: executing program 0 (id=8422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000008c0), 0xfffffffe, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x0) (fail_nth: 3) 596.984838ms ago: executing program 3 (id=8423): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r2 = socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000040)={@local, 0x78}) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1000000}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x2, 0x4}}, 0x10) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x460201, 0x0) 587.782389ms ago: executing program 2 (id=8424): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, 0x0, 0x0}, 0x20) 558.215699ms ago: executing program 4 (id=8425): r0 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x14, r0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 489.9026ms ago: executing program 2 (id=8426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r6}, 0x18) r9 = io_uring_setup(0x34b, &(0x7f0000000300)={0x0, 0x4, 0x100, 0x0, 0x10}) io_uring_register$IORING_REGISTER_CLOCK(r9, 0x1d, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0x763, 0x5, 0xc, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000600)={'batadv_slave_0\x00', 0x0}) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800", @ANYRES32=r12, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000000085"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x9, 0x4, &(0x7f0000000580)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f00000005c0)='syzkaller\x00', 0x7, 0x87, &(0x7f0000000740)=""/135, 0x41000, 0x41, '\x00', r11, @cgroup_sock=0x22, r9, 0x8, &(0x7f0000000640)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x2, 0x9, 0xa}, 0x10, 0xffffffffffffffff, r8, 0x6, &(0x7f0000000880)=[0x1, r1, r12, r13], &(0x7f00000008c0)=[{0x1, 0x3, 0x9}, {0x5, 0x1, 0x8, 0x8}, {0x4, 0x4, 0x3, 0x4}, {0x3, 0x5, 0x3, 0x3}, {0x5, 0x1, 0x5}, {0x2, 0x3, 0xc, 0x1}]}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r14}, 0x18) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 323.196604ms ago: executing program 4 (id=8427): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000bc0)={0xffffffff, 0x4, 0x0, 'queue0\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x44, r4, 0x1, 0xfffffffc, 0x0, {0x49}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r8, &(0x7f0000000100), 0xa, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r9, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) 285.452404ms ago: executing program 0 (id=8428): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000fbffffffffffffff040000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000001000000000001000000181100003c0409fe93d84264f0d04e32fee57d72ecb37f115d2e251ce70a0100220000000000dd277f4a1c55425fde8be6d81f83a475597aaf1df7c9cebee0c512a551ce5888fe399a7e8c56d121cfb6ac7f1480", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x55f, 0x2, 0xc, 0x20, 0x1, 0x3ca, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x58, &(0x7f00000002c0)}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 35.8147ms ago: executing program 0 (id=8429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, 0x0, &(0x7f0000000880)}, 0x20) (fail_nth: 3) 20.137179ms ago: executing program 0 (id=8430): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a31000000005c000000060a010400000000000000000100000008000b400000000034000480200001800e000100636f6e6e6c696d69740000000c0002800800014000000000100001800b00010072656a65637400000900010073797a"], 0xd0}}, 0x0) 0s ago: executing program 0 (id=8431): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000005e6bf02f000000180001801400020076657468315f746f5f626174616476000c000380"], 0x38}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) (async) sendmsg$nl_route(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") (async) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000780)='./mnt\x00', 0x840c0, 0xe4) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000240)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000100)='./mnt\x00', 0x30) kernel console output (not intermixed with test programs): Gadget: couldn't find an available UDC or it's busy [ 315.087426][T19790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.096750][T19790] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5745'. [ 315.256969][T19803] FAULT_INJECTION: forcing a failure. [ 315.256969][T19803] name failslab, interval 1, probability 0, space 0, times 0 [ 315.269701][T19803] CPU: 0 UID: 0 PID: 19803 Comm: syz.3.5750 Not tainted syzkaller #0 PREEMPT(voluntary) [ 315.269732][T19803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 315.269787][T19803] Call Trace: [ 315.269795][T19803] [ 315.269804][T19803] __dump_stack+0x1d/0x30 [ 315.269827][T19803] dump_stack_lvl+0xe8/0x140 [ 315.269878][T19803] dump_stack+0x15/0x1b [ 315.269896][T19803] should_fail_ex+0x265/0x280 [ 315.269924][T19803] should_failslab+0x8c/0xb0 [ 315.269952][T19803] kmem_cache_alloc_noprof+0x50/0x310 [ 315.270091][T19803] ? security_inode_alloc+0x37/0x100 [ 315.270204][T19803] security_inode_alloc+0x37/0x100 [ 315.270235][T19803] inode_init_always_gfp+0x4b7/0x500 [ 315.270263][T19803] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 315.270288][T19803] alloc_inode+0x58/0x170 [ 315.270381][T19803] new_inode+0x1d/0xe0 [ 315.270436][T19803] shmem_get_inode+0x244/0x750 [ 315.270463][T19803] __shmem_file_setup+0x113/0x210 [ 315.270502][T19803] shmem_file_setup+0x3b/0x50 [ 315.270540][T19803] __se_sys_memfd_create+0x2c3/0x590 [ 315.270566][T19803] __x64_sys_memfd_create+0x31/0x40 [ 315.270628][T19803] x64_sys_call+0x2abe/0x2ff0 [ 315.270652][T19803] do_syscall_64+0xd2/0x200 [ 315.270685][T19803] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 315.270712][T19803] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 315.270804][T19803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.270828][T19803] RIP: 0033:0x7f2f6b4ceec9 [ 315.270844][T19803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.270864][T19803] RSP: 002b:00007f2f69f36e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 315.270891][T19803] RAX: ffffffffffffffda RBX: 000000000000034e RCX: 00007f2f6b4ceec9 [ 315.270908][T19803] RDX: 00007f2f69f36ef0 RSI: 0000000000000000 RDI: 00007f2f6b552960 [ 315.270990][T19803] RBP: 00002000000005c0 R08: 00007f2f69f36bb7 R09: 00007f2f69f36e40 [ 315.271045][T19803] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000003c0 [ 315.271058][T19803] R13: 00007f2f69f36ef0 R14: 00007f2f69f36eb0 R15: 0000200000000400 [ 315.271081][T19803] [ 315.531921][T19810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.561468][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 315.561484][ T29] audit: type=1107 audit(5277075551.233:18449): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 315.581597][T19810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.601765][ T29] audit: type=1326 audit(5277075551.273:18450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.633478][ T29] audit: type=1326 audit(5277075551.293:18451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.657137][ T29] audit: type=1326 audit(5277075551.293:18452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.680726][ T29] audit: type=1326 audit(5277075551.293:18453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.704438][ T29] audit: type=1326 audit(5277075551.293:18454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.728134][ T29] audit: type=1326 audit(5277075551.293:18455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.751775][ T29] audit: type=1326 audit(5277075551.293:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.775356][ T29] audit: type=1326 audit(5277075551.293:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.798921][ T29] audit: type=1326 audit(5277075551.293:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19815 comm="syz.3.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 315.848244][T19819] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 315.848244][T19819] program syz.3.5758 not setting count and/or reply_len properly [ 316.130785][T19850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.139603][T19850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.058838][T19953] __nla_validate_parse: 11 callbacks suppressed [ 319.058858][T19953] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 319.168029][T19960] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5814'. [ 319.372557][T19971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5818'. [ 319.506080][T19981] netlink: 100 bytes leftover after parsing attributes in process `syz.3.5822'. [ 319.634400][T19979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=19979 comm=syz.2.5821 [ 319.790251][T19986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5824'. [ 320.067218][T19994] netlink: 100 bytes leftover after parsing attributes in process `+}[@'. [ 320.233187][T20004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5827'. [ 320.364481][T20006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5829'. [ 320.575526][ T29] kauditd_printk_skb: 528 callbacks suppressed [ 320.575542][ T29] audit: type=1400 audit(5277075556.243:18987): avc: denied { create } for pid=20011 comm="syz.1.5831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 320.631020][ T29] audit: type=1400 audit(5277075556.283:18988): avc: denied { setopt } for pid=20011 comm="syz.1.5831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 320.652007][ T29] audit: type=1400 audit(5277075556.293:18989): avc: denied { override_creds } for pid=20011 comm="syz.1.5831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 320.746689][T20019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5832'. [ 320.838463][T20021] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5833'. [ 321.021191][ T29] audit: type=1326 audit(5277075556.613:18990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 321.044922][ T29] audit: type=1326 audit(5277075556.623:18991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 321.068558][ T29] audit: type=1326 audit(5277075556.623:18992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 321.092169][ T29] audit: type=1326 audit(5277075556.623:18993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 321.115710][ T29] audit: type=1326 audit(5277075556.623:18994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 321.139345][ T29] audit: type=1326 audit(5277075556.623:18995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 321.163010][ T29] audit: type=1326 audit(5277075556.623:18996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20022 comm="syz.4.5835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 321.217925][T20027] : renamed from bond0 (while UP) [ 322.134650][T20065] ip6erspan0: entered promiscuous mode [ 322.481130][T20092] ipvlan2: entered promiscuous mode [ 323.045294][T20146] ªªªªªª: renamed from vlan0 (while UP) [ 323.123831][T20146] loop3: detected capacity change from 0 to 1024 [ 323.143584][T20146] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 323.153608][T20146] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 323.185923][T20146] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 323.209418][T20146] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #5: comm syz.3.5882: unexpected bad inode w/o EXT4_IGET_BAD [ 323.242360][T20146] EXT4-fs (loop3): no journal found [ 323.247664][T20146] EXT4-fs (loop3): can't get journal size [ 323.281250][T20146] EXT4-fs (loop3): too many log groups per flexible block group [ 323.289017][T20146] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 323.322885][T20146] EXT4-fs (loop3): mount failed [ 324.133068][ T152] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.228242][ T152] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.256942][T20208] netlink: 'syz.1.5897': attribute type 3 has an invalid length. [ 324.278255][ T152] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.315200][T20162] chnl_net:caif_netlink_parms(): no params data found [ 324.373785][ T152] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.446529][T20221] __nla_validate_parse: 8 callbacks suppressed [ 324.446548][T20221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5900'. [ 324.490031][T20221] ipvlan2: entered promiscuous mode [ 324.518582][T20162] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.525938][T20162] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.540174][T20229] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5901'. [ 324.549563][T20162] bridge_slave_0: entered allmulticast mode [ 324.556325][T20162] bridge_slave_0: entered promiscuous mode [ 324.563844][T20162] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.570956][T20162] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.578230][T20162] bridge_slave_1: entered allmulticast mode [ 324.584881][T20162] bridge_slave_1: entered promiscuous mode [ 324.648167][T20162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.682482][T20162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.715850][ T152] bridge_slave_1: left allmulticast mode [ 324.721648][ T152] bridge_slave_1: left promiscuous mode [ 324.727396][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.740514][ T152] bridge_slave_0: left allmulticast mode [ 324.746287][ T152] bridge_slave_0: left promiscuous mode [ 324.752244][ T152] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.883542][ T152]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.893312][ T152]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.902730][ T152]  (unregistering): Released all slaves [ 324.911853][T20162] team0: Port device team_slave_0 added [ 324.919919][T20162] team0: Port device team_slave_1 added [ 324.953650][ T152] hsr_slave_0: left promiscuous mode [ 324.959607][ T152] hsr_slave_1: left promiscuous mode [ 324.965955][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.973445][ T152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.981874][ T152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.989289][ T152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.000643][ T152] veth1_macvtap: left promiscuous mode [ 325.006462][ T152] veth0_macvtap: left promiscuous mode [ 325.088353][ T152] team0 (unregistering): Port device team_slave_1 removed [ 325.098074][ T152] team0 (unregistering): Port device team_slave_0 removed [ 325.134480][T20162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.141502][T20162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.167678][T20162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.178930][T20262] bridge0: port 3(gretap0) entered blocking state [ 325.185523][T20262] bridge0: port 3(gretap0) entered disabled state [ 325.192145][T20262] gretap0: entered allmulticast mode [ 325.198067][T20262] gretap0: entered promiscuous mode [ 325.203467][T20262] bridge0: port 3(gretap0) entered blocking state [ 325.210012][T20262] bridge0: port 3(gretap0) entered forwarding state [ 325.218343][T20162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.225454][T20162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.251406][T20162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.294901][T20162] hsr_slave_0: entered promiscuous mode [ 325.301787][T20162] hsr_slave_1: entered promiscuous mode [ 325.348174][T20271] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5913'. [ 325.357581][T20271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5913'. [ 325.369230][T20271] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20271 comm=syz.0.5913 [ 325.396719][T20271] netlink: 332 bytes leftover after parsing attributes in process `syz.0.5913'. [ 325.589612][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 325.589625][ T29] audit: type=1326 audit(5277075561.253:19773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8396c65d67 code=0x7ffc0000 [ 325.619681][ T29] audit: type=1326 audit(5277075561.253:19774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8396c0af79 code=0x7ffc0000 [ 325.643310][ T29] audit: type=1326 audit(5277075561.253:19775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 325.667012][ T29] audit: type=1326 audit(5277075561.283:19776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8396c65d67 code=0x7ffc0000 [ 325.690547][ T29] audit: type=1326 audit(5277075561.283:19777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8396c0af79 code=0x7ffc0000 [ 325.714037][ T29] audit: type=1326 audit(5277075561.283:19778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8396c65d67 code=0x7ffc0000 [ 325.737538][ T29] audit: type=1326 audit(5277075561.283:19779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8396c0af79 code=0x7ffc0000 [ 325.761125][ T29] audit: type=1326 audit(5277075561.283:19780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f8396c6eec9 code=0x7ffc0000 [ 325.784943][ T29] audit: type=1326 audit(5277075561.293:19781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8396c65d67 code=0x7ffc0000 [ 325.808624][ T29] audit: type=1326 audit(5277075561.293:19782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20280 comm="syz.4.5917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8396c0af79 code=0x7ffc0000 [ 325.939485][T20162] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 325.951913][T20162] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 325.965552][T20162] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 325.980548][T20162] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.029791][T20162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.039152][T20308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5923'. [ 326.043313][T20162] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.062902][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.070075][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.081391][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.088496][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.189017][T20162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.262564][T20319] atomic_op ffff888124e1f128 conn xmit_atomic 0000000000000000 [ 326.306042][T20162] veth0_vlan: entered promiscuous mode [ 326.327334][T20162] veth1_vlan: entered promiscuous mode [ 326.343474][T20333] FAULT_INJECTION: forcing a failure. [ 326.343474][T20333] name failslab, interval 1, probability 0, space 0, times 0 [ 326.356261][T20333] CPU: 0 UID: 0 PID: 20333 Comm: syz.1.5928 Not tainted syzkaller #0 PREEMPT(voluntary) [ 326.356296][T20333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.356311][T20333] Call Trace: [ 326.356344][T20333] [ 326.356352][T20333] __dump_stack+0x1d/0x30 [ 326.356375][T20333] dump_stack_lvl+0xe8/0x140 [ 326.356402][T20333] dump_stack+0x15/0x1b [ 326.356420][T20333] should_fail_ex+0x265/0x280 [ 326.356447][T20333] should_failslab+0x8c/0xb0 [ 326.356527][T20333] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 326.356563][T20333] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 326.356635][T20333] hugetlbfs_alloc_inode+0xbc/0x100 [ 326.356673][T20333] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 326.356713][T20333] alloc_inode+0x40/0x170 [ 326.356737][T20333] new_inode+0x1d/0xe0 [ 326.356796][T20333] hugetlbfs_get_inode+0x7b/0x370 [ 326.356830][T20333] hugetlb_file_setup+0x192/0x3d0 [ 326.356929][T20333] ksys_mmap_pgoff+0x157/0x310 [ 326.356955][T20333] x64_sys_call+0x14a3/0x2ff0 [ 326.356977][T20333] do_syscall_64+0xd2/0x200 [ 326.357006][T20333] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 326.357114][T20333] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.357149][T20333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.357176][T20333] RIP: 0033:0x7fec4cc2eec9 [ 326.357275][T20333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.357350][T20333] RSP: 002b:00007fec4b68f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 326.357429][T20333] RAX: ffffffffffffffda RBX: 00007fec4ce85fa0 RCX: 00007fec4cc2eec9 [ 326.357441][T20333] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 326.357454][T20333] RBP: 00007fec4b68f090 R08: ffffffffffffffff R09: 0000000000000000 [ 326.357469][T20333] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 326.357485][T20333] R13: 00007fec4ce86038 R14: 00007fec4ce85fa0 R15: 00007ffd1cb236c8 [ 326.357512][T20333] [ 326.366200][T20162] veth0_macvtap: entered promiscuous mode [ 326.568323][T20162] veth1_macvtap: entered promiscuous mode [ 326.607535][T20162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.620006][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5931'. [ 326.622148][T20162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.643472][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.654347][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.701097][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.720160][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.773304][T20347] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5934'. [ 326.872600][T20366] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5941'. [ 326.899301][T20370] FAULT_INJECTION: forcing a failure. [ 326.899301][T20370] name failslab, interval 1, probability 0, space 0, times 0 [ 326.912065][T20370] CPU: 0 UID: 0 PID: 20370 Comm: syz.4.5942 Not tainted syzkaller #0 PREEMPT(voluntary) [ 326.912170][T20370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 326.912185][T20370] Call Trace: [ 326.912192][T20370] [ 326.912201][T20370] __dump_stack+0x1d/0x30 [ 326.912226][T20370] dump_stack_lvl+0xe8/0x140 [ 326.912248][T20370] dump_stack+0x15/0x1b [ 326.912266][T20370] should_fail_ex+0x265/0x280 [ 326.912294][T20370] should_failslab+0x8c/0xb0 [ 326.912435][T20370] kmem_cache_alloc_noprof+0x50/0x310 [ 326.912466][T20370] ? radix_tree_node_alloc+0x8a/0x1f0 [ 326.912588][T20370] radix_tree_node_alloc+0x8a/0x1f0 [ 326.912621][T20370] idr_get_free+0x1fa/0x550 [ 326.912730][T20370] idr_alloc_u32+0xca/0x180 [ 326.912769][T20370] tcf_idr_check_alloc+0x193/0x240 [ 326.912800][T20370] ? tcf_gact_init+0x1bb/0x510 [ 326.912904][T20370] tcf_gact_init+0x249/0x510 [ 326.912951][T20370] tcf_action_init_1+0x367/0x4a0 [ 326.913038][T20370] tcf_action_init+0x267/0x6d0 [ 326.913070][T20370] ? mark_reg_read+0x233/0x340 [ 326.913214][T20370] tc_ctl_action+0x291/0x830 [ 326.913271][T20370] ? __pfx_tc_ctl_action+0x10/0x10 [ 326.913305][T20370] rtnetlink_rcv_msg+0x657/0x6d0 [ 326.913378][T20370] netlink_rcv_skb+0x123/0x220 [ 326.913401][T20370] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 326.913469][T20370] rtnetlink_rcv+0x1c/0x30 [ 326.913532][T20370] netlink_unicast+0x5bd/0x690 [ 326.913564][T20370] netlink_sendmsg+0x58b/0x6b0 [ 326.913592][T20370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.913616][T20370] __sock_sendmsg+0x145/0x180 [ 326.913728][T20370] ____sys_sendmsg+0x31e/0x4e0 [ 326.913760][T20370] ___sys_sendmsg+0x17b/0x1d0 [ 326.913823][T20370] __x64_sys_sendmsg+0xd4/0x160 [ 326.913915][T20370] x64_sys_call+0x191e/0x2ff0 [ 326.913939][T20370] do_syscall_64+0xd2/0x200 [ 326.914041][T20370] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 326.914081][T20370] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 326.914115][T20370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.914140][T20370] RIP: 0033:0x7f8396c6eec9 [ 326.914157][T20370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.914177][T20370] RSP: 002b:00007f83956d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.914198][T20370] RAX: ffffffffffffffda RBX: 00007f8396ec5fa0 RCX: 00007f8396c6eec9 [ 326.914314][T20370] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000007 [ 326.914328][T20370] RBP: 00007f83956d7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.914341][T20370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.914354][T20370] R13: 00007f8396ec6038 R14: 00007f8396ec5fa0 R15: 00007ffc6b5ee3f8 [ 326.914376][T20370] [ 327.285939][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5939'. [ 329.053889][ T37] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.143435][ T37] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.210184][T20451] chnl_net:caif_netlink_parms(): no params data found [ 329.239744][ T37] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.308042][ T37] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.352338][T20451] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.359506][T20451] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.380644][T20451] bridge_slave_0: entered allmulticast mode [ 329.388877][T20451] bridge_slave_0: entered promiscuous mode [ 329.419222][T20451] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.426458][T20451] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.438895][T20451] bridge_slave_1: entered allmulticast mode [ 329.448104][T20451] bridge_slave_1: entered promiscuous mode [ 329.472764][T20451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.485742][T20492] ªªªªªª: renamed from vlan0 (while UP) [ 329.509038][T20451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.525500][ T37] gretap0: left allmulticast mode [ 329.530606][ T37] gretap0: left promiscuous mode [ 329.535734][ T37] bridge0: port 3(gretap0) entered disabled state [ 329.547119][ T37] bridge_slave_1: left allmulticast mode [ 329.552912][ T37] bridge_slave_1: left promiscuous mode [ 329.558722][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.593461][ T37] bridge_slave_0: left allmulticast mode [ 329.599153][ T37] bridge_slave_0: left promiscuous mode [ 329.604859][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.621796][T20504] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 329.621796][T20504] program syz.0.5989 not setting count and/or reply_len properly [ 329.755048][ T37]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.766991][ T37]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.776558][ T37]  (unregistering): Released all slaves [ 329.800335][T20451] team0: Port device team_slave_0 added [ 329.807191][T20451] team0: Port device team_slave_1 added [ 329.851065][T20451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.858061][T20451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.884255][T20451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.904793][T20451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.911849][T20451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.937841][T20451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.952312][ T37] hsr_slave_0: left promiscuous mode [ 330.078111][ T37] hsr_slave_1: left promiscuous mode [ 330.087332][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.094779][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.117888][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.125413][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.213422][ T37] veth1_vlan: left promiscuous mode [ 330.235361][ T37] veth0_vlan: left promiscuous mode [ 330.462229][ T37] team0 (unregistering): Port device team_slave_1 removed [ 330.486314][ T37] team0 (unregistering): Port device team_slave_0 removed [ 330.578917][T20451] hsr_slave_0: entered promiscuous mode [ 330.592863][ T29] kauditd_printk_skb: 741 callbacks suppressed [ 330.592878][ T29] audit: type=1326 audit(5277075566.263:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.602459][T20451] hsr_slave_1: entered promiscuous mode [ 330.628735][ T29] audit: type=1326 audit(5277075566.293:20525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.652429][ T29] audit: type=1326 audit(5277075566.293:20526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.661353][T20451] debugfs: 'hsr0' already exists in 'hsr' [ 330.676335][ T29] audit: type=1326 audit(5277075566.293:20527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.682001][T20451] Cannot create hsr debugfs directory [ 330.711293][ T29] audit: type=1326 audit(5277075566.293:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.735094][ T29] audit: type=1326 audit(5277075566.293:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.758996][ T29] audit: type=1326 audit(5277075566.293:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.782632][ T29] audit: type=1326 audit(5277075566.293:20531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.806259][ T29] audit: type=1326 audit(5277075566.293:20532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 330.829853][ T29] audit: type=1326 audit(5277075566.293:20533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20551 comm="syz.2.6003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 331.004193][T20557] __nla_validate_parse: 4 callbacks suppressed [ 331.004212][T20557] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6005'. [ 331.263681][T20590] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 331.263681][T20590] program syz.0.6017 not setting count and/or reply_len properly [ 332.280071][T20592] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 332.280071][T20592] program syz.2.6018 not setting count and/or reply_len properly [ 332.458480][T20611] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6023'. [ 332.548060][T20451] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 332.557200][T20451] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 332.566930][T20451] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 332.587510][T20451] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 332.737805][T20451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.773977][T20638] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 332.773977][T20638] program syz.2.6033 not setting count and/or reply_len properly [ 332.822792][T20451] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.832383][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.839601][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 332.859547][T20451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.870085][T20451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 332.884266][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.891416][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 332.983227][T20451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.208892][T20451] veth0_vlan: entered promiscuous mode [ 333.239770][T20451] veth1_vlan: entered promiscuous mode [ 333.268881][T20451] veth0_macvtap: entered promiscuous mode [ 333.283079][T20451] veth1_macvtap: entered promiscuous mode [ 333.317771][T20451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.338349][T20451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.349720][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.360920][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.375477][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.392935][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.480694][T20688] ªªªªªª: renamed from vlan0 (while UP) [ 333.606382][T20710] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 333.606382][T20710] program syz.0.6055 not setting count and/or reply_len properly [ 333.656761][T20718] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 333.656761][T20718] program syz.1.6058 not setting count and/or reply_len properly [ 334.170366][T20767] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6074'. [ 334.298412][T20777] : renamed from bond0 (while UP) [ 334.343046][T20775] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 334.343046][T20775] program syz.0.6080 not setting count and/or reply_len properly [ 335.246128][T20819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=20819 comm=syz.0.6098 [ 335.344696][T20826] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 335.344696][T20826] program syz.0.6102 not setting count and/or reply_len properly [ 335.577115][T20842] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6109'. [ 335.778996][T20844] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6107'. [ 336.045006][T20853] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 336.045006][T20853] program syz.4.6113 not setting count and/or reply_len properly [ 336.175993][T20864] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 336.175993][T20864] program syz.4.6115 not setting count and/or reply_len properly [ 336.203702][T12181] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.257083][T12181] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.325582][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 336.325602][ T29] audit: type=1107 audit(5277075571.993:20887): pid=20873 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰' [ 336.354745][ T29] audit: type=1326 audit(5277075572.023:20888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.355089][T20855] chnl_net:caif_netlink_parms(): no params data found [ 336.394471][ T29] audit: type=1326 audit(5277075572.053:20889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.418100][ T29] audit: type=1326 audit(5277075572.053:20890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.441868][ T29] audit: type=1326 audit(5277075572.053:20891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.465696][ T29] audit: type=1326 audit(5277075572.053:20892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.489434][ T29] audit: type=1326 audit(5277075572.053:20893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.513282][ T29] audit: type=1326 audit(5277075572.053:20894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.536955][ T29] audit: type=1326 audit(5277075572.053:20895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.560742][ T29] audit: type=1326 audit(5277075572.053:20896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20875 comm="syz.1.6118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fec4cc2eec9 code=0x7ffc0000 [ 336.587695][T12181] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.637274][T20855] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.644512][T20855] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.656765][T20886] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 336.656765][T20886] program syz.4.6120 not setting count and/or reply_len properly [ 336.680047][T20855] bridge_slave_0: entered allmulticast mode [ 336.686989][T20855] bridge_slave_0: entered promiscuous mode [ 336.694191][T20855] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.701378][T20855] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.708709][T20855] bridge_slave_1: entered allmulticast mode [ 336.715282][T20855] bridge_slave_1: entered promiscuous mode [ 336.723407][T12181] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.758620][T20855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.779835][T20855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.802950][T12181] bridge_slave_1: left allmulticast mode [ 336.808626][T12181] bridge_slave_1: left promiscuous mode [ 336.814388][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.824164][T12181] bridge_slave_0: left allmulticast mode [ 336.829868][T12181] bridge_slave_0: left promiscuous mode [ 336.835647][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.848269][T20894] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 336.848269][T20894] program syz.4.6124 not setting count and/or reply_len properly [ 336.945921][T20900] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6126'. [ 336.963853][T12181]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.973626][T12181]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.983324][T12181]  (unregistering): Released all slaves [ 337.006127][T20855] team0: Port device team_slave_0 added [ 337.013576][T20855] team0: Port device team_slave_1 added [ 337.034114][T20855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.041274][T20855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.067384][T20855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.080266][T20855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.087341][T20855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.113350][T20855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.128141][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.135746][T12181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.146255][T20909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6127'. [ 337.156601][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.164041][T12181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.175706][T12181] veth1_macvtap: left promiscuous mode [ 337.181339][T12181] veth0_macvtap: left promiscuous mode [ 337.186874][T12181] veth1_vlan: left promiscuous mode [ 337.192662][T12181] veth0_vlan: left promiscuous mode [ 337.251474][T20915] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 337.251474][T20915] program syz.1.6131 not setting count and/or reply_len properly [ 337.371205][T20855] hsr_slave_0: entered promiscuous mode [ 337.377373][T20855] hsr_slave_1: entered promiscuous mode [ 337.391186][T20855] debugfs: 'hsr0' already exists in 'hsr' [ 337.396960][T20855] Cannot create hsr debugfs directory [ 337.529277][T20930] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6138'. [ 337.976343][T20855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 337.988196][T20855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.000163][T20944] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 338.000163][T20944] program syz.3.6143 not setting count and/or reply_len properly [ 338.045906][T20855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.093059][T20855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.162839][T20855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.177551][T20855] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.187817][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.194974][T12181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.207326][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.214443][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.256513][T20962] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6148'. [ 338.343582][T20855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.397666][T20982] : renamed from bond0 (while UP) [ 338.407599][T20855] veth0_vlan: entered promiscuous mode [ 338.419897][T20855] veth1_vlan: entered promiscuous mode [ 338.462614][T20855] veth0_macvtap: entered promiscuous mode [ 338.488490][T20855] veth1_macvtap: entered promiscuous mode [ 338.540382][T20855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.553101][T20855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.563011][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.587338][T20992] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 338.587338][T20992] program syz.4.6155 not setting count and/or reply_len properly [ 338.614611][ T314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.627047][ T314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.636751][ T314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.137011][T21021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6167'. [ 340.130767][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6193'. [ 340.143312][T21086] ipvlan2: entered promiscuous mode [ 340.291339][T21097] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6198'. [ 340.532389][T21118] : renamed from bond0 (while UP) [ 340.577324][T21126] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6210'. [ 340.694372][T21133] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 340.694372][T21133] program syz.1.6213 not setting count and/or reply_len properly [ 340.823959][T21154] netlink: 100 bytes leftover after parsing attributes in process `syz.1.6221'. [ 341.028987][T21177] ªªªªªª: renamed from vlan0 (while UP) [ 341.108628][T21184] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6231'. [ 341.338061][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 341.338081][ T29] audit: type=1326 audit(5277075577.003:21493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.0.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 341.368728][ T29] audit: type=1326 audit(5277075577.003:21494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f313dad5d67 code=0x7ffc0000 [ 341.392380][ T29] audit: type=1326 audit(5277075577.003:21495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f313da7af79 code=0x7ffc0000 [ 341.416004][ T29] audit: type=1326 audit(5277075577.003:21496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 341.439682][ T29] audit: type=1326 audit(5277075577.033:21497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f313dad5d67 code=0x7ffc0000 [ 341.463476][ T29] audit: type=1326 audit(5277075577.033:21498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f313da7af79 code=0x7ffc0000 [ 341.487271][ T29] audit: type=1326 audit(5277075577.033:21499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 341.510889][ T29] audit: type=1326 audit(5277075577.033:21500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21203 comm="syz.0.6242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 341.534772][ T29] audit: type=1326 audit(5277075577.033:21501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f313dad5d67 code=0x7ffc0000 [ 341.558315][ T29] audit: type=1326 audit(5277075577.033:21502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21187 comm="syz.2.6235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f313da7af79 code=0x7ffc0000 [ 342.172979][T21248] __nla_validate_parse: 3 callbacks suppressed [ 342.173001][T21248] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6259'. [ 342.396830][T21262] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6263'. [ 342.749640][T21274] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6270'. [ 342.919564][T21284] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 342.919564][T21284] program syz.3.6275 not setting count and/or reply_len properly [ 343.648810][T21321] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6288'. [ 345.004387][T21410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.046407][T21410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.055792][T21410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6324'. [ 346.194500][T21506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.203763][T21506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.215833][T21506] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6363'. [ 346.356589][T21515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6365'. [ 346.499049][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 346.499068][ T29] audit: type=1107 audit(5277075582.163:22077): pid=21522 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 346.702010][ T29] audit: type=1107 audit(5277075582.373:22078): pid=21541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 346.773218][T21556] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 346.773218][T21556] program syz.4.6382 not setting count and/or reply_len properly [ 346.933737][ T29] audit: type=1326 audit(5277075582.603:22079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 346.957487][ T29] audit: type=1326 audit(5277075582.603:22080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 346.982591][ T29] audit: type=1326 audit(5277075582.603:22081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 347.006349][ T29] audit: type=1326 audit(5277075582.603:22082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 347.030179][ T29] audit: type=1326 audit(5277075582.603:22083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 347.053845][ T29] audit: type=1326 audit(5277075582.603:22084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 347.077487][ T29] audit: type=1326 audit(5277075582.603:22085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 347.100969][T21582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.101449][ T29] audit: type=1326 audit(5277075582.603:22086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21579 comm="syz.4.6392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 347.111309][T21582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.168559][T21587] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 347.168559][T21587] program syz.1.6395 not setting count and/or reply_len properly [ 347.170908][T21582] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6393'. [ 347.591061][T21618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6406'. [ 347.911612][T12181] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.979219][T21628] chnl_net:caif_netlink_parms(): no params data found [ 347.994272][T12181] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.044020][T12181] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.059456][T21628] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.066600][T21628] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.074267][T21628] bridge_slave_0: entered allmulticast mode [ 348.081324][T21628] bridge_slave_0: entered promiscuous mode [ 348.088593][T21628] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.096000][T21628] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.104266][T21628] bridge_slave_1: entered allmulticast mode [ 348.110977][T21628] bridge_slave_1: entered promiscuous mode [ 348.118496][T12181] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.145665][T21628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.156846][T21628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.179460][T21628] team0: Port device team_slave_0 added [ 348.189076][T21628] team0: Port device team_slave_1 added [ 348.203327][T21670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.211925][T21670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.221575][T21670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6425'. [ 348.239908][T21628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.246985][T21628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.272979][T21628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.287808][T21628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.294831][T21628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.320770][T21628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.351759][T12181] bridge_slave_1: left allmulticast mode [ 348.357523][T12181] bridge_slave_1: left promiscuous mode [ 348.363282][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.372340][T12181] bridge_slave_0: left allmulticast mode [ 348.377998][T12181] bridge_slave_0: left promiscuous mode [ 348.383744][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.463245][T12181]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.473011][T12181]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.482319][T12181]  (unregistering): Released all slaves [ 348.493858][T21628] hsr_slave_0: entered promiscuous mode [ 348.500141][T21628] hsr_slave_1: entered promiscuous mode [ 348.506260][T21628] debugfs: 'hsr0' already exists in 'hsr' [ 348.512067][T21628] Cannot create hsr debugfs directory [ 348.531993][T12181] hsr_slave_0: left promiscuous mode [ 348.545949][T12181] hsr_slave_1: left promiscuous mode [ 348.551975][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.559429][T12181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.567356][T12181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.574814][T12181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.584320][T12181] veth1_macvtap: left promiscuous mode [ 348.589921][T12181] veth0_macvtap: left promiscuous mode [ 348.595730][T12181] veth1_vlan: left promiscuous mode [ 348.601001][T12181] veth0_vlan: left promiscuous mode [ 348.699074][T12181] team0 (unregistering): Port device team_slave_1 removed [ 348.708813][T12181] team0 (unregistering): Port device team_slave_0 removed [ 348.738492][T12181] team0 (unregistering): Port device dummy0 removed [ 349.094690][T21703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.103188][T21703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.123158][T21703] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6438'. [ 349.131616][T21628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 349.205638][T21628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 349.215286][T21628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 349.350409][T21628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 349.578399][T21628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.590417][T21628] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.631194][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.638484][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.658646][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.665777][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.709241][T21628] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 349.807684][T21628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.952141][T21628] veth0_vlan: entered promiscuous mode [ 349.960045][T21628] veth1_vlan: entered promiscuous mode [ 349.977612][T21628] veth0_macvtap: entered promiscuous mode [ 349.985395][T21628] veth1_macvtap: entered promiscuous mode [ 349.996202][T21628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.005775][T21628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.059075][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.115127][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.127939][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.146731][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.709219][T21780] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 350.709219][T21780] program syz.2.6459 not setting count and/or reply_len properly [ 350.968247][T21812] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 350.968247][T21812] program syz.4.6472 not setting count and/or reply_len properly [ 351.050652][T21817] : renamed from bond0 (while UP) [ 351.114014][T21833] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6476'. [ 351.229853][T21845] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 351.229853][T21845] program syz.2.6486 not setting count and/or reply_len properly [ 351.416251][T21873] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 351.416251][T21873] program syz.2.6499 not setting count and/or reply_len properly [ 351.590648][ T29] kauditd_printk_skb: 532 callbacks suppressed [ 351.590668][ T29] audit: type=1107 audit(5277075587.253:22619): pid=21898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 351.633257][T21905] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 351.633257][T21905] program syz.1.6512 not setting count and/or reply_len properly [ 351.845856][T21940] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 351.845856][T21940] program syz.1.6527 not setting count and/or reply_len properly [ 352.085629][T21978] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 352.085629][T21978] program syz.4.6543 not setting count and/or reply_len properly [ 352.112704][ T29] audit: type=1326 audit(5277075587.773:22620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.136477][ T29] audit: type=1326 audit(5277075587.773:22621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.160221][ T29] audit: type=1326 audit(5277075587.773:22622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.167866][T21987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6542'. [ 352.183965][ T29] audit: type=1326 audit(5277075587.773:22623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.216503][ T29] audit: type=1326 audit(5277075587.773:22624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.240233][ T29] audit: type=1326 audit(5277075587.773:22625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.263859][ T29] audit: type=1326 audit(5277075587.773:22626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.287482][ T29] audit: type=1326 audit(5277075587.773:22627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 352.311089][ T29] audit: type=1326 audit(5277075587.773:22628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21979 comm="syz.3.6542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 353.304280][T22058] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6570'. [ 354.313029][T22192] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6623'. [ 355.330218][T22240] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 355.330218][T22240] program syz.3.6647 not setting count and/or reply_len properly [ 355.355861][T22241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6645'. [ 356.619081][ T29] kauditd_printk_skb: 469 callbacks suppressed [ 356.619100][ T29] audit: type=1326 audit(5277075592.283:23098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 356.697260][ T29] audit: type=1326 audit(5277075592.323:23099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f313dadd710 code=0x7ffc0000 [ 356.720989][ T29] audit: type=1326 audit(5277075592.323:23100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 356.744660][ T29] audit: type=1326 audit(5277075592.323:23101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 356.768393][ T29] audit: type=1326 audit(5277075592.323:23102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 356.792004][ T29] audit: type=1326 audit(5277075592.323:23103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 356.815763][ T29] audit: type=1326 audit(5277075592.323:23104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 356.839501][ T29] audit: type=1326 audit(5277075592.323:23105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 356.863145][ T29] audit: type=1326 audit(5277075592.323:23106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22312 comm="syz.2.6676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f313dadeec9 code=0x7ffc0000 [ 357.054091][T22328] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 357.054091][T22328] program syz.4.6679 not setting count and/or reply_len properly [ 357.238675][ T29] audit: type=1107 audit(5277075592.883:23107): pid=22329 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 358.225766][T22398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6699'. [ 359.040464][T22449] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22449 comm=syz.3.6726 [ 359.819384][T22501] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 359.819384][T22501] program syz.4.6746 not setting count and/or reply_len properly [ 361.172055][T22544] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 361.172055][T22544] program syz.4.6764 not setting count and/or reply_len properly [ 361.368578][T22561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6772'. [ 361.377943][T22561] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6772'. [ 361.505764][T22572] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 361.505764][T22572] program syz.2.6777 not setting count and/or reply_len properly [ 361.623328][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 361.623348][ T29] audit: type=1326 audit(5277075597.293:23427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.659538][ T29] audit: type=1326 audit(5277075597.323:23428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22579 comm="syz.2.6779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f313dadeec9 code=0x0 [ 361.682909][ T29] audit: type=1326 audit(5277075597.323:23429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.706542][ T29] audit: type=1326 audit(5277075597.323:23430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.730299][ T29] audit: type=1326 audit(5277075597.323:23431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.754021][ T29] audit: type=1326 audit(5277075597.323:23432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.777739][ T29] audit: type=1326 audit(5277075597.323:23433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.801380][ T29] audit: type=1326 audit(5277075597.323:23434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.825097][ T29] audit: type=1326 audit(5277075597.323:23435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.848771][ T29] audit: type=1326 audit(5277075597.323:23436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22584 comm="syz.0.6783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 361.856506][T22593] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6786'. [ 361.881641][T22593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6786'. [ 361.895326][T22593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22593 comm=syz.1.6786 [ 361.914397][T22594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6783'. [ 362.008056][T22602] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 362.008056][T22602] program syz.3.6790 not setting count and/or reply_len properly [ 362.138239][T22617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.147377][T22617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.158010][T22617] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6796'. [ 362.224290][T22627] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 362.224290][T22627] program syz.3.6801 not setting count and/or reply_len properly [ 363.176303][T22694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.184453][T22696] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 363.184453][T22696] program syz.0.6829 not setting count and/or reply_len properly [ 363.185500][T22694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.213584][T22694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6828'. [ 363.226190][T22692] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6822'. [ 363.452882][T22715] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22715 comm=syz.3.6836 [ 364.179989][T22774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.189053][T22774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.198507][T22774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6857'. [ 364.253292][T22782] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 364.253292][T22782] program syz.2.6860 not setting count and/or reply_len properly [ 364.410189][T22802] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22802 comm=syz.2.6868 [ 364.653429][T22817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6873'. [ 364.971496][T22845] ªªªªªª: renamed from vlan0 (while UP) [ 364.992979][T22841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22841 comm=syz.0.6884 [ 365.988029][T22909] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 365.988029][T22909] program syz.2.6911 not setting count and/or reply_len properly [ 366.295405][T22936] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 366.295405][T22936] program syz.2.6923 not setting count and/or reply_len properly [ 366.512000][T22944] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 366.512000][T22944] program syz.2.6926 not setting count and/or reply_len properly [ 366.529099][T22943] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 366.529099][T22943] program syz.3.6925 not setting count and/or reply_len properly [ 366.823702][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 366.823723][ T29] audit: type=1107 audit(5277075602.493:23792): pid=22946 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 366.861876][ T29] audit: type=1326 audit(5277075602.533:23793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 366.896506][ T29] audit: type=1326 audit(5277075602.533:23794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 366.920338][ T29] audit: type=1326 audit(5277075602.533:23795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 366.944096][ T29] audit: type=1326 audit(5277075602.533:23796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 366.967698][ T29] audit: type=1326 audit(5277075602.533:23797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 366.991653][ T29] audit: type=1326 audit(5277075602.533:23798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 367.015269][ T29] audit: type=1326 audit(5277075602.533:23799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 367.038969][ T29] audit: type=1326 audit(5277075602.533:23800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 367.062985][ T29] audit: type=1326 audit(5277075602.533:23801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22959 comm="syz.3.6934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 367.148145][T22972] __nla_validate_parse: 1 callbacks suppressed [ 367.148216][T22972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6936'. [ 367.186697][T22974] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22974 comm=syz.0.6939 [ 367.329264][T22992] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 367.329264][T22992] program syz.1.6947 not setting count and/or reply_len properly [ 367.643339][T23005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6953'. [ 368.624741][T23062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6967'. [ 369.297895][T23101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23101 comm=syz.0.6984 [ 369.531599][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6986'. [ 370.860388][T23155] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7002'. [ 371.158161][T23182] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 371.158161][T23182] program syz.1.7014 not setting count and/or reply_len properly [ 371.532925][T23212] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23212 comm=syz.1.7024 [ 372.002251][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 372.002268][ T29] audit: type=1326 audit(5277075607.673:24145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.061677][ T29] audit: type=1326 audit(5277075607.723:24146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.085412][ T29] audit: type=1326 audit(5277075607.723:24147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.109262][ T29] audit: type=1326 audit(5277075607.723:24148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.185567][ T29] audit: type=1326 audit(5277075607.803:24149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.209366][ T29] audit: type=1326 audit(5277075607.803:24150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.233102][ T29] audit: type=1326 audit(5277075607.803:24151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.256784][ T29] audit: type=1326 audit(5277075607.803:24152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.280657][ T29] audit: type=1326 audit(5277075607.803:24153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.304294][ T29] audit: type=1326 audit(5277075607.803:24154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23226 comm="syz.1.7031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 372.531677][T23249] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23249 comm=syz.3.7039 [ 372.959345][T23288] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23288 comm=syz.2.7055 [ 373.017930][T23293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.040029][T23293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.068548][T23293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7057'. [ 374.050272][T23341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7074'. [ 375.242310][T23399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7098'. [ 376.316505][T23483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7126'. [ 376.804188][T23537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7152'. [ 377.016374][ T29] kauditd_printk_skb: 478 callbacks suppressed [ 377.016408][ T29] audit: type=1326 audit(5277075612.683:24633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 377.060650][ T29] audit: type=1326 audit(5277075612.713:24634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 377.084417][ T29] audit: type=1326 audit(5277075612.713:24635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 377.108006][ T29] audit: type=1326 audit(5277075612.713:24636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 377.131701][ T29] audit: type=1326 audit(5277075612.713:24637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23554 comm="syz.1.7159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6914f8eec9 code=0x7ffc0000 [ 377.300846][ T29] audit: type=1326 audit(5277075612.963:24638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.4.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 377.324770][ T29] audit: type=1326 audit(5277075612.963:24639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.4.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 377.361116][ T29] audit: type=1326 audit(5277075612.973:24640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.4.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 377.384727][ T29] audit: type=1326 audit(5277075612.973:24641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.4.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 377.408423][ T29] audit: type=1326 audit(5277075612.973:24642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23575 comm="syz.4.7166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 377.530818][T23590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23590 comm=syz.4.7173 [ 377.769930][T23606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7174'. [ 378.853747][T23656] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7197'. [ 379.175158][T23709] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 379.175158][T23709] program syz.2.7221 not setting count and/or reply_len properly [ 379.577807][T23771] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23771 comm=syz.4.7250 [ 379.817763][T23802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7261'. [ 380.055270][T23841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23841 comm=syz.3.7283 [ 380.764711][T23901] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 380.764711][T23901] program syz.2.7309 not setting count and/or reply_len properly [ 381.099979][T23932] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 381.099979][T23932] program syz.4.7321 not setting count and/or reply_len properly [ 381.321558][T23943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.330250][T23943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.342284][T23943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7326'. [ 382.053310][ T29] kauditd_printk_skb: 1514 callbacks suppressed [ 382.053329][ T29] audit: type=1107 audit(5277075617.723:26157): pid=23951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 382.346848][T23958] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 382.346848][T23958] program syz.4.7332 not setting count and/or reply_len properly [ 382.572807][ T29] audit: type=1326 audit(5277075618.243:26158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23966 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 382.769978][ T29] audit: type=1326 audit(5277075618.273:26159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23966 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 382.793809][ T29] audit: type=1326 audit(5277075618.273:26160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23966 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 382.817885][ T29] audit: type=1326 audit(5277075618.273:26161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23966 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 382.841527][ T29] audit: type=1326 audit(5277075618.273:26162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23966 comm="syz.4.7334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 382.956801][ T29] audit: type=1326 audit(5277075618.623:26163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23973 comm="syz.3.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 382.980516][ T29] audit: type=1326 audit(5277075618.623:26164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23973 comm="syz.3.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 383.004283][ T29] audit: type=1326 audit(5277075618.623:26165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23973 comm="syz.3.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 383.027899][ T29] audit: type=1326 audit(5277075618.623:26166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23973 comm="syz.3.7337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 383.191771][T23972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7335'. [ 383.254248][T24000] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24000 comm=syz.1.7347 [ 384.227842][T24029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24029 comm=syz.4.7358 [ 384.489249][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7370'. [ 384.498281][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7370'. [ 384.778790][T24084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7375'. [ 385.256998][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7382'. [ 385.266201][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7382'. [ 385.554779][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7396'. [ 385.563876][T24125] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7396'. [ 386.458031][T24183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7418'. [ 386.725592][T24199] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7425'. [ 386.823538][T24220] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7432'. [ 387.376633][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 387.376649][ T29] audit: type=1326 audit(5277075623.043:26405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24273 comm="syz.4.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 387.406975][ T29] audit: type=1326 audit(5277075623.043:26406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24273 comm="syz.4.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca2651d710 code=0x7ffc0000 [ 387.430729][ T29] audit: type=1326 audit(5277075623.043:26407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24273 comm="syz.4.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 387.454410][ T29] audit: type=1326 audit(5277075623.043:26408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24273 comm="syz.4.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 387.478032][ T29] audit: type=1326 audit(5277075623.043:26409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24273 comm="syz.4.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 387.501714][ T29] audit: type=1326 audit(5277075623.043:26410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24273 comm="syz.4.7452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 387.715720][T24285] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24285 comm=syz.0.7456 [ 387.740959][ T29] audit: type=1107 audit(5277075623.403:26411): pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 387.762593][ T29] audit: type=1326 audit(5277075623.433:26412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24287 comm="syz.0.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 387.804641][ T29] audit: type=1326 audit(5277075623.463:26413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24287 comm="syz.0.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 387.828230][ T29] audit: type=1326 audit(5277075623.463:26414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24287 comm="syz.0.7458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ee963eec9 code=0x7ffc0000 [ 388.078138][T24317] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24317 comm=syz.3.7471 [ 388.749416][T24383] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24383 comm=syz.0.7496 [ 389.856258][T24542] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24542 comm=syz.0.7559 [ 390.012942][T24566] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 390.012942][T24566] program syz.2.7565 not setting count and/or reply_len properly [ 390.100499][T24558] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 390.100499][T24558] program syz.0.7564 not setting count and/or reply_len properly [ 390.184793][T24593] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24593 comm=syz.3.7579 [ 391.717483][T24703] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24703 comm=syz.4.7621 [ 392.012955][T24735] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24735 comm=syz.4.7636 [ 392.331070][T24757] __nla_validate_parse: 2 callbacks suppressed [ 392.331092][T24757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7645'. [ 392.415739][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 392.415767][ T29] audit: type=1326 audit(5277075628.083:27062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24769 comm="syz.4.7651" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca2651eec9 code=0x0 [ 392.466576][ T29] audit: type=1326 audit(5277075628.103:27063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 392.490289][ T29] audit: type=1326 audit(5277075628.103:27064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f6b4cd710 code=0x7ffc0000 [ 392.513967][ T29] audit: type=1326 audit(5277075628.103:27065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 392.537575][ T29] audit: type=1326 audit(5277075628.103:27066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 392.561179][ T29] audit: type=1326 audit(5277075628.103:27067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 392.584887][ T29] audit: type=1326 audit(5277075628.103:27068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 392.620435][ T29] audit: type=1326 audit(5277075628.283:27069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 392.644193][ T29] audit: type=1326 audit(5277075628.283:27070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24772 comm="syz.3.7653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 392.930802][ T29] audit: type=1107 audit(5277075628.593:27071): pid=24787 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='W‰í' [ 393.163027][T24798] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7662'. [ 393.866253][T24864] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24864 comm=syz.2.7688 [ 394.101076][T24879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.151082][T24879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.161580][T24879] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7696'. [ 394.414563][T24890] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7698'. [ 394.491643][T24897] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24897 comm=syz.1.7702 [ 394.566420][T24904] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 394.566420][T24904] program syz.0.7705 not setting count and/or reply_len properly [ 394.729137][T24922] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24922 comm=syz.2.7715 [ 395.010556][T24951] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24951 comm=syz.1.7727 [ 395.069790][T24955] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 395.069790][T24955] program syz.3.7730 not setting count and/or reply_len properly [ 395.198191][T24959] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 395.198191][T24959] program syz.2.7731 not setting count and/or reply_len properly [ 395.390496][T24989] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24989 comm=syz.1.7742 [ 395.599192][T25008] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7749'. [ 395.748825][T25024] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25024 comm=syz.2.7756 [ 395.857466][T25038] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7762'. [ 395.974400][T25059] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25059 comm=syz.1.7770 [ 396.419974][T25081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7778'. [ 396.999655][T25092] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25092 comm=syz.4.7783 [ 397.151105][T25120] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7795'. [ 397.211293][T25131] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25131 comm=syz.0.7800 [ 397.321577][T25148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7803'. [ 397.369452][T25154] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7809'. [ 397.438012][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 397.438031][ T29] audit: type=1326 audit(5277075633.103:27603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.502620][ T29] audit: type=1326 audit(5277075633.103:27604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.526252][ T29] audit: type=1326 audit(5277075633.103:27605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.550014][ T29] audit: type=1326 audit(5277075633.103:27606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.573911][ T29] audit: type=1326 audit(5277075633.103:27607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.597563][ T29] audit: type=1326 audit(5277075633.103:27608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.621258][ T29] audit: type=1326 audit(5277075633.103:27609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.645225][ T29] audit: type=1326 audit(5277075633.103:27610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.669069][ T29] audit: type=1326 audit(5277075633.103:27611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.692942][ T29] audit: type=1326 audit(5277075633.103:27612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25163 comm="syz.4.7814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 397.757776][T25183] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7822'. [ 397.904444][T25201] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 397.904444][T25201] program syz.1.7831 not setting count and/or reply_len properly [ 398.143462][T25236] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 398.143462][T25236] program syz.1.7848 not setting count and/or reply_len properly [ 399.070218][T25290] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 399.070218][T25290] program syz.3.7871 not setting count and/or reply_len properly [ 399.151522][T25282] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 399.151522][T25282] program syz.1.7868 not setting count and/or reply_len properly [ 399.531136][T25334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7887'. [ 399.549092][T25344] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 399.549092][T25344] program syz.0.7892 not setting count and/or reply_len properly [ 400.047729][T25369] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 400.047729][T25369] program syz.0.7904 not setting count and/or reply_len properly [ 400.965858][T25408] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 400.965858][T25408] program syz.1.7920 not setting count and/or reply_len properly [ 401.261310][T25429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7929'. [ 401.310208][T25438] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 401.310208][T25438] program syz.0.7933 not setting count and/or reply_len properly [ 401.642151][T25466] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 401.642151][T25466] program syz.1.7947 not setting count and/or reply_len properly [ 402.045908][T25505] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 402.045908][T25505] program syz.4.7965 not setting count and/or reply_len properly [ 402.351453][T25520] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 402.351453][T25520] program syz.4.7969 not setting count and/or reply_len properly [ 402.454492][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 402.454510][ T29] audit: type=1326 audit(5277075638.123:28061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.484991][ T29] audit: type=1326 audit(5277075638.153:28062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.508856][ T29] audit: type=1326 audit(5277075638.153:28063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.532666][ T29] audit: type=1326 audit(5277075638.153:28064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.557127][ T29] audit: type=1326 audit(5277075638.223:28065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.580804][ T29] audit: type=1326 audit(5277075638.223:28066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.604530][ T29] audit: type=1326 audit(5277075638.223:28067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.628831][ T29] audit: type=1326 audit(5277075638.293:28068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.652456][ T29] audit: type=1326 audit(5277075638.293:28069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.676134][ T29] audit: type=1326 audit(5277075638.293:28070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25521 comm="syz.4.7970" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca2651eec9 code=0x7ffc0000 [ 402.995165][T25543] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 402.995165][T25543] program syz.0.7979 not setting count and/or reply_len properly [ 402.999285][T25546] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 402.999285][T25546] program syz.3.7980 not setting count and/or reply_len properly [ 403.177313][T25564] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7988'. [ 403.311174][T25583] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 403.311174][T25583] program syz.3.7991 not setting count and/or reply_len properly [ 403.380261][T25584] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 403.380261][T25584] program syz.2.7995 not setting count and/or reply_len properly [ 403.497575][T25602] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8003'. [ 403.600432][T25620] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 403.600432][T25620] program syz.4.8012 not setting count and/or reply_len properly [ 403.754773][T25645] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8022'. [ 403.937580][T25668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.946203][T25668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.955851][T25668] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8030'. [ 404.141484][T25679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8034'. [ 404.166174][T25673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8033'. [ 404.274776][T25686] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8037'. [ 404.883251][T25712] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8048'. [ 405.314388][T25739] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8060'. [ 405.554566][T25753] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=25753 comm=syz.0.8065 [ 405.582514][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8072'. [ 407.167870][T25845] sg_write: 3 callbacks suppressed [ 407.167888][T25845] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 407.167888][T25845] program syz.4.8102 not setting count and/or reply_len properly [ 407.333890][T25871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.342796][T25871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.396402][T25873] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 407.396402][T25873] program syz.3.8116 not setting count and/or reply_len properly [ 407.507699][T25883] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 407.507699][T25883] program syz.3.8121 not setting count and/or reply_len properly [ 407.606764][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 407.606784][ T29] audit: type=1107 audit(5277075643.273:28731): pid=25890 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 407.633600][ T29] audit: type=1326 audit(5277075643.293:28732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.657468][ T29] audit: type=1326 audit(5277075643.293:28733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.680983][ T29] audit: type=1326 audit(5277075643.293:28734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.704640][ T29] audit: type=1326 audit(5277075643.293:28735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.728677][ T29] audit: type=1326 audit(5277075643.293:28736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.752388][ T29] audit: type=1326 audit(5277075643.293:28737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.776018][ T29] audit: type=1326 audit(5277075643.293:28738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.799732][ T29] audit: type=1326 audit(5277075643.293:28739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 407.823412][ T29] audit: type=1326 audit(5277075643.293:28740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25892 comm="syz.3.8125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 408.189356][T25926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.228208][T25926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.286591][T25926] __nla_validate_parse: 7 callbacks suppressed [ 408.286610][T25926] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8141'. [ 408.296635][T25932] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 408.296635][T25932] program syz.2.8144 not setting count and/or reply_len properly [ 408.634126][T25957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8153'. [ 409.069517][T25978] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8161'. [ 409.524358][T26004] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8181'. [ 409.601168][T26006] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=26006 comm=syz.3.8172 [ 410.051444][T26040] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8185'. [ 410.164634][T26048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8191'. [ 410.475133][T26075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8203'. [ 410.634005][T26091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8206'. [ 410.762694][T26105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8215'. [ 410.945696][T26134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8227'. [ 411.320596][T26176] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 411.320596][T26176] program syz.1.8244 not setting count and/or reply_len properly [ 412.627349][ T29] kauditd_printk_skb: 619 callbacks suppressed [ 412.627410][ T29] audit: type=1326 audit(5277075648.293:29360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.657276][ T29] audit: type=1326 audit(5277075648.293:29361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.681004][ T29] audit: type=1326 audit(5277075648.293:29362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.704636][ T29] audit: type=1326 audit(5277075648.293:29363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.728529][ T29] audit: type=1326 audit(5277075648.293:29364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.752349][ T29] audit: type=1326 audit(5277075648.293:29365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.775948][ T29] audit: type=1326 audit(5277075648.293:29366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.799555][ T29] audit: type=1326 audit(5277075648.293:29367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.823161][ T29] audit: type=1326 audit(5277075648.293:29368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 412.846796][ T29] audit: type=1326 audit(5277075648.293:29369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26300 comm="syz.3.8295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f6b4ceec9 code=0x7ffc0000 [ 413.400348][T26327] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 413.400348][T26327] program syz.1.8303 not setting count and/or reply_len properly [ 414.055139][T26393] __nla_validate_parse: 10 callbacks suppressed [ 414.055160][T26393] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8327'. [ 414.144561][T26402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8331'. [ 414.229535][T26403] cgroup: fork rejected by pids controller in /syz2 [ 414.343987][T26507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26507 comm=syz.2.8333 [ 414.429513][T26516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8337'. [ 414.637421][T26537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8342'. [ 414.835436][T26563] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8355'. [ 415.146608][T26575] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 415.146608][T26575] program syz.3.8359 not setting count and/or reply_len properly [ 415.412722][T26584] SELinux: policydb string SE(Linux does not match my string SE Linux [ 415.421223][T26584] SELinux: failed to load policy [ 415.567565][T26603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8366'. [ 415.624250][T26600] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 415.624250][T26600] program syz.4.8370 not setting count and/or reply_len properly [ 415.691458][T26605] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 415.691458][T26605] program syz.3.8372 not setting count and/or reply_len properly [ 415.734213][T26719] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8377'. [ 415.760361][T26684] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 415.760361][T26684] program syz.4.8374 not setting count and/or reply_len properly [ 415.777680][T26721] FAULT_INJECTION: forcing a failure. [ 415.777680][T26721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.790935][T26721] CPU: 1 UID: 0 PID: 26721 Comm: syz.3.8378 Not tainted syzkaller #0 PREEMPT(voluntary) [ 415.790973][T26721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 415.790987][T26721] Call Trace: [ 415.790995][T26721] [ 415.791004][T26721] __dump_stack+0x1d/0x30 [ 415.791026][T26721] dump_stack_lvl+0xe8/0x140 [ 415.791049][T26721] dump_stack+0x15/0x1b [ 415.791098][T26721] should_fail_ex+0x265/0x280 [ 415.791124][T26721] should_fail+0xb/0x20 [ 415.791150][T26721] should_fail_usercopy+0x1a/0x20 [ 415.791185][T26721] _copy_from_iter+0xd2/0xe80 [ 415.791244][T26721] ? __build_skb_around+0x1a0/0x200 [ 415.791273][T26721] ? __alloc_skb+0x223/0x320 [ 415.791302][T26721] netlink_sendmsg+0x471/0x6b0 [ 415.791378][T26721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.791476][T26721] __sock_sendmsg+0x145/0x180 [ 415.791510][T26721] ____sys_sendmsg+0x31e/0x4e0 [ 415.791561][T26721] ___sys_sendmsg+0x17b/0x1d0 [ 415.791613][T26721] __x64_sys_sendmsg+0xd4/0x160 [ 415.791648][T26721] x64_sys_call+0x191e/0x2ff0 [ 415.791673][T26721] do_syscall_64+0xd2/0x200 [ 415.791791][T26721] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 415.791866][T26721] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 415.791913][T26721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.791948][T26721] RIP: 0033:0x7f2f6b4ceec9 [ 415.791969][T26721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.791991][T26721] RSP: 002b:00007f2f69f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.792026][T26721] RAX: ffffffffffffffda RBX: 00007f2f6b725fa0 RCX: 00007f2f6b4ceec9 [ 415.792044][T26721] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 415.792061][T26721] RBP: 00007f2f69f37090 R08: 0000000000000000 R09: 0000000000000000 [ 415.792080][T26721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.792098][T26721] R13: 00007f2f6b726038 R14: 00007f2f6b725fa0 R15: 00007ffc7c95aaf8 [ 415.792123][T26721] [ 416.134744][T26832] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 416.134744][T26832] program syz.3.8384 not setting count and/or reply_len properly [ 416.165541][T26844] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8388'. [ 416.332790][T26848] tipc: Started in network mode [ 416.337747][T26848] tipc: Node identity be6e4083daee, cluster identity 4711 [ 416.345307][T26848] tipc: Enabled bearer , priority 0 [ 416.371518][T26847] tipc: Resetting bearer [ 416.410596][T26847] tipc: Disabling bearer [ 416.464676][T26977] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8402'. [ 416.573022][T26994] cgroup: fork rejected by pids controller in /syz4 [ 416.576624][T26981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26981 comm=syz.0.8403 [ 416.677346][T27208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8416'. [ 416.791156][T27223] FAULT_INJECTION: forcing a failure. [ 416.791156][T27223] name failslab, interval 1, probability 0, space 0, times 0 [ 416.803949][T27223] CPU: 0 UID: 0 PID: 27223 Comm: syz.0.8422 Not tainted syzkaller #0 PREEMPT(voluntary) [ 416.804000][T27223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 416.804020][T27223] Call Trace: [ 416.804029][T27223] [ 416.804040][T27223] __dump_stack+0x1d/0x30 [ 416.804068][T27223] dump_stack_lvl+0xe8/0x140 [ 416.804094][T27223] dump_stack+0x15/0x1b [ 416.804116][T27223] should_fail_ex+0x265/0x280 [ 416.804228][T27223] should_failslab+0x8c/0xb0 [ 416.804260][T27223] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 416.804374][T27223] ? __d_alloc+0x3d/0x340 [ 416.804458][T27223] __d_alloc+0x3d/0x340 [ 416.804497][T27223] d_alloc_parallel+0x53/0xc60 [ 416.804563][T27223] ? selinux_inode_permission+0x62d/0x740 [ 416.804602][T27223] ? make_vfsuid+0x49/0xa0 [ 416.804631][T27223] ? lockref_get_not_dead+0x120/0x1c0 [ 416.804720][T27223] ? __rcu_read_unlock+0x4f/0x70 [ 416.804745][T27223] __lookup_slow+0x8c/0x250 [ 416.804788][T27223] lookup_slow+0x3c/0x60 [ 416.804840][T27223] walk_component+0x1ec/0x220 [ 416.804931][T27223] path_lookupat+0xfe/0x2a0 [ 416.804969][T27223] filename_lookup+0x147/0x340 [ 416.805019][T27223] user_path_at+0x3e/0x130 [ 416.805089][T27223] do_sys_truncate+0x5c/0x130 [ 416.805134][T27223] __x64_sys_truncate+0x31/0x40 [ 416.805159][T27223] x64_sys_call+0x1a2f/0x2ff0 [ 416.805181][T27223] do_syscall_64+0xd2/0x200 [ 416.805214][T27223] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 416.805253][T27223] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 416.805360][T27223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.805383][T27223] RIP: 0033:0x7f1ee963eec9 [ 416.805399][T27223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.805419][T27223] RSP: 002b:00007f1ee80a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 416.805439][T27223] RAX: ffffffffffffffda RBX: 00007f1ee9895fa0 RCX: 00007f1ee963eec9 [ 416.805453][T27223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 416.805476][T27223] RBP: 00007f1ee80a7090 R08: 0000000000000000 R09: 0000000000000000 [ 416.805489][T27223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.805502][T27223] R13: 00007f1ee9896038 R14: 00007f1ee9895fa0 R15: 00007ffe20ea1f78 [ 416.805523][T27223] [ 417.135612][T27336] FAULT_INJECTION: forcing a failure. [ 417.135612][T27336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.148821][T27336] CPU: 0 UID: 0 PID: 27336 Comm: syz.0.8429 Not tainted syzkaller #0 PREEMPT(voluntary) [ 417.148903][T27336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.148920][T27336] Call Trace: [ 417.148929][T27336] [ 417.148939][T27336] __dump_stack+0x1d/0x30 [ 417.148967][T27336] dump_stack_lvl+0xe8/0x140 [ 417.148989][T27336] dump_stack+0x15/0x1b [ 417.149006][T27336] should_fail_ex+0x265/0x280 [ 417.149066][T27336] should_fail+0xb/0x20 [ 417.149093][T27336] should_fail_usercopy+0x1a/0x20 [ 417.149185][T27336] _copy_from_user+0x1c/0xb0 [ 417.149320][T27336] ___bpf_copy_key+0xa5/0x110 [ 417.149365][T27336] map_update_elem+0x165/0x520 [ 417.149472][T27336] __sys_bpf+0x571/0x7b0 [ 417.149511][T27336] __x64_sys_bpf+0x41/0x50 [ 417.149581][T27336] x64_sys_call+0x2aea/0x2ff0 [ 417.149606][T27336] do_syscall_64+0xd2/0x200 [ 417.149661][T27336] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 417.149790][T27336] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 417.149826][T27336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.149866][T27336] RIP: 0033:0x7f1ee963eec9 [ 417.149882][T27336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.149945][T27336] RSP: 002b:00007f1ee80a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 417.149966][T27336] RAX: ffffffffffffffda RBX: 00007f1ee9895fa0 RCX: 00007f1ee963eec9 [ 417.149980][T27336] RDX: 0000000000000020 RSI: 00002000000008c0 RDI: 0000000000000002 [ 417.149994][T27336] RBP: 00007f1ee80a7090 R08: 0000000000000000 R09: 0000000000000000 [ 417.150007][T27336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.150021][T27336] R13: 00007f1ee9896038 R14: 00007f1ee9895fa0 R15: 00007ffe20ea1f78 [ 417.150042][T27336] [ 417.370154][T27341] ================================================================== [ 417.378291][T27341] BUG: KCSAN: data-race in call_rcu / mas_state_walk [ 417.385007][T27341] [ 417.387335][T27341] write to 0xffff888104942010 of 8 bytes by task 27340 on cpu 0: [ 417.395059][T27341] call_rcu+0x44/0x3f0 [ 417.399147][T27341] mas_wmb_replace+0xf7a/0x14a0 [ 417.404004][T27341] mas_wr_store_entry+0x1773/0x2b50 [ 417.409214][T27341] mas_store_prealloc+0x74d/0x9e0 [ 417.414255][T27341] vma_iter_store_new+0x1c5/0x200 [ 417.419296][T27341] vma_complete+0x125/0x580 [ 417.423806][T27341] __split_vma+0x591/0x650 [ 417.428232][T27341] vma_modify+0x21e/0xc80 [ 417.432569][T27341] vma_modify_flags+0x101/0x130 [ 417.437515][T27341] mprotect_fixup+0x2cc/0x570 [ 417.442206][T27341] do_mprotect_pkey+0x6d6/0x980 [ 417.447082][T27341] __x64_sys_mprotect+0x48/0x60 [ 417.451958][T27341] x64_sys_call+0x274e/0x2ff0 [ 417.456650][T27341] do_syscall_64+0xd2/0x200 [ 417.461179][T27341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.467084][T27341] [ 417.469413][T27341] read to 0xffff888104942010 of 8 bytes by task 27341 on cpu 1: [ 417.477046][T27341] mas_state_walk+0x2f5/0x650 [ 417.481746][T27341] mas_walk+0x60/0x150 [ 417.485829][T27341] lock_vma_under_rcu+0x8d/0x160 [ 417.490788][T27341] do_user_addr_fault+0x233/0x1090 [ 417.495925][T27341] exc_page_fault+0x62/0xa0 [ 417.500447][T27341] asm_exc_page_fault+0x26/0x30 [ 417.505327][T27341] [ 417.507657][T27341] value changed: 0x000055558b8d5fff -> 0xffffffff85646c50 [ 417.514770][T27341] [ 417.517102][T27341] Reported by Kernel Concurrency Sanitizer on: [ 417.523256][T27341] CPU: 1 UID: 0 PID: 27341 Comm: syz.0.8431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 417.533069][T27341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 417.543132][T27341] ================================================================== [ 417.573629][T27346] sch_fq: defrate 4294967295 ignored.