last executing test programs: 6.064663708s ago: executing program 4 (id=1542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x44) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fe", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r6, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r4, @ANYRES32, @ANYBLOB="0000020000000000b70095000000950000000000000002db6837da8f3d668b8df697fa8f4631acd7d94d5bbc4b1ff7d505fbbcb1144228b7b801a23e4fe39c21"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200d60743f309869acf8742aaf9af8959f1367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000fa6e26acec72d05e3ee6fb766ab668a", @ANYRESOCT=r7, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xc2, 0x0, 0x1, 0xd, '\x00', r9, r11, 0x1, 0x2, 0x2}, 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r12}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200000005000100"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f11aa200"/16, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) io_uring_enter(r1, 0x46f3, 0x0, 0x0, 0x0, 0x0) 6.063884019s ago: executing program 4 (id=1543): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 6.036661902s ago: executing program 4 (id=1544): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x8) fchdir(r3) mknod(&(0x7f0000000080)='./file0\x00', 0x8001420, 0x4) 5.994783088s ago: executing program 4 (id=1545): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) r1 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20029, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xd}, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000063115b00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000008000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x42, '\x00', r3, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) close(r1) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000400)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x7}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1, 0x120b, &(0x7f0000002300)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') add_key$keyring(&(0x7f0000000540), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) 5.640899902s ago: executing program 4 (id=1548): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'dummy0\x00', 0x0}) syz_io_uring_setup(0x4b5, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010008fd1e0d0ba8690636c9b22045fba801200"/32, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r5, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x40}}, './file0\x00'}) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newqdisc={0x434, 0x24, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xc, 0xb}, {0xc, 0xb}, {0xfff7, 0x7}}, [@TCA_STAB={0x134, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x9, 0x7, 0x0, 0x2, 0x800, 0x0, 0x1}}, {0x6, 0x2, [0x3c]}}, {{0x1c, 0x1, {0x2, 0x0, 0x3, 0x9, 0x1, 0x3, 0xfff, 0x6}}, {0x10, 0x2, [0x7, 0x8, 0x1000, 0xffff, 0x9, 0x7]}}, {{0x1c, 0x1, {0x7, 0x4, 0x1, 0x10, 0x3, 0x9, 0x7, 0x8}}, {0x14, 0x2, [0x0, 0x5, 0x4, 0x4, 0x0, 0x3ff, 0x3640, 0x1]}}, {{0x1c, 0x1, {0x5, 0x6, 0xb, 0x7, 0x0, 0x4, 0xe9, 0xa}}, {0x18, 0x2, [0x2, 0xf789, 0xe3c2, 0x6, 0x0, 0x2a, 0xfff9, 0xb, 0x6cf1, 0xfff7]}}, {{0x1c, 0x1, {0x0, 0x7, 0x5, 0xb, 0x0, 0x7, 0x7, 0x5}}, {0xe, 0x2, [0x293, 0x7, 0x5, 0x7fff, 0x4]}}, {{0x1c, 0x1, {0x7f, 0xd, 0x7, 0x8, 0x0, 0xffffffff, 0x29, 0x2}}, {0x8, 0x2, [0x0, 0x40]}}, {{0x1c, 0x1, {0x6, 0xff, 0xffff, 0x7d0a7034, 0x1, 0x0, 0x800, 0x5}}, {0xe, 0x2, [0x0, 0x3, 0x5, 0x6, 0x85e]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x9}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x5}}, @TCA_STAB={0xf4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x90, 0x4, 0xfffff9df, 0x1, 0x3, 0x9, 0x2}}, {0x8, 0x2, [0x2, 0x8001]}}, {{0x1c, 0x1, {0xf, 0xd, 0x3437, 0x1, 0x0, 0x3, 0x924, 0x6}}, {0x10, 0x2, [0x3, 0x5, 0x8, 0xd, 0x4, 0xbd3b]}}, {{0x1c, 0x1, {0x3, 0x8, 0x5, 0x5fbf, 0x0, 0x1, 0xd, 0x1}}, {0x6, 0x2, [0xc94]}}, {{0x1c, 0x1, {0x7f, 0x7, 0x1, 0x7, 0x0, 0x9, 0xb4, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0x6, 0x1fd, 0x78, 0x1, 0x7, 0xfffffff8, 0x5}}, {0xe, 0x2, [0xefec, 0x7, 0x7, 0xc, 0x94]}}, {{0x1c, 0x1, {0x10, 0x45, 0x7, 0x2, 0x2, 0x10000000, 0x7, 0x5}}, {0xe, 0x2, [0x5, 0x2, 0x7, 0x2, 0x5]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xae}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x1, 0x40, 0x69a}}}}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0x10001}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x8}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x5}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x1b}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x14}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc9, 0x0, 0x5, 0x6, 0x0, 0x7, 0x7ff, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}, {{0x1c, 0x1, {0x7, 0x5e, 0x8, 0x5, 0x1, 0x7, 0x9, 0x2}}, {0x8, 0x2, [0xa17, 0x9]}}, {{0x1c, 0x1, {0x1, 0xa, 0xa, 0x0, 0x1, 0x8, 0x1, 0x1}}, {0x6, 0x2, [0x3ff]}}, {{0x1c, 0x1, {0x8, 0x40, 0x1000, 0x200, 0x0, 0x3, 0x371efe2c, 0x5}}, {0xe, 0x2, [0x2, 0xc, 0x8, 0x8, 0x1]}}, {{0x1c, 0x1, {0x3a, 0x81, 0x4, 0x3, 0x0, 0x7ff, 0x5, 0x1}}, {0x6, 0x2, [0x7ff]}}, {{0x1c, 0x1, {0x9, 0x2, 0x9, 0x7ff, 0x0, 0x73, 0x81, 0x2}}, {0x8, 0x2, [0x6, 0x3]}}, {{0x1c, 0x1, {0xf, 0x3, 0x1000, 0x9, 0x1, 0xffff0000, 0xc, 0x3}}, {0xa, 0x2, [0x2, 0x7, 0x8]}}, {{0x1c, 0x1, {0x3, 0x7, 0x2, 0xffff, 0x1, 0xfffffffa, 0x2, 0x7}}, {0x12, 0x2, [0x8, 0x1, 0xe06e, 0x2, 0x5, 0x9, 0xa6a3]}}]}]}, 0x434}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendmsg$kcm(r8, &(0x7f0000000cc0)={&(0x7f0000000480)=@ll={0x11, 0x8, r10, 0x1, 0xf5, 0x6, @broadcast}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000580)="e9d62e0aee49bff7e2c3ed8ffa10c08a132fc927c929398c7761bb08436ccf20706bef14a2adade84a79403159b06f4643d24bf00d8bc59dea88a3dae4fad7ecbe0640aabf337bdc1039a8dc26cf5076e5ba79d0f56fb60c944d7a2b2e7d8ebf933f7a45766d96", 0x67}, {&(0x7f0000000600)="a2f7a558cc39db1d0aa1c4ddeefaecc4f78fe3893e110bf898c8a40195615ef0e1a4d62cbb6778e33a294363ddcab6457307e6718dc47605c42d9fd9c27f601d487f5cf0d7a45cfb22e768e49e399dca943dcc3c368acf788d9fdca4", 0x5c}, {&(0x7f0000000500)="a0b312cbd490", 0x6}, {&(0x7f00000008c0)="cdfeb145381281c8d2b3d4f24fc04a092fc5b1e3f62e6cfd410525a990105aa1bf8dd62ffd3bcb36892baccafb42d13bb7fb49351d20611452c6db2314aa19b82426b7af7220c7a89d3fec5e1e53004ae5398b0d9b39862c6d2d576cf92d48b0ed58ece44dcdc7a17a68f59b237d5c49a291c6fddb42d1b533f81ad9a69fa73e56d0c00135fe95de3ddf3313", 0x8c}, {&(0x7f0000000b40)="dad2ed0b8cfa17f7513e484d896e53461237172b67fd2bf794d0d6d2c2eca8d9250c63d67bb5cfc3379b3b0c667df98f9c7a728b31c9821593306f324bc05578e8240484b07b116925046c85507f05d8d04b796141bcb5d6c6714371cb18a98ca1c8a24ae38d2308979b3f5fdaecedacb097c9b1e4015495ab403f5191ec86a61fccd6fe0eb2f41fb44219661deb52cffda2ddcc90d3c81be83380819da14d3655f93e88b8e8cf78e962f48acf6466fe2047742d12931359adce2c4a7e4c85285d62d5", 0xc3}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="48000000000000000c0100000b000000bb0c7421628b13d789e9b2c8a8aaf33c9d51fa50b906ad25eef8105f452eaa56395ecd81dfc1e57977fcab408f76d648441a803a1e4df80000e7ff2745187178c95981b51caadfbf35a7dac5d94f48a538c62a00ae97d6e8e220abd709f20900"/121], 0x70}, 0xc001) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r12) sendmsg$IPVS_CMD_SET_CONFIG(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="01002cbd7000fcdbdf250c00000081fe05000500000063212abeaf4fced2b13ff8f836c656216e508b3e7af7f6587354d1357fecb6239bb81af1ad79cd5d3781ea0da70807884a81edced1099bd8e1963763cd0139d677623cdf94c4dd2c40ece16f328ba7abd8d9788f98c3e88b2786f7777086cc1eef1c2a729fc85f6e9a617d8180fdf42dc084147d59d86aef1f0cdae478b34624681acee16185150f06dc98dfc559f0be93b4fcd7d76908957da21729c452640cbbb437d25b5683b04a0f7b308edc480e9f1497c98cdc4e0922a3635b85d52c5028da4f536102c18b284cfa28e7d723de3b6874b3542364aba102a44e8481d01554"], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x1000) syz_io_uring_setup(0x5c6, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) pause() sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002dbd7000fedbdf2501000000000000000841000000030018"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5.098694092s ago: executing program 4 (id=1567): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_pgetevents(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa1c}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x2000402) utime(&(0x7f00000000c0)='./file0\x00', 0x0) lseek(r6, 0x0, 0x3) r7 = fsopen(0x0, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000140)='dummy0\x00') cachestat(r7, &(0x7f00000002c0)={0x400, 0x2400000000000000}, 0xfffffffffffffffc, 0x0) r8 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.051594218s ago: executing program 32 (id=1567): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) io_setup(0x1, &(0x7f00000001c0)=0x0) io_pgetevents(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa1c}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x2000402) utime(&(0x7f00000000c0)='./file0\x00', 0x0) lseek(r6, 0x0, 0x3) r7 = fsopen(0x0, 0x0) ioctl$sock_SIOCBRDELBR(r6, 0x89a1, &(0x7f0000000140)='dummy0\x00') cachestat(r7, &(0x7f00000002c0)={0x400, 0x2400000000000000}, 0xfffffffffffffffc, 0x0) r8 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.896331564s ago: executing program 0 (id=1584): setitimer(0x2, 0x0, &(0x7f0000000080)) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xfffffffffffffe40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$netlink(r0, &(0x7f0000000300)=@proc={0x10, 0x0, 0x25dfdffc}, 0xc) exit(0xfffffffffffffffe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x99, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x3c, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=r6, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x32, 0x829, 0xffffffff, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x1e, &(0x7f0000000200)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x96, &(0x7f0000000300)=""/150, 0x40f00, 0x5c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x5, 0x9, 0x4, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020207025000000000020209b7b1af8ff00000000bfa100000000200007010000f8ffffffb7030000080000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r8}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r9, 0x0, 0x1843}, 0x18) socket$nl_rdma(0x10, 0x3, 0x14) 2.574522902s ago: executing program 0 (id=1599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r2, 0x100, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f00000000c0)=""/40, &(0x7f0000000140)=0x28) getdents(r2, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents64(r4, &(0x7f0000002080)=""/4108, 0x100c) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000280)=0x1) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x25dfdaff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {}, {0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x27, 0xe, 0xf, 0x4}]}}]}}]}, 0x44}}, 0x0) 2.108907492s ago: executing program 0 (id=1602): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r0, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req={0x66c29e2d, 0x8, 0x0, 0x1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=""/268, 0x10c}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000003c0)={0x7, 0x9, 0x37fffd, 0x6794, 0x7fffffff, 0xffffffffffbffff7, 0x9, 0x0, 0x1, 0x6, 0x20000007, 0x4, 0xfffffffffffff04f, 0x1000000000000003, 0x200000080000000, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x200000005, 0x800000008, 0x6, 0xab0, 0x2, 0x5, 0x3, 0x7, 0x8}) 1.515280677s ago: executing program 3 (id=1608): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r0}, 0x18) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{}]}) nanosleep(&(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000380)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000ff0f00000000000000feffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='kmem_cache_free\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') close(r1) r4 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r4, 0x400, 0x1) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) r5 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}}, 0x18) 1.157019973s ago: executing program 1 (id=1613): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.119843697s ago: executing program 1 (id=1614): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100031418110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 1.085260912s ago: executing program 0 (id=1615): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x44) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fe", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000070e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRES32=r10, @ANYBLOB="0000020000000000b70095000000950000000000000002db6837da8f3d668b8df697fa8f4631acd7d94d5bbc4b1ff7d505fbbcb1144228b7b801a23e4fe39c21"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200d60743f309869acf8742aaf9af8959f1367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000fa6e26acec72d05e3ee6fb766ab668a", @ANYRESOCT=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r14 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xc2, 0x0, 0x1, 0xd, '\x00', r12, r14, 0x1, 0x2, 0x2}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r15}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 1.082101542s ago: executing program 1 (id=1616): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x190da) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c25000000001420"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6, 0x0, 0x80000}, 0x18) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$isdn(0x22, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x0, 0x4000) 978.636355ms ago: executing program 2 (id=1617): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x44) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fe", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYBLOB="0000020000000000b70095000000950000000000000002db6837da8f3d668b8df697fa8f4631acd7d94d5bbc4b1ff7d505fbbcb1144228b7b801a23e4fe39c21"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200d60743f309869acf8742aaf9af8959f1367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000fa6e26acec72d05e3ee6fb766ab668a", @ANYRESOCT=r8, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xc2, 0x0, 0x1, 0xd, '\x00', r10, r12, 0x1, 0x2, 0x2}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r13}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200000005000100"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000030601040000000000000000070000020500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f11aa200"/16, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 885.410707ms ago: executing program 5 (id=1569): getpgrp(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_int(r2, 0x0, 0x5, &(0x7f0000000080)=0x6, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0002, 0x0) listen(0xffffffffffffffff, 0x3) r4 = socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001400b59500000000000000000a400000", @ANYRES32=r6, @ANYBLOB="00000000001dd009fb00ffff0000000014000100fe80000000000000000000000000000a"], 0x40}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0x0, 0x400000, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x48}}, 0x0) creat(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) 864.81575ms ago: executing program 2 (id=1618): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0xf, "800300"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r0, 0x80000) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, 0x0, &(0x7f0000000340)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x2, 0x80805, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x48810) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0xfffffffffffffffe, {}, 0x81}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x1, 0xff, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xfff1, 0x10}, {0xfff1, 0x9}, {0x2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 814.543056ms ago: executing program 0 (id=1619): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x103}, 0x100002, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800400, &(0x7f00000009c0)={[{@quota}]}, 0x1, 0x4f3, &(0x7f0000000a00)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x6, 0xfffffffffffffff7}, 0x0, 0x10000, 0x1, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x6}}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = open(&(0x7f0000000040)='./file2\x00', 0x4440, 0x4) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) open(0x0, 0x143142, 0x80) 781.725781ms ago: executing program 5 (id=1620): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f00000001c0), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4051}, 0x8000002) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x6}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x81) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r7, &(0x7f0000003600)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x2b8}}], 0x1, 0x48040) vmsplice(r7, &(0x7f0000000040), 0x100000000000000c, 0x6) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@dioread_lock}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) close(r2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, r8, {0x8}}, './file0/file0\x00'}) sendmsg$nl_xfrm(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000001000000000000000000000000000000000000000000000008000000000000000000000000f69900"/112], 0xb8}}, 0x4040000) preadv(r1, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000100)=""/123, 0x7b}], 0x2, 0x2, 0xd) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) preadv2(r0, &(0x7f0000001900)=[{&(0x7f0000000140)=""/109, 0x6d}, {&(0x7f00000001c0)=""/13, 0xd}, {&(0x7f0000000200)=""/156, 0x9c}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/65, 0x41}, {&(0x7f00000005c0)=""/167, 0xa7}, {&(0x7f0000000680)=""/233, 0xe9}, {&(0x7f0000000340)=""/37, 0x25}, {&(0x7f0000001800)=""/202, 0xca}], 0x9, 0x7, 0x3, 0x4) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) 767.656842ms ago: executing program 2 (id=1621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) (fail_nth: 5) open_tree(0xffffffffffffffff, 0x0, 0x88080) 657.127377ms ago: executing program 2 (id=1622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80400, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0xdcf, &(0x7f0000000040)={0x0, 0xc8a1, 0xc080, 0x8, 0x3e1}) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r4, &(0x7f0000f62000/0x1000)=nil, 0x0) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x6083, 0x3) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x8, 0x7ffc0001}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x200}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000140), &(0x7f0000000200)=0x4) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x6}, {0x6, 0x0, 0x3, 0xfffffbff}]}) 645.150378ms ago: executing program 1 (id=1623): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 627.33904ms ago: executing program 0 (id=1624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000027000000080000000100000080d1362c98a05f95934664b6ef62fab91442c5070000005f3c"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000380)={{0x1, 0x1, 0x18, r2, {0x5}}, './file2/file0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x6) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x377, &(0x7f0000000b40)="$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") r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x585}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8=r5], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x8}, 0x18) lstat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback=0x16, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000440)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000400000000000000000000008500000023000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa10000000b000007011800f8ffffffbfa400000000000007040000f0ffffffb7020000080000a518230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0x1c, 0x0, &(0x7f0000000000)="b3471534d41d73c78d1c6753273b8a349fecd04550d3abc88fb67bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 513.409644ms ago: executing program 3 (id=1625): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100031418110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 479.439979ms ago: executing program 1 (id=1626): getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000040)=""/80, &(0x7f0000000100)=0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000200)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<', @ANYRES16=r5, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@migrate={0x244, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0x2}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x6c, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @coaddr={0x14, 0xe, @in6=@loopback}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x244}}, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000000740)={0x6, &(0x7f00000006c0)=[{0x4, 0x5, 0x8a, 0x91}, {0x7, 0x7f, 0xc, 0x8}, {0x0, 0xb, 0x3, 0xa6d0}, {0x4, 0x1, 0x7, 0xa2}, {0xd, 0x9a, 0x81, 0xf3b9}, {0x39, 0x5, 0x5, 0x9}]}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x0) 405.909508ms ago: executing program 3 (id=1627): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x1000000000000008}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x42, &(0x7f0000000040)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_ADMIT_BYTES={0x0, 0x5, 0xd9a0}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xd}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xab2}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x2}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}, @TCA_RATE={0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 285.284473ms ago: executing program 3 (id=1628): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a000006090002007379063d00000000889269060a129b305800040008000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e080001"], 0x78}, 0x1, 0x0, 0x0, 0x20048055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000ac0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd30, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x0, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee11, 0x0, 0x0, 0x3], [0x0, 0x8, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4c845}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@getchain={0x54, 0x66, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x3, 0x6}, {0x2, 0xb}, {0xc, 0xd}}, [{0x8, 0xb, 0xb}, {0x8, 0xb, 0x75}, {0x8, 0xb, 0xf31}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x896}, {0x8, 0xb, 0xca}]}, 0x54}, 0x1, 0x0, 0x0, 0x24054}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f00000006c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x3c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x2, 0x55}}}}, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x40}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x8f}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60845}, 0x810) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x104, 0x0, 0x4, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x52}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fb92eb6d726bbc1e891c51fc8bae5c3d74efb401c506ac94"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b5724719adf7d63470d02e5f4d5e441f1b8b5b3014b21360"}], @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2141672eed238c747f99ce7c66ef324aa7d3d62c4cb6c94a"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000051}, 0x10) 283.968414ms ago: executing program 5 (id=1629): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000440)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000600)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0x3, &(0x7f0000000800)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, &(0x7f00000008c0), 0x8, 0x4f, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0xf}, @type_tag={0xc, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x30, 0x61, 0x5f, 0x30, 0x2e, 0x5f]}}, &(0x7f0000000b80)=""/68, 0x38, 0x44, 0x1, 0x3}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x10001, '\x00', r4, r6, 0x4, 0x1}, 0x50) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) r7 = socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000000b00)={0x10, 0x0, 0x25dfdbfc, 0x20}, 0xc) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000f00)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc}, 0x14}}, 0x40000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r5, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r9, @ANYRES32, @ANYRES32, @ANYRESDEC=r1, @ANYRES32, @ANYRESHEX=r3, @ANYRES64=r11], 0x20) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x1, 0x0, 0x7, 0x80, 0x3}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @generic={0x1, 0x5, 0x7, 0x8, 0xc4fa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x42e, 0x60, &(0x7f0000000400)=""/96, 0x41000, 0x1, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x2ff12, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000480)=[{0x1, 0x5, 0x1, 0x9}, {0x5, 0x4, 0xd, 0xa}, {0x1, 0x1, 0x4, 0x9}, {0x4, 0x5, 0x4, 0x2}, {0x2, 0x4, 0x4, 0x5}, {0x2, 0x3, 0xd, 0x2}, {0x3, 0x5, 0x8, 0xb}, {0x4, 0x2, 0x4, 0x9}]}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', r4, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x11, @val=@netkit={@void, @value=r12, @void, @void, r11}}, 0x1c) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000080)='GPL\x00', 0x0, 0xfffffffffffffedf, 0x0, 0x0, 0x0, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r14}, 0x10) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") ioctl$KDSKBSENT(r10, 0x4b49, &(0x7f0000000d00)={0xf0, "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"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='kfree\x00', r13, 0x0, 0x80000}, 0x18) syz_open_procfs$namespace(0x0, &(0x7f00000006c0)='ns/pid_for_children\x00') 130.882093ms ago: executing program 2 (id=1630): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) r5 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x44) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="fe", 0x1}], 0x1}, 0x4000000) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000070e6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000800)=ANY=[@ANYRESDEC=r5, @ANYRES32=r10, @ANYBLOB="0000020000000000b70095000000950000000000000002db6837da8f3d668b8df697fa8f4631acd7d94d5bbc4b1ff7d505fbbcb1144228b7b801a23e4fe39c21"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200d60743f309869acf8742aaf9af8959f1367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000fa6e26acec72d05e3ee6fb766ab668a", @ANYRESOCT=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r14 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0xc2, 0x0, 0x1, 0xd, '\x00', r12, r14, 0x1, 0x2, 0x2}, 0x50) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r15}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_enter(r2, 0x46f3, 0x0, 0x0, 0x0, 0x0) 130.148053ms ago: executing program 3 (id=1631): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents(r4, &(0x7f0000000300)=""/94, 0x5e) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000000000000000008000000c58ca8013bea752daad7df8e437ba70019110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x8, 0x9, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x98, 0xffff, 0x8000}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYRESHEX=r0, @ANYRESOCT=r3, @ANYRES32=r3, @ANYRESDEC=r1, @ANYRES16=0x0, @ANYRESHEX=r5, @ANYRES16=r2, @ANYBLOB="b0c8f0ffce27bd25298dfd21956be114393fbec3a99ec0616c38a70da07592f0bb580411794567d5dd4c465242824968b2e3bfa631c4bcc604c5c12fb178b05c65e56d70a1e35ac2", @ANYRESOCT=0x0], &(0x7f0000000580)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, @fallback=0x31, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000008500000088000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r8], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b332abd7000ffdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40084) r11 = socket(0x10, 0x3, 0x0) connect$netlink(r11, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1, 0x80}, 0xc) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}}, 0x8084) 60.899782ms ago: executing program 2 (id=1632): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000740)={[{@nojournal_checksum}, {@inlinecrypt}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x9) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r9 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060080"], 0x24}}, 0x10) add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "98c40d6bbc93ddee3b4b3e6c55ba6a07f865f5017ba5691cab20e7a8d9750eb05a7cc27059c1f1267238ac9ee3bae40184d8fc75470664dbd0d40d73016e4071", 0x14}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000380)={'fscrypt:', @desc3}, &(0x7f0000000580)={0x0, "bffd6e7d127eee10557ff0e755533bdf0d2fdbd8a8e95f63f05cd1a454b3e44a0dfced5b5fec107ef0d18ecf5c5ad954df794d3172881a7b14e3936d70da5488", 0x18}, 0x48, r1) 0s ago: executing program 3 (id=1633): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) kernel console output (not intermixed with test programs): ss `syz.1.710'. [ 91.119257][ T7019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.710'. [ 91.350204][ T7023] capability: warning: `syz.1.711' uses deprecated v2 capabilities in a way that may be insecure [ 91.515843][ T7031] atomic_op ffff88811b42e928 conn xmit_atomic 0000000000000000 [ 91.712975][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 91.795190][ T7044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'. [ 91.824455][ T7049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.721'. [ 91.946032][ T7054] FAULT_INJECTION: forcing a failure. [ 91.946032][ T7054] name failslab, interval 1, probability 0, space 0, times 0 [ 91.959022][ T7054] CPU: 0 UID: 0 PID: 7054 Comm: syz.3.723 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.959050][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.959062][ T7054] Call Trace: [ 91.959068][ T7054] [ 91.959099][ T7054] __dump_stack+0x1d/0x30 [ 91.959186][ T7054] dump_stack_lvl+0x95/0xd0 [ 91.959211][ T7054] dump_stack+0x15/0x1b [ 91.959233][ T7054] should_fail_ex+0x265/0x280 [ 91.959261][ T7054] should_failslab+0x8c/0xb0 [ 91.959288][ T7054] __kmalloc_noprof+0xb9/0x5a0 [ 91.959366][ T7054] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 91.959400][ T7054] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 91.959430][ T7054] genl_family_rcv_msg_doit+0x48/0x1b0 [ 91.959459][ T7054] ? selinux_capable+0x31/0x40 [ 91.959492][ T7054] ? security_capable+0x83/0x90 [ 91.959522][ T7054] ? ns_capable+0x7d/0xb0 [ 91.959559][ T7054] genl_rcv_msg+0x422/0x460 [ 91.959634][ T7054] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 91.959657][ T7054] netlink_rcv_skb+0x123/0x220 [ 91.959752][ T7054] ? __pfx_genl_rcv_msg+0x10/0x10 [ 91.959786][ T7054] genl_rcv+0x28/0x40 [ 91.959809][ T7054] netlink_unicast+0x5c0/0x690 [ 91.959851][ T7054] netlink_sendmsg+0x58b/0x6b0 [ 91.959985][ T7054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.960019][ T7054] __sock_sendmsg+0x145/0x180 [ 91.960039][ T7054] ____sys_sendmsg+0x31e/0x4a0 [ 91.960075][ T7054] ___sys_sendmsg+0x17b/0x1d0 [ 91.960189][ T7054] __x64_sys_sendmsg+0xd4/0x160 [ 91.960232][ T7054] x64_sys_call+0x17ba/0x3000 [ 91.960264][ T7054] do_syscall_64+0xca/0x2b0 [ 91.960331][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.960355][ T7054] RIP: 0033:0x7f7ba469f749 [ 91.960401][ T7054] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.960421][ T7054] RSP: 002b:00007f7ba3107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.960452][ T7054] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469f749 [ 91.960468][ T7054] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 91.960482][ T7054] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 91.960496][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.960553][ T7054] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 91.960577][ T7054] [ 91.962940][ T7052] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 92.301470][ T7064] Cannot find add_set index 0 as target [ 92.319330][ T7063] Cannot find del_set index 3 as target [ 92.332336][ T6194] hid-generic 0000:86010001:0006.000D: unknown main item tag 0x0 [ 92.345392][ T6194] hid-generic 0000:86010001:0006.000D: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 92.352336][ T23] hid-generic 0000:86010001:0006.000E: unknown main item tag 0x0 [ 92.407671][ T23] hid-generic 0000:86010001:0006.000E: hidraw1: HID v69662f.2e Device [syz1] on syz0 [ 92.704635][ T7082] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 93.036517][ T7097] __nla_validate_parse: 1 callbacks suppressed [ 93.036534][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.738'. [ 93.050506][ T7095] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 93.218716][ T7104] FAULT_INJECTION: forcing a failure. [ 93.218716][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 93.231507][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.3.740 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.231541][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.231598][ T7104] Call Trace: [ 93.231606][ T7104] [ 93.231614][ T7104] __dump_stack+0x1d/0x30 [ 93.231647][ T7104] dump_stack_lvl+0x95/0xd0 [ 93.231675][ T7104] dump_stack+0x15/0x1b [ 93.231702][ T7104] should_fail_ex+0x265/0x280 [ 93.231756][ T7104] should_failslab+0x8c/0xb0 [ 93.231833][ T7104] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 93.231859][ T7104] ? resume_store+0xf2/0x3d0 [ 93.231935][ T7104] ? __pfx_resume_store+0x10/0x10 [ 93.231959][ T7104] kstrndup+0x80/0x130 [ 93.231991][ T7104] resume_store+0xf2/0x3d0 [ 93.232014][ T7104] ? _copy_from_iter+0x13e/0xe70 [ 93.232073][ T7104] ? should_fail_ex+0xdb/0x280 [ 93.232157][ T7104] ? __pfx_resume_store+0x10/0x10 [ 93.232183][ T7104] kobj_attr_store+0x4a/0x70 [ 93.232213][ T7104] ? __pfx_kobj_attr_store+0x10/0x10 [ 93.232290][ T7104] sysfs_kf_write+0xfe/0x120 [ 93.232311][ T7104] ? __pfx_sysfs_kf_write+0x10/0x10 [ 93.232410][ T7104] kernfs_fop_write_iter+0x1eb/0x300 [ 93.232508][ T7104] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 93.232549][ T7104] vfs_write+0x52a/0x960 [ 93.232635][ T7104] ksys_write+0xda/0x1a0 [ 93.232657][ T7104] __x64_sys_write+0x40/0x50 [ 93.232701][ T7104] x64_sys_call+0x2847/0x3000 [ 93.232733][ T7104] do_syscall_64+0xca/0x2b0 [ 93.232803][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.232888][ T7104] RIP: 0033:0x7f7ba469f749 [ 93.232903][ T7104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.233082][ T7104] RSP: 002b:00007f7ba3107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 93.233108][ T7104] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469f749 [ 93.233124][ T7104] RDX: 0000000000000006 RSI: 0000200000000240 RDI: 0000000000000006 [ 93.233140][ T7104] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 93.233152][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.233203][ T7104] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 93.233226][ T7104] [ 93.602102][ T7115] netlink: 68 bytes leftover after parsing attributes in process `syz.0.745'. [ 93.671113][ T7122] netlink: 64 bytes leftover after parsing attributes in process `syz.0.745'. [ 93.671132][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 93.722120][ T7125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.746'. [ 93.753364][ T7115] syzkaller1: entered promiscuous mode [ 93.759131][ T7115] syzkaller1: entered allmulticast mode [ 93.766680][ T7126] netlink: 28 bytes leftover after parsing attributes in process `syz.4.747'. [ 93.815758][ T7129] FAULT_INJECTION: forcing a failure. [ 93.815758][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 93.828938][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.4.748 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.828966][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.828980][ T7129] Call Trace: [ 93.828987][ T7129] [ 93.828996][ T7129] __dump_stack+0x1d/0x30 [ 93.829068][ T7129] dump_stack_lvl+0x95/0xd0 [ 93.829089][ T7129] dump_stack+0x15/0x1b [ 93.829110][ T7129] should_fail_ex+0x265/0x280 [ 93.829139][ T7129] should_failslab+0x8c/0xb0 [ 93.829166][ T7129] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 93.829188][ T7129] ? __alloc_skb+0x2ff/0x4b0 [ 93.829301][ T7129] __alloc_skb+0x2ff/0x4b0 [ 93.829330][ T7129] ? __alloc_skb+0x228/0x4b0 [ 93.829362][ T7129] audit_log_start+0x3a0/0x720 [ 93.829407][ T7129] audit_seccomp+0x48/0x100 [ 93.829438][ T7129] ? __seccomp_filter+0x832/0x1260 [ 93.829481][ T7129] __seccomp_filter+0x843/0x1260 [ 93.829517][ T7129] ? up_write+0x18/0x60 [ 93.829564][ T7129] ? chown_common+0x399/0x3f0 [ 93.829587][ T7129] ? lockref_put_return+0xf7/0x130 [ 93.829619][ T7129] __secure_computing+0x82/0x150 [ 93.829689][ T7129] syscall_trace_enter+0xcf/0x1e0 [ 93.829718][ T7129] do_syscall_64+0xa4/0x2b0 [ 93.829763][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.829846][ T7129] RIP: 0033:0x7ff82a26e15c [ 93.829861][ T7129] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.829882][ T7129] RSP: 002b:00007ff828ccf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.829905][ T7129] RAX: ffffffffffffffda RBX: 00007ff82a4c5fa0 RCX: 00007ff82a26e15c [ 93.829917][ T7129] RDX: 000000000000000f RSI: 00007ff828ccf0a0 RDI: 0000000000000003 [ 93.829928][ T7129] RBP: 00007ff828ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 93.830011][ T7129] R10: 000000000000ee01 R11: 0000000000000246 R12: 0000000000000001 [ 93.830023][ T7129] R13: 00007ff82a4c6038 R14: 00007ff82a4c5fa0 R15: 00007ffe01451b38 [ 93.830043][ T7129] [ 94.087084][ T7134] netlink: 'syz.4.749': attribute type 27 has an invalid length. [ 94.232267][ T7139] Cannot find del_set index 3 as target [ 94.276201][ T36] hid-generic 0000:86010001:0006.000F: unknown main item tag 0x0 [ 94.296965][ T36] hid-generic 0000:86010001:0006.000F: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 94.765626][ T7163] FAULT_INJECTION: forcing a failure. [ 94.765626][ T7163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.779498][ T7163] CPU: 0 UID: 0 PID: 7163 Comm: syz.3.756 Not tainted syzkaller #0 PREEMPT(voluntary) [ 94.779534][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 94.779550][ T7163] Call Trace: [ 94.779558][ T7163] [ 94.779564][ T7163] __dump_stack+0x1d/0x30 [ 94.779590][ T7163] dump_stack_lvl+0x95/0xd0 [ 94.779611][ T7163] dump_stack+0x15/0x1b [ 94.779664][ T7163] should_fail_ex+0x265/0x280 [ 94.779694][ T7163] should_fail+0xb/0x20 [ 94.779784][ T7163] should_fail_usercopy+0x1a/0x20 [ 94.779876][ T7163] copy_folio_from_iter_atomic+0x26a/0x1150 [ 94.779914][ T7163] ? shmem_write_begin+0xfc/0x1f0 [ 94.779943][ T7163] ? shmem_write_begin+0x135/0x1f0 [ 94.779973][ T7163] generic_perform_write+0x2c2/0x490 [ 94.780075][ T7163] shmem_file_write_iter+0xc5/0xf0 [ 94.780116][ T7163] do_iter_readv_writev+0x4a1/0x540 [ 94.780223][ T7163] vfs_writev+0x2df/0x8b0 [ 94.780267][ T7163] do_writev+0xe7/0x210 [ 94.780355][ T7163] __x64_sys_writev+0x45/0x50 [ 94.780383][ T7163] x64_sys_call+0x1ba5/0x3000 [ 94.780413][ T7163] do_syscall_64+0xca/0x2b0 [ 94.780465][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.780490][ T7163] RIP: 0033:0x7f7ba469f749 [ 94.780506][ T7163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.780523][ T7163] RSP: 002b:00007f7ba3107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 94.780546][ T7163] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469f749 [ 94.780614][ T7163] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 000000000000000b [ 94.780627][ T7163] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 94.780638][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.780651][ T7163] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 94.780671][ T7163] [ 95.138111][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 95.138128][ T29] audit: type=1326 audit(1768505109.008:36184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.178906][ T29] audit: type=1326 audit(1768505109.048:36185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.202564][ T29] audit: type=1326 audit(1768505109.048:36186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.306977][ T29] audit: type=1326 audit(1768505109.098:36187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.330592][ T29] audit: type=1326 audit(1768505109.098:36188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.354488][ T29] audit: type=1326 audit(1768505109.098:36189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.378036][ T29] audit: type=1326 audit(1768505109.118:36190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.401633][ T29] audit: type=1326 audit(1768505109.118:36191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.425743][ T29] audit: type=1326 audit(1768505109.118:36192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.449860][ T29] audit: type=1326 audit(1768505109.118:36193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7173 comm="syz.2.764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 95.482713][ T7187] wireguard0: entered promiscuous mode [ 95.488825][ T7187] wireguard0: entered allmulticast mode [ 95.720563][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.769'. [ 95.757800][ T7199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.770'. [ 95.766913][ T7199] netlink: 92 bytes leftover after parsing attributes in process `syz.4.770'. [ 96.165435][ T7210] Cannot find del_set index 286 as target [ 96.275433][ T7210] ======================================================= [ 96.275433][ T7210] WARNING: The mand mount option has been deprecated and [ 96.275433][ T7210] and is ignored by this kernel. Remove the mand [ 96.275433][ T7210] option from the mount to silence this warning. [ 96.275433][ T7210] ======================================================= [ 96.529613][ T7238] Cannot find add_set index 0 as target [ 96.576677][ T6194] hid-generic 0000:86010001:0006.0010: unknown main item tag 0x0 [ 96.587711][ T6194] hid-generic 0000:86010001:0006.0010: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 96.838069][ T7253] netlink: 96 bytes leftover after parsing attributes in process `syz.2.783'. [ 96.868625][ T7253] macvtap0: refused to change device tx_queue_len [ 97.468084][ T7287] FAULT_INJECTION: forcing a failure. [ 97.468084][ T7287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.481711][ T7287] CPU: 0 UID: 0 PID: 7287 Comm: syz.3.795 Not tainted syzkaller #0 PREEMPT(voluntary) [ 97.481748][ T7287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 97.481759][ T7287] Call Trace: [ 97.481765][ T7287] [ 97.481772][ T7287] __dump_stack+0x1d/0x30 [ 97.481841][ T7287] dump_stack_lvl+0x95/0xd0 [ 97.481880][ T7287] dump_stack+0x15/0x1b [ 97.481918][ T7287] should_fail_ex+0x265/0x280 [ 97.481948][ T7287] should_fail+0xb/0x20 [ 97.482034][ T7287] should_fail_usercopy+0x1a/0x20 [ 97.482055][ T7287] strncpy_from_user+0x27/0x260 [ 97.482126][ T7287] getname_flags+0xae/0x3b0 [ 97.482149][ T7287] do_sys_openat2+0x60/0x150 [ 97.482176][ T7287] __x64_sys_openat+0xf2/0x120 [ 97.482273][ T7287] x64_sys_call+0x2b07/0x3000 [ 97.482332][ T7287] do_syscall_64+0xca/0x2b0 [ 97.482365][ T7287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.482384][ T7287] RIP: 0033:0x7f7ba469df90 [ 97.482398][ T7287] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 97.482448][ T7287] RSP: 002b:00007f7ba3106b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 97.482530][ T7287] RAX: ffffffffffffffda RBX: 0000000000062d01 RCX: 00007f7ba469df90 [ 97.482541][ T7287] RDX: 0000000000062d01 RSI: 00007f7ba3106c10 RDI: 00000000ffffff9c [ 97.482551][ T7287] RBP: 00007f7ba3106c10 R08: 0000000000000000 R09: 002367732f766564 [ 97.482562][ T7287] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 97.482573][ T7287] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 97.482680][ T7287] [ 97.823981][ T7302] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 98.693363][ T7320] __nla_validate_parse: 9 callbacks suppressed [ 98.693379][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.806'. [ 98.792151][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.806'. [ 98.872464][ T7325] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 98.882493][ T7323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.807'. [ 98.891554][ T7323] netlink: 92 bytes leftover after parsing attributes in process `syz.3.807'. [ 99.144981][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 99.944380][ T7355] @: renamed from vlan0 (while UP) [ 100.027518][ T7357] netlink: 84 bytes leftover after parsing attributes in process `syz.4.818'. [ 100.071504][ T7359] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 100.141368][ T7360] Cannot find add_set index 0 as target [ 100.175625][ T3492] hid-generic 0000:86010001:0006.0011: unknown main item tag 0x0 [ 100.187585][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 100.187603][ T29] audit: type=1400 audit(1768505114.058:36531): avc: denied { execmem } for pid=7356 comm="syz.4.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 100.215149][ T7363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.820'. [ 100.224139][ T7363] netlink: 92 bytes leftover after parsing attributes in process `syz.2.820'. [ 100.262609][ T3492] hid-generic 0000:86010001:0006.0011: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 100.383245][ T7371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.823'. [ 100.392423][ T29] audit: type=1400 audit(1768505114.248:36532): avc: denied { create } for pid=7368 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.418938][ T7369] IPVS: Error connecting to the multicast addr [ 100.427192][ T7369] netlink: 48 bytes leftover after parsing attributes in process `syz.3.822'. [ 100.446634][ T29] audit: type=1400 audit(1768505114.288:36533): avc: denied { setopt } for pid=7368 comm="syz.3.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.500152][ T29] audit: type=1400 audit(1768505114.368:36534): avc: denied { ioctl } for pid=7368 comm="syz.3.822" path="socket:[12229]" dev="sockfs" ino=12229 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 100.705187][ T29] audit: type=1326 audit(1768505114.578:36535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 100.783458][ T29] audit: type=1326 audit(1768505114.608:36536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 100.807257][ T29] audit: type=1326 audit(1768505114.608:36537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 100.830967][ T29] audit: type=1326 audit(1768505114.608:36538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 100.854778][ T29] audit: type=1326 audit(1768505114.608:36539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 100.878247][ T29] audit: type=1326 audit(1768505114.608:36540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7391 comm="syz.2.828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 101.079020][ T7400] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 102.928425][ T3492] kernel write not supported for file /ppp (pid: 3492 comm: kworker/1:7) [ 102.950721][ T7438] block device autoloading is deprecated and will be removed. [ 103.279074][ T7451] loop1: detected capacity change from 0 to 8192 [ 103.693805][ T7480] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 103.731509][ T7473] __nla_validate_parse: 19 callbacks suppressed [ 103.731556][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.858'. [ 103.733912][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.0.861'. [ 103.756203][ T7484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 103.836199][ T7487] Cannot find del_set index 3 as target [ 103.853085][ T3491] hid-generic 0000:86010001:0006.0012: unknown main item tag 0x0 [ 103.881233][ T3491] hid-generic 0000:86010001:0006.0012: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 103.911245][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.862'. [ 103.953941][ T7491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.863'. [ 103.971335][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.863'. [ 104.037504][ T7493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 104.354798][ T7509] netlink: 'syz.3.868': attribute type 1 has an invalid length. [ 104.637003][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.874'. [ 104.658557][ T7523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 104.732424][ T7525] netlink: 48 bytes leftover after parsing attributes in process `syz.0.875'. [ 105.254044][ T29] kauditd_printk_skb: 778 callbacks suppressed [ 105.254059][ T29] audit: type=1400 audit(1768505119.129:37319): avc: denied { connect } for pid=7550 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.282650][ T7551] netlink: 'syz.3.886': attribute type 49 has an invalid length. [ 105.311161][ T29] audit: type=1400 audit(1768505119.159:37320): avc: denied { getopt } for pid=7550 comm="syz.3.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.548736][ T29] audit: type=1326 audit(1768505119.419:37321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7565 comm="syz.1.890" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba20a4f749 code=0x0 [ 105.626778][ T7568] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 105.656285][ T29] audit: type=1400 audit(1768505119.529:37322): avc: denied { ioctl } for pid=7565 comm="syz.1.890" path="socket:[14464]" dev="sockfs" ino=14464 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 105.706847][ T29] audit: type=1400 audit(1768505119.579:37323): avc: denied { search } for pid=7570 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.729299][ T29] audit: type=1400 audit(1768505119.579:37324): avc: denied { search } for pid=7570 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.752253][ T29] audit: type=1400 audit(1768505119.579:37325): avc: denied { search } for pid=7570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.775643][ T29] audit: type=1400 audit(1768505119.579:37326): avc: denied { search } for pid=7570 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.799040][ T29] audit: type=1400 audit(1768505119.579:37327): avc: denied { read open } for pid=7572 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.824776][ T29] audit: type=1400 audit(1768505119.579:37328): avc: denied { getattr } for pid=7572 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.138686][ T7600] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 106.527810][ T7627] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 106.753167][ T7644] Cannot find del_set index 3 as target [ 106.767035][ T3491] hid-generic 0000:86010001:0006.0013: unknown main item tag 0x0 [ 106.777626][ T3491] hid-generic 0000:86010001:0006.0013: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 106.779676][ T7646] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 106.852777][ T7625] cgroup: fork rejected by pids controller in /syz1 [ 107.021790][ T7768] netlink: 'syz.2.919': attribute type 1 has an invalid length. [ 107.051137][ T7768] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.459934][ T8046] FAULT_INJECTION: forcing a failure. [ 107.459934][ T8046] name failslab, interval 1, probability 0, space 0, times 0 [ 107.473021][ T8046] CPU: 1 UID: 0 PID: 8046 Comm: syz.0.921 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.473052][ T8046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.473077][ T8046] Call Trace: [ 107.473084][ T8046] [ 107.473094][ T8046] __dump_stack+0x1d/0x30 [ 107.473126][ T8046] dump_stack_lvl+0x95/0xd0 [ 107.473245][ T8046] dump_stack+0x15/0x1b [ 107.473265][ T8046] should_fail_ex+0x265/0x280 [ 107.473287][ T8046] should_failslab+0x8c/0xb0 [ 107.473444][ T8046] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 107.473531][ T8046] ? sidtab_sid2str_get+0xa0/0x130 [ 107.473568][ T8046] kmemdup_noprof+0x2b/0x70 [ 107.473616][ T8046] sidtab_sid2str_get+0xa0/0x130 [ 107.473661][ T8046] security_sid_to_context_core+0x1eb/0x2e0 [ 107.473691][ T8046] security_sid_to_context+0x27/0x40 [ 107.473725][ T8046] avc_audit_post_callback+0x10f/0x520 [ 107.473818][ T8046] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 107.473859][ T8046] common_lsm_audit+0x1bb/0x230 [ 107.473884][ T8046] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 107.473978][ T8046] ? avc_denied+0xe4/0x100 [ 107.474111][ T8046] slow_avc_audit+0x104/0x140 [ 107.474156][ T8046] avc_has_perm+0x13a/0x180 [ 107.474224][ T8046] selinux_socket_sendmsg+0x175/0x1b0 [ 107.474259][ T8046] security_socket_sendmsg+0x48/0x80 [ 107.474283][ T8046] __sock_sendmsg+0x30/0x180 [ 107.474304][ T8046] __sys_sendto+0x268/0x330 [ 107.474426][ T8046] __x64_sys_sendto+0x76/0x90 [ 107.474503][ T8046] x64_sys_call+0x29a7/0x3000 [ 107.474530][ T8046] do_syscall_64+0xca/0x2b0 [ 107.474711][ T8046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.474739][ T8046] RIP: 0033:0x7f2cc6e9f749 [ 107.474759][ T8046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.474783][ T8046] RSP: 002b:00007f2cc5907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 107.474803][ T8046] RAX: ffffffffffffffda RBX: 00007f2cc70f5fa0 RCX: 00007f2cc6e9f749 [ 107.474836][ T8046] RDX: 0000000000000001 RSI: 0000200000000300 RDI: 0000000000000006 [ 107.474852][ T8046] RBP: 00007f2cc5907090 R08: 0000200000000100 R09: 0000000000000010 [ 107.474865][ T8046] R10: 0000000000044054 R11: 0000000000000246 R12: 0000000000000001 [ 107.474877][ T8046] R13: 00007f2cc70f6038 R14: 00007f2cc70f5fa0 R15: 00007ffcd0a1bae8 [ 107.474896][ T8046] [ 107.845273][ T8050] FAULT_INJECTION: forcing a failure. [ 107.845273][ T8050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.858545][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.3.923 Not tainted syzkaller #0 PREEMPT(voluntary) [ 107.858646][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.858659][ T8050] Call Trace: [ 107.858665][ T8050] [ 107.858672][ T8050] __dump_stack+0x1d/0x30 [ 107.858702][ T8050] dump_stack_lvl+0x95/0xd0 [ 107.858811][ T8050] dump_stack+0x15/0x1b [ 107.858838][ T8050] should_fail_ex+0x265/0x280 [ 107.858891][ T8050] should_fail+0xb/0x20 [ 107.858915][ T8050] should_fail_usercopy+0x1a/0x20 [ 107.858958][ T8050] _copy_from_iter+0xcf/0xe70 [ 107.858985][ T8050] ? should_fail_ex+0xdb/0x280 [ 107.859017][ T8050] ? should_failslab+0x8c/0xb0 [ 107.859093][ T8050] ? __kmalloc_noprof+0x2b4/0x5a0 [ 107.859136][ T8050] ? kernfs_fop_write_iter+0xe2/0x300 [ 107.859182][ T8050] kernfs_fop_write_iter+0x125/0x300 [ 107.859223][ T8050] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 107.859306][ T8050] vfs_write+0x52a/0x960 [ 107.859331][ T8050] ksys_write+0xda/0x1a0 [ 107.859350][ T8050] __x64_sys_write+0x40/0x50 [ 107.859445][ T8050] x64_sys_call+0x2847/0x3000 [ 107.859484][ T8050] do_syscall_64+0xca/0x2b0 [ 107.859573][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.859620][ T8050] RIP: 0033:0x7f7ba469f749 [ 107.859686][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.859704][ T8050] RSP: 002b:00007f7ba3107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.859723][ T8050] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469f749 [ 107.859736][ T8050] RDX: 0000000000000012 RSI: 0000200000000000 RDI: 0000000000000003 [ 107.859769][ T8050] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 107.859787][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.859803][ T8050] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 107.859824][ T8050] [ 108.299089][ T8065] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 108.380020][ T8056] infiniband syz!: set active [ 108.384937][ T8056] infiniband syz!: added team_slave_0 [ 108.453771][ T8056] RDS/IB: syz!: added [ 108.473921][ T8056] smc: adding ib device syz! with port count 1 [ 108.508820][ T8056] smc: ib device syz! port 1 has no pnetid [ 108.805263][ T8080] __nla_validate_parse: 20 callbacks suppressed [ 108.805295][ T8080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.933'. [ 109.265380][ T8092] Cannot find add_set index 0 as target [ 109.343941][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 109.372102][ T8099] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 109.400915][ T8099] block device autoloading is deprecated and will be removed. [ 109.421999][ T8101] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 109.491338][ T8107] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 109.506213][ T8108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.944'. [ 109.515315][ T8108] netlink: 92 bytes leftover after parsing attributes in process `syz.1.944'. [ 109.585802][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 109.611114][ T8114] Cannot find del_set index 3 as target [ 109.617082][ T8119] lo: Caught tx_queue_len zero misconfig [ 109.623593][ T8117] loop1: detected capacity change from 0 to 512 [ 109.654828][ T8117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.668137][ T8117] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.674887][ T23] hid-generic 0000:86010001:0006.0014: unknown main item tag 0x0 [ 109.702851][ T8117] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.948: bg 0: block 18: invalid block bitmap [ 109.708185][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 109.726729][ T23] hid-generic 0000:86010001:0006.0014: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 109.761648][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 109.771296][ T8127] netlink: 28 bytes leftover after parsing attributes in process `syz.2.951'. [ 109.781744][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.806200][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.4.950'. [ 109.978642][ T8137] loop1: detected capacity change from 0 to 128 [ 109.985787][ T8137] EXT4-fs: Ignoring removed nobh option [ 110.136824][ T8137] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.149406][ T8137] ext4 filesystem being mounted at /216/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.466974][ T23] kernel write not supported for file /ppp (pid: 23 comm: kworker/1:0) [ 110.509378][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 110.509401][ T29] audit: type=1326 audit(1768505124.379:37607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.621337][ T29] audit: type=1326 audit(1768505124.419:37608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.645512][ T29] audit: type=1326 audit(1768505124.419:37609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.669239][ T29] audit: type=1326 audit(1768505124.419:37610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.692908][ T29] audit: type=1326 audit(1768505124.419:37611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.716537][ T29] audit: type=1326 audit(1768505124.419:37612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.740096][ T29] audit: type=1326 audit(1768505124.419:37613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.763718][ T29] audit: type=1326 audit(1768505124.419:37614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.787349][ T29] audit: type=1326 audit(1768505124.419:37615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 110.810906][ T29] audit: type=1326 audit(1768505124.419:37616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8142 comm="syz.0.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2cc6e9f749 code=0x7ffc0000 [ 111.244693][ T8146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.956'. [ 111.551125][ T8164] sit0: Caught tx_queue_len zero misconfig [ 111.919556][ T3317] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.034842][ T8183] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 112.157703][ T8194] FAULT_INJECTION: forcing a failure. [ 112.157703][ T8194] name failslab, interval 1, probability 0, space 0, times 0 [ 112.170975][ T8194] CPU: 0 UID: 0 PID: 8194 Comm: syz.1.972 Not tainted syzkaller #0 PREEMPT(voluntary) [ 112.171012][ T8194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 112.171029][ T8194] Call Trace: [ 112.171050][ T8194] [ 112.171060][ T8194] __dump_stack+0x1d/0x30 [ 112.171093][ T8194] dump_stack_lvl+0x95/0xd0 [ 112.171122][ T8194] dump_stack+0x15/0x1b [ 112.171228][ T8194] should_fail_ex+0x265/0x280 [ 112.171260][ T8194] should_failslab+0x8c/0xb0 [ 112.171286][ T8194] kmem_cache_alloc_noprof+0x69/0x4b0 [ 112.171314][ T8194] ? audit_log_start+0x342/0x720 [ 112.171398][ T8194] audit_log_start+0x342/0x720 [ 112.171434][ T8194] audit_seccomp+0x48/0x100 [ 112.171525][ T8194] ? __seccomp_filter+0x832/0x1260 [ 112.171560][ T8194] __seccomp_filter+0x843/0x1260 [ 112.171594][ T8194] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 112.171620][ T8194] ? hrtimer_active+0x10b/0x130 [ 112.171719][ T8194] ? _raw_spin_unlock_irq+0x26/0x50 [ 112.171765][ T8194] ? do_getitimer+0x2e1/0x3a0 [ 112.171833][ T8194] ? should_fail_ex+0xdb/0x280 [ 112.171867][ T8194] __secure_computing+0x82/0x150 [ 112.171903][ T8194] syscall_trace_enter+0xcf/0x1e0 [ 112.171940][ T8194] do_syscall_64+0xa4/0x2b0 [ 112.171986][ T8194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.172069][ T8194] RIP: 0033:0x7fba20a4e15c [ 112.172089][ T8194] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 112.172153][ T8194] RSP: 002b:00007fba1f4b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 112.172185][ T8194] RAX: ffffffffffffffda RBX: 00007fba20ca5fa0 RCX: 00007fba20a4e15c [ 112.172224][ T8194] RDX: 000000000000000f RSI: 00007fba1f4b70a0 RDI: 0000000000000004 [ 112.172240][ T8194] RBP: 00007fba1f4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.172257][ T8194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.172273][ T8194] R13: 00007fba20ca6038 R14: 00007fba20ca5fa0 R15: 00007ffd4974f508 [ 112.172301][ T8194] [ 112.432026][ T8194] netlink: 'syz.1.972': attribute type 13 has an invalid length. [ 112.450415][ T8205] sg_write: data in/out 49276/1 bytes for SCSI command 0x6-- guessing data in; [ 112.450415][ T8205] program syz.4.978 not setting count and/or reply_len properly [ 112.488758][ T8197] unsupported nla_type 28561 [ 112.508506][ T8197] loop1: detected capacity change from 0 to 1024 [ 112.652174][ T8197] journal_path: Non-blockdev passed as './file1' [ 112.658651][ T8197] EXT4-fs: error: could not find journal device path [ 112.789710][ T8213] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 112.812445][ T8213] loop1: detected capacity change from 0 to 512 [ 112.840453][ T8213] EXT4-fs: dax option not supported [ 113.455409][ T8245] loop1: detected capacity change from 0 to 1024 [ 113.505823][ T8245] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 114.235949][ T8256] __nla_validate_parse: 15 callbacks suppressed [ 114.235965][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 114.398598][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.996'. [ 114.407685][ T8278] netlink: 92 bytes leftover after parsing attributes in process `syz.2.996'. [ 114.667849][ T8286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.999'. [ 114.677491][ T8286] netlink: 92 bytes leftover after parsing attributes in process `syz.2.999'. [ 114.719472][ T8289] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1000'. [ 114.842008][ T23] kernel read not supported for file bpf-prog (pid: 23 comm: kworker/1:0) [ 114.964002][ T8304] openvswitch: netlink: Missing key (keys=40, expected=100) [ 114.972686][ T8304] netlink: 'syz.0.1005': attribute type 1 has an invalid length. [ 114.980452][ T8304] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1005'. [ 115.033056][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 115.066285][ T8311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 115.152098][ T8326] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1010'. [ 115.543070][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 115.543088][ T29] audit: type=1326 audit(1768505129.420:37963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.590826][ T29] audit: type=1326 audit(1768505129.450:37964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.614788][ T29] audit: type=1326 audit(1768505129.450:37965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.638613][ T29] audit: type=1326 audit(1768505129.450:37966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.662282][ T29] audit: type=1326 audit(1768505129.450:37967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.686156][ T29] audit: type=1326 audit(1768505129.450:37968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.709926][ T29] audit: type=1326 audit(1768505129.450:37969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.733839][ T29] audit: type=1326 audit(1768505129.450:37970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.757636][ T29] audit: type=1326 audit(1768505129.450:37971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.781378][ T29] audit: type=1326 audit(1768505129.450:37972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8351 comm="syz.1.1015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba20a4f749 code=0x7ffc0000 [ 115.806792][ T8358] netlink: 'syz.1.1015': attribute type 13 has an invalid length. [ 115.852256][ T8358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.863252][ T8358] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.874934][ T8358] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 116.265834][ T8375] Cannot find del_set index 3 as target [ 116.341543][ T23] hid-generic 0000:86010001:0006.0015: unknown main item tag 0x0 [ 116.392320][ T23] hid-generic 0000:86010001:0006.0015: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 116.917460][ T8399] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.1022' sets config #1 [ 117.787048][ T8488] netlink: 'syz.3.1037': attribute type 1 has an invalid length. [ 117.830115][ T8488] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.907245][ T8549] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 118.157105][ T8656] Cannot find del_set index 3 as target [ 118.166054][ T3491] hid-generic 0000:86010001:0006.0016: unknown main item tag 0x0 [ 118.177528][ T8655] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 118.187171][ T3491] hid-generic 0000:86010001:0006.0016: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 118.397668][ T8672] loop1: detected capacity change from 0 to 256 [ 118.418705][ T8672] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 118.432285][ T8672] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 118.441199][ T8672] FAT-fs (loop1): Filesystem has been set read-only [ 118.881383][ T8688] IPVS: stopping master sync thread 7600 ... [ 119.085006][ T8712] IPVS: Error connecting to the multicast addr [ 119.104442][ T8712] FAULT_INJECTION: forcing a failure. [ 119.104442][ T8712] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.117643][ T8712] CPU: 1 UID: 0 PID: 8712 Comm: syz.1.1062 Not tainted syzkaller #0 PREEMPT(voluntary) [ 119.117685][ T8712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 119.117780][ T8712] Call Trace: [ 119.117788][ T8712] [ 119.117798][ T8712] __dump_stack+0x1d/0x30 [ 119.117840][ T8712] dump_stack_lvl+0x95/0xd0 [ 119.117908][ T8712] dump_stack+0x15/0x1b [ 119.117985][ T8712] should_fail_ex+0x265/0x280 [ 119.118018][ T8712] should_fail+0xb/0x20 [ 119.118043][ T8712] should_fail_usercopy+0x1a/0x20 [ 119.118122][ T8712] _copy_from_user+0x1c/0xb0 [ 119.118158][ T8712] smc_setsockopt+0x2ac/0x750 [ 119.118197][ T8712] ? __pfx_smc_setsockopt+0x10/0x10 [ 119.118303][ T8712] __sys_setsockopt+0x184/0x200 [ 119.118339][ T8712] __x64_sys_setsockopt+0x64/0x80 [ 119.118376][ T8712] x64_sys_call+0x21d5/0x3000 [ 119.118468][ T8712] do_syscall_64+0xca/0x2b0 [ 119.118582][ T8712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.118611][ T8712] RIP: 0033:0x7fba20a4f749 [ 119.118634][ T8712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.118658][ T8712] RSP: 002b:00007fba1f4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 119.118686][ T8712] RAX: ffffffffffffffda RBX: 00007fba20ca5fa0 RCX: 00007fba20a4f749 [ 119.118704][ T8712] RDX: 000000000000048c RSI: 0000000000000000 RDI: 0000000000000003 [ 119.118744][ T8712] RBP: 00007fba1f4b7090 R08: 0000000000000018 R09: 0000000000000000 [ 119.118761][ T8712] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 119.118778][ T8712] R13: 00007fba20ca6038 R14: 00007fba20ca5fa0 R15: 00007ffd4974f508 [ 119.118804][ T8712] [ 119.498586][ T8723] __nla_validate_parse: 14 callbacks suppressed [ 119.498608][ T8723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1068'. [ 119.609783][ T8729] 9p: Bad value for 'wfdno' [ 119.643441][ T8734] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1073'. [ 119.666603][ T8732] loop1: detected capacity change from 0 to 512 [ 119.681922][ T8732] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 119.704398][ T8732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.719409][ T8732] ext4 filesystem being mounted at /237/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.730837][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 119.740021][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1075'. [ 119.768314][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.827467][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 119.890500][ T8748] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1076'. [ 119.914249][ T8736] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'. [ 120.048371][ T8752] Driver unsupported XDP return value 0 on prog (id 481) dev N/A, expect packet loss! [ 120.244932][ T8763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1083'. [ 120.358978][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1084'. [ 120.440592][ T8768] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 120.523381][ T10] kernel write not supported for file /ppp (pid: 10 comm: kworker/0:1) [ 120.558687][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 120.558703][ T29] audit: type=1326 audit(1768505134.431:38128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.596425][ T29] audit: type=1326 audit(1768505134.471:38129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.620582][ T29] audit: type=1326 audit(1768505134.471:38130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.644307][ T29] audit: type=1326 audit(1768505134.471:38131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.668198][ T29] audit: type=1326 audit(1768505134.471:38132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.691938][ T29] audit: type=1326 audit(1768505134.471:38133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.715700][ T29] audit: type=1326 audit(1768505134.471:38134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.739377][ T29] audit: type=1326 audit(1768505134.471:38135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.742347][ T8772] bridge0: entered promiscuous mode [ 120.763188][ T29] audit: type=1326 audit(1768505134.471:38136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.791883][ T29] audit: type=1326 audit(1768505134.471:38137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8769 comm="syz.3.1087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7ba469f749 code=0x7ffc0000 [ 120.820141][ T8772] macsec0: entered promiscuous mode [ 120.843926][ T8772] bridge0: port 1(macsec0) entered blocking state [ 120.850944][ T8772] bridge0: port 1(macsec0) entered disabled state [ 120.858465][ T8772] macsec0: entered allmulticast mode [ 120.863853][ T8772] bridge0: entered allmulticast mode [ 120.872117][ T8772] macsec0: left allmulticast mode [ 120.877241][ T8772] bridge0: left allmulticast mode [ 120.884457][ T8772] bridge0: left promiscuous mode [ 121.086938][ T8785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1091'. [ 121.368317][ T8807] loop1: detected capacity change from 0 to 128 [ 121.471610][ T8812] netlink: '+}[@': attribute type 13 has an invalid length. [ 121.529688][ T8815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5127 sclass=netlink_route_socket pid=8815 comm=syz.3.1103 [ 121.544525][ T8812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.562539][ T8812] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.587813][ T8812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 121.669332][ T8819] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 121.754738][ T3492] kernel write not supported for file bpf-prog (pid: 3492 comm: kworker/1:7) [ 121.990492][ T8858] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 122.241521][ T8873] Cannot find del_set index 3 as target [ 122.275904][ T36] hid-generic 0000:86010001:0006.0017: unknown main item tag 0x0 [ 122.346386][ T36] hid-generic 0000:86010001:0006.0017: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 122.749612][ T8897] Cannot find add_set index 0 as target [ 122.831779][ T8895] netlink: 'syz.4.1133': attribute type 1 has an invalid length. [ 122.882043][ T8906] FAULT_INJECTION: forcing a failure. [ 122.882043][ T8906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.895408][ T8906] CPU: 0 UID: 0 PID: 8906 Comm: syz.4.1133 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.895446][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.895513][ T8906] Call Trace: [ 122.895522][ T8906] [ 122.895531][ T8906] __dump_stack+0x1d/0x30 [ 122.895562][ T8906] dump_stack_lvl+0x95/0xd0 [ 122.895612][ T8906] dump_stack+0x15/0x1b [ 122.895683][ T8906] should_fail_ex+0x265/0x280 [ 122.895707][ T8906] should_fail+0xb/0x20 [ 122.895725][ T8906] should_fail_usercopy+0x1a/0x20 [ 122.895751][ T8906] _copy_from_user+0x1c/0xb0 [ 122.895903][ T8906] __copy_msghdr+0x244/0x300 [ 122.895944][ T8906] ___sys_sendmsg+0x109/0x1d0 [ 122.896070][ T8906] __x64_sys_sendmsg+0xd4/0x160 [ 122.896106][ T8906] x64_sys_call+0x17ba/0x3000 [ 122.896133][ T8906] do_syscall_64+0xca/0x2b0 [ 122.896243][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.896340][ T8906] RIP: 0033:0x7ff82a26f749 [ 122.896469][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.896487][ T8906] RSP: 002b:00007ff828cae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.896513][ T8906] RAX: ffffffffffffffda RBX: 00007ff82a4c6090 RCX: 00007ff82a26f749 [ 122.896584][ T8906] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 000000000000000b [ 122.896596][ T8906] RBP: 00007ff828cae090 R08: 0000000000000000 R09: 0000000000000000 [ 122.896608][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.896684][ T8906] R13: 00007ff82a4c6128 R14: 00007ff82a4c6090 R15: 00007ffe01451b38 [ 122.896709][ T8906] [ 123.166828][ T8858] rdma_op ffff888122733d80 conn xmit_rdma 0000000000000000 [ 123.322815][ T8933] Cannot find add_set index 0 as target [ 123.325372][ T8931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 123.349738][ T3491] hid-generic 0000:86010001:0006.0018: unknown main item tag 0x0 [ 123.371352][ T3491] hid-generic 0000:86010001:0006.0018: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 123.689591][ T8939] syzkaller0: entered promiscuous mode [ 123.695231][ T8939] syzkaller0: entered allmulticast mode [ 123.978489][ T8967] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 124.001329][ T8969] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 124.421252][ T9024] IPVS: set_ctl: invalid protocol: 108 172.20.20.170:20000 [ 124.439001][ T9024] netlink: 'syz.4.1175': attribute type 13 has an invalid length. [ 124.517872][ T9113] __nla_validate_parse: 33 callbacks suppressed [ 124.517889][ T9113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1178'. [ 124.533301][ T9113] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1178'. [ 124.651735][ T3492] kernel read not supported for file bpf-prog (pid: 3492 comm: kworker/1:7) [ 124.663216][ T9176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 124.780747][ T9253] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1185'. [ 125.092740][ T9378] openvswitch: netlink: Key type 15110 is out of range max 32 [ 125.131633][ T9418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1192'. [ 125.202747][ T9425] FAULT_INJECTION: forcing a failure. [ 125.202747][ T9425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 125.216358][ T9425] CPU: 0 UID: 0 PID: 9425 Comm: syz.0.1187 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.216394][ T9425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.216410][ T9425] Call Trace: [ 125.216417][ T9425] [ 125.216426][ T9425] __dump_stack+0x1d/0x30 [ 125.216483][ T9425] dump_stack_lvl+0x95/0xd0 [ 125.216507][ T9425] dump_stack+0x15/0x1b [ 125.216533][ T9425] should_fail_ex+0x265/0x280 [ 125.216563][ T9425] should_fail_alloc_page+0xf2/0x100 [ 125.216663][ T9425] __alloc_frozen_pages_noprof+0x109/0x360 [ 125.216772][ T9425] alloc_pages_mpol+0xb3/0x260 [ 125.216807][ T9425] vma_alloc_folio_noprof+0x1aa/0x300 [ 125.216849][ T9425] handle_mm_fault+0xef5/0x2c60 [ 125.216958][ T9425] ? mt_find+0x21b/0x330 [ 125.216994][ T9425] do_user_addr_fault+0x3fe/0x1080 [ 125.217033][ T9425] ? __rcu_read_unlock+0x4f/0x70 [ 125.217068][ T9425] exc_page_fault+0x62/0xa0 [ 125.217100][ T9425] asm_exc_page_fault+0x26/0x30 [ 125.217174][ T9425] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 125.217267][ T9425] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 8d 17 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 125.217290][ T9425] RSP: 0018:ffffc9000135fb88 EFLAGS: 00050246 [ 125.217320][ T9425] RAX: 000000000000223f RBX: ffffc9000135fc68 RCX: 0000000000000008 [ 125.217332][ T9425] RDX: 0000000000000000 RSI: ffffc9000135fc68 RDI: 0000200000001580 [ 125.217344][ T9425] RBP: 0000200000001580 R08: 00000000000000a5 R09: 0000000000000000 [ 125.217358][ T9425] R10: 0001c9000135fc68 R11: 0001c9000135fc6f R12: 0000200000001588 [ 125.217374][ T9425] R13: ffffc9000135fd88 R14: 0000000000000008 R15: 00007ffffffff000 [ 125.217399][ T9425] _copy_to_iter+0x141/0xe70 [ 125.217485][ T9425] ? __pfx___raw_callee_save___pv_queued_spin_unlock+0x10/0x10 [ 125.217517][ T9425] ? _raw_spin_unlock_irq+0x14/0x50 [ 125.217640][ T9425] timerfd_read_iter+0x492/0x500 [ 125.217665][ T9425] ? __pfx_autoremove_wake_function+0x10/0x10 [ 125.217696][ T9425] do_iter_readv_writev+0x4a1/0x540 [ 125.217722][ T9425] vfs_readv+0x1ea/0x690 [ 125.217789][ T9425] do_readv+0xe7/0x210 [ 125.217822][ T9425] __x64_sys_readv+0x45/0x50 [ 125.217882][ T9425] x64_sys_call+0x2831/0x3000 [ 125.217912][ T9425] do_syscall_64+0xca/0x2b0 [ 125.217952][ T9425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.218057][ T9425] RIP: 0033:0x7f2cc6e9f749 [ 125.218076][ T9425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.218097][ T9425] RSP: 002b:00007f2cc5907038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 125.218130][ T9425] RAX: ffffffffffffffda RBX: 00007f2cc70f5fa0 RCX: 00007f2cc6e9f749 [ 125.218146][ T9425] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 125.218162][ T9425] RBP: 00007f2cc5907090 R08: 0000000000000000 R09: 0000000000000000 [ 125.218178][ T9425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.218193][ T9425] R13: 00007f2cc70f6038 R14: 00007f2cc70f5fa0 R15: 00007ffcd0a1bae8 [ 125.218244][ T9425] [ 125.596165][ T9430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1193'. [ 125.634089][ T9432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1194'. [ 125.643402][ T9432] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1194'. [ 125.668592][ T9439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1197'. [ 125.686714][ T9441] loop1: detected capacity change from 0 to 512 [ 125.701763][ T29] kauditd_printk_skb: 805 callbacks suppressed [ 125.701781][ T29] audit: type=1400 audit(1768505139.581:38943): avc: denied { mounton } for pid=9440 comm="syz.1.1198" path="/258/file0" dev="tmpfs" ino=1389 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 125.745979][ T9441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.759520][ T29] audit: type=1400 audit(1768505139.641:38944): avc: denied { mount } for pid=9440 comm="syz.1.1198" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 125.782084][ T9441] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.793425][ T29] audit: type=1326 audit(1768505139.641:38945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 125.817056][ T29] audit: type=1326 audit(1768505139.641:38946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 125.840738][ T29] audit: type=1326 audit(1768505139.641:38947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 125.864503][ T29] audit: type=1326 audit(1768505139.641:38948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 125.888257][ T29] audit: type=1326 audit(1768505139.641:38949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 125.898295][ T9441] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1198: bg 0: block 18: invalid block bitmap [ 125.912253][ T29] audit: type=1326 audit(1768505139.661:38950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 125.912386][ T29] audit: type=1326 audit(1768505139.661:38951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9443 comm="syz.2.1199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 125.973287][ T9450] FAULT_INJECTION: forcing a failure. [ 125.973287][ T9450] name failslab, interval 1, probability 0, space 0, times 0 [ 125.986207][ T9450] CPU: 1 UID: 0 PID: 9450 Comm: syz.3.1200 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.986235][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.986298][ T9450] Call Trace: [ 125.986365][ T9450] [ 125.986379][ T9450] __dump_stack+0x1d/0x30 [ 125.986414][ T9450] dump_stack_lvl+0x95/0xd0 [ 125.986445][ T9450] dump_stack+0x15/0x1b [ 125.986547][ T9450] should_fail_ex+0x265/0x280 [ 125.986627][ T9450] should_failslab+0x8c/0xb0 [ 125.986693][ T9450] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 125.986725][ T9450] ? __d_alloc+0x37/0x340 [ 125.986762][ T9450] __d_alloc+0x37/0x340 [ 125.986794][ T9450] ? queue_stack_map_push_elem+0x32a/0x470 [ 125.986884][ T9450] d_alloc_parallel+0x54/0xcd0 [ 125.986927][ T9450] ? __rcu_read_unlock+0x34/0x70 [ 125.986956][ T9450] ? bpf_trace_run2+0x124/0x1d0 [ 125.987043][ T9450] ? lockref_get_not_dead+0x120/0x1c0 [ 125.987087][ T9450] ? __rcu_read_unlock+0x4f/0x70 [ 125.987121][ T9450] __lookup_slow+0x8c/0x250 [ 125.987167][ T9450] lookup_slow+0x3c/0x60 [ 125.987200][ T9450] link_path_walk+0x946/0xe30 [ 125.987246][ T9450] path_openat+0x1c0/0x23b0 [ 125.987364][ T9450] ? _parse_integer_limit+0x170/0x190 [ 125.987406][ T9450] do_filp_open+0x109/0x230 [ 125.987452][ T9450] ? __pfx_kfree_link+0x10/0x10 [ 125.987497][ T9450] do_sys_openat2+0xa6/0x150 [ 125.987538][ T9450] __x64_sys_openat+0xf2/0x120 [ 125.987620][ T9450] x64_sys_call+0x2b07/0x3000 [ 125.987654][ T9450] do_syscall_64+0xca/0x2b0 [ 125.987701][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.987730][ T9450] RIP: 0033:0x7f7ba469df90 [ 125.987797][ T9450] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 125.987825][ T9450] RSP: 002b:00007f7ba3106f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 125.987871][ T9450] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f7ba469df90 [ 125.987889][ T9450] RDX: 0000000000000002 RSI: 00007f7ba3106fa0 RDI: 00000000ffffff9c [ 125.987906][ T9450] RBP: 00007f7ba3106fa0 R08: 0000000000000000 R09: 0000000000000000 [ 125.987923][ T9450] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 125.987940][ T9450] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 125.988025][ T9450] [ 126.231073][ T29] audit: type=1400 audit(1768505139.721:38952): avc: denied { add_name } for pid=9440 comm="syz.1.1198" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 126.253670][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.302474][ T9456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1204'. [ 126.320272][ T9458] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 126.325052][ T9459] Cannot find add_set index 0 as target [ 126.865722][ T9508] FAULT_INJECTION: forcing a failure. [ 126.865722][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 126.878668][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.3.1223 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.878695][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.878712][ T9508] Call Trace: [ 126.878719][ T9508] [ 126.878728][ T9508] __dump_stack+0x1d/0x30 [ 126.878760][ T9508] dump_stack_lvl+0x95/0xd0 [ 126.878788][ T9508] dump_stack+0x15/0x1b [ 126.878818][ T9508] should_fail_ex+0x265/0x280 [ 126.878845][ T9508] should_failslab+0x8c/0xb0 [ 126.878867][ T9508] __kmalloc_cache_noprof+0x65/0x4c0 [ 126.878896][ T9508] ? l2tp_tunnel_create+0x67/0x1d0 [ 126.879026][ T9508] l2tp_tunnel_create+0x67/0x1d0 [ 126.879068][ T9508] pppol2tp_connect+0x38f/0x9f0 [ 126.879103][ T9508] ? __pfx_pppol2tp_connect+0x10/0x10 [ 126.879155][ T9508] __sys_connect+0x1f2/0x2b0 [ 126.879215][ T9508] __x64_sys_connect+0x3f/0x50 [ 126.879241][ T9508] x64_sys_call+0x2e09/0x3000 [ 126.879296][ T9508] do_syscall_64+0xca/0x2b0 [ 126.879393][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.879421][ T9508] RIP: 0033:0x7f7ba469f749 [ 126.879462][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.879519][ T9508] RSP: 002b:00007f7ba3107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 126.879608][ T9508] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469f749 [ 126.879621][ T9508] RDX: 000000000000003a RSI: 00002000000001c0 RDI: 0000000000000003 [ 126.879679][ T9508] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 126.879692][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.879707][ T9508] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 126.879732][ T9508] [ 127.382008][ T9537] Cannot find add_set index 0 as target [ 127.409858][ T23] hid-generic 0000:86010001:0006.0019: unknown main item tag 0x0 [ 127.439820][ T23] hid-generic 0000:86010001:0006.0019: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 127.575553][ T9553] team0: No ports can be present during mode change [ 127.635476][ T9562] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 128.259994][ T9611] x_tables: duplicate underflow at hook 1 [ 128.368066][ T9618] FAULT_INJECTION: forcing a failure. [ 128.368066][ T9618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.381485][ T9618] CPU: 0 UID: 0 PID: 9618 Comm: syz.1.1260 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.381517][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 128.381582][ T9618] Call Trace: [ 128.381590][ T9618] [ 128.381599][ T9618] __dump_stack+0x1d/0x30 [ 128.381631][ T9618] dump_stack_lvl+0x95/0xd0 [ 128.381654][ T9618] dump_stack+0x15/0x1b [ 128.381673][ T9618] should_fail_ex+0x265/0x280 [ 128.381757][ T9618] should_fail+0xb/0x20 [ 128.381782][ T9618] should_fail_usercopy+0x1a/0x20 [ 128.381856][ T9618] _copy_to_user+0x20/0xa0 [ 128.381891][ T9618] simple_read_from_buffer+0xb5/0x130 [ 128.381913][ T9618] proc_fail_nth_read+0x10e/0x150 [ 128.381998][ T9618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 128.382035][ T9618] vfs_read+0x1a8/0x770 [ 128.382058][ T9618] ? mutex_lock+0x58/0x90 [ 128.382241][ T9618] ksys_read+0xda/0x1a0 [ 128.382267][ T9618] __x64_sys_read+0x40/0x50 [ 128.382292][ T9618] x64_sys_call+0x2889/0x3000 [ 128.382324][ T9618] do_syscall_64+0xca/0x2b0 [ 128.382447][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.382471][ T9618] RIP: 0033:0x7fba20a4e15c [ 128.382490][ T9618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 128.382509][ T9618] RSP: 002b:00007fba1f4b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 128.382527][ T9618] RAX: ffffffffffffffda RBX: 00007fba20ca5fa0 RCX: 00007fba20a4e15c [ 128.382681][ T9618] RDX: 000000000000000f RSI: 00007fba1f4b70a0 RDI: 0000000000000004 [ 128.382693][ T9618] RBP: 00007fba1f4b7090 R08: 0000000000000000 R09: 0000000000000000 [ 128.382705][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.382722][ T9618] R13: 00007fba20ca6038 R14: 00007fba20ca5fa0 R15: 00007ffd4974f508 [ 128.382748][ T9618] [ 129.442688][ T9647] netlink: 'syz.3.1268': attribute type 16 has an invalid length. [ 130.724788][ T9656] __nla_validate_parse: 31 callbacks suppressed [ 130.724806][ T9656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 130.792010][ T9657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1272'. [ 130.892624][ T9660] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 131.120355][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 131.120369][ T29] audit: type=1400 audit(1768505145.002:39226): avc: denied { read write } for pid=9665 comm="syz.4.1275" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.150186][ T29] audit: type=1400 audit(1768505145.002:39227): avc: denied { open } for pid=9665 comm="syz.4.1275" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.188626][ T1039] kernel write not supported for file /ppp (pid: 1039 comm: kworker/0:2) [ 131.199788][ T9668] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1276'. [ 131.246351][ T29] audit: type=1400 audit(1768505145.062:39228): avc: denied { ioctl } for pid=9665 comm="syz.4.1275" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.271333][ T29] audit: type=1326 audit(1768505145.092:39229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82a26f749 code=0x7ffc0000 [ 131.294910][ T29] audit: type=1326 audit(1768505145.092:39230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff82a26f749 code=0x7ffc0000 [ 131.318621][ T29] audit: type=1326 audit(1768505145.092:39231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82a26f749 code=0x7ffc0000 [ 131.342546][ T29] audit: type=1326 audit(1768505145.092:39232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff82a26f749 code=0x7ffc0000 [ 131.366470][ T29] audit: type=1326 audit(1768505145.092:39233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff82a26f749 code=0x7ffc0000 [ 131.390565][ T29] audit: type=1326 audit(1768505145.092:39234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9665 comm="syz.4.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff82a26f749 code=0x7ffc0000 [ 131.414378][ T29] audit: type=1400 audit(1768505145.092:39235): avc: denied { create } for pid=9665 comm="syz.4.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 131.510699][ T9671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1277'. [ 132.316457][ T9712] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1287'. [ 132.440628][ T9715] loop1: detected capacity change from 0 to 512 [ 132.467198][ T9715] EXT4-fs: Ignoring removed nobh option [ 132.496261][ T9715] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 132.528062][ T9715] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1288: attempt to clear invalid blocks 1 len 1 [ 132.555635][ T9715] EXT4-fs (loop1): Remounting filesystem read-only [ 132.570359][ T9715] EXT4-fs (loop1): 1 truncate cleaned up [ 132.584928][ T9715] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.710758][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.038973][ T1039] kernel read not supported for file bpf-prog (pid: 1039 comm: kworker/0:2) [ 133.073035][ T9730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1294'. [ 133.082236][ T9730] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1294'. [ 133.125860][ T9732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1295'. [ 133.135092][ T9732] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1295'. [ 133.446790][ T9752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1301'. [ 133.537037][ T9756] netlink: 'syz.2.1303': attribute type 13 has an invalid length. [ 133.660063][ T9762] loop1: detected capacity change from 0 to 1024 [ 133.667229][ T9762] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 133.683281][ T9754] 9p: Bad value for 'rfdno' [ 133.711048][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.718391][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.785326][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.801161][ T9756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.860616][ T8265] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.880346][ T8265] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.898932][ T8265] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.914777][ T8265] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.048750][ T1039] kernel write not supported for file /ppp (pid: 1039 comm: kworker/0:2) [ 134.057699][ T9788] 9p: Bad value for 'wfdno' [ 134.102927][ T9791] Cannot find add_set index 0 as target [ 134.121417][ T36] hid-generic 0000:86010001:0006.001A: unknown main item tag 0x0 [ 134.139470][ T36] hid-generic 0000:86010001:0006.001A: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 134.185173][ T9796] 9p: Bad value for 'source' [ 134.339965][ T9806] geneve1: Caught tx_queue_len zero misconfig [ 134.611677][ T1039] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 134.844617][ T1039] hid-generic 0000:0000:0000.001B: hidraw1: HID v0.00 Device [syz1] on syz0 [ 134.875345][ T9830] fido_id[9830]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 134.973041][ T9834] syzkaller1: entered promiscuous mode [ 134.978681][ T9834] syzkaller1: entered allmulticast mode [ 135.118727][ T9850] loop1: detected capacity change from 0 to 512 [ 135.127697][ T9850] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 135.143416][ T9850] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.171009][ T9850] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:517: comm syz.1.1335: Block bitmap for bg 0 marked uninitialized [ 135.198231][ T9858] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 135.206443][ T9850] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 135.219328][ T9850] EXT4-fs (loop1): 1 orphan inode deleted [ 135.231339][ T9850] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 135.271024][ T9862] FAULT_INJECTION: forcing a failure. [ 135.271024][ T9862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.284213][ T9862] CPU: 0 UID: 0 PID: 9862 Comm: syz.3.1337 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.284249][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.284292][ T9862] Call Trace: [ 135.284298][ T9862] [ 135.284306][ T9862] __dump_stack+0x1d/0x30 [ 135.284354][ T9862] dump_stack_lvl+0x95/0xd0 [ 135.284461][ T9862] dump_stack+0x15/0x1b [ 135.284525][ T9862] should_fail_ex+0x265/0x280 [ 135.284548][ T9862] should_fail+0xb/0x20 [ 135.284567][ T9862] should_fail_usercopy+0x1a/0x20 [ 135.284616][ T9862] _copy_from_user+0x1c/0xb0 [ 135.284652][ T9862] memdup_user+0x5e/0xd0 [ 135.284675][ T9862] proc_pid_attr_write+0x15e/0x220 [ 135.284705][ T9862] vfs_writev+0x406/0x8b0 [ 135.284822][ T9862] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 135.284857][ T9862] do_writev+0xe7/0x210 [ 135.284959][ T9862] __x64_sys_writev+0x45/0x50 [ 135.284984][ T9862] x64_sys_call+0x1ba5/0x3000 [ 135.285008][ T9862] do_syscall_64+0xca/0x2b0 [ 135.285057][ T9862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.285085][ T9862] RIP: 0033:0x7f7ba469f749 [ 135.285105][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.285129][ T9862] RSP: 002b:00007f7ba3107038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 135.285152][ T9862] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469f749 [ 135.285168][ T9862] RDX: 0000000000000002 RSI: 00002000000009c0 RDI: 0000000000000006 [ 135.285184][ T9862] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 135.285249][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.285265][ T9862] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 135.285358][ T9862] [ 135.468725][ T9850] ext4: Unknown parameter '' [ 135.507905][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.761531][ T9883] Cannot find add_set index 0 as target [ 135.771561][ T1039] hid-generic 0000:86010001:0006.001C: unknown main item tag 0x0 [ 135.793193][ T1039] hid-generic 0000:86010001:0006.001C: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 135.957975][ T9896] __nla_validate_parse: 15 callbacks suppressed [ 135.958061][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1346'. [ 135.974792][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'. [ 136.016347][ T9906] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1352'. [ 136.025684][ T9906] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 136.095162][ T9914] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1355'. [ 136.104233][ T9914] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1355'. [ 136.481763][ T9927] FAULT_INJECTION: forcing a failure. [ 136.481763][ T9927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.495406][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.3.1361 Not tainted syzkaller #0 PREEMPT(voluntary) [ 136.495431][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 136.495442][ T9927] Call Trace: [ 136.495447][ T9927] [ 136.495453][ T9927] __dump_stack+0x1d/0x30 [ 136.495498][ T9927] dump_stack_lvl+0x95/0xd0 [ 136.495517][ T9927] dump_stack+0x15/0x1b [ 136.495535][ T9927] should_fail_ex+0x265/0x280 [ 136.495573][ T9927] should_fail+0xb/0x20 [ 136.495599][ T9927] should_fail_usercopy+0x1a/0x20 [ 136.495705][ T9927] _copy_from_iter+0xcf/0xe70 [ 136.495728][ T9927] ? __alloc_skb+0x396/0x4b0 [ 136.495750][ T9927] ? __alloc_skb+0x228/0x4b0 [ 136.495774][ T9927] netlink_sendmsg+0x471/0x6b0 [ 136.495853][ T9927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.495881][ T9927] __sock_sendmsg+0x145/0x180 [ 136.495900][ T9927] __sys_sendto+0x268/0x330 [ 136.495993][ T9927] __x64_sys_sendto+0x76/0x90 [ 136.496030][ T9927] x64_sys_call+0x29a7/0x3000 [ 136.496052][ T9927] do_syscall_64+0xca/0x2b0 [ 136.496095][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.496113][ T9927] RIP: 0033:0x7f7ba469f749 [ 136.496127][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.496160][ T9927] RSP: 002b:00007f7ba3107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 136.496178][ T9927] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469f749 [ 136.496189][ T9927] RDX: 0000000000000078 RSI: 0000200000000000 RDI: 0000000000000003 [ 136.496200][ T9927] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 136.496211][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.496417][ T9927] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 136.496447][ T9927] [ 136.821316][ T9937] Cannot find add_set index 0 as target [ 136.834360][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 136.834378][ T29] audit: type=1400 audit(1768505150.631:39749): avc: denied { read } for pid=9934 comm="syz.4.1364" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.865167][ T29] audit: type=1400 audit(1768505150.631:39750): avc: denied { open } for pid=9934 comm="syz.4.1364" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.907155][ T9937] SELinux: Context Ü is not valid (left unmapped). [ 136.933861][ T29] audit: type=1400 audit(1768505150.687:39751): avc: denied { setattr } for pid=9934 comm="syz.4.1364" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 136.958474][ T29] audit: type=1400 audit(1768505150.697:39752): avc: denied { mac_admin } for pid=9934 comm="+}[@" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.979464][ T29] audit: type=1400 audit(1768505150.716:39753): avc: denied { lock } for pid=9934 comm="+}[@" path="socket:[17851]" dev="sockfs" ino=17851 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 137.003206][ T29] audit: type=1400 audit(1768505150.716:39754): avc: denied { write } for pid=9929 comm="syz.3.1362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 137.038916][ T9944] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 137.071371][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1366'. [ 137.081916][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 137.132291][ T29] audit: type=1326 audit(1768505150.912:39755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.2.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 137.162139][ T9950] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 137.179002][ T29] audit: type=1326 audit(1768505150.912:39756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.2.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 137.202699][ T29] audit: type=1326 audit(1768505150.931:39757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.2.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 137.226537][ T29] audit: type=1326 audit(1768505150.931:39758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9947 comm="syz.2.1367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 137.313020][ T9953] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 137.346657][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1371'. [ 137.394664][ T9961] FAULT_INJECTION: forcing a failure. [ 137.394664][ T9961] name failslab, interval 1, probability 0, space 0, times 0 [ 137.407840][ T9961] CPU: 0 UID: 0 PID: 9961 Comm: syz.4.1373 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.407874][ T9961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 137.407889][ T9961] Call Trace: [ 137.407895][ T9961] [ 137.407901][ T9961] __dump_stack+0x1d/0x30 [ 137.408030][ T9961] dump_stack_lvl+0x95/0xd0 [ 137.408052][ T9961] dump_stack+0x15/0x1b [ 137.408076][ T9961] should_fail_ex+0x265/0x280 [ 137.408181][ T9961] should_failslab+0x8c/0xb0 [ 137.408209][ T9961] kmem_cache_alloc_noprof+0x69/0x4b0 [ 137.408238][ T9961] ? audit_log_start+0x342/0x720 [ 137.408328][ T9961] audit_log_start+0x342/0x720 [ 137.408355][ T9961] ? kstrtouint+0x76/0xc0 [ 137.408379][ T9961] audit_seccomp+0x48/0x100 [ 137.408426][ T9961] ? __seccomp_filter+0x832/0x1260 [ 137.408507][ T9961] __seccomp_filter+0x843/0x1260 [ 137.408553][ T9961] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 137.408590][ T9961] ? vfs_write+0x7e8/0x960 [ 137.408614][ T9961] ? __rcu_read_unlock+0x4f/0x70 [ 137.408639][ T9961] ? __fget_files+0x184/0x1c0 [ 137.408666][ T9961] __secure_computing+0x82/0x150 [ 137.408723][ T9961] syscall_trace_enter+0xcf/0x1e0 [ 137.408759][ T9961] do_syscall_64+0xa4/0x2b0 [ 137.408864][ T9961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.408893][ T9961] RIP: 0033:0x7ff82a26f749 [ 137.408909][ T9961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.408961][ T9961] RSP: 002b:00007ff828ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 137.408983][ T9961] RAX: ffffffffffffffda RBX: 00007ff82a4c5fa0 RCX: 00007ff82a26f749 [ 137.409000][ T9961] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 137.409016][ T9961] RBP: 00007ff828ccf090 R08: 0000000000001000 R09: 0000000000000000 [ 137.409185][ T9961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.409198][ T9961] R13: 00007ff82a4c6038 R14: 00007ff82a4c5fa0 R15: 00007ffe01451b38 [ 137.409218][ T9961] [ 137.688089][ T9968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1375'. [ 137.697257][ T9968] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1375'. [ 137.850174][ T9976] loop1: detected capacity change from 0 to 512 [ 137.895857][ T9976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.909786][ T9976] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.938430][ T9976] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1379: bg 0: block 18: invalid block bitmap [ 137.986011][ T9980] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 138.005436][ T9980] vhci_hcd vhci_hcd.2: invalid port number 96 [ 138.011609][ T9980] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 138.044887][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.086189][ T9993] block device autoloading is deprecated and will be removed. [ 138.367320][T10017] loop1: detected capacity change from 0 to 512 [ 138.420261][T10017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.449179][T10017] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.476181][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.527237][T10032] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 138.592805][T10041] FAULT_INJECTION: forcing a failure. [ 138.592805][T10041] name failslab, interval 1, probability 0, space 0, times 0 [ 138.605657][T10041] CPU: 1 UID: 0 PID: 10041 Comm: syz.3.1403 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.605692][T10041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.605742][T10041] Call Trace: [ 138.605750][T10041] [ 138.605759][T10041] __dump_stack+0x1d/0x30 [ 138.605792][T10041] dump_stack_lvl+0x95/0xd0 [ 138.605818][T10041] dump_stack+0x15/0x1b [ 138.605874][T10041] should_fail_ex+0x265/0x280 [ 138.605912][T10041] should_failslab+0x8c/0xb0 [ 138.605940][T10041] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 138.606016][T10041] ? sidtab_sid2str_get+0xa0/0x130 [ 138.606064][T10041] kmemdup_noprof+0x2b/0x70 [ 138.606173][T10041] sidtab_sid2str_get+0xa0/0x130 [ 138.606209][T10041] security_sid_to_context_core+0x1eb/0x2e0 [ 138.606243][T10041] security_sid_to_context+0x27/0x40 [ 138.606282][T10041] selinux_lsmprop_to_secctx+0x67/0xf0 [ 138.606321][T10041] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 138.606350][T10041] audit_log_subj_ctx+0xa4/0x3e0 [ 138.606408][T10041] ? skb_put+0xa9/0xf0 [ 138.606437][T10041] audit_log_task_context+0x48/0x70 [ 138.606515][T10041] audit_log_task+0xf4/0x250 [ 138.606608][T10041] audit_seccomp+0x61/0x100 [ 138.606642][T10041] ? __seccomp_filter+0x832/0x1260 [ 138.606691][T10041] __seccomp_filter+0x843/0x1260 [ 138.606843][T10041] ? up_write+0x18/0x60 [ 138.606864][T10041] ? chown_common+0x399/0x3f0 [ 138.606910][T10041] __secure_computing+0x82/0x150 [ 138.606942][T10041] syscall_trace_enter+0xcf/0x1e0 [ 138.606967][T10041] do_syscall_64+0xa4/0x2b0 [ 138.607076][T10041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.607104][T10041] RIP: 0033:0x7f7ba469e15c [ 138.607120][T10041] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 138.607138][T10041] RSP: 002b:00007f7ba3107030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 138.607183][T10041] RAX: ffffffffffffffda RBX: 00007f7ba48f5fa0 RCX: 00007f7ba469e15c [ 138.607248][T10041] RDX: 000000000000000f RSI: 00007f7ba31070a0 RDI: 0000000000000005 [ 138.607262][T10041] RBP: 00007f7ba3107090 R08: 0000000000000000 R09: 0000000000000000 [ 138.607276][T10041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.607289][T10041] R13: 00007f7ba48f6038 R14: 00007f7ba48f5fa0 R15: 00007fff40e4b958 [ 138.607311][T10041] [ 139.024424][T10066] loop4: detected capacity change from 0 to 128 [ 139.126431][T10069] loop4: detected capacity change from 0 to 128 [ 139.134756][T10069] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.147704][T10069] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.252039][T10081] block device autoloading is deprecated and will be removed. [ 139.659765][T10108] loop4: detected capacity change from 0 to 1024 [ 139.680649][T10108] EXT4-fs: Ignoring removed nobh option [ 139.686750][T10108] EXT4-fs: inline encryption not supported [ 139.728182][T10108] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.756796][T10108] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1428: Allocating blocks 385-513 which overlap fs metadata [ 139.906767][T10129] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 139.922843][T10130] loop1: detected capacity change from 0 to 128 [ 140.071158][T10144] loop1: detected capacity change from 0 to 1024 [ 140.073970][T10142] IPv6: NLM_F_CREATE should be specified when creating new route [ 140.089130][T10144] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1443: Failed to acquire dquot type 0 [ 140.104101][ T3007] udevd[3007]: worker [6615] terminated by signal 33 (Unknown signal 33) [ 140.112936][ T3007] udevd[3007]: worker [6615] failed while handling '/devices/virtual/block/loop1' [ 140.117791][T10144] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 140.150321][T10144] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.1443: corrupted inode contents [ 140.163420][T10144] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #13: comm syz.1.1443: mark_inode_dirty error [ 140.178262][T10144] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.1443: corrupted inode contents [ 140.191413][T10144] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.1443: mark_inode_dirty error [ 140.203945][T10144] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.1443: corrupted inode contents [ 140.226004][T10144] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 140.235230][T10144] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #13: comm syz.1.1443: corrupted inode contents [ 140.247583][T10144] EXT4-fs error (device loop1): ext4_truncate:4635: inode #13: comm syz.1.1443: mark_inode_dirty error [ 140.265918][T10144] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 140.276307][T10144] EXT4-fs (loop1): 1 truncate cleaned up [ 140.282918][T10144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.317295][T10144] Cannot find add_set index 0 as target [ 140.328010][T10144] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 140.339977][T10144] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 140.350708][T10144] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 140.399675][T10165] 9p: Bad value for 'wfdno' [ 140.435559][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.438243][T10173] FAULT_INJECTION: forcing a failure. [ 140.438243][T10173] name failslab, interval 1, probability 0, space 0, times 0 [ 140.457549][T10173] CPU: 1 UID: 0 PID: 10173 Comm: syz.0.1457 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.457584][T10173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.457595][T10173] Call Trace: [ 140.457601][T10173] [ 140.457607][T10173] __dump_stack+0x1d/0x30 [ 140.457629][T10173] dump_stack_lvl+0x95/0xd0 [ 140.457682][T10173] dump_stack+0x15/0x1b [ 140.457700][T10173] should_fail_ex+0x265/0x280 [ 140.457776][T10173] should_failslab+0x8c/0xb0 [ 140.457796][T10173] __kmalloc_cache_noprof+0x65/0x4c0 [ 140.457817][T10173] ? nfnetlink_rcv+0xa28/0x16c0 [ 140.457842][T10173] nfnetlink_rcv+0xa28/0x16c0 [ 140.457962][T10173] netlink_unicast+0x5c0/0x690 [ 140.457995][T10173] netlink_sendmsg+0x58b/0x6b0 [ 140.458067][T10173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.458097][T10173] __sock_sendmsg+0x145/0x180 [ 140.458117][T10173] ____sys_sendmsg+0x31e/0x4a0 [ 140.458177][T10173] ___sys_sendmsg+0x17b/0x1d0 [ 140.458226][T10173] __x64_sys_sendmsg+0xd4/0x160 [ 140.458326][T10173] x64_sys_call+0x17ba/0x3000 [ 140.458349][T10173] do_syscall_64+0xca/0x2b0 [ 140.458381][T10173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.458401][T10173] RIP: 0033:0x7f2cc6e9f749 [ 140.458489][T10173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.458506][T10173] RSP: 002b:00007f2cc5907038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.458554][T10173] RAX: ffffffffffffffda RBX: 00007f2cc70f5fa0 RCX: 00007f2cc6e9f749 [ 140.458571][T10173] RDX: 000000002400c004 RSI: 0000200000000380 RDI: 0000000000000005 [ 140.458592][T10173] RBP: 00007f2cc5907090 R08: 0000000000000000 R09: 0000000000000000 [ 140.458603][T10173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 140.458614][T10173] R13: 00007f2cc70f6038 R14: 00007f2cc70f5fa0 R15: 00007ffcd0a1bae8 [ 140.458656][T10173] [ 140.658301][T10107] EXT4-fs (loop4): pa ffff8881076140e0: logic 16, phys. 129, len 24 [ 140.666373][T10107] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 140.719870][T10179] netlink: 'syz.3.1459': attribute type 12 has an invalid length. [ 140.756538][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.979506][T10206] loop1: detected capacity change from 0 to 1024 [ 140.990389][T10206] EXT4-fs: Ignoring removed bh option [ 141.005489][T10208] loop4: detected capacity change from 0 to 2048 [ 141.012782][T10206] EXT4-fs: inline encryption not supported [ 141.020785][T10206] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.036106][T10206] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 141.047380][T10206] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1470: lblock 2 mapped to illegal pblock 2 (length 1) [ 141.057101][T10211] netlink: 'syz.3.1473': attribute type 3 has an invalid length. [ 141.064112][T10206] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1470: lblock 0 mapped to illegal pblock 48 (length 1) [ 141.071931][ T6587] loop4: p1 < > p4 [ 141.086995][T10206] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1470: Failed to acquire dquot type 0 [ 141.097598][ T6587] loop4: p4 size 8388608 extends beyond EOD, truncated [ 141.107396][T10206] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 141.118108][T10206] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1470: mark_inode_dirty error [ 141.131389][T10206] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 141.143652][T10206] EXT4-fs (loop1): 1 orphan inode deleted [ 141.149497][T10208] loop4: p1 < > p4 [ 141.153497][T10206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.155591][T10208] loop4: p4 size 8388608 extends beyond EOD, truncated [ 141.173828][ T8264] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.190800][ T8264] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:42: Failed to release dquot type 0 [ 141.190809][T10206] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm syz.1.1470: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.244448][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.255199][ T3317] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 141.277055][ T3317] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 141.286882][ T3317] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 141.357296][T10215] __nla_validate_parse: 26 callbacks suppressed [ 141.357316][T10215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1475'. [ 141.379191][ T6587] udevd[6587]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 141.392692][T10219] loop4: detected capacity change from 0 to 512 [ 141.420617][ T6470] udevd[6470]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 141.454202][T10219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.479797][T10219] ext4 filesystem being mounted at /330/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.505903][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1482'. [ 141.515141][T10232] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1482'. [ 141.537945][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.594244][T10238] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1484'. [ 141.645502][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 141.660820][T10244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 141.670784][T10244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1487'. [ 141.712246][T10248] Cannot find del_set index 3 as target [ 141.739229][ T3491] hid-generic 0000:86010001:0006.001D: unknown main item tag 0x0 [ 141.766443][ T3491] hid-generic 0000:86010001:0006.001D: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 141.791872][T10256] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1491'. [ 141.834853][T10240] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.888032][T10246] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1488'. [ 141.962572][T10262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1493'. [ 142.093081][T10270] Cannot find add_set index 0 as target [ 142.102414][ T1039] hid-generic 0000:86010001:0006.001E: unknown main item tag 0x0 [ 142.507916][ T1039] hid-generic 0000:86010001:0006.001E: hidraw1: HID v69662f.2e Device [syz1] on syz0 [ 142.545520][T10285] fido_id[10285]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 142.786232][T10317] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.857464][T10324] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 142.875791][T10324] team1: entered promiscuous mode [ 142.881356][T10324] team1: entered allmulticast mode [ 142.887195][T10324] 8021q: adding VLAN 0 to HW filter on device team1 [ 142.931901][ T29] kauditd_printk_skb: 1293 callbacks suppressed [ 142.931919][ T29] audit: type=1400 audit(1768505156.332:41043): avc: denied { create } for pid=10322 comm="syz.3.1518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.959276][T10323] netlink: 'syz.3.1518': attribute type 1 has an invalid length. [ 142.970631][ T29] audit: type=1326 audit(1768505156.342:41044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.4.1519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff82a26f749 code=0x0 [ 143.006483][T10323] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.018085][T10331] bond2 (unregistering): Released all slaves [ 143.090767][ T29] audit: type=1400 audit(1768505156.482:41045): avc: denied { bind } for pid=10327 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.113908][ T29] audit: type=1400 audit(1768505156.501:41046): avc: denied { bind } for pid=10327 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.137144][ T29] audit: type=1400 audit(1768505156.510:41047): avc: denied { setopt } for pid=10327 comm="syz.4.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 143.168466][ T29] audit: type=1400 audit(1768505156.547:41048): avc: denied { create } for pid=10336 comm="syz.3.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.188423][ T29] audit: type=1400 audit(1768505156.547:41049): avc: denied { setopt } for pid=10336 comm="syz.3.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.208291][ T29] audit: type=1400 audit(1768505156.547:41050): avc: denied { listen } for pid=10336 comm="syz.3.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 143.403758][ T29] audit: type=1326 audit(1768505156.772:41051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 143.428083][ T29] audit: type=1326 audit(1768505156.772:41052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10353 comm="syz.2.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6609ffdf90 code=0x7ffc0000 [ 143.515316][T10363] x_tables: duplicate underflow at hook 2 [ 143.528928][T10363] syz.3.1530 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 144.079576][T10400] loop4: detected capacity change from 0 to 128 [ 144.094631][T10400] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.107250][T10400] ext4 filesystem being mounted at /341/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.378970][ T3318] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 144.397032][ T3318] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 144.428647][ T3318] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 144.456157][ T3318] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 144.480487][ T3318] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 144.512825][ T3318] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 144.529362][ T3318] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 144.544588][ T3318] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 144.560390][ T3318] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 144.573995][ T3318] EXT4-fs error (device loop4): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 144.775539][T10405] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.951157][ T5124] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.984484][ T5124] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.047344][ T5124] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.122009][ T5124] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.651891][ T5124] bond0 (unregistering): Released all slaves [ 145.662659][ T5124] bond1 (unregistering): Released all slaves [ 145.798962][ T5124] IPVS: stopping master sync thread 7480 ... [ 146.111739][T10518] FAULT_INJECTION: forcing a failure. [ 146.111739][T10518] name failslab, interval 1, probability 0, space 0, times 0 [ 146.124517][T10518] CPU: 0 UID: 0 PID: 10518 Comm: syz.1.1583 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.124604][T10518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.124686][T10518] Call Trace: [ 146.124693][T10518] [ 146.124700][T10518] __dump_stack+0x1d/0x30 [ 146.124732][T10518] dump_stack_lvl+0x95/0xd0 [ 146.124779][T10518] dump_stack+0x15/0x1b [ 146.124804][T10518] should_fail_ex+0x265/0x280 [ 146.124835][T10518] should_failslab+0x8c/0xb0 [ 146.124923][T10518] __kvmalloc_node_noprof+0x149/0x6b0 [ 146.124961][T10518] ? xt_alloc_entry_offsets+0x4d/0x60 [ 146.125007][T10518] xt_alloc_entry_offsets+0x4d/0x60 [ 146.125123][T10518] translate_table+0xc7/0x1100 [ 146.125194][T10518] ? obj_cgroup_charge_account+0xba/0x1a0 [ 146.125233][T10518] ? __rcu_read_unlock+0x4f/0x70 [ 146.125263][T10518] ? should_fail_ex+0xdb/0x280 [ 146.125286][T10518] ? _copy_from_user+0x89/0xb0 [ 146.125314][T10518] do_arpt_set_ctl+0x68a/0x9a0 [ 146.125369][T10518] ? _raw_spin_unlock_bh+0x36/0x40 [ 146.125396][T10518] nf_setsockopt+0x199/0x1b0 [ 146.125422][T10518] ip_setsockopt+0x102/0x110 [ 146.125454][T10518] udp_setsockopt+0x99/0xb0 [ 146.125524][T10518] sock_common_setsockopt+0x69/0x80 [ 146.125552][T10518] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 146.125652][T10518] __sys_setsockopt+0x184/0x200 [ 146.125684][T10518] __x64_sys_setsockopt+0x64/0x80 [ 146.125780][T10518] x64_sys_call+0x21d5/0x3000 [ 146.125811][T10518] do_syscall_64+0xca/0x2b0 [ 146.125845][T10518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.125870][T10518] RIP: 0033:0x7fba20a4f749 [ 146.125923][T10518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.125941][T10518] RSP: 002b:00007fba1f4b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.125962][T10518] RAX: ffffffffffffffda RBX: 00007fba20ca5fa0 RCX: 00007fba20a4f749 [ 146.125977][T10518] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 146.125993][T10518] RBP: 00007fba1f4b7090 R08: 0000000000000418 R09: 0000000000000000 [ 146.126010][T10518] R10: 0000200000000c40 R11: 0000000000000246 R12: 0000000000000001 [ 146.126043][T10518] R13: 00007fba20ca6038 R14: 00007fba20ca5fa0 R15: 00007ffd4974f508 [ 146.126066][T10518] [ 146.364104][ T5124] hsr_slave_0: left promiscuous mode [ 146.371123][ T5124] hsr_slave_1: left promiscuous mode [ 146.522172][ T5124] team0 (unregistering): Port device dummy0 removed [ 146.673357][T10468] chnl_net:caif_netlink_parms(): no params data found [ 146.703003][T10541] Cannot find add_set index 0 as target [ 146.828696][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.836374][T10468] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.989503][T10468] bridge_slave_0: entered allmulticast mode [ 146.996444][T10468] bridge_slave_0: entered promiscuous mode [ 147.004207][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.011406][T10468] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.019479][T10468] bridge_slave_1: entered allmulticast mode [ 147.026166][T10468] bridge_slave_1: entered promiscuous mode [ 147.060034][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.078374][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.146251][T10468] team0: Port device team_slave_0 added [ 147.153693][T10468] team0: Port device team_slave_1 added [ 147.189276][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.196376][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.222689][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.234513][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.241534][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.268257][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.300456][T10576] pim6reg: entered allmulticast mode [ 147.403454][T10583] __nla_validate_parse: 44 callbacks suppressed [ 147.403475][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1596'. [ 147.418859][T10583] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1596'. [ 147.470027][T10468] hsr_slave_0: entered promiscuous mode [ 147.480164][T10468] hsr_slave_1: entered promiscuous mode [ 147.499357][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1599'. [ 147.509308][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 147.523536][T10594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1598'. [ 147.548958][T10594] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 147.591928][T10594] team1: entered promiscuous mode [ 147.597189][T10594] team1: entered allmulticast mode [ 147.623881][T10605] Cannot find add_set index 0 as target [ 147.624528][T10594] 8021q: adding VLAN 0 to HW filter on device team1 [ 147.642181][ T1039] hid-generic 0000:86010001:0006.001F: unknown main item tag 0x0 [ 147.661075][ T1039] hid-generic 0000:86010001:0006.001F: hidraw0: HID v69662f.2e Device [syz1] on syz0 [ 147.952624][T10624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'. [ 147.974095][T10624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1601'. [ 148.050071][T10468] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 148.070718][T10468] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 148.096456][T10468] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 148.119118][T10468] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 148.137887][T10635] 9p: Bad value for 'rfdno' [ 148.206015][T10468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.224057][T10468] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.242027][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.249214][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.259519][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1606'. [ 148.272757][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.279919][ T8268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.287993][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 148.288088][ T29] audit: type=1326 audit(1768505161.328:41568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6609f9b829 code=0x7ffc0000 [ 148.319042][ T29] audit: type=1326 audit(1768505161.328:41569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 148.342926][ T29] audit: type=1326 audit(1768505161.337:41570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6609ff65e7 code=0x7ffc0000 [ 148.367009][ T29] audit: type=1326 audit(1768505161.337:41571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6609f9b829 code=0x7ffc0000 [ 148.390626][ T29] audit: type=1326 audit(1768505161.337:41572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 148.413745][T10468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.424851][T10468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 148.440379][T10647] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1607'. [ 148.449533][T10647] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1607'. [ 148.470492][ T29] audit: type=1326 audit(1768505161.337:41573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6609ff65e7 code=0x7ffc0000 [ 148.494526][ T29] audit: type=1326 audit(1768505161.337:41574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6609f9b829 code=0x7ffc0000 [ 148.518636][ T29] audit: type=1326 audit(1768505161.356:41575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6609fff749 code=0x7ffc0000 [ 148.543106][ T29] audit: type=1326 audit(1768505161.374:41576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6609ff65e7 code=0x7ffc0000 [ 148.567164][ T29] audit: type=1326 audit(1768505161.374:41577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10634 comm="syz.2.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6609f9b829 code=0x7ffc0000 [ 148.660112][T10468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.677036][T10659] loop1: detected capacity change from 0 to 512 [ 148.699202][T10659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.721302][T10659] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.775632][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.897231][T10468] veth0_vlan: entered promiscuous mode [ 148.915921][T10468] veth1_vlan: entered promiscuous mode [ 148.949540][T10468] veth0_macvtap: entered promiscuous mode [ 148.963585][T10468] veth1_macvtap: entered promiscuous mode [ 148.988362][T10468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.003308][T10468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.024203][ T5128] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.034256][ T5128] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.068619][ T5128] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.097471][ T5128] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.255856][T10687] SELinux: failed to load policy [ 149.315431][T10701] loop5: detected capacity change from 0 to 512 [ 149.324392][T10701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 149.333278][T10701] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.362492][T10701] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1620: Allocating blocks 41-42 which overlap fs metadata [ 149.383767][T10701] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1620: Allocating blocks 41-42 which overlap fs metadata [ 149.403799][T10701] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1620: Failed to acquire dquot type 1 [ 149.418277][T10701] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 149.433590][T10701] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1620: corrupted inode contents [ 149.446127][T10701] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.1620: mark_inode_dirty error [ 149.464411][T10701] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1620: corrupted inode contents [ 149.476897][T10701] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1620: mark_inode_dirty error [ 149.489065][T10701] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1620: corrupted inode contents [ 149.502556][T10701] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 149.512361][T10701] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.1620: corrupted inode contents [ 149.525524][T10701] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.1620: mark_inode_dirty error [ 149.547892][T10701] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 149.561898][T10701] EXT4-fs (loop5): 1 truncate cleaned up [ 149.568629][T10701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.591973][T10701] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.634067][ T3491] kernel write not supported for file /ppp (pid: 3491 comm: kworker/0:6) [ 149.797354][T10721] lo speed is unknown, defaulting to 1000 [ 149.808985][T10721] lo speed is unknown, defaulting to 1000 [ 149.822014][T10721] lo speed is unknown, defaulting to 1000 [ 149.837997][T10722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10722 comm=syz.3.1628 [ 149.856363][T10721] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.882207][T10721] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 149.914981][T10725] loop5: detected capacity change from 0 to 2048 [ 149.971898][ T6587] Alternate GPT is invalid, using primary GPT. [ 149.978452][ T6587] loop5: p1 p2 p3 [ 149.982285][ T6587] loop5: partition table partially beyond EOD, truncated [ 149.991684][T10721] lo speed is unknown, defaulting to 1000 [ 150.010052][T10725] Alternate GPT is invalid, using primary GPT. [ 150.016842][T10725] loop5: p1 p2 p3 [ 150.020633][T10725] loop5: partition table partially beyond EOD, truncated [ 150.035857][T10721] lo speed is unknown, defaulting to 1000 [ 150.048369][T10721] lo speed is unknown, defaulting to 1000 [ 150.068841][T10721] lo speed is unknown, defaulting to 1000 [ 150.094137][T10721] lo speed is unknown, defaulting to 1000 [ 150.131089][ T6535] ================================================================== [ 150.139324][ T6535] BUG: KCSAN: data-race in touch_atime / touch_atime [ 150.146159][ T6535] [ 150.148515][ T6535] write to 0xffff888120487df8 of 4 bytes by task 6470 on cpu 0: [ 150.156186][ T6535] touch_atime+0x1e8/0x340 [ 150.160694][ T6535] shmem_file_read_iter+0x477/0x540 [ 150.165953][ T6535] vfs_read+0x64c/0x770 [ 150.170150][ T6535] ksys_read+0xda/0x1a0 [ 150.174351][ T6535] __x64_sys_read+0x40/0x50 [ 150.178889][ T6535] x64_sys_call+0x2889/0x3000 [ 150.183605][ T6535] do_syscall_64+0xca/0x2b0 [ 150.188150][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.194075][ T6535] [ 150.196412][ T6535] read to 0xffff888120487df8 of 4 bytes by task 6535 on cpu 1: [ 150.203985][ T6535] touch_atime+0x194/0x340 [ 150.208433][ T6535] shmem_file_read_iter+0x477/0x540 [ 150.213670][ T6535] vfs_read+0x64c/0x770 [ 150.217893][ T6535] ksys_read+0xda/0x1a0 [ 150.222360][ T6535] __x64_sys_read+0x40/0x50 [ 150.227078][ T6535] x64_sys_call+0x2889/0x3000 [ 150.232000][ T6535] do_syscall_64+0xca/0x2b0 [ 150.236552][ T6535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.242651][ T6535] [ 150.244998][ T6535] value changed: 0x040d8f84 -> 0x048fff99 [ 150.250826][ T6535] [ 150.253163][ T6535] Reported by Kernel Concurrency Sanitizer on: [ 150.259373][ T6535] CPU: 1 UID: 0 PID: 6535 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.269646][ T6535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.279732][ T6535] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.611242][ T6535] udevd[6535]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.611271][ T6470] udevd[6470]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 150.633260][ T6587] udevd[6587]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.648839][ T6470] udevd[6470]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 150.655199][ T6535] udevd[6535]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 150.664115][ T6587] udevd[6587]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 150.968094][ T5128] batadv1: left allmulticast mode [ 150.973293][ T5128] batadv1: left promiscuous mode [ 150.978454][ T5128] bridge0: port 3(batadv1) entered disabled state [ 150.985566][ T5128] bridge_slave_1: left allmulticast mode [ 150.991255][ T5128] bridge_slave_1: left promiscuous mode [ 150.997044][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.005296][ T5128] bridge_slave_0: left allmulticast mode [ 151.011073][ T5128] bridge_slave_0: left promiscuous mode [ 151.016932][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.102750][ T5128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.112081][ T5128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.121516][ T5128] bond0 (unregistering): Released all slaves [ 151.130457][ T5128] bond1 (unregistering): Released all slaves [ 151.189035][ T5128] hsr_slave_0: left promiscuous mode [ 151.196070][ T5128] hsr_slave_1: left promiscuous mode [ 151.201964][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.210033][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.249508][ T5128] team0 (unregistering): Port device team_slave_1 removed [ 151.259875][ T5128] team0 (unregistering): Port device team_slave_0 removed [ 151.691396][ T5128] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.743655][ T5128] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.786282][ T5128] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.882346][ T5128] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.427096][ T5128] bridge_slave_1: left allmulticast mode [ 152.432799][ T5128] bridge_slave_1: left promiscuous mode [ 152.438687][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.446990][ T5128] bridge_slave_0: left allmulticast mode [ 152.452847][ T5128] bridge_slave_0: left promiscuous mode [ 152.458737][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.469021][ T5128] bond1: left allmulticast mode [ 152.473943][ T5128] bond1: left promiscuous mode [ 152.478912][ T5128] bridge0: port 3(bond1) entered disabled state [ 152.486083][ T5128] bridge_slave_1: left allmulticast mode [ 152.491983][ T5128] bridge_slave_1: left promiscuous mode [ 152.497720][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.505719][ T5128] bridge_slave_0: left allmulticast mode [ 152.511467][ T5128] bridge_slave_0: left promiscuous mode [ 152.517412][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.529515][ T5128] bridge_slave_1: left allmulticast mode [ 152.535313][ T5128] bridge_slave_1: left promiscuous mode [ 152.541070][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.549447][ T5128] bridge_slave_0: left allmulticast mode [ 152.555211][ T5128] bridge_slave_0: left promiscuous mode [ 152.560978][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.845668][ T5128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.855854][ T5128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.866155][ T5128] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 152.875069][ T5128] bond0 (unregistering): Released all slaves [ 153.315423][ T5128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.325118][ T5128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.334633][ T5128] bond0 (unregistering): Released all slaves [ 153.343485][ T5128] bond1 (unregistering): Released all slaves [ 153.351964][ T5128] bond2 (unregistering): Released all slaves [ 153.657654][ T5128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.667191][ T5128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.676434][ T5128] bond0 (unregistering): Released all slaves [ 153.732280][ T5128] IPVS: stopping master sync thread 7627 ... [ 153.804320][ T5128] hsr_slave_1: left promiscuous mode [ 153.814217][ T5128] hsr_slave_0: left promiscuous mode [ 153.820285][ T5128] hsr_slave_1: left promiscuous mode [ 153.826017][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.833855][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.844113][ T5128] hsr_slave_0: left promiscuous mode [ 153.850723][ T5128] hsr_slave_1: left promiscuous mode [ 153.856519][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.865517][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.875479][ T5128] veth1_macvtap: left promiscuous mode [ 153.881414][ T5128] veth0_macvtap: left promiscuous mode [ 153.889641][ T5128] veth1_vlan: left promiscuous mode [ 153.895012][ T5128] veth0_vlan: left promiscuous mode [ 153.956059][ T5128] team0 (unregistering): Port device team_slave_1 removed [ 153.970020][ T5128] team0 (unregistering): Port device team_slave_0 removed [ 153.978096][ T8268] smc: removing ib device syz! [ 154.004163][ T5128] pim6reg (unregistering): left allmulticast mode [ 154.044359][ T5128] team0 (unregistering): Port device team_slave_1 removed [ 154.053893][ T5128] team0 (unregistering): Port device team_slave_0 removed [ 154.110768][ T5128] team0 (unregistering): Port device team_slave_1 removed [ 154.121563][ T5128] team0 (unregistering): Port device team_slave_0 removed [ 154.749993][ T5128] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.816909][ T5128] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.856256][ T5128] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.909146][ T5128] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.996691][ T5128] bridge_slave_1: left allmulticast mode [ 155.002417][ T5128] bridge_slave_1: left promiscuous mode [ 155.008273][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.016447][ T5128] bridge_slave_0: left allmulticast mode [ 155.022130][ T5128] bridge_slave_0: left promiscuous mode [ 155.028013][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.102432][ T5128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.112885][ T5128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.122728][ T5128] bond0 (unregistering): Released all slaves [ 155.168709][ T5128] hsr_slave_0: left promiscuous mode [ 155.175236][ T5128] hsr_slave_1: left promiscuous mode [ 155.180989][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.188477][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.196187][ T5128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.203593][ T5128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.214577][ T5128] veth1_macvtap: left promiscuous mode [ 155.220208][ T5128] veth0_macvtap: left promiscuous mode [ 155.225798][ T5128] veth1_vlan: left promiscuous mode [ 155.231400][ T5128] veth0_vlan: left promiscuous mode [ 155.307884][ T5128] team0 (unregistering): Port device team_slave_1 removed [ 155.317623][ T5128] team0 (unregistering): Port device team_slave_0 removed [ 155.352495][ T3491] lo speed is unknown, defaulting to 1000 [ 155.358427][ T3491] infiniband syz2: ib_query_port failed (-19)