last executing test programs: 3.087324623s ago: executing program 2 (id=593): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x1, 0x0) r0 = epoll_create1(0x0) epoll_pwait2(r0, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}}, 0x24}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r2}, 0x18) syz_emit_ethernet(0xc0, &(0x7f0000000780)={@remote, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x8a, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4, 0xc77, 0x0, 0x7fff, [{0x1f, 0xf, "cec003748448488d3d32f26e8203625d9bef3875ba7d620580715da9615e613561ac3c6106735712d4ff5764062d079642f29fa9342e87b4c991b638d5fbc50821306277833c01c6199148c22c8529f11fca5a272573fdad7422d9af95fc6f542fe1214f6fa8928ee231307d1f17858a09e6690b4a1d2df0"}]}}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xf}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x78, 0x2, [@TCA_U32_SEL={0x74, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0xde, 0x3ff}, {0x200, 0x3ff, 0x7, 0x4}, {0x9, 0x7, 0x40, 0x2}, {0x3ff, 0xb, 0x3, 0xa6d}]}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0xccd4ddef28bd690b}, 0x814) 3.01896626s ago: executing program 1 (id=595): socket$inet6(0xa, 0x2, 0x0) socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xa}, 0x10180, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x940}, 0x1006, 0xb, 0xfffffffc, 0x0, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = gettid() r4 = getpid() kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 2.932553567s ago: executing program 1 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r4, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000680)="d9", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) r9 = dup(r1) connect$unix(r9, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r11}, 0x18) mlockall(0x3) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x800) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 2.23649619s ago: executing program 2 (id=601): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = memfd_secret(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x200d}, 0x18) r4 = socket(0x80000000000000a, 0x5, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) lsetxattr$security_selinux(&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES8=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r1, 0x2e, 0x4608, @void}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(r8) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r7, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x20000023896) close(r11) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00'}, 0x10) r13 = getpid() process_vm_readv(r13, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r13, &(0x7f0000000400)='net/udplite6\x00') 2.088685633s ago: executing program 0 (id=603): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) 1.927437468s ago: executing program 3 (id=606): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0x60, 0x3, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x898) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x80) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000005c0)={&(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x24}}, 0x80, 0x0}, 0xc0400c0) 1.832514336s ago: executing program 3 (id=608): socket$inet6(0xa, 0x2, 0x0) socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xa}, 0x10180, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x940}, 0x1006, 0xb, 0xfffffffc, 0x0, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = gettid() r4 = getpid() kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 1.805413189s ago: executing program 0 (id=609): syz_clone(0x0, 0x0, 0xe, 0x0, 0x0, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000090000b703000000a3ed0000008500"/39], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x58, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x80003, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f4e6ff0804000a000000fe0000000000aa0008000f00fd000000", 0x24) close_range(r1, 0xffffffffffffffff, 0x0) 1.770383852s ago: executing program 2 (id=610): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000680)="d9", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 1.753342013s ago: executing program 3 (id=611): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44051}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x9) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x18) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) close_range(r1, 0xffffffffffffffff, 0x0) 1.713005087s ago: executing program 0 (id=613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="06000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r4, 0x807f, 0x1000000, 0x4) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 1.6742804s ago: executing program 2 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) (fail_nth: 1) 1.390873246s ago: executing program 4 (id=616): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000008c0)=""/177}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="8b332ebd700000000000150000c9cf871be2983cf7fce79e5ede4c6200", @ANYRES16=r0, @ANYRESOCT], 0x38}}, 0x4040010) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b4b, &(0x7f0000000000)={0x0, 0x3e, 0x2000}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r4, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) 1.327957802s ago: executing program 2 (id=617): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x5, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_SYMLINKAT={0x26, 0x70, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r1}}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r3, 0x0, 0x46) close(r3) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, r4, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1c}]}, 0x20}}, 0x800) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.319606162s ago: executing program 1 (id=618): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x7f8404caeb85699d}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e900092f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000280)="240000000000ab8865cd93b96086338c7f514233", 0x14}], 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8000, 0x1, 0x5, 0x10000, {{0x22, 0x4, 0x1, 0x3d, 0x88, 0x68, 0x0, 0x1a, 0x2f, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0x18, 0x92, 0x0, 0x6, [0x100, 0x3, 0x1, 0x9, 0x7ff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x2c, [@broadcast, @rand_addr=0x64010100, @empty, @loopback]}, @rr={0x7, 0xf, 0x9a, [@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @private=0xa010101]}, @cipso={0x86, 0x29, 0x0, [{0x5, 0x11, "d4ae2d21d3175f83f25f33829c4d85"}, {0x0, 0x12, "8a5994a30a980cf73fb87fd01ac99c7e"}]}, @timestamp_prespec={0x44, 0xc, 0xd9, 0x3, 0x8, [{@multicast2}]}, @end]}}}}}) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000200)={@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, r6}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r7, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x4000012) 1.251995858s ago: executing program 4 (id=619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "d3a4d3fdded2f989", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r1, r1, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 1.146623788s ago: executing program 0 (id=620): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = memfd_secret(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x200d}, 0x18) r4 = socket(0x80000000000000a, 0x5, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) lsetxattr$security_selinux(&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300), &(0x7f0000000340)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x5) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed0744790000000000000000180000", @ANYRES8=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x18) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r1, 0x2e, 0x4608, @void}, 0x10) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(r8) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r7, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r9}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r12 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r11, r12, 0x0, 0x20000023896) close(r11) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00'}, 0x10) r13 = getpid() process_vm_readv(r13, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r13, &(0x7f0000000400)='net/udplite6\x00') 1.087779663s ago: executing program 4 (id=621): socket$inet6(0xa, 0x2, 0x0) socket(0x1e, 0x805, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYRES64=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xa}, 0x10180, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0xfc, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x940}, 0x1006, 0xb, 0xfffffffc, 0x0, 0x2, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = gettid() r4 = getpid() kcmp(r3, r4, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) 1.087169833s ago: executing program 1 (id=622): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25df5bfd, {}, [@NHA_OIF={0x8, 0x5, r0}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_TABLE={0x8, 0x3, 0x6}}]}, 0x34}}, 0x0) 1.063092535s ago: executing program 4 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = memfd_secret(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x200d}, 0x18) r4 = socket(0x80000000000000a, 0x5, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) lsetxattr$security_selinux(&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000340)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r1, 0x2e, 0x4608, @void}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(r7) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) close(r10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00'}, 0x10) r12 = getpid() process_vm_readv(r12, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r12, &(0x7f0000000400)='net/udplite6\x00') 1.034494248s ago: executing program 1 (id=624): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @struct]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1}, 0x28) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00"/12], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd700000000000020000", @ANYRES32=0x0], 0x28}}, 0x0) 792.708889ms ago: executing program 3 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = memfd_secret(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x200d}, 0x18) r4 = socket(0x80000000000000a, 0x5, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x80000000, {{0xa, 0x0, 0xfffffffe, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) lsetxattr$security_selinux(&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, &(0x7f0000000340)='system_u:object_r:cpu_device_t:s0\x00', 0x22, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r5, r1, 0x2e, 0x4608, @void}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) close(r7) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r6, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r8}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x20000023896) close(r10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0xc100, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00'}, 0x10) r12 = getpid() process_vm_readv(r12, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r12, &(0x7f0000000400)='net/udplite6\x00') 600.266657ms ago: executing program 4 (id=626): sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1409, 0x100, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x174, r1, 0x54fee9ee553d6060, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf15a}]}, @TIPC_NLA_BEARER={0x114, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @local, 0x80000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @private1, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x8, @remote, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x42e76d85}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff3}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000000}, 0x801) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x4) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000500)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000540)={'ip_vti0\x00', 0x0, 0x7, 0x10, 0x4, 0x0, {{0x6, 0x4, 0x1, 0x2, 0x18, 0x67, 0x0, 0x3, 0x29, 0x0, @broadcast, @multicast1, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001a80)={&(0x7f00000005c0)={0x148c, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_SOPASS={0xcf, 0x3, "1fa5ecc7adbb97810be218afbd75e76e0cadb6a42f0d3647bce7a66c3df3674511b4676b9b9ed090ac4fda53f5da00ddfe0ff1f565a1cef8d8447752522136b06788420d57eec34d27e0bbf24b86ef887c14d5b8bf32db8aad719c32ce5818aad8e3e93bd732c1fe005127fd44dbb57cde5876baf5a778aa6ba0839a8914930dea855a7be12d043d7f7ff5b414d16f1b2c5607e2a3cf4467785784f7d03a391b82857a5ce99dbd307d20169e6413c97d814d9f7e777ce514d749d6734a767317b7cd810dedee2d509e5746"}, @ETHTOOL_A_WOL_MODES={0x16c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa7, 0x5, "8933076c11ea89fad9a5a9182ce19c882c644fe1178c2e1fd5a128a3bd0501b08dd067eb3dc30d234f5d34a096d4ffbebc100c7793f2b3e28b62afb937084c58f3e2c5adff01bc6026da6ffcd1675cdf782556c1a7a38a49bfc49ec5faee92c95449dd4ea97862fe2ac27df16a9e557be631e0fb64b9be9588d2e6ee4e66c6e0dab44445e6f4b808f8386dc35b3738f10846422467d0df272eb0087d4ccd791f10ab30"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "2a56c8c3ffab499b005304d730f44a32b24bc985f57b552166cf85a2c5e2c63070b2e79aca715a3b4b891ba763b9003a2986fcb840c10d019f66991926129eab2822720f46f854b9dff75ea1eabd8cbceb3158ebbcb7709a031c99598ca023929d48244dddece35317ed2b8abe869f145f21402b5e86b32589c4194d59135ad0e37ffdf91e2a8abb1c1dbafe4f9d33e138bdaeba2542ffb3db14668378b72ebe511b01795716a313d8fb97362a69bc2cd386e4a8"}]}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_MODES={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb6, 0x4, "b769cfcbc6f75e6cdd37f5cbdf9f30cd0e935330bc97f79eb47f35d620d28ef8dcafc25ffeff00786663e8cd157baa6cc69082c4d3cab71adf1d8ff2843817883d6df6e5d335b64e9c0649617f05507115d7ec4c19982e0bafe6ec053e460dcdaf344f94e3806db4299d880a717b3a120f53842c4c63ed7f379f1ff238a9e42cebedc33e223f915d5037bc6e291e4a918151cbf770beec64a4ea60478bd6a61c05e0bd0d5feadcdc567eeb0cc691f3eb8258"}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_MODES={0xf0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+.){!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'udp:syz0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ')#}\\!{\'\\@+&[@\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@^\x00'}]}]}]}]}, 0x148c}}, 0x40081) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000001b00)={0x0, @private, @private}, &(0x7f0000001b40)=0xc) r9 = dup(r7) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(r9, 0x29, 0x17, &(0x7f0000001b80)=0x2, 0x4) ioctl$FICLONERANGE(r9, 0x4020940d, &(0x7f0000001bc0)={{r7}, 0x80000001, 0x5, 0x4}) syz_io_uring_setup(0x13fa, &(0x7f0000001c00)={0x0, 0x963c, 0x1000, 0x2, 0xe7, 0x0, r9}, &(0x7f0000001c80)=0x0, &(0x7f0000001cc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x104, &(0x7f0000001d00)=0x80, 0x0, 0x4) r11 = socket$netlink(0x10, 0x3, 0x16) r12 = syz_open_dev$vcsa(&(0x7f0000001d40), 0x81, 0x80101) setsockopt$RDS_RECVERR(r12, 0x114, 0x5, &(0x7f0000001d80), 0x4) r13 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r13, &(0x7f0000001dc0)={0xa, 0x0, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2, 0x4}, 0x20) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001e40), r12) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r12, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000001ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0], 0x0, 0x75, &(0x7f0000001f40)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0xa5, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000002440)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002180)={0x264, r14, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x80}, 0x40) ioctl$HIDIOCGRAWINFO(r9, 0x80084803, &(0x7f0000002480)=""/160) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000003c80)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003c40)={&(0x7f0000002580)=@newtfilter={0x16b4, 0x2c, 0x300, 0x70bd2c, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0xe, 0xb}, {0xfff2, 0xfff3}, {0x8, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x29c, 0x2, [@TCA_FW_ACT={0x298, 0x4, [@m_tunnel_key={0x58, 0x0, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}]}, {0x1f, 0x6, "a9a3ce82e48dc6a4ac3bafffa8e4ded59e39da9b5eca2ba69ef433"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_simple={0x184, 0x2, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x14, 0x3, 'veth1_to_batadv\x00'}, @TCA_DEF_DATA={0x7, 0x3, ':(\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0x7, 0x7fff, 0xffffffff}}, @TCA_DEF_DATA={0xa, 0x3, 'vcan0\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'team0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x7a3b, 0x5, 0x1, 0x7}}, @TCA_DEF_DATA={0xf, 0x3, 'ip6erspan0\x00'}]}, {0xe4, 0x6, "a595d3d8d6ae59baac922bcab5f58ccc72a26c416acdae514c3bac2d4b713f19669bc263580db742327c2be734afe2a975936af86e36ba88154c17ce6784787a6769e1bac079ca0271bf4582a866ed47f41c85c5e862e4403eeeaf32a3b5b3acf54866cf394ed179f4ff55a2d2e578297b1ecf0df588ade835f08c1f93cf12b8cb4e488b5d456d8948bd716be36b2c31f470f3d5c865df56ae1c7f3a28a546a50b19a1d0a8c84a44bf176780475ad921cadfd4f1a6737806a958de97463a3d18b7225cb225338bf829538c2d343d37dcf80bd2ed922ff106811be6fbcd016e25"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0xb8, 0x12, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xac4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xa7ed}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0xfb3, 0x5, 0x7ff, 0x80000000}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x10, 0xffffffffffffffff, 0x5, 0x3}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xdc}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xf}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x1}]}, {0x2c, 0x6, "013062aa211e6d6db1b7dd5ae375a0c0c223855b28e31ffe1e67a6798abfadb9db67f49062f72d17"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0xd5}}, @TCA_RATE={0x6, 0x5, {0xb5, 0x5}}, @filter_kind_options=@f_matchall={{0xd}, {0x13bc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x7}}, @TCA_MATCHALL_ACT={0x12fc, 0x2, [@m_ct={0x8c, 0x7, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @broadcast}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}]}, {0x1c, 0x6, "83e17f29496d5236d61ab605f1b43601280511175dc091b7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x11c, 0x11, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}]}, {0xea, 0x6, "365fcc3c66ed69e4cddbbf158334a0d67d417d6347a26d644a78d4a5a481946ac5134e05257ff78b31298f12c3afd1681b7203e669dd10c7aa9a36b344df5a97d4f87a822f414d2c3bd747ce0139d37e4ae452d4a8d3bc63fced376c18a558e7f9ff8c89fdc2030a77263dcdb8a7e1d7bdc3dea3a5018306a56453479dbafa19370b7e5394716106056ad2df24040c79ba86a6a20bd4a0de619cc6925397ee12dd7219f1e80fae8fee2aae638002dd849313d6c457406596d25d30426061ea03f2f63a104d2bebcc9199baf30a5540402bdb3e5c7032a71b2a0b55a22c7decadab0e80a7a5a3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0xe8, 0x1d, 0x0, 0x0, {{0xa}, {0x70, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x6c, 0x5, 0x0, 0x1, [{0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xbd06610e3d789843}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4d, 0x6, "757ca8394065de74b1a12cdeb2a97d5289852280d88a52d8b5fd4a8e876cba136f468868c6539795dfea4a736a2d71702f37bb616217c87bf4f995f53e3fa223c9b79e9c642ce1d236"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x1068, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x5, 0x8, 0x6}, 0x6f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x3, 0x4}, 0x46}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0xa}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x1}}, @TCA_MATCHALL_ACT={0x94, 0x2, [@m_mirred={0x90, 0xa, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0xffffffff, 0x8, 0x5b2, 0x8001}, 0x1, r6}}]}, {0x43, 0x6, "91bf731575e1ac72c53423063dfe0704195e271f2c0d34e109e2848351beef169a4d2c13f17b6bec7a980285eb7d657d5a45284354f3787ff1c36e311b2ddd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x120000}, @TCA_RATE={0x6, 0x5, {0x68, 0x4}}]}, 0x16b4}, 0x1, 0x0, 0x0, 0x4004081}, 0x4040000) getsockopt$ARPT_SO_GET_INFO(r12, 0x0, 0x60, &(0x7f0000003cc0)={'filter\x00', 0x0, [0x5, 0x6, 0x7]}, &(0x7f0000003d40)=0x44) 450.84063ms ago: executing program 0 (id=627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000680)="d9", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 424.544572ms ago: executing program 3 (id=628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000002c0)={{0x33, @local, 0x4e20, 0x2, 'none\x00', 0x8, 0x8, 0x62}, {@remote, 0x4e21, 0x2, 0x7, 0x6be, 0x7f}}, 0x44) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000002000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) pwrite64(r2, &(0x7f0000000280)="b23d9ef3cfc8f608da9b0357bf9adb286069edf30d344d647d3ff444c58a5af1c3ad2aaef76b3ccd131eadade3cfb5acc1a3e6bc8d94c828408bff203a637377996b0fead5e54c15267c1fe5581746da4efdc3d690e9e0b1b8daf9bc48782300e235e3d6306e1f", 0x67, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='kfree\x00'}, 0x18) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0xffffffffffffffed, &(0x7f0000000240)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r6, @ANYBLOB="897a01d8d35c0f76f0790756e1e6b047164f181d1b2986e78ea64b9e89577a83458bdc99b03532a5ef5c292ad02a9979f61f4cf2ff530800f40a6743d33ef2d8caa7c1ee589b184841ec47efad35edca8fb7945754cfc130d5c53896e4bec38052348bf969b906b64286fde7855bb0b2153f96343c33d4fa"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x200480a4) syz_open_procfs$namespace(r6, &(0x7f0000000000)='ns/uts\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOSETOWN(r8, 0x8901, &(0x7f00000023c0)=r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) 285.801445ms ago: executing program 4 (id=629): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000000000000000009504ad879acacd9088d3be1f3be3c0d05f847c41bb942ec0f166d3062b0e3713dadee61472651e0cdbe0e48422534acc3639c76dd2b0bec63e07d9075a6929481caffd1a6f9dd6e919d35a4a"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KDDELIO(0xffffffffffffffff, 0x4b34, 0x3bf) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1, r5}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fddbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x24040050}, 0x20000000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r8, 0x10, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}]}, 0x2c}}, 0x4000) 284.988425ms ago: executing program 0 (id=630): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000580)=0x3, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '/dev/net/tun\x00'}, {}], 0xa, "649ac98cb1d9d48abffd8ee953c33e8178a7127e5e0f24089a21e5aab27d5518626d14d05ae229acd4513a24c676d28e15c03cd9f7ad1ee7e37a2af926c19036c156bcf457f2c84ea8832bc482dd4ef20b64a115569b40d9456b73a612f66ac46545136677425e205b6b4664a448abd73ced183ab6953bbd084d288a81c4c9b175c9e2697d522ec3db06af496fbac0e651612520eac9427ee8966bb0fae7a503c7febd85f7664cb137dffd7b"}, 0x1c7) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendto$packet(r0, &(0x7f0000000300)='L', 0x1, 0x20000804, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x80, 0x6, @link_local}, 0x14) 211.246322ms ago: executing program 3 (id=631): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 31.840457ms ago: executing program 2 (id=632): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) chroot(&(0x7f0000000000)='./file0/../file0\x00') 0s ago: executing program 1 (id=633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r4, 0xb82, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a00596387f18"}]}, 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x40000) r6 = semget$private(0x0, 0x0, 0x4) r7 = syz_io_uring_complete(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x19}) r8 = socket(0xb, 0x5, 0x3ff) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) semctl$IPC_STAT(r6, 0x0, 0x2, &(0x7f00000004c0)=""/143) getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000580)={@dev, @initdev, 0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000640)={0x0, @nfc={0x27, r10, 0x1, 0x4}, @xdp={0x2c, 0x8, r11, 0x29}, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x2}, 0x8, 0x0, 0x0, 0x0, 0x47dc, &(0x7f0000000600)='veth1\x00', 0x8, 0x6, 0x7c25}) openat$nci(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) r12 = accept4$unix(r8, &(0x7f0000000700)=@abs, &(0x7f0000000780)=0x6e, 0x40000) splice(r12, &(0x7f00000007c0)=0x5, r3, &(0x7f0000000800)=0x4, 0x4, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r1, 0xb00, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}]}, 0x1c}}, 0x40000) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f0000000940)) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x34, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xba}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e9ad3cc32493e36fa145ea5436dcd116"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "fefc9dbf233c2b77770d8157f51460bf"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x6c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "182b072878828b71ab271e97130a6b1e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "71664e849b0bae2cdb8bbdf112170c4b"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c0cd659573f9af7d1230d8cbafd952e4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c503c02f3aae60cefa0d508cda75297a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x10c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000b80)={'veth0_vlan\x00'}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000bc0)={0x80000005}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000c00), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@bloom_filter={0x1e, 0xdd, 0x5, 0xfffffffd, 0x6c00, r7, 0xffff, '\x00', 0x0, r13, 0x1, 0x1, 0x2, 0x5}, 0x50) write$nci(r7, &(0x7f0000000cc0)=@NCI_GID_PROPRIETARY_RSP={0xf, 0x0, 0x2, 0x0, 0x81, "287484d003571767f0d4a716d9738d1f07d90420630c57ca3cd1dac582278cd892e0e2beb7e90f42542e2f0a68c545c5"}, 0x33) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000d00), 0x1, 0x0) kernel console output (not intermixed with test programs): [ 20.948581][ T29] audit: type=1400 audit(1767916128.663:62): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.970629][ T29] audit: type=1400 audit(1767916128.663:63): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.993166][ T29] audit: type=1400 audit(1767916128.663:64): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.016128][ T29] audit: type=1400 audit(1767916128.663:65): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.039107][ T29] audit: type=1400 audit(1767916128.673:66): avc: denied { read open } for pid=3201 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.107' (ED25519) to the list of known hosts. [ 26.263059][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.263075][ T29] audit: type=1400 audit(1767916133.983:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.292212][ T29] audit: type=1400 audit(1767916134.013:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.294341][ T3303] cgroup: Unknown subsys name 'net' [ 26.319925][ T29] audit: type=1400 audit(1767916134.043:72): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.452537][ T3303] cgroup: Unknown subsys name 'cpuset' [ 26.458675][ T3303] cgroup: Unknown subsys name 'rlimit' [ 26.569670][ T29] audit: type=1400 audit(1767916134.283:73): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.600735][ T29] audit: type=1400 audit(1767916134.283:74): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.621347][ T29] audit: type=1400 audit(1767916134.293:75): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.638364][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 26.641758][ T29] audit: type=1400 audit(1767916134.293:76): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.670492][ T29] audit: type=1400 audit(1767916134.303:77): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.690881][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.695275][ T29] audit: type=1400 audit(1767916134.303:78): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.727356][ T29] audit: type=1400 audit(1767916134.313:79): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.789543][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.851558][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.885513][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 28.894352][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.901421][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.908695][ T3316] bridge_slave_0: entered allmulticast mode [ 28.915177][ T3316] bridge_slave_0: entered promiscuous mode [ 28.933572][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.940656][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.947820][ T3316] bridge_slave_1: entered allmulticast mode [ 28.954258][ T3316] bridge_slave_1: entered promiscuous mode [ 28.997635][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.004772][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.011897][ T3315] bridge_slave_0: entered allmulticast mode [ 29.018484][ T3315] bridge_slave_0: entered promiscuous mode [ 29.030466][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.044109][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.051168][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.058437][ T3315] bridge_slave_1: entered allmulticast mode [ 29.064901][ T3315] bridge_slave_1: entered promiscuous mode [ 29.076036][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.134838][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.146793][ T3316] team0: Port device team_slave_0 added [ 29.158372][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.165575][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.172923][ T3323] bridge_slave_0: entered allmulticast mode [ 29.179464][ T3323] bridge_slave_0: entered promiscuous mode [ 29.186836][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.196720][ T3316] team0: Port device team_slave_1 added [ 29.204228][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 29.213257][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.220385][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.227689][ T3323] bridge_slave_1: entered allmulticast mode [ 29.234026][ T3323] bridge_slave_1: entered promiscuous mode [ 29.263842][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.287517][ T3315] team0: Port device team_slave_0 added [ 29.296094][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.303163][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.329088][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.345603][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.355402][ T3315] team0: Port device team_slave_1 added [ 29.362197][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.375186][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.382301][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.408316][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.455667][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.462644][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.488579][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.500005][ T3323] team0: Port device team_slave_0 added [ 29.506632][ T3323] team0: Port device team_slave_1 added [ 29.519971][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.526934][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.552891][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.599816][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.607008][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.614179][ T3320] bridge_slave_0: entered allmulticast mode [ 29.620450][ T3320] bridge_slave_0: entered promiscuous mode [ 29.627937][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.634963][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.660896][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.673844][ T3316] hsr_slave_0: entered promiscuous mode [ 29.679861][ T3316] hsr_slave_1: entered promiscuous mode [ 29.685936][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.693076][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.700257][ T3317] bridge_slave_0: entered allmulticast mode [ 29.706761][ T3317] bridge_slave_0: entered promiscuous mode [ 29.713470][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.720555][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.727965][ T3320] bridge_slave_1: entered allmulticast mode [ 29.734347][ T3320] bridge_slave_1: entered promiscuous mode [ 29.746200][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.753215][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.779176][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.790117][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.797256][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.804438][ T3317] bridge_slave_1: entered allmulticast mode [ 29.810909][ T3317] bridge_slave_1: entered promiscuous mode [ 29.845719][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.856508][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.877925][ T3315] hsr_slave_0: entered promiscuous mode [ 29.884350][ T3315] hsr_slave_1: entered promiscuous mode [ 29.890229][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 29.896033][ T3315] Cannot create hsr debugfs directory [ 29.908503][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.933879][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.949155][ T3320] team0: Port device team_slave_0 added [ 29.969236][ T3323] hsr_slave_0: entered promiscuous mode [ 29.975478][ T3323] hsr_slave_1: entered promiscuous mode [ 29.981418][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 29.987197][ T3323] Cannot create hsr debugfs directory [ 29.993426][ T3320] team0: Port device team_slave_1 added [ 30.018771][ T3317] team0: Port device team_slave_0 added [ 30.039441][ T3317] team0: Port device team_slave_1 added [ 30.048299][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.055411][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.081361][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.094741][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.101706][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.127718][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.171493][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.178558][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.204543][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.222711][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.229675][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.255704][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.300698][ T3320] hsr_slave_0: entered promiscuous mode [ 30.306848][ T3320] hsr_slave_1: entered promiscuous mode [ 30.312706][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 30.318424][ T3320] Cannot create hsr debugfs directory [ 30.362536][ T3317] hsr_slave_0: entered promiscuous mode [ 30.368753][ T3317] hsr_slave_1: entered promiscuous mode [ 30.374870][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 30.380600][ T3317] Cannot create hsr debugfs directory [ 30.448833][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.464448][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.476099][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.489664][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.528608][ T3323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.537817][ T3323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.548334][ T3323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.559405][ T3323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.586967][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.598139][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.607217][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.617731][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.654649][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.664451][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.675156][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.694129][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.733111][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.742334][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.751104][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.768142][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.778099][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.790161][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.811400][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.823615][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.837393][ T2220] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.844504][ T2220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.859931][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.867075][ T2220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.875792][ T2220] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.882909][ T2220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.897846][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.904952][ T2220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.922954][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.945245][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.968309][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.988350][ T2220] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.995535][ T2220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.013104][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.025621][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.032786][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.042978][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.050112][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.082958][ T2220] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.090081][ T2220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.110701][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.155725][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.167862][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.180863][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.200175][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.207425][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.218000][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.225163][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.291765][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.307478][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.380294][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.403403][ T3323] veth0_vlan: entered promiscuous mode [ 31.423583][ T3323] veth1_vlan: entered promiscuous mode [ 31.472614][ T3316] veth0_vlan: entered promiscuous mode [ 31.492307][ T3315] veth0_vlan: entered promiscuous mode [ 31.499686][ T3317] veth0_vlan: entered promiscuous mode [ 31.510905][ T3323] veth0_macvtap: entered promiscuous mode [ 31.521182][ T3316] veth1_vlan: entered promiscuous mode [ 31.527885][ T3315] veth1_vlan: entered promiscuous mode [ 31.534499][ T3323] veth1_macvtap: entered promiscuous mode [ 31.542589][ T3317] veth1_vlan: entered promiscuous mode [ 31.576828][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.586091][ T3317] veth0_macvtap: entered promiscuous mode [ 31.598101][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.610376][ T3316] veth0_macvtap: entered promiscuous mode [ 31.623675][ T1603] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.632880][ T3317] veth1_macvtap: entered promiscuous mode [ 31.644120][ T3315] veth0_macvtap: entered promiscuous mode [ 31.650757][ T1603] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.660065][ T3316] veth1_macvtap: entered promiscuous mode [ 31.667458][ T1603] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.676502][ T1603] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.687738][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.702798][ T3315] veth1_macvtap: entered promiscuous mode [ 31.717089][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.728923][ T3320] veth0_vlan: entered promiscuous mode [ 31.741574][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 31.741586][ T29] audit: type=1400 audit(1767916139.453:90): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.bLNACk/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.744381][ T1680] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.782447][ T29] audit: type=1400 audit(1767916139.463:91): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.784199][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.804456][ T29] audit: type=1400 audit(1767916139.463:92): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.bLNACk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.819976][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.836823][ T29] audit: type=1400 audit(1767916139.463:93): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.847681][ T3320] veth1_vlan: entered promiscuous mode [ 31.865882][ T29] audit: type=1400 audit(1767916139.493:94): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.bLNACk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.888109][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.898062][ T29] audit: type=1400 audit(1767916139.493:95): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.bLNACk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.932509][ T29] audit: type=1400 audit(1767916139.493:96): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.954832][ T1680] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.970382][ T29] audit: type=1400 audit(1767916139.673:97): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.993211][ T29] audit: type=1400 audit(1767916139.683:98): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=4449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.018009][ T1680] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.027782][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.037903][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.054297][ T1680] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.068865][ T1680] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.095089][ T29] audit: type=1400 audit(1767916139.803:99): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.121586][ T1680] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.144489][ T3320] veth0_macvtap: entered promiscuous mode [ 32.153430][ T1680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.174888][ T3320] veth1_macvtap: entered promiscuous mode [ 32.201092][ T1680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.219485][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.236178][ T1680] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.247508][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.276571][ T1680] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.320301][ T1680] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.356077][ T1680] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.384079][ T1680] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.426755][ T1680] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.462662][ T1680] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.487677][ T1680] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.509001][ T3521] loop4: detected capacity change from 0 to 512 [ 32.534749][ T3521] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.548443][ T3521] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.588040][ T3521] EXT4-fs (loop4): 1 truncate cleaned up [ 32.594775][ T3521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.715963][ T3534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 33.104423][ T3541] tipc: Started in network mode [ 33.109360][ T3541] tipc: Node identity ac14140f, cluster identity 4711 [ 33.117571][ T3541] tipc: New replicast peer: 255.255.255.83 [ 33.123640][ T3541] tipc: Enabled bearer , priority 10 [ 33.132320][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.206237][ T3549] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13'. [ 33.217705][ T3549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13'. [ 33.241502][ T3551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.253746][ T3551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.264970][ T3551] netlink: 'syz.4.15': attribute type 2 has an invalid length. [ 33.275457][ T3551] sch_fq: defrate 4294967295 ignored. [ 33.427804][ T3555] ip6t_rpfilter: unknown options [ 33.434062][ T3555] syz.0.16 (3555) used greatest stack depth: 10192 bytes left [ 33.458153][ T3557] Driver unsupported XDP return value 0 on prog (id 13) dev N/A, expect packet loss! [ 33.809348][ T3562] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 33.817621][ T3562] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 33.905175][ T3564] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19'. [ 33.917728][ T3564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 34.134188][ T3567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20'. [ 34.241897][ T3509] tipc: Node number set to 2886997007 [ 34.292061][ T3580] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 34.305675][ T3580] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.316779][ T3580] bond0: (slave team0): Enslaving as an active interface with an up link [ 34.364689][ T3580] netlink: 'syz.3.25': attribute type 3 has an invalid length. [ 34.372390][ T3580] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 34.379952][ T3580] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.25'. [ 34.450687][ T3589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 34.526614][ T3597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 34.552515][ T3600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 34.702540][ T3615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.854210][ T3623] loop0: detected capacity change from 0 to 512 [ 34.861662][ T3623] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 34.874930][ T3623] EXT4-fs (loop0): 1 truncate cleaned up [ 34.881145][ T3623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.924928][ T3627] loop4: detected capacity change from 0 to 512 [ 34.944545][ T3627] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 34.952961][ T3627] System zones: 0-2, 18-18, 34-34 [ 34.959300][ T3627] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.43: bg 0: block 248: padding at end of block bitmap is not set [ 34.974531][ T3627] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.43: Failed to acquire dquot type 1 [ 34.987938][ T3627] EXT4-fs (loop4): 1 truncate cleaned up [ 34.995468][ T3627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.008784][ T3627] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.095981][ T3632] wg2: entered promiscuous mode [ 35.100991][ T3632] wg2: entered allmulticast mode [ 35.110464][ T3632] Zero length message leads to an empty skb [ 35.120471][ T3369] IPVS: starting estimator thread 0... [ 35.138754][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.175769][ T3635] bond_slave_0: entered promiscuous mode [ 35.181788][ T3635] bond_slave_1: entered promiscuous mode [ 35.188519][ T3635] vlan2: entered promiscuous mode [ 35.193729][ T3635] bond0: entered promiscuous mode [ 35.212207][ T3633] IPVS: using max 2592 ests per chain, 129600 per kthread [ 35.621128][ T3662] FAULT_INJECTION: forcing a failure. [ 35.621128][ T3662] name failslab, interval 1, probability 0, space 0, times 1 [ 35.633868][ T3662] CPU: 1 UID: 0 PID: 3662 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.633899][ T3662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.633982][ T3662] Call Trace: [ 35.633994][ T3662] [ 35.634013][ T3662] __dump_stack+0x1d/0x30 [ 35.634039][ T3662] dump_stack_lvl+0x95/0xd0 [ 35.634063][ T3662] dump_stack+0x15/0x1b [ 35.634099][ T3662] should_fail_ex+0x265/0x280 [ 35.634145][ T3662] should_failslab+0x8c/0xb0 [ 35.634173][ T3662] __kmalloc_cache_noprof+0x65/0x4c0 [ 35.634387][ T3662] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 35.634419][ T3662] ? mutex_unlock+0x4f/0x90 [ 35.634451][ T3662] __se_sys_memfd_create+0x1d6/0x6b0 [ 35.634517][ T3662] __x64_sys_memfd_create+0x31/0x40 [ 35.634559][ T3662] x64_sys_call+0x28cb/0x3000 [ 35.634586][ T3662] do_syscall_64+0xca/0x2b0 [ 35.634619][ T3662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.634717][ T3662] RIP: 0033:0x7f9ef0d3f749 [ 35.634731][ T3662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 35.634748][ T3662] RSP: 002b:00007f9eef79ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 35.634772][ T3662] RAX: ffffffffffffffda RBX: 00000000000005a0 RCX: 00007f9ef0d3f749 [ 35.634813][ T3663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.634787][ T3662] RDX: 00007f9eef79eef0 RSI: 0000000000000000 RDI: 00007f9ef0dc4960 [ 35.634903][ T3662] RBP: 00002000000016c0 R08: 00007f9eef79ebb7 R09: 00007f9eef79ee40 [ 35.634960][ T3662] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000002c0 [ 35.635086][ T3662] R13: 00007f9eef79eef0 R14: 00007f9eef79eeb0 R15: 0000200000000600 [ 35.635145][ T3662] [ 35.810472][ T3663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.819983][ T3663] netlink: 'syz.1.55': attribute type 2 has an invalid length. [ 35.828237][ T3627] syz.4.43 (3627) used greatest stack depth: 9184 bytes left [ 35.837321][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.846822][ T3663] sch_fq: defrate 4294967295 ignored. [ 35.907087][ T3671] loop3: detected capacity change from 0 to 164 [ 35.918950][ T3671] Unable to read rock-ridge attributes [ 35.931599][ T3671] Unable to read rock-ridge attributes [ 35.986159][ T3680] FAULT_INJECTION: forcing a failure. [ 35.986159][ T3680] name failslab, interval 1, probability 0, space 0, times 0 [ 35.999040][ T3680] CPU: 1 UID: 0 PID: 3680 Comm: syz.3.63 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.999091][ T3680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.999101][ T3680] Call Trace: [ 35.999107][ T3680] [ 35.999114][ T3680] __dump_stack+0x1d/0x30 [ 35.999163][ T3680] dump_stack_lvl+0x95/0xd0 [ 35.999189][ T3680] dump_stack+0x15/0x1b [ 35.999214][ T3680] should_fail_ex+0x265/0x280 [ 35.999256][ T3680] should_failslab+0x8c/0xb0 [ 35.999325][ T3680] kmem_cache_alloc_noprof+0x69/0x4b0 [ 35.999342][ T3680] ? audit_log_start+0x342/0x720 [ 35.999359][ T3680] audit_log_start+0x342/0x720 [ 35.999456][ T3680] ? kstrtouint+0x76/0xc0 [ 35.999533][ T3680] audit_seccomp+0x48/0x100 [ 35.999557][ T3680] ? __seccomp_filter+0x832/0x1260 [ 35.999707][ T3680] __seccomp_filter+0x843/0x1260 [ 35.999731][ T3680] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 35.999755][ T3680] ? vfs_write+0x7e8/0x960 [ 35.999770][ T3680] ? __rcu_read_unlock+0x4f/0x70 [ 35.999794][ T3680] ? __fget_files+0x184/0x1c0 [ 35.999870][ T3680] __secure_computing+0x82/0x150 [ 35.999945][ T3680] syscall_trace_enter+0xcf/0x1e0 [ 35.999965][ T3680] do_syscall_64+0xa4/0x2b0 [ 36.000031][ T3680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.000088][ T3680] RIP: 0033:0x7f9ef0d3f749 [ 36.000101][ T3680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 36.000116][ T3680] RSP: 002b:00007f9eef79f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 36.000132][ T3680] RAX: ffffffffffffffda RBX: 00007f9ef0f95fa0 RCX: 00007f9ef0d3f749 [ 36.000143][ T3680] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 36.000153][ T3680] RBP: 00007f9eef79f090 R08: 0000000000000000 R09: 0000000000000000 [ 36.000163][ T3680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 36.000235][ T3680] R13: 00007f9ef0f96038 R14: 00007f9ef0f95fa0 R15: 00007ffdec1a8c28 [ 36.000271][ T3680] [ 36.262332][ T3682] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.652082][ T3750] loop1: detected capacity change from 0 to 512 [ 36.667739][ T3750] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.70: bad orphan inode 11862016 [ 36.683129][ T3750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.696178][ T3750] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.709602][ T3754] loop2: detected capacity change from 0 to 1024 [ 36.718732][ T3754] EXT4-fs: Invalid want_extra_isize -2147483647 [ 36.728567][ T3754] syz_tun: entered allmulticast mode [ 36.734283][ T3754] syz_tun: left allmulticast mode [ 36.771506][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 36.771520][ T29] audit: type=1326 audit(1767916144.483:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 36.833679][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.892116][ T29] audit: type=1326 audit(1767916144.483:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 36.915451][ T29] audit: type=1326 audit(1767916144.493:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 36.938884][ T29] audit: type=1326 audit(1767916144.503:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 36.962097][ T29] audit: type=1326 audit(1767916144.503:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 36.985295][ T29] audit: type=1326 audit(1767916144.513:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 37.008654][ T29] audit: type=1326 audit(1767916144.513:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 37.032066][ T29] audit: type=1326 audit(1767916144.543:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 37.055270][ T29] audit: type=1326 audit(1767916144.543:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 37.078429][ T29] audit: type=1326 audit(1767916144.543:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3755 comm="syz.2.72" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 37.103593][ T3775] FAULT_INJECTION: forcing a failure. [ 37.103593][ T3775] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.116701][ T3775] CPU: 1 UID: 0 PID: 3775 Comm: syz.4.79 Not tainted syzkaller #0 PREEMPT(voluntary) [ 37.116726][ T3775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 37.116738][ T3775] Call Trace: [ 37.116744][ T3775] [ 37.116751][ T3775] __dump_stack+0x1d/0x30 [ 37.116779][ T3775] dump_stack_lvl+0x95/0xd0 [ 37.116857][ T3775] dump_stack+0x15/0x1b [ 37.116891][ T3775] should_fail_ex+0x265/0x280 [ 37.116917][ T3775] should_fail+0xb/0x20 [ 37.116939][ T3775] should_fail_usercopy+0x1a/0x20 [ 37.116965][ T3775] _copy_from_user+0x1c/0xb0 [ 37.117051][ T3775] ___sys_sendmsg+0xc1/0x1d0 [ 37.117090][ T3775] __x64_sys_sendmsg+0xd4/0x160 [ 37.117126][ T3775] x64_sys_call+0x17ba/0x3000 [ 37.117196][ T3775] do_syscall_64+0xca/0x2b0 [ 37.117234][ T3775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.117259][ T3775] RIP: 0033:0x7f2b7f9af749 [ 37.117276][ T3775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.117301][ T3775] RSP: 002b:00007f2b7e417038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 37.117320][ T3775] RAX: ffffffffffffffda RBX: 00007f2b7fc05fa0 RCX: 00007f2b7f9af749 [ 37.117331][ T3775] RDX: 0000000000000040 RSI: 0000200000000600 RDI: 0000000000000007 [ 37.117341][ T3775] RBP: 00007f2b7e417090 R08: 0000000000000000 R09: 0000000000000000 [ 37.117351][ T3775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.117379][ T3775] R13: 00007f2b7fc06038 R14: 00007f2b7fc05fa0 R15: 00007ffe959af5f8 [ 37.117401][ T3775] [ 37.557926][ T3806] netlink: 'syz.1.91': attribute type 13 has an invalid length. [ 37.595661][ T3806] ipvlan2: entered promiscuous mode [ 37.626604][ T3806] loop1: detected capacity change from 0 to 512 [ 37.633986][ T3806] vfat: Bad value for 'shortname' [ 37.710426][ T3819] ip6t_srh: unknown srh match flags 4000 [ 37.756610][ T3827] loop2: detected capacity change from 0 to 1024 [ 37.792477][ T3827] ======================================================= [ 37.792477][ T3827] WARNING: The mand mount option has been deprecated and [ 37.792477][ T3827] and is ignored by this kernel. Remove the mand [ 37.792477][ T3827] option from the mount to silence this warning. [ 37.792477][ T3827] ======================================================= [ 37.846018][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.864498][ T3833] loop4: detected capacity change from 0 to 2048 [ 37.900209][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.914770][ T3833] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.965439][ T3833] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.095941][ T3833] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.96: bg 0: block 345: padding at end of block bitmap is not set [ 38.122976][ T3833] EXT4-fs (loop4): Remounting filesystem read-only [ 38.212697][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.276567][ T3854] __nla_validate_parse: 6 callbacks suppressed [ 38.276583][ T3854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.105'. [ 38.484306][ T3861] loop1: detected capacity change from 0 to 512 [ 38.551593][ T3863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 38.672895][ T3861] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 38.844655][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 38.853550][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.108'. [ 38.945181][ T3872] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 38.952644][ T3872] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 38.962582][ T3570] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 38.975678][ T3570] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 39.010830][ T3875] loop4: detected capacity change from 0 to 512 [ 39.035478][ T3879] netlink: 60 bytes leftover after parsing attributes in process `syz.0.114'. [ 39.053748][ T3876] fido_id[3876]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 39.067452][ T3875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.096846][ T3875] EXT4-fs (loop4): 1 truncate cleaned up [ 39.121272][ T3884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3884 comm=syz.0.115 [ 39.123949][ T3875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.179026][ T3872] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 39.319223][ T3893] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 39.373614][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.384599][ T3893] 8021q: adding VLAN 0 to HW filter on device bond1 [ 39.426438][ T3893] bond1: (slave veth0_to_bond): making interface the new active one [ 39.435857][ T3893] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 39.452132][ T3893] bond1: entered promiscuous mode [ 39.457193][ T3893] veth0_to_bond: entered promiscuous mode [ 39.463066][ T3893] bond1: entered allmulticast mode [ 39.468184][ T3893] veth0_to_bond: entered allmulticast mode [ 39.750010][ T3906] loop3: detected capacity change from 0 to 1024 [ 39.801217][ T3891] batadv_slave_1: entered promiscuous mode [ 39.892508][ T3906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 39.934519][ T3906] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.978959][ T3906] can0: slcan on ptm0. [ 40.033937][ T3925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 40.048419][ T3906] can0 (unregistered): slcan off ptm0. [ 40.056164][ T3890] batadv_slave_1: left promiscuous mode [ 40.065207][ T3906] Falling back ldisc for ptm0. [ 40.107725][ C0] hrtimer: interrupt took 24536 ns [ 40.127141][ T3936] random: crng reseeded on system resumption [ 40.180922][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.249874][ T3954] netlink: 'syz.0.135': attribute type 13 has an invalid length. [ 40.257730][ T3954] netlink: 32 bytes leftover after parsing attributes in process `syz.0.135'. [ 40.276067][ T3949] loop1: detected capacity change from 0 to 2048 [ 40.302500][ T3960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.136'. [ 40.355429][ T3965] loop0: detected capacity change from 0 to 512 [ 40.364861][ T3954] ipvlan2: entered promiscuous mode [ 40.372484][ T3965] vfat: Bad value for 'shortname' [ 40.379066][ T3949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.401958][ T3949] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.444857][ T3972] loop3: detected capacity change from 0 to 512 [ 40.470485][ T3973] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.133: bg 0: block 345: padding at end of block bitmap is not set [ 40.500899][ T3973] EXT4-fs (loop1): Remounting filesystem read-only [ 40.539823][ T3972] EXT4-fs (loop3): too many log groups per flexible block group [ 40.547795][ T3972] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 40.554946][ T3972] EXT4-fs (loop3): mount failed [ 40.615911][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.787081][ T3998] FAULT_INJECTION: forcing a failure. [ 40.787081][ T3998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 40.800232][ T3998] CPU: 0 UID: 0 PID: 3998 Comm: syz.1.145 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.800329][ T3998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.800341][ T3998] Call Trace: [ 40.800349][ T3998] [ 40.800400][ T3998] __dump_stack+0x1d/0x30 [ 40.800424][ T3998] dump_stack_lvl+0x95/0xd0 [ 40.800447][ T3998] dump_stack+0x15/0x1b [ 40.800468][ T3998] should_fail_ex+0x265/0x280 [ 40.800543][ T3998] should_fail+0xb/0x20 [ 40.800559][ T3998] should_fail_usercopy+0x1a/0x20 [ 40.800583][ T3998] _copy_from_user+0x1c/0xb0 [ 40.800611][ T3998] core_sys_select+0x1d3/0x6e0 [ 40.800745][ T3998] ? set_user_sigmask+0x84/0x190 [ 40.800831][ T3998] __se_sys_pselect6+0x213/0x280 [ 40.800853][ T3998] ? mutex_unlock+0x4f/0x90 [ 40.800879][ T3998] __x64_sys_pselect6+0x78/0x90 [ 40.800939][ T3998] x64_sys_call+0x2e98/0x3000 [ 40.800968][ T3998] do_syscall_64+0xca/0x2b0 [ 40.801001][ T3998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.801096][ T3998] RIP: 0033:0x7f53cbbaf749 [ 40.801112][ T3998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.801131][ T3998] RSP: 002b:00007f53ca60f038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 40.801150][ T3998] RAX: ffffffffffffffda RBX: 00007f53cbe05fa0 RCX: 00007f53cbbaf749 [ 40.801162][ T3998] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 40.801174][ T3998] RBP: 00007f53ca60f090 R08: 0000000000000000 R09: 0000000000000000 [ 40.801239][ T3998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.801249][ T3998] R13: 00007f53cbe06038 R14: 00007f53cbe05fa0 R15: 00007fff01e69db8 [ 40.801266][ T3998] [ 41.016797][ T4003] loop1: detected capacity change from 0 to 512 [ 41.023813][ T4003] EXT4-fs: Ignoring removed bh option [ 41.029571][ T4003] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 41.048413][ T4003] EXT4-fs (loop1): 1 truncate cleaned up [ 41.058586][ T4003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.075436][ T4000] xt_CT: No such helper "netbios-ns" [ 41.161582][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.256227][ T4021] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.291401][ T4021] EXT4-fs (loop0): 1 truncate cleaned up [ 41.303501][ T4021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.390002][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.457628][ T4032] xt_ecn: cannot match TCP bits for non-tcp packets [ 41.810655][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 41.810671][ T29] audit: type=1326 audit(1767916149.523:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 41.862773][ T29] audit: type=1326 audit(1767916149.523:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 41.889218][ T29] audit: type=1326 audit(1767916149.563:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 41.912737][ T29] audit: type=1326 audit(1767916149.563:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 41.914167][ T4049] xt_hashlimit: max too large, truncated to 1048576 [ 41.936448][ T29] audit: type=1326 audit(1767916149.563:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 41.966335][ T29] audit: type=1326 audit(1767916149.563:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 41.989878][ T29] audit: type=1326 audit(1767916149.563:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 42.013351][ T29] audit: type=1326 audit(1767916149.563:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 42.036914][ T29] audit: type=1326 audit(1767916149.563:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 42.060464][ T29] audit: type=1326 audit(1767916149.563:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4048 comm="syz.1.163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 42.348608][ T4068] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.383905][ T4065] EXT4-fs (loop3): 1 truncate cleaned up [ 42.402626][ T4065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.424409][ T4068] EXT4-fs (loop1): 1 orphan inode deleted [ 42.430243][ T4068] EXT4-fs (loop1): 1 truncate cleaned up [ 42.436476][ T4068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.473759][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.538473][ T4082] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 42.582322][ T4082] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 42.659713][ T4085] set_capacity_and_notify: 3 callbacks suppressed [ 42.659726][ T4085] loop4: detected capacity change from 0 to 1024 [ 42.694072][ T4085] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.175: Failed to acquire dquot type 0 [ 42.734522][ T4085] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 42.750266][ T4085] EXT4-fs (loop4): 1 truncate cleaned up [ 42.757340][ T4085] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.815229][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.187356][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.258093][ T4105] loop3: detected capacity change from 0 to 1024 [ 43.303977][ T4105] journal_path: Non-blockdev passed as './file0' [ 43.310383][ T4105] EXT4-fs: error: could not find journal device path [ 43.557840][ T4112] syz.4.182 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 44.137487][ T4127] loop0: detected capacity change from 0 to 512 [ 44.296702][ T4133] capability: warning: `syz.3.191' uses 32-bit capabilities (legacy support in use) [ 44.402519][ T4127] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.432418][ T4127] EXT4-fs (loop0): 1 truncate cleaned up [ 44.473698][ T4127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.839663][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 44.855315][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 45.056250][ T4167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4167 comm=syz.4.199 [ 45.096060][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.159498][ T4169] loop1: detected capacity change from 0 to 2048 [ 45.225509][ T4169] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.253459][ T4173] netlink: 32 bytes leftover after parsing attributes in process `syz.4.202'. [ 45.260665][ T4165] Set syz1 is full, maxelem 65536 reached [ 45.268295][ T4169] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.297014][ T4173] ipvlan2: entered promiscuous mode [ 45.333273][ T4179] loop4: detected capacity change from 0 to 512 [ 45.340026][ T4179] vfat: Bad value for 'shortname' [ 45.360432][ T4181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 45.445339][ T4185] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.200: bg 0: block 345: padding at end of block bitmap is not set [ 45.460031][ T4185] EXT4-fs (loop1): Remounting filesystem read-only [ 45.541213][ T4188] bridge0: entered promiscuous mode [ 45.563058][ T4188] vlan2: entered promiscuous mode [ 45.586745][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.040808][ T4210] netlink: 16 bytes leftover after parsing attributes in process `syz.4.214'. [ 46.079755][ T4212] netlink: 'syz.1.215': attribute type 15 has an invalid length. [ 46.087577][ T4212] netlink: 24 bytes leftover after parsing attributes in process `syz.1.215'. [ 46.305176][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 46.315477][ T4224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 46.976687][ T4241] loop0: detected capacity change from 0 to 164 [ 46.986720][ T4241] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.003529][ T4241] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 47.012044][ T4241] Symlink component flag not implemented [ 47.017687][ T4241] Symlink component flag not implemented [ 47.023904][ T4241] Symlink component flag not implemented (7) [ 47.029900][ T4241] Symlink component flag not implemented (116) [ 47.329425][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 47.329444][ T29] audit: type=1400 audit(1767916156.045:1297): avc: denied { unmount } for pid=3320 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 47.484059][ T4254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 47.759957][ T4262] syzkaller0: entered promiscuous mode [ 47.765553][ T4262] syzkaller0: entered allmulticast mode [ 48.232613][ T29] audit: type=1326 audit(1767916156.955:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.376801][ T4272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4272 comm=syz.2.234 [ 48.431452][ T29] audit: type=1326 audit(1767916156.975:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.454847][ T29] audit: type=1326 audit(1767916156.975:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.478258][ T29] audit: type=1326 audit(1767916156.975:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.501678][ T29] audit: type=1326 audit(1767916156.975:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.525069][ T29] audit: type=1326 audit(1767916156.975:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.548438][ T29] audit: type=1326 audit(1767916156.975:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.571782][ T29] audit: type=1326 audit(1767916156.975:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.595288][ T29] audit: type=1326 audit(1767916156.975:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4266 comm="syz.3.232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ef0d3f749 code=0x7ffc0000 [ 48.622440][ T4276] loop4: detected capacity change from 0 to 2048 [ 48.719561][ T4276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.744634][ T4295] loop1: detected capacity change from 0 to 512 [ 48.770473][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 48.772731][ T4276] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.792511][ T4295] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 48.861361][ T4295] EXT4-fs (loop1): 1 truncate cleaned up [ 48.882731][ T4295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.901933][ T4298] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.237: bg 0: block 345: padding at end of block bitmap is not set [ 48.956937][ T4298] EXT4-fs (loop4): Remounting filesystem read-only [ 49.391560][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.427619][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.625779][ T4324] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.713637][ T3425] Process accounting resumed [ 49.795629][ T4324] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.851511][ T4332] FAULT_INJECTION: forcing a failure. [ 49.851511][ T4332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.864712][ T4332] CPU: 1 UID: 0 PID: 4332 Comm: syz.2.252 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.864737][ T4332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.864748][ T4332] Call Trace: [ 49.864755][ T4332] [ 49.864769][ T4332] __dump_stack+0x1d/0x30 [ 49.864799][ T4332] dump_stack_lvl+0x95/0xd0 [ 49.864827][ T4332] dump_stack+0x15/0x1b [ 49.864913][ T4332] should_fail_ex+0x265/0x280 [ 49.864938][ T4332] should_fail+0xb/0x20 [ 49.864955][ T4332] should_fail_usercopy+0x1a/0x20 [ 49.864983][ T4332] _copy_to_user+0x20/0xa0 [ 49.865015][ T4332] simple_read_from_buffer+0xb5/0x130 [ 49.865116][ T4332] proc_fail_nth_read+0x10e/0x150 [ 49.865188][ T4332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 49.865222][ T4332] vfs_read+0x1a8/0x770 [ 49.865237][ T4332] ? __rcu_read_unlock+0x4f/0x70 [ 49.865256][ T4332] ? __fget_files+0x184/0x1c0 [ 49.865292][ T4332] ? mutex_lock+0x58/0x90 [ 49.865394][ T4332] ksys_read+0xda/0x1a0 [ 49.865417][ T4332] __x64_sys_read+0x40/0x50 [ 49.865435][ T4332] x64_sys_call+0x2889/0x3000 [ 49.865595][ T4332] do_syscall_64+0xca/0x2b0 [ 49.865716][ T4332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.865743][ T4332] RIP: 0033:0x7fe962cae15c [ 49.865760][ T4332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 49.865786][ T4332] RSP: 002b:00007fe9616cd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 49.865886][ T4332] RAX: ffffffffffffffda RBX: 00007fe962f06180 RCX: 00007fe962cae15c [ 49.865901][ T4332] RDX: 000000000000000f RSI: 00007fe9616cd0a0 RDI: 0000000000000004 [ 49.865915][ T4332] RBP: 00007fe9616cd090 R08: 0000000000000000 R09: 0000000000000000 [ 49.865929][ T4332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 49.865940][ T4332] R13: 00007fe962f06218 R14: 00007fe962f06180 R15: 00007ffcef756eb8 [ 49.865956][ T4332] [ 50.078061][ T4324] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.105332][ T4324] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.129807][ T4338] loop3: detected capacity change from 0 to 512 [ 50.140962][ T4338] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 50.192564][ T3710] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.219727][ T3710] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.228663][ T3710] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.237658][ T3710] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.252531][ T4338] EXT4-fs (loop3): 1 truncate cleaned up [ 50.258638][ T4338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.289759][ T4342] FAULT_INJECTION: forcing a failure. [ 50.289759][ T4342] name failslab, interval 1, probability 0, space 0, times 0 [ 50.303053][ T4342] CPU: 0 UID: 0 PID: 4342 Comm: syz.1.258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.303128][ T4342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.303142][ T4342] Call Trace: [ 50.303163][ T4342] [ 50.303173][ T4342] __dump_stack+0x1d/0x30 [ 50.303201][ T4342] dump_stack_lvl+0x95/0xd0 [ 50.303229][ T4342] dump_stack+0x15/0x1b [ 50.303256][ T4342] should_fail_ex+0x265/0x280 [ 50.303279][ T4342] should_failslab+0x8c/0xb0 [ 50.303311][ T4342] kmem_cache_alloc_noprof+0x69/0x4b0 [ 50.303361][ T4342] ? audit_log_start+0x342/0x720 [ 50.303390][ T4342] audit_log_start+0x342/0x720 [ 50.303422][ T4342] ? kstrtouint+0x76/0xc0 [ 50.303441][ T4342] audit_seccomp+0x48/0x100 [ 50.303477][ T4342] ? __seccomp_filter+0x832/0x1260 [ 50.303566][ T4342] __seccomp_filter+0x843/0x1260 [ 50.303603][ T4342] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 50.303655][ T4342] ? vfs_write+0x7e8/0x960 [ 50.303741][ T4342] __secure_computing+0x82/0x150 [ 50.303777][ T4342] syscall_trace_enter+0xcf/0x1e0 [ 50.303806][ T4342] do_syscall_64+0xa4/0x2b0 [ 50.303853][ T4342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.303875][ T4342] RIP: 0033:0x7f53cbbaf749 [ 50.303893][ T4342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.303939][ T4342] RSP: 002b:00007f53ca60f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 50.303960][ T4342] RAX: ffffffffffffffda RBX: 00007f53cbe05fa0 RCX: 00007f53cbbaf749 [ 50.303977][ T4342] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 50.303993][ T4342] RBP: 00007f53ca60f090 R08: 0000000000000000 R09: 0000000000000000 [ 50.304009][ T4342] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.304025][ T4342] R13: 00007f53cbe06038 R14: 00007f53cbe05fa0 R15: 00007fff01e69db8 [ 50.304044][ T4342] [ 50.604710][ T4352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4352 comm=syz.2.260 [ 50.634479][ T4353] __nla_validate_parse: 3 callbacks suppressed [ 50.634498][ T4353] netlink: 80 bytes leftover after parsing attributes in process `syz.1.259'. [ 50.694593][ T4354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=4354 comm=syz.1.259 [ 50.807766][ T4353] loop1: detected capacity change from 0 to 164 [ 50.815159][ T4353] Unable to read rock-ridge attributes [ 50.821783][ T4353] Unable to read rock-ridge attributes [ 50.829550][ T4353] syz.1.259: attempt to access beyond end of device [ 50.829550][ T4353] loop1: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 50.848747][ T4353] syz.1.259: attempt to access beyond end of device [ 50.848747][ T4353] loop1: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 50.867842][ T4358] bridge0: entered promiscuous mode [ 50.873151][ T4358] vlan0: entered promiscuous mode [ 50.889042][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.916983][ T4363] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 51.125225][ T4380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4380 comm=syz.3.272 [ 51.157417][ T4383] netlink: 8 bytes leftover after parsing attributes in process `syz.2.273'. [ 51.166314][ T4383] netlink: 484 bytes leftover after parsing attributes in process `syz.2.273'. [ 51.273411][ T4386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.299568][ T4386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.385752][ T4386] netlink: 'syz.3.275': attribute type 2 has an invalid length. [ 51.408211][ T4386] sch_fq: defrate 4294967295 ignored. [ 51.926521][ T4400] loop4: detected capacity change from 0 to 512 [ 51.950916][ T4400] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.978262][ T4400] EXT4-fs (loop4): 1 truncate cleaned up [ 52.002307][ T4400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.240479][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.351364][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.283'. [ 52.462233][ T4411] bridge0: entered promiscuous mode [ 52.469616][ T4415] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4415 comm=syz.3.285 [ 52.493646][ T4411] vlan2: entered promiscuous mode [ 52.799513][ T4431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.288'. [ 53.370477][ T4435] loop0: detected capacity change from 0 to 2048 [ 53.473411][ T3958] loop0: p2 < > p4 [ 53.479510][ T3958] loop0: p4 size 262144 extends beyond EOD, truncated [ 53.496980][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 53.496992][ T29] audit: type=1326 audit(1767916162.215:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.505018][ T4435] loop0: p2 < > p4 [ 53.529968][ T29] audit: type=1326 audit(1767916162.215:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.572968][ T29] audit: type=1326 audit(1767916162.275:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.596395][ T29] audit: type=1326 audit(1767916162.275:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.619873][ T29] audit: type=1326 audit(1767916162.275:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.643323][ T29] audit: type=1326 audit(1767916162.275:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.666760][ T29] audit: type=1326 audit(1767916162.275:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.690095][ T29] audit: type=1326 audit(1767916162.275:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.713464][ T29] audit: type=1326 audit(1767916162.275:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.736693][ T29] audit: type=1326 audit(1767916162.275:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4436 comm="syz.4.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b7f9af749 code=0x7ffc0000 [ 53.761851][ T4435] loop0: p4 size 262144 extends beyond EOD, truncated [ 53.826090][ T4445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4445 comm=syz.3.297 [ 53.848817][ T4446] vlan0: entered promiscuous mode [ 53.872809][ T4449] xt_hashlimit: size too large, truncated to 1048576 [ 53.892716][ T3958] udevd[3958]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 53.903794][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 53.931178][ T3958] udevd[3958]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 53.957715][ T3300] udevd[3300]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 53.993198][ T4453] netlink: 'syz.3.300': attribute type 3 has an invalid length. [ 54.000982][ T4453] netlink: 'syz.3.300': attribute type 3 has an invalid length. [ 54.019364][ T4455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.301'. [ 54.142534][ T4462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.303'. [ 54.202796][ T4464] capability: warning: `syz.1.304' uses deprecated v2 capabilities in a way that may be insecure [ 54.236950][ T4464] mmap: syz.1.304 (4464) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.299978][ T4466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 54.862682][ T4482] loop0: detected capacity change from 0 to 512 [ 54.955877][ T4482] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.974266][ T4482] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.004348][ T4482] SELinux: Context @ is not valid (left unmapped). [ 55.049753][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.171903][ T4495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.314'. [ 55.245915][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 55.720702][ T4516] loop3: detected capacity change from 0 to 512 [ 55.743451][ T4518] netlink: 'syz.4.321': attribute type 15 has an invalid length. [ 55.751292][ T4518] __nla_validate_parse: 1 callbacks suppressed [ 55.751307][ T4518] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 55.784791][ T4516] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 55.814600][ T4518] syzkaller0: entered promiscuous mode [ 55.820103][ T4518] syzkaller0: entered allmulticast mode [ 55.842378][ T4516] EXT4-fs (loop3): orphan cleanup on readonly fs [ 55.872380][ T4516] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.320: Failed to acquire dquot type 1 [ 55.901319][ T4516] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.320: bg 0: block 40: padding at end of block bitmap is not set [ 55.989294][ T4516] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 56.012248][ T4516] EXT4-fs (loop3): 1 truncate cleaned up [ 56.163017][ T4516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.213683][ T4529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4529 comm=syz.4.325 [ 56.264637][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.912258][ T4557] netlink: 'syz.1.334': attribute type 15 has an invalid length. [ 56.920194][ T4557] netlink: 24 bytes leftover after parsing attributes in process `syz.1.334'. [ 56.952937][ T4557] syzkaller0: entered promiscuous mode [ 56.958642][ T4557] syzkaller0: entered allmulticast mode [ 57.144339][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.168456][ T4569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4569 comm=syz.4.341 [ 57.264509][ T4577] loop3: detected capacity change from 0 to 2048 [ 57.279282][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.305520][ T4565] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 57.313459][ T4571] bridge0: entered promiscuous mode [ 57.320720][ T4571] vlan2: entered promiscuous mode [ 57.330670][ T4565] sch_fq: defrate 4294967295 ignored. [ 57.343799][ T4577] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.356473][ T4577] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.373466][ T4582] loop2: detected capacity change from 0 to 764 [ 57.381331][ T4582] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 57.458398][ T4586] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.345: bg 0: block 345: padding at end of block bitmap is not set [ 57.473538][ T4586] EXT4-fs (loop3): Remounting filesystem read-only [ 57.642321][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.655017][ T4593] loop4: detected capacity change from 0 to 512 [ 57.671124][ T4593] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.693504][ T4593] EXT4-fs (loop4): 1 truncate cleaned up [ 57.699871][ T4593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.034910][ T4606] loop0: detected capacity change from 0 to 512 [ 58.067720][ T4606] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.092969][ T4606] EXT4-fs (loop0): 1 truncate cleaned up [ 58.102654][ T4606] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.129742][ T4609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4609 comm=syz.3.354 [ 58.170088][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.219602][ T4622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.358'. [ 58.294221][ T4624] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.360211][ T4624] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.428101][ T4624] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.465265][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.478508][ T4624] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.513401][ T4632] loop0: detected capacity change from 0 to 512 [ 58.532138][ T29] kauditd_printk_skb: 318 callbacks suppressed [ 58.532154][ T29] audit: type=1326 audit(1767916167.255:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 58.539109][ T4632] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 58.571773][ T29] audit: type=1326 audit(1767916167.255:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 58.605601][ T4632] EXT4-fs (loop0): 1 truncate cleaned up [ 58.611643][ T4632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.635642][ T29] audit: type=1326 audit(1767916167.355:1883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 58.660573][ T29] audit: type=1326 audit(1767916167.385:1884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4631 comm="syz.0.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 58.686478][ T3687] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.695183][ T3687] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.704926][ T3687] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.713389][ T3687] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.171937][ T29] audit: type=1400 audit(1767916167.885:1885): avc: denied { create } for pid=4650 comm="syz.3.367" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.356131][ T4659] loop1: detected capacity change from 0 to 512 [ 59.368756][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.382538][ T4659] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 59.405966][ T4659] EXT4-fs (loop1): 1 truncate cleaned up [ 59.419930][ T4662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4662 comm=syz.0.370 [ 59.421266][ T4659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.507076][ T4665] loop0: detected capacity change from 0 to 2048 [ 59.534949][ T29] audit: type=1326 audit(1767916168.255:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 59.559649][ T4665] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.573687][ T4665] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.609348][ T29] audit: type=1326 audit(1767916168.285:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 59.632616][ T29] audit: type=1326 audit(1767916168.285:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 59.656092][ T29] audit: type=1326 audit(1767916168.295:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 59.679590][ T29] audit: type=1326 audit(1767916168.295:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4664 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe962caf749 code=0x7ffc0000 [ 59.710449][ T4675] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.371: bg 0: block 345: padding at end of block bitmap is not set [ 59.725672][ T4675] EXT4-fs (loop0): Remounting filesystem read-only [ 59.854641][ T4680] 8021q: VLANs not supported on vcan0 [ 59.871600][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.871608][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.181993][ T4699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 60.225886][ T4701] loop0: detected capacity change from 0 to 2048 [ 60.255589][ T4701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.274982][ T4701] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.351562][ T4704] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.380: bg 0: block 345: padding at end of block bitmap is not set [ 60.367129][ T4704] EXT4-fs (loop0): Remounting filesystem read-only [ 60.485039][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.382'. [ 60.815809][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.827537][ T4712] random: crng reseeded on system resumption [ 60.836213][ T4712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 60.901537][ T4716] loop0: detected capacity change from 0 to 512 [ 60.910384][ T4716] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 60.923941][ T4716] EXT4-fs (loop0): 1 truncate cleaned up [ 60.935903][ T4716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.935971][ T4718] loop4: detected capacity change from 0 to 512 [ 60.963919][ T4722] 8021q: VLANs not supported on vcan0 [ 60.982851][ T4718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.026919][ T4718] EXT4-fs (loop4): 1 truncate cleaned up [ 61.034869][ T4729] syz.1.391 uses obsolete (PF_INET,SOCK_PACKET) [ 61.042852][ T4718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.186565][ T4733] loop3: detected capacity change from 0 to 128 [ 61.226366][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.288493][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.573509][ T4757] 8021q: VLANs not supported on vcan0 [ 61.632353][ T4733] syz.3.392: attempt to access beyond end of device [ 61.632353][ T4733] loop3: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 61.682104][ T4733] syz.3.392: attempt to access beyond end of device [ 61.682104][ T4733] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 61.788656][ T4733] syz.3.392: attempt to access beyond end of device [ 61.788656][ T4733] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 61.806694][ T4733] syz.3.392: attempt to access beyond end of device [ 61.806694][ T4733] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 61.824387][ T4733] syz.3.392: attempt to access beyond end of device [ 61.824387][ T4733] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 61.840225][ T4733] syz.3.392: attempt to access beyond end of device [ 61.840225][ T4733] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 61.854520][ T4733] syz.3.392: attempt to access beyond end of device [ 61.854520][ T4733] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 61.870605][ T4733] syz.3.392: attempt to access beyond end of device [ 61.870605][ T4733] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 61.885994][ T4733] syz.3.392: attempt to access beyond end of device [ 61.885994][ T4733] loop3: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 61.901308][ T4733] syz.3.392: attempt to access beyond end of device [ 61.901308][ T4733] loop3: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 61.972929][ T4773] loop4: detected capacity change from 0 to 512 [ 61.982803][ T4773] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 62.003109][ T4773] EXT4-fs (loop4): 1 truncate cleaned up [ 62.009651][ T4773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.307607][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.320324][ T4783] xt_CT: You must specify a L4 protocol and not use inversions on it [ 62.401087][ T4787] loop3: detected capacity change from 0 to 1024 [ 62.490956][ T4787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.690302][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.818238][ T4807] netlink: 'syz.1.420': attribute type 15 has an invalid length. [ 62.826057][ T4807] netlink: 24 bytes leftover after parsing attributes in process `syz.1.420'. [ 62.900415][ T4807] syzkaller0: entered promiscuous mode [ 62.905985][ T4807] syzkaller0: entered allmulticast mode [ 63.585417][ T4815] loop2: detected capacity change from 0 to 512 [ 63.592919][ T4815] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 63.609925][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 63.609941][ T29] audit: type=1400 audit(1767916172.325:2198): avc: denied { ioctl } for pid=4816 comm="syz.1.424" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9682 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 63.669318][ T4815] EXT4-fs (loop2): 1 truncate cleaned up [ 63.693596][ T4815] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.712341][ T3981] failed while handling packet from 1:16385 [ 63.758791][ T29] audit: type=1326 audit(1767916172.475:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 63.783184][ T4831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.816740][ T4831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.825238][ T29] audit: type=1326 audit(1767916172.475:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 63.847692][ T4831] netlink: 'syz.1.428': attribute type 2 has an invalid length. [ 63.848799][ T29] audit: type=1326 audit(1767916172.475:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 63.867052][ T4831] sch_fq: defrate 4294967295 ignored. [ 63.879666][ T29] audit: type=1326 audit(1767916172.475:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 63.908363][ T29] audit: type=1326 audit(1767916172.475:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 63.931953][ T29] audit: type=1326 audit(1767916172.485:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 63.955332][ T29] audit: type=1326 audit(1767916172.485:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 63.978696][ T29] audit: type=1326 audit(1767916172.485:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 64.002080][ T29] audit: type=1326 audit(1767916172.485:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4830 comm="syz.1.428" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53cbbaf749 code=0x7ffc0000 [ 64.018833][ T4841] loop0: detected capacity change from 0 to 2048 [ 64.066425][ T4841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.079478][ T4841] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.100172][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.157651][ T4839] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.429: bg 0: block 345: padding at end of block bitmap is not set [ 64.173047][ T4839] EXT4-fs (loop0): Remounting filesystem read-only [ 64.182750][ T4847] lo speed is unknown, defaulting to 1000 [ 64.188564][ T4847] lo speed is unknown, defaulting to 1000 [ 64.194548][ T4847] lo speed is unknown, defaulting to 1000 [ 64.200718][ T4847] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.210762][ T4847] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 64.222952][ T4847] lo speed is unknown, defaulting to 1000 [ 64.229250][ T4847] lo speed is unknown, defaulting to 1000 [ 64.235758][ T4847] lo speed is unknown, defaulting to 1000 [ 64.242287][ T4847] lo speed is unknown, defaulting to 1000 [ 64.248756][ T4847] lo speed is unknown, defaulting to 1000 [ 64.299185][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.359247][ T4852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 64.946709][ T4885] loop4: detected capacity change from 0 to 2048 [ 65.004149][ T4885] Alternate GPT is invalid, using primary GPT. [ 65.010597][ T4885] loop4: p2 p3 p7 [ 65.356999][ T4896] netlink: 'syz.1.448': attribute type 15 has an invalid length. [ 65.364882][ T4896] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'. [ 65.378189][ T4896] syzkaller0: entered promiscuous mode [ 65.383813][ T4896] syzkaller0: entered allmulticast mode [ 65.491479][ T4900] loop1: detected capacity change from 0 to 512 [ 65.493880][ T4902] loop2: detected capacity change from 0 to 512 [ 65.504645][ T4900] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.522727][ T4902] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.533587][ T4900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.546883][ T4900] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.558450][ T4902] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.591975][ T4902] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.633218][ T4910] loop3: detected capacity change from 0 to 512 [ 65.638414][ T4902] FAULT_INJECTION: forcing a failure. [ 65.638414][ T4902] name failslab, interval 1, probability 0, space 0, times 0 [ 65.652235][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: syz.2.451 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.652336][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.652393][ T4902] Call Trace: [ 65.652401][ T4902] [ 65.652410][ T4902] __dump_stack+0x1d/0x30 [ 65.652472][ T4902] dump_stack_lvl+0x95/0xd0 [ 65.652501][ T4902] dump_stack+0x15/0x1b [ 65.652529][ T4902] should_fail_ex+0x265/0x280 [ 65.652553][ T4902] should_failslab+0x8c/0xb0 [ 65.652609][ T4902] kmem_cache_alloc_noprof+0x69/0x4b0 [ 65.652637][ T4902] ? audit_log_start+0x342/0x720 [ 65.652682][ T4902] audit_log_start+0x342/0x720 [ 65.652706][ T4902] ? kstrtouint+0x76/0xc0 [ 65.652728][ T4902] audit_seccomp+0x48/0x100 [ 65.652757][ T4902] ? __seccomp_filter+0x832/0x1260 [ 65.652846][ T4902] __seccomp_filter+0x843/0x1260 [ 65.652940][ T4902] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 65.652997][ T4902] ? vfs_write+0x7e8/0x960 [ 65.653018][ T4902] ? __rcu_read_unlock+0x4f/0x70 [ 65.653037][ T4902] ? __fget_files+0x184/0x1c0 [ 65.653062][ T4902] __secure_computing+0x82/0x150 [ 65.653121][ T4902] syscall_trace_enter+0xcf/0x1e0 [ 65.653148][ T4902] do_syscall_64+0xa4/0x2b0 [ 65.653182][ T4902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.653269][ T4902] RIP: 0033:0x7fe962caf749 [ 65.653288][ T4902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.653317][ T4902] RSP: 002b:00007fe96170f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 65.653337][ T4902] RAX: ffffffffffffffda RBX: 00007fe962f05fa0 RCX: 00007fe962caf749 [ 65.653350][ T4902] RDX: 0500000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 65.653362][ T4902] RBP: 00007fe96170f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.653373][ T4902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.653384][ T4902] R13: 00007fe962f06038 R14: 00007fe962f05fa0 R15: 00007ffcef756eb8 [ 65.653458][ T4902] [ 65.654445][ T4910] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 65.863009][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.878092][ T4910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.898026][ T4910] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 65.922493][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.941004][ T3369] IPVS: starting estimator thread 0... [ 65.947951][ T4916] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 65.976804][ T4919] 8021q: VLANs not supported on vcan0 [ 66.015114][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.458'. [ 66.024931][ T4924] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 66.032565][ T4917] IPVS: using max 2448 ests per chain, 122400 per kthread [ 66.131307][ T4932] netlink: 'syz.1.460': attribute type 15 has an invalid length. [ 66.139163][ T4932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.460'. [ 66.183523][ T4940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 66.198331][ T4932] syzkaller0: entered promiscuous mode [ 66.204084][ T4932] syzkaller0: entered allmulticast mode [ 66.320246][ T4949] loop1: detected capacity change from 0 to 2048 [ 66.332974][ T4945] bridge_slave_0: left allmulticast mode [ 66.339050][ T4945] bridge_slave_0: left promiscuous mode [ 66.345222][ T4945] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.372160][ T4945] bridge_slave_1: left allmulticast mode [ 66.377864][ T4945] bridge_slave_1: left promiscuous mode [ 66.383667][ T4945] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.396744][ T3958] Alternate GPT is invalid, using primary GPT. [ 66.403436][ T3958] loop1: p2 p3 p7 [ 66.420864][ T4949] Alternate GPT is invalid, using primary GPT. [ 66.427462][ T4949] loop1: p2 p3 p7 [ 66.438062][ T4945] bond0: (slave bond_slave_0): Releasing backup interface [ 66.472298][ T4958] FAULT_INJECTION: forcing a failure. [ 66.472298][ T4958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.485772][ T4958] CPU: 0 UID: 0 PID: 4958 Comm: syz.3.468 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.485802][ T4958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.485818][ T4958] Call Trace: [ 66.485887][ T4958] [ 66.485894][ T4958] __dump_stack+0x1d/0x30 [ 66.485918][ T4958] dump_stack_lvl+0x95/0xd0 [ 66.485941][ T4958] dump_stack+0x15/0x1b [ 66.485958][ T4958] should_fail_ex+0x265/0x280 [ 66.486001][ T4958] should_fail+0xb/0x20 [ 66.486024][ T4958] should_fail_usercopy+0x1a/0x20 [ 66.486047][ T4958] _copy_to_user+0x20/0xa0 [ 66.486083][ T4958] simple_read_from_buffer+0xb5/0x130 [ 66.486102][ T4958] proc_fail_nth_read+0x10e/0x150 [ 66.486194][ T4958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.486225][ T4958] vfs_read+0x1a8/0x770 [ 66.486245][ T4958] ? __rcu_read_unlock+0x4f/0x70 [ 66.486267][ T4958] ? __fget_files+0x184/0x1c0 [ 66.486286][ T4958] ? mutex_lock+0x58/0x90 [ 66.486336][ T4958] ksys_read+0xda/0x1a0 [ 66.486418][ T4958] __x64_sys_read+0x40/0x50 [ 66.486434][ T4958] x64_sys_call+0x2889/0x3000 [ 66.486492][ T4958] do_syscall_64+0xca/0x2b0 [ 66.486660][ T4958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.486681][ T4958] RIP: 0033:0x7f9ef0d3e15c [ 66.486694][ T4958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.486736][ T4958] RSP: 002b:00007f9eef77e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.486833][ T4958] RAX: ffffffffffffffda RBX: 00007f9ef0f96090 RCX: 00007f9ef0d3e15c [ 66.486847][ T4958] RDX: 000000000000000f RSI: 00007f9eef77e0a0 RDI: 0000000000000004 [ 66.486862][ T4958] RBP: 00007f9eef77e090 R08: 0000000000000000 R09: 0000000000000000 [ 66.486875][ T4958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.486887][ T4958] R13: 00007f9ef0f96128 R14: 00007f9ef0f96090 R15: 00007ffdec1a8c28 [ 66.486907][ T4958] [ 66.487574][ T4945] bond0: (slave bond_slave_1): Releasing backup interface [ 66.717092][ T4945] team0: Port device team_slave_0 removed [ 66.726867][ T4945] team0: Port device team_slave_1 removed [ 66.734092][ T4945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.742042][ T4945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.751236][ T4945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.759098][ T4945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.771111][ T4945] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 66.787387][ T3369] lo speed is unknown, defaulting to 1000 [ 66.802131][ T4964] 8021q: VLANs not supported on vcan0 [ 66.856030][ T4971] pim6reg: entered allmulticast mode [ 66.863426][ T4971] pim6reg: left allmulticast mode [ 66.878268][ T4972] netlink: 8 bytes leftover after parsing attributes in process `syz.4.472'. [ 66.893322][ T4972] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.935309][ T4971] loop3: detected capacity change from 0 to 2048 [ 66.942122][ T4977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.472'. [ 66.964561][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.475'. [ 66.998619][ T4972] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.058930][ T4972] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.114967][ T4972] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.171220][ T3708] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.184318][ T3708] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.196039][ T3708] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.213993][ T3708] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.235348][ T5001] loop2: detected capacity change from 0 to 512 [ 67.242901][ T5001] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 67.255350][ T5001] EXT4-fs (loop2): 1 truncate cleaned up [ 67.317850][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 67.326925][ T5007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 67.452748][ T5019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.466400][ T5019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.605522][ T5029] loop1: detected capacity change from 0 to 128 [ 67.619873][ T5029] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.757230][ T5035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.766095][ T5035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.782985][ T5035] netlink: 'syz.1.494': attribute type 2 has an invalid length. [ 67.794142][ T5035] sch_fq: defrate 4294967295 ignored. [ 67.856587][ T5040] 8021q: VLANs not supported on vcan0 [ 67.994021][ T5052] lo speed is unknown, defaulting to 1000 [ 68.431525][ T5082] sch_fq: defrate 4294967295 ignored. [ 68.543378][ T5087] loop0: detected capacity change from 0 to 512 [ 68.553539][ T5090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 68.562623][ T5087] ext4: Unknown parameter 'appraise_type' [ 68.620161][ T5086] netlink: 'syz.0.514': attribute type 1 has an invalid length. [ 68.622831][ T29] kauditd_printk_skb: 534 callbacks suppressed [ 68.622872][ T29] audit: type=1326 audit(1767916177.335:2740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.657588][ T29] audit: type=1326 audit(1767916177.335:2741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.680972][ T29] audit: type=1326 audit(1767916177.335:2742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.704417][ T29] audit: type=1326 audit(1767916177.335:2743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.727705][ T29] audit: type=1326 audit(1767916177.335:2744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.751169][ T29] audit: type=1326 audit(1767916177.335:2745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.774557][ T29] audit: type=1326 audit(1767916177.335:2746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.800751][ T5098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.516'. [ 68.867073][ T29] audit: type=1326 audit(1767916177.355:2747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.890741][ T29] audit: type=1326 audit(1767916177.355:2748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 68.914096][ T29] audit: type=1326 audit(1767916177.575:2749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 69.162347][ T5117] loop0: detected capacity change from 0 to 512 [ 69.180411][ T5117] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.193634][ T5117] EXT4-fs (loop0): 1 truncate cleaned up [ 69.200308][ T5117] EXT4-fs mount: 7 callbacks suppressed [ 69.200320][ T5117] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.316709][ T5123] lo speed is unknown, defaulting to 1000 [ 69.602951][ T5122] netlink: 'syz.4.525': attribute type 6 has an invalid length. [ 69.823537][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.178018][ T5152] loop2: detected capacity change from 0 to 2048 [ 70.231577][ T5152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.252065][ T5152] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.265120][ T5156] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 70.348874][ T5162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.531: bg 0: block 345: padding at end of block bitmap is not set [ 70.367700][ T5162] EXT4-fs (loop2): Remounting filesystem read-only [ 70.486787][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.289474][ T5196] loop0: detected capacity change from 0 to 764 [ 71.354806][ T5201] Symlink component flag not implemented [ 71.360495][ T5201] Symlink component flag not implemented [ 71.372341][ T5201] Symlink component flag not implemented (129) [ 71.378609][ T5201] Symlink component flag not implemented (6) [ 71.647358][ T5209] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 71.659362][ T5209] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 71.668398][ T5209] team0: Failed to send options change via netlink (err -105) [ 71.675927][ T5209] team0: Port device dummy0 added [ 71.687590][ T5209] netlink: 'syz.3.554': attribute type 10 has an invalid length. [ 71.696043][ T5209] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 71.707251][ T5209] team0: Failed to send options change via netlink (err -105) [ 71.722337][ T5209] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 71.733449][ T5209] team0: Port device dummy0 removed [ 71.742605][ T5209] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.767606][ T5211] __nla_validate_parse: 1 callbacks suppressed [ 71.767626][ T5211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.554'. [ 71.909744][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 72.033567][ T5225] 8021q: VLANs not supported on vcan0 [ 72.388086][ T5237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.396650][ T5237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.407618][ T5237] netlink: 'syz.1.565': attribute type 2 has an invalid length. [ 72.422559][ T5237] sch_fq: defrate 4294967295 ignored. [ 72.428684][ T5239] netlink: 92 bytes leftover after parsing attributes in process `syz.3.566'. [ 72.756422][ T5250] loop0: detected capacity change from 0 to 128 [ 73.087208][ T5263] loop0: detected capacity change from 0 to 2048 [ 73.179258][ T5263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.237428][ T5270] loop1: detected capacity change from 0 to 512 [ 73.294752][ T5263] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.333525][ T5270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.357983][ T5270] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.437749][ T5270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.576'. [ 73.449444][ T5263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.573: bg 0: block 345: padding at end of block bitmap is not set [ 73.472088][ T5270] EXT4-fs error (device loop1): ext4_lookup:1785: inode #12: comm syz.1.576: iget: bad i_size value: 2533274857506816 [ 73.492476][ T5263] EXT4-fs (loop0): Remounting filesystem read-only [ 73.522170][ T5270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.634325][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.839150][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 73.839166][ T29] audit: type=1400 audit(1767916182.555:2926): avc: denied { read write } for pid=5292 comm="syz.0.585" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.870695][ T29] audit: type=1400 audit(1767916182.555:2927): avc: denied { open } for pid=5292 comm="syz.0.585" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.895622][ T29] audit: type=1400 audit(1767916182.565:2928): avc: denied { ioctl } for pid=5292 comm="syz.0.585" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 73.927618][ T5295] netlink: 200 bytes leftover after parsing attributes in process `syz.0.585'. [ 74.108682][ T5304] 8021q: VLANs not supported on vcan0 [ 74.241983][ T29] audit: type=1326 audit(1767916182.935:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 74.265466][ T29] audit: type=1326 audit(1767916182.935:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 74.289568][ T29] audit: type=1326 audit(1767916182.935:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 74.312899][ T29] audit: type=1326 audit(1767916182.935:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 74.336324][ T29] audit: type=1326 audit(1767916182.935:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 74.359531][ T29] audit: type=1326 audit(1767916182.935:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 74.383010][ T29] audit: type=1326 audit(1767916182.935:2935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5305 comm="syz.0.589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fef01f749 code=0x7ffc0000 [ 74.433127][ T5309] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 74.506782][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 74.863515][ T5335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.872522][ T5335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.882195][ T5335] netlink: 'syz.3.600': attribute type 2 has an invalid length. [ 74.892486][ T5335] sch_fq: defrate 4294967295 ignored. [ 75.584793][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.604'. [ 75.735221][ T5357] netlink: 'syz.4.607': attribute type 15 has an invalid length. [ 75.743639][ T5357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 75.929603][ T5374] FAULT_INJECTION: forcing a failure. [ 75.929603][ T5374] name failslab, interval 1, probability 0, space 0, times 0 [ 75.942308][ T5374] CPU: 1 UID: 0 PID: 5374 Comm: syz.2.615 Not tainted syzkaller #0 PREEMPT(voluntary) [ 75.942342][ T5374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.942400][ T5374] Call Trace: [ 75.942406][ T5374] [ 75.942413][ T5374] __dump_stack+0x1d/0x30 [ 75.942435][ T5374] dump_stack_lvl+0x95/0xd0 [ 75.942454][ T5374] dump_stack+0x15/0x1b [ 75.942474][ T5374] should_fail_ex+0x265/0x280 [ 75.942556][ T5374] should_failslab+0x8c/0xb0 [ 75.942577][ T5374] __kmalloc_noprof+0xb9/0x5a0 [ 75.942602][ T5374] ? tls_get_rec+0x75/0x410 [ 75.942676][ T5374] ? _raw_spin_lock_bh+0x56/0xb0 [ 75.942697][ T5374] tls_get_rec+0x75/0x410 [ 75.942723][ T5374] tls_sw_sendmsg+0x346/0x1510 [ 75.942747][ T5374] ? __rcu_read_unlock+0x4f/0x70 [ 75.942767][ T5374] ? avc_has_perm+0xf7/0x180 [ 75.942817][ T5374] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 75.942847][ T5374] inet6_sendmsg+0xc5/0xd0 [ 75.942878][ T5374] __sock_sendmsg+0x8b/0x180 [ 75.942922][ T5374] sock_write_iter+0x1a7/0x1f0 [ 75.942953][ T5374] do_iter_readv_writev+0x4a1/0x540 [ 75.942977][ T5374] vfs_writev+0x2df/0x8b0 [ 75.943033][ T5374] do_writev+0xe7/0x210 [ 75.943074][ T5374] __x64_sys_writev+0x45/0x50 [ 75.943092][ T5374] x64_sys_call+0x1ba5/0x3000 [ 75.943117][ T5374] do_syscall_64+0xca/0x2b0 [ 75.943171][ T5374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.943196][ T5374] RIP: 0033:0x7fe962caf749 [ 75.943209][ T5374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.943225][ T5374] RSP: 002b:00007fe96170f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 75.943247][ T5374] RAX: ffffffffffffffda RBX: 00007fe962f05fa0 RCX: 00007fe962caf749 [ 75.943289][ T5374] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 75.943300][ T5374] RBP: 00007fe96170f090 R08: 0000000000000000 R09: 0000000000000000 [ 75.943310][ T5374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.943327][ T5374] R13: 00007fe962f06038 R14: 00007fe962f05fa0 R15: 00007ffcef756eb8 [ 75.943343][ T5374] [ 76.239048][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.616'. [ 76.828068][ T5407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.624'. [ 77.586499][ T4654] ================================================================== [ 77.594643][ T4654] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 77.601381][ T4654] [ 77.603724][ T4654] write to 0xffff8881076a4790 of 8 bytes by task 3007 on cpu 1: [ 77.611364][ T4654] __dentry_kill+0x142/0x4b0 [ 77.615983][ T4654] finish_dput+0x2b/0x200 [ 77.620340][ T4654] dput+0x52/0x60 [ 77.623989][ T4654] lookup_one_qstr_excl+0x15a/0x250 [ 77.629203][ T4654] do_unlinkat+0x148/0x4b0 [ 77.633625][ T4654] __x64_sys_unlink+0x2e/0x40 [ 77.638311][ T4654] x64_sys_call+0x2f48/0x3000 [ 77.643001][ T4654] do_syscall_64+0xca/0x2b0 [ 77.647526][ T4654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.653441][ T4654] [ 77.655775][ T4654] read to 0xffff8881076a4790 of 8 bytes by task 4654 on cpu 0: [ 77.663324][ T4654] fast_dput+0x5f/0x2c0 [ 77.667506][ T4654] dput+0x24/0x60 [ 77.671148][ T4654] do_unlinkat+0x202/0x4b0 [ 77.675570][ T4654] __x64_sys_unlink+0x2e/0x40 [ 77.680255][ T4654] x64_sys_call+0x2f48/0x3000 [ 77.684945][ T4654] do_syscall_64+0xca/0x2b0 [ 77.689472][ T4654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.695382][ T4654] [ 77.697707][ T4654] value changed: 0xffff8882378db7f0 -> 0x0000000000000000 [ 77.704820][ T4654] [ 77.707156][ T4654] Reported by Kernel Concurrency Sanitizer on: [ 77.713312][ T4654] CPU: 0 UID: 0 PID: 4654 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.722604][ T4654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.732670][ T4654] ================================================================== [ 77.743728][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 77.752755][ T5420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.629'. [ 77.761686][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.629'. [ 77.786144][ T5428] netlink: 32 bytes leftover after parsing attributes in process `syz.4.629'. [ 77.795443][ T5420] netlink: 32 bytes leftover after parsing attributes in process `syz.4.629'. [ 77.814049][ T5430] sch_fq: defrate 4294967295 ignored.