last executing test programs: 1m36.369455576s ago: executing program 4 (id=526): setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0xac2, 0x50, 0x5}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = getpid() kcmp(r3, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) utimensat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={{0x0, 0xea60}, {r4, r5/1000+60000}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r8 = socket$pppoe(0x18, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close_range(r6, 0xffffffffffffffff, 0x0) 1m36.243604562s ago: executing program 4 (id=527): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xffffffff}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x42, 0xfffffffffffffdf6, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x4}, 0x48) 1m36.184135749s ago: executing program 4 (id=528): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff52ffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1m36.091472251s ago: executing program 4 (id=529): r0 = getuid() syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000480)={[{@cruft}, {@dmode={'dmode', 0x3d, 0x2}}, {@session={'session', 0x3d, 0xd}}, {@unhide}, {@map_acorn}, {@unhide}, {@mode={'mode', 0x3d, 0x9}}, {@dmode={'dmode', 0x3d, 0x7}}, {@dmode={'dmode', 0x3d, 0x2}}, {@nocompress}, {@uid={'uid', 0x3d, r0}}, {@hide}, {@utf8}, {@uid={'uid', 0x3d, r0}}]}, 0x81, 0xa4f, &(0x7f0000000a80)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x10001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000e80)={@empty, @dev, @void, {@generic={0x88f5}}}, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone3(&(0x7f0000000080)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_pidfd_open(r4, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev}, &(0x7f0000000280)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', r5, 0x29, 0xea, 0xe6, 0x10001, 0x0, @rand_addr=' \x01\x00', @mcast2, 0x1, 0x40, 0x0, 0x10001}}) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x12571144d43d7ee5, 0x10008095, 0x0, 0x6d00) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000140012800a000100767863616e0004000000028008001c"], 0x3c}}, 0x0) socket$netlink(0x10, 0x3, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) 1m35.936440661s ago: executing program 4 (id=531): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x26020480) r0 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) lstat(0x0, 0x0) getitimer(0x2, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x19, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18fdff200000000000000000000000009502000800050000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) inotify_init1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000480)='objagg_obj_put\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x25, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m35.764121403s ago: executing program 4 (id=536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91107e000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000064000000070000000c0000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x9, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {0x0, 0x2000}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) fcntl$dupfd(r5, 0x406, r0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) 1m35.754040935s ago: executing program 32 (id=536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91107e000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000006000000000000000064000000070000000c0000000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000680)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3a}, @in6=@mcast2, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x1f}, {0x0, 0x0, 0x0, 0xfffffff800000003, 0x9, 0x0, 0xffffffffffffffd}, {0x0, 0x4}, {0x0, 0x2000}, 0x0, 0x0, 0xa, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) fcntl$dupfd(r5, 0x406, r0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r3, 0x0, 0x0) 3.355901639s ago: executing program 5 (id=2617): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0x2}, 0x18) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) (fail_nth: 2) 3.091149663s ago: executing program 5 (id=2619): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(0x0, &(0x7f0000000040)='./file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2.727027279s ago: executing program 5 (id=2628): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@nojournal_checksum}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0x880d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x6e42, 0x7ff, 0x4, 0x4, 0xb, 0x2, 0x3fe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x26d99000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000280)={0x6, @remote, 0x4c23, 0x0, 'wrr\x00', 0x17, 0x8, 0x4002b}, 0x2c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 2.72650846s ago: executing program 5 (id=2629): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r2, 0x0, 0xbf5, 0x2000402) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000000000, 0x1000000000}, 0x10208, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x4e20, 0x3ffe, @loopback, 0x8}, 0x1c) syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.941079621s ago: executing program 5 (id=2633): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100402, 0x3, 0xfffffffc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, r4, 0x800, 0x70bd2b, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}}, 0x40) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) r6 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@local, 0x78, r7}) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x40, 0xff, 0x0, 0xfff}]}) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x8936, &(0x7f0000000000)) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200200, 0x0, 0x0, 0xffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r8, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0x158, 0x11, 0x148, 0x0, 0x0, 0x230, 0x2a8, 0x2a8, 0x230, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @multicast1, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x9, 0x5, 0x1, 'netbios-ns\x00', 'syz0\x00', {0x4a7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 1.503537616s ago: executing program 5 (id=2637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400000000000000000000010c0002800500f300000000004400018014000180080001006401010108000200ac1414182c00018014000300fc02000000000000000000000000000114000400000000000000000000000000000000000800074000000001"], 0x9c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="9c0000000001050500000700000000000a000000380002802c00018014000300ff01000000000000000000000000000114000400ff0200000020000000000000000000010600034000030000440001800c60008005000100000000002c00018014000300fe8000000000000000000000000000bb14000400200100000000000000000000010600034000010000080008400000004004000d80000000d608ac38bf79a1b12acd268c0b3f16ac861b439253f2a7f45d98376eb34b95488a02279ba045ce6faf3dc3a1b8cdcacf73e95ab0643d210617cb983aafe5d1b4c798518791af3ef4b363e3b729bb869d79cff6883042f1b06ca21d5c9eb85a85e4bf1064eb2c534a2c3ee3fdb9240aa27bcbb44f307b59b6d0fda561f5880c5dbdb6581097637846a077db4f358e962a796352edaee9bc6eab16ccc05abd648d8b1a894dbbdf141246c9b1efd760c47f6695b46ce996c5e9f1010c1a7674c1b93cac889551e8b3ce8424365df8a0461f9af1d6deb41b0e03e99921f3df5513dda673b4653bef86973c333f07"], 0x9c}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2000000007, 0x1f051b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x20000ffffffff}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) open(&(0x7f0000000080)='.\x00', 0x518282, 0x78e22799f4a46e8e) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000300)={[{@barrier}, {@debug}, {@lazytime}]}, 0x1, 0x5b3, &(0x7f0000001400)="$eJzs3V9oJHcdAPDvbnavNnd6rdTqVdtLrbZn/2wuSTm8WpB71PZK7Z8nT86Q7OWObLIxu8EmtZBShAqehOqTPikIKj6cCAriQ0Gsj4JvSqlgEeUgFEtR9NSVmd099swmuTR/hst8PjDJzG9m8/vOfvnOzvxudi6A3BpKfhQiDkXEaxFxuL147QZD7V8rY5fOJ1MhWq2n3yqk270wdul8d9Pu6w4mP4oRH0p+/TriYHltv43FpenxWq0631kebs7MDTcWlx66MDM+VZ2qzo6OjZw4Pnpi5MTJHdvXHz7/ymffeP7xKxdXB7//+pGj/0jiPdRZ17sfO2UohjrvSTk+2ruiEPHpne4sIwMRUYqID2QdCFt25ndff7abv3Ja/4djIF2KGBw78/bhuPho1jECu6eVWm/tQAvYzwqRdQRANrqf9Mn1b3faq3OP6f1yEXwDWz3VvgB8oTO2s3I1/6UodrYp79L1/dG/RgxF8/5Ln7n7q8kUuzQOw/qWX4x0oG5t/RfSsbFbOtvdExHHIuJjEfHxiLg3Iu7bZt/PfCHJ/x+/2dsm/3vrevP/iYioRMT9EfFARDwYEQ9ts+/bTyf5P/jF3jb5z487Ppd1BGTpty9nHQHp8f94qdTv+F/c5t++e5P1rfTfFZff7G1z/M+Pp57OOgKy9MSJrCMgS995K+sIePVU+2Ju7ed/MW7v2S6Z/2D7UjGOJOfuEfHhiPhIRNwZEXdFxNHu/UTX6SuPJdtXqr1taz//i5e3s39sbPVUxKM993at9OS/45aBztJ70/GAcuHchVr1eES8Lx0TKt+ULI9s0MfXln/1WL/2H9+Z5P9TT3TH/5Ip6b87FtiJ43LppmtfNzneHN/uftO2+mLEHaV++S907gRq39fXiojhd9nHS8d+8pt+7Z98Ksn/vQ9unH92U+u77XHcfvnvKmx8f+ZwejwY7h4V1nopbrvYr/3JK0n+3/yD/Gcnqf/BjfOfHv+v3q/b2HofpZXL3+jbPpPk/8+/fDfH/wOFZ9IAD3TanhtvNudHIg4UHl/bPrr1mPer7vvRfb+S/B+7p//n//s7r0ne0KSy/xMR/42If0bEvyLiSkT8OyL+FhFvb9DnL1555Of92seeTfL/l9fUf3aS/E9uUv+Fa+p/6zPfvuvkl/v1/YPvJfkfrGxe/w+nwRzrtDj/29z1JijrOAEAAAAAAADYGcX0GXiFYuXqfLFYqbSf4XdbDBZr9UbzgXP1hdnJ6HwftFzs3ul1uOd+0JHOd0W7y6P/tzwWEbdGxMsDN6fLlYl6bTLrnYecOhTxxk+/NHHg4Dr1n3h9IOsogd2Q1P+5bw0sJ/PvqHPIlaT+f/TOTPq9LPUP+aL+Ib/UP+SX+of8Uv+QX+of8kv9Q36pf8gv9Q/51Vv/QD49efp0MrW6z/2crU9dmD4/d3L0eGVmYaIyUZ+fq0zV61PpN3ZmNv97tXp9buThWHhuuFltNIcbi0tnZ+oLs82z6XOjz1bLe7BPwOb+/qfP/+zWo6/+vhARy4/cnE7R8+xstQr7m0t/yK9S1gEAmXGODxQ2Wf+e9Vac2flYgL2x3f/jH7hx3XfE+D/klfF/yC/j/5BfzvEB4/+QP8b/Ib+q843FpenxWm3NTNaRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADkU2NxaXq8VqvOmzFjJncz/wsAAP//ylZHUg==") socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000090000000400000002"], 0x50) 1.461500772s ago: executing program 2 (id=2638): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.262591368s ago: executing program 2 (id=2640): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) inotify_init1(0x800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 1.260876518s ago: executing program 2 (id=2642): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="008000000000181100", @ANYRES16=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rpcgss_upcall_msg\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket(0x10, 0x3, 0x7f) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) ustat(0x8000000000000001, &(0x7f0000000000)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x16) dup(r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semget(0x0, 0x3, 0x443) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x2000, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) fchown(0xffffffffffffffff, 0x0, 0xee01) 1.213049544s ago: executing program 2 (id=2643): r0 = io_uring_setup(0x2e86, &(0x7f0000000100)={0x0, 0x3e0, 0x800, 0xfffffffc, 0x8a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) semget$private(0x0, 0x7, 0x389) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf944, 0x40002) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000001c0)={0x67, 0x12, 0x3f8, 0x7, 0x0, 0x5, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r6}, 0x10) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r7, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r7, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) close(r0) 346.527056ms ago: executing program 2 (id=2655): io_setup(0x2004, &(0x7f0000000680)) 303.963551ms ago: executing program 0 (id=2658): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1802, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)}], 0x1}, 0x4008084) 280.492914ms ago: executing program 3 (id=2660): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@nojournal_checksum}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0x880d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x6e42, 0x7ff, 0x4, 0x4, 0xb, 0x2, 0x3fe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x26d99000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 280.141224ms ago: executing program 2 (id=2661): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000ff00000000"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r3}}], 0x20, 0x2400e044}, 0x0) 255.064377ms ago: executing program 0 (id=2662): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)={[{@barrier}, {}, {@noquota}, {@mblk_io_submit}, {@auto_da_alloc}, {@errors_remount}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") cachestat(r0, &(0x7f0000000080)={0x40, 0x5}, &(0x7f0000000100), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xc00) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x101980, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x101980, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) statx(r0, &(0x7f0000000280)='./file1\x00', 0x0, 0x7ff, &(0x7f00000002c0)) (async) statx(r0, &(0x7f0000000280)='./file1\x00', 0x0, 0x7ff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) (async) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x5) fcntl$lock(r2, 0x7, &(0x7f0000000500)={0x1, 0x2, 0x5, 0x6, r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000440)={0x0, 0x0}) syz_open_procfs(r5, &(0x7f00000004c0)='oom_score\x00') lsetxattr$security_capability(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000240), &(0x7f00000003c0)=@v3={0x3000000, [{0x0, 0x2}, {0x4, 0x80}], r3}, 0x18, 0x3) 244.420039ms ago: executing program 3 (id=2663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="2d2a180001000000381ad848a3b025ac06698c902e1ca8fb3a03916490520921bc63d2f04c15d632b4e01fd261"], &(0x7f0000000100)='GPL\x00', 0x400, 0x23, &(0x7f0000000140)=""/35, 0x40f00, 0x17, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0xb, 0x6493, 0x9}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000280)=[r0, r1], &(0x7f0000000300)=[{0x4, 0x5, 0x8, 0x1}, {0x0, 0x1, 0xe, 0x2}, {0x1, 0x1, 0x3, 0x300d25a83939a302}, {0x1, 0x5, 0x10, 0x7}], 0x10, 0xf1b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x20}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7991}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 209.064783ms ago: executing program 0 (id=2664): socket(0x11, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) socket$inet(0xa, 0x6, 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x81ff, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c00028008000200feffffff140003007866726d300000000000000000000000a8074024ecb9d67dff93c3f9d9404dc911656e21a2ab84abc085030020741f35222255c2e7e307e93f41d22491cc40261a6db01e1599c303bda6262bb1296ae7c95e"], 0x50}}, 0x0) (async) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="1800f5ff031401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cb88b935d785f", @ANYRESHEX=r4, @ANYBLOB="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", @ANYBLOB="39037f1822e4aa428c8db833f7ab218b94a3df73468c6058d44731910aea13286b6238260857792a4098a382a96081059a96884c9492a74de5b44ec5c93f7121df4677e4d166b0ec5f4dcccb5ac4786f23b89e7e3d4881235a5c4e08b059c70b29df46962f2e2bcba28b5f01d487aecd298f9b45d883ca8fe8e5ec6942173596f7b6e6f6cbe543e141b1481380990b428ff4a5534e0e0155ad2eb5d5d2604cba612e4729045877aad26254c2", @ANYRESOCT=r8, @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) (async, rerun: 64) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 64) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'netdevsim0\x00', @random="f60f63971a2b"}) (async) dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x3000, &(0x7f0000000f80)=ANY=[]) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010030bd7000ffdbdf250900020073797a30000000000800410073697700140033007767310000000000f4ffff0600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100000700002c0000", @ANYRES32=r7, @ANYRES64=r5], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r6], 0x0, 0x31, 0x0, 0x1}, 0x28) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) (async) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) (async, rerun: 32) close(r13) (rerun: 32) 208.776603ms ago: executing program 3 (id=2665): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="008000000000181100", @ANYRES16=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rpcgss_upcall_msg\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket(0x10, 0x3, 0x7f) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) ustat(0x8000000000000001, &(0x7f0000000000)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x16) dup(r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semget(0x0, 0x3, 0x443) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) 208.142933ms ago: executing program 1 (id=2666): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000090000000000000000030000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2, &(0x7f0000000540)={0x3b, 0xea, 0x80}) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x2) fcntl$notify(r0, 0x402, 0x18) socket$qrtr(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000b76e7b082e06cc3f000061108100000041539500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x80) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) 181.339316ms ago: executing program 3 (id=2667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r3, 0x0, 0x4804}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc800}, 0x0) 180.917206ms ago: executing program 3 (id=2668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = fsmount(r1, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f0000000080)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff52ffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x7, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x18) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 164.001749ms ago: executing program 1 (id=2669): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000005000000000000000000fa000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRES64, @ANYRES64, @ANYRES32, @ANYRES16=r2, @ANYRESHEX=r4, @ANYRES64=r4, @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000030605000000000000000800000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 163.499469ms ago: executing program 3 (id=2670): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x1, 0x7fe2, 0x1, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x14, 0x13, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x404c041}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 151.38267ms ago: executing program 1 (id=2671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4094}, 0x24000004) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40ae, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x61, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d2c00128014000180090001006c6173740000000004000280140001800c000100636f756e746572000400028008000340000001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 119.255825ms ago: executing program 1 (id=2672): io_setup(0x2004, &(0x7f0000000680)) 81.257629ms ago: executing program 0 (id=2673): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000540)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@nojournal_checksum}, {@data_err_ignore}, {@user_xattr}, {@nombcache}, {@abort}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x3, 0x0, 0x4000000000, 0x880d4, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x6e42, 0x7ff, 0x4, 0x4, 0xb, 0x2, 0x3fe, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x26d99000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 80.846429ms ago: executing program 0 (id=2674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0x7}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000380)={@local, @remote, @void, {@llc={0x8847, {@snap={0x0, 0x1, "c8", "118190", 0x60}}}}}, 0x0) (fail_nth: 1) 50.171103ms ago: executing program 1 (id=2675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYRES32, @ANYRES32=0x0, @ANYRES16, @ANYRESOCT=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) socket$l2tp(0x2, 0x2, 0x73) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x10000001}, 0x18) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x0, {0xa, 0x4e21, 0x2ca, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}}, 0x3a) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x8}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0xb, 0x1ff, 0x21, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7, 0x7, 0xa, 0x8}}) 369.149µs ago: executing program 0 (id=2676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020005000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000200)='GPL\x00', 0x589, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsetxattr$security_selinux(0x0, &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:mnt_t:s0\x00', 0x1b, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x3}, {0xd, 0xc}, {0xf, 0xd}}, [@TCA_RATE={0x6, 0x5, {0xa, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x8000, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000440) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010bd28750000000000000109022400010000000009040000010300000009210000fc0122050009058103000217000071b10eda2e53"], 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000048000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000fefffffffffffffffdffffffffffffff000000000000000000000000000000000900"/112], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) poll(&(0x7f0000000200)=[{r6, 0x124}], 0x1, 0x80) ppoll(&(0x7f0000000180)=[{r5, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="b88c28a39000e9ac2d", @ANYRESOCT=r3], 0xb8}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r7, 0xffffffffffffffff, 0x31, 0x0, @val=@tracing={0xffffffffffffffff}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0x57, 0xfffffffffffffea3, &(0x7f00000004c0)="ac039725c141f806b1b790efc135e13a8397ed3fb1d53bc1ce7b5491f71ad8643ec981ca95d3b4b94f68767098ea24a4f80bfb84e3483f52c9140ff5d2cd5010e905f81cde09c3215e4d75797a00d0f0d124ba0b2fa133", &(0x7f0000000000), 0x0, 0x0, 0x2}, 0x50) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000200)=0x20) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}, 0x1, 0x0, 0x0, 0x2004c810}, 0x24000080) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xa007ca, &(0x7f00000002c0)={[{@nojournal_checksum}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x496, &(0x7f0000000840)="$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") 0s ago: executing program 1 (id=2677): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, &(0x7f0000000080)=""/43, 0x2b) getdents(r0, 0xfffffffffffffffd, 0xbb) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESDEC, @ANYRESOCT=r0], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="008000000000181100", @ANYRES16=r1, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='rpcgss_upcall_msg\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) socket(0x10, 0x3, 0x7f) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x18) ustat(0x8000000000000001, &(0x7f0000000000)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x16) dup(r2) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0xa000200) semget$private(0x0, 0x4000, 0x0) semget(0x0, 0x3, 0x443) semtimedop(0x0, &(0x7f0000000040)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) fchown(0xffffffffffffffff, 0x0, 0xee01) kernel console output (not intermixed with test programs): netlink: 'syz.2.1432': attribute type 8 has an invalid length. [ 106.003508][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 106.045200][ T7499] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 106.071730][ T7501] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 106.475633][ T7521] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 106.478464][ T7516] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 106.559403][ T7526] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1443'. [ 106.569014][ T7526] hsr_slave_0: left promiscuous mode [ 106.576379][ T7526] hsr_slave_1: left promiscuous mode [ 106.643669][ T7536] xt_hashlimit: invalid interval [ 106.937181][ T7553] program syz.5.1451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.085099][ T7563] siw: device registration error -23 [ 107.162229][ T7575] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 107.167043][ T7577] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 107.199215][ T7581] siw: device registration error -23 [ 107.226249][ T7585] ..@ÿ: renamed from bond_slave_0 (while UP) [ 107.281056][ T7596] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1468'. [ 107.290522][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'. [ 107.404458][ T7598] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1468'. [ 107.413645][ T7598] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1468'. [ 107.485891][ T7596] loop5: detected capacity change from 0 to 512 [ 107.547219][ T61] Bluetooth: hci0: Frame reassembly failed (-84) [ 107.679078][ T7623] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1475'. [ 107.701972][ T7627] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7627 comm=syz.1.1481 [ 108.085071][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 108.085201][ T29] audit: type=1326 audit(1768593855.866:21476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.126443][ T29] audit: type=1326 audit(1768593855.906:21477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.130417][ T7670] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1500'. [ 108.150060][ T29] audit: type=1326 audit(1768593855.906:21478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.150137][ T29] audit: type=1326 audit(1768593855.906:21479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.150165][ T29] audit: type=1326 audit(1768593855.906:21480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.150193][ T29] audit: type=1326 audit(1768593855.906:21481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.150221][ T29] audit: type=1326 audit(1768593855.906:21482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.150248][ T29] audit: type=1326 audit(1768593855.906:21483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.164052][ T29] audit: type=1326 audit(1768593855.906:21484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.164122][ T29] audit: type=1326 audit(1768593855.906:21485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7645 comm="syz.0.1490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fc7b45b2005 code=0x7ffc0000 [ 108.499196][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1509'. [ 108.792046][ T7732] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 109.370301][ T7767] netlink: 'syz.2.1526': attribute type 10 has an invalid length. [ 109.380373][ T7765] can0: slcan on ttyS3. [ 109.389433][ T7767] bond0: (slave dummy0): Releasing backup interface [ 109.411674][ T7767] team0: Device dummy0 is of different type [ 109.421312][ T7774] netlink: 'syz.2.1526': attribute type 10 has an invalid length. [ 109.441139][ T7771] netlink: 'syz.3.1527': attribute type 15 has an invalid length. [ 109.441828][ T7774] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.463110][ T58] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.472466][ T7771] netlink: 'syz.3.1527': attribute type 15 has an invalid length. [ 109.480644][ T58] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.507232][ T58] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.530726][ T58] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 109.550132][ T4444] Bluetooth: hci0: command 0x1003 tx timeout [ 109.556310][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.598396][ T7786] net_ratelimit: 10 callbacks suppressed [ 109.598411][ T7786] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 109.674011][ T7797] netlink: 'syz.3.1536': attribute type 3 has an invalid length. [ 109.727659][ T7804] random: crng reseeded on system resumption [ 109.750225][ T7765] can0 (unregistered): slcan off ttyS3. [ 109.769706][ T7804] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 109.788716][ T7804] hsr0: entered allmulticast mode [ 109.793839][ T7804] hsr_slave_0: entered allmulticast mode [ 109.799663][ T7804] hsr_slave_1: entered allmulticast mode [ 109.810289][ T7804] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 109.821609][ T7804] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 109.834877][ T7804] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 109.846223][ T7815] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 109.888365][ T7820] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.118593][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.134995][ T7839] FAULT_INJECTION: forcing a failure. [ 110.134995][ T7839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.148162][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.0.1552 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.148188][ T7839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 110.148200][ T7839] Call Trace: [ 110.148206][ T7839] [ 110.148213][ T7839] __dump_stack+0x1d/0x30 [ 110.148270][ T7839] dump_stack_lvl+0x95/0xd0 [ 110.148332][ T7839] dump_stack+0x15/0x1b [ 110.148350][ T7839] should_fail_ex+0x265/0x280 [ 110.148375][ T7839] should_fail+0xb/0x20 [ 110.148472][ T7839] should_fail_usercopy+0x1a/0x20 [ 110.148495][ T7839] strncpy_from_user+0x27/0x260 [ 110.148526][ T7839] getname_flags+0xae/0x3b0 [ 110.148553][ T7839] __se_sys_acct+0x6a/0x520 [ 110.148662][ T7839] __x64_sys_acct+0x1f/0x30 [ 110.148693][ T7839] x64_sys_call+0x2923/0x3000 [ 110.148832][ T7839] do_syscall_64+0xca/0x2b0 [ 110.148850][ T7839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.148897][ T7839] RIP: 0033:0x7fc7b457f749 [ 110.148910][ T7839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.148926][ T7839] RSP: 002b:00007fc7b2fdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 110.148943][ T7839] RAX: ffffffffffffffda RBX: 00007fc7b47d5fa0 RCX: 00007fc7b457f749 [ 110.148954][ T7839] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 110.148998][ T7839] RBP: 00007fc7b2fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 110.149064][ T7839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.149120][ T7839] R13: 00007fc7b47d6038 R14: 00007fc7b47d5fa0 R15: 00007ffe4291fd98 [ 110.149135][ T7839] [ 110.340583][ T7844] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7844 comm=syz.0.1553 [ 110.459735][ T7852] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 110.483313][ T7854] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 110.561597][ T7856] Cannot find add_set index 0 as target [ 110.750059][ T7754] Bluetooth: hci1: Frame reassembly failed (-84) [ 110.951049][ T7870] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 111.442579][ T7904] tipc: Started in network mode [ 111.447504][ T7904] tipc: Node identity 925306ad525f, cluster identity 4711 [ 111.454839][ T7904] tipc: Enabled bearer , priority 0 [ 111.464691][ T7904] syzkaller0: entered promiscuous mode [ 111.470236][ T7904] syzkaller0: entered allmulticast mode [ 111.493153][ T7908] siw: device registration error -23 [ 111.568153][ T7911] wg1 speed is unknown, defaulting to 1000 [ 111.575808][ T7911] lo speed is unknown, defaulting to 1000 [ 111.586765][ T7913] netlink: 'syz.2.1575': attribute type 10 has an invalid length. [ 111.600470][ T7913] bond0: (slave dummy0): Releasing backup interface [ 111.617899][ T7913] team0: Device dummy0 is of different type [ 111.634639][ T7913] netlink: 'syz.2.1575': attribute type 10 has an invalid length. [ 111.645570][ T7913] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.670451][ T7915] __nla_validate_parse: 8 callbacks suppressed [ 111.670467][ T7915] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1576'. [ 111.709981][ T7915] netlink: 'syz.3.1576': attribute type 30 has an invalid length. [ 111.778010][ T7929] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 111.790221][ T7903] tipc: Resetting bearer [ 111.801836][ T7903] tipc: Disabling bearer [ 111.854064][ T7934] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 112.137655][ T7948] siw: device registration error -23 [ 112.190907][ T4867] Bluetooth: hci0: command 0x1003 tx timeout [ 112.207984][ T7950] wg1 speed is unknown, defaulting to 1000 [ 112.216020][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.237912][ T7950] lo speed is unknown, defaulting to 1000 [ 112.371460][ T7956] netlink: 'syz.2.1587': attribute type 12 has an invalid length. [ 112.466096][ T7965] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 112.528118][ T7959] wg1 speed is unknown, defaulting to 1000 [ 112.541783][ T7959] lo speed is unknown, defaulting to 1000 [ 112.742386][ T7976] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 112.752844][ T7976] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.764414][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1597'. [ 112.810314][ T7984] wg1 speed is unknown, defaulting to 1000 [ 112.816601][ T7984] lo speed is unknown, defaulting to 1000 [ 112.824927][ T7976] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 112.829662][ T4444] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 112.834816][ T7976] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.840952][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 112.913807][ T7976] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 112.923614][ T7976] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.996178][ T7995] loop5: detected capacity change from 0 to 1024 [ 113.006963][ T7995] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.024097][ T7995] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 113.036519][ T7976] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 113.046364][ T7976] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.053745][ T8001] loop5: detected capacity change from 0 to 1024 [ 113.095078][ T29] kauditd_printk_skb: 997 callbacks suppressed [ 113.095094][ T29] audit: type=1400 audit(1768594116.880:22483): avc: denied { ioctl } for pid=8000 comm="syz.5.1604" path="socket:[20572]" dev="sockfs" ino=20572 ioctlcmd=0x5416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 113.139583][ T7760] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.147857][ T7760] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.160991][ T7760] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.169204][ T7760] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.185747][ T7760] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.194074][ T7760] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.229697][ T7760] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 113.237986][ T7760] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.426109][ T8073] can0: slcan on ttyS3. [ 113.440811][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1609'. [ 113.465365][ T8073] netlink: 'syz.5.1608': attribute type 1 has an invalid length. [ 113.468000][ T8081] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 113.511545][ T8081] bond0: (slave dummy0): Releasing backup interface [ 113.525211][ T8088] netlink: 'syz.3.1611': attribute type 10 has an invalid length. [ 113.536145][ T8081] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.545308][ T8081] team0: Failed to send options change via netlink (err -105) [ 113.553212][ T8081] team0: Port device dummy0 added [ 113.565061][ T29] audit: type=1326 audit(1768594117.350:22484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.588069][ T29] audit: type=1326 audit(1768594117.350:22485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.611022][ T8088] team0: Failed to send options change via netlink (err -105) [ 113.611045][ T29] audit: type=1326 audit(1768594117.350:22486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.618694][ T8088] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.642090][ T29] audit: type=1326 audit(1768594117.350:22487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.642122][ T29] audit: type=1326 audit(1768594117.350:22488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.642191][ T29] audit: type=1326 audit(1768594117.350:22489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.642234][ T29] audit: type=1326 audit(1768594117.380:22490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="syz.1.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.642261][ T29] audit: type=1326 audit(1768594117.380:22491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.642289][ T29] audit: type=1326 audit(1768594117.380:22492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8090 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2cf7af749 code=0x7ffc0000 [ 113.792430][ T8088] team0: Port device dummy0 removed [ 113.800171][ T8088] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.820197][ T8073] can0 (unregistered): slcan off ttyS3. [ 113.863898][ T8102] program syz.5.1618 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.918407][ T8108] netlink: 'syz.5.1622': attribute type 10 has an invalid length. [ 113.919183][ T8109] siw: device registration error -23 [ 113.936554][ T8113] netlink: 'syz.3.1623': attribute type 10 has an invalid length. [ 113.954570][ T8108] bond0: (slave dummy0): Releasing backup interface [ 113.964363][ T8108] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 113.973437][ T8108] team0: Failed to send options change via netlink (err -105) [ 113.981162][ T8108] team0: Port device dummy0 added [ 113.988040][ T8114] netlink: 'syz.3.1623': attribute type 10 has an invalid length. [ 114.003264][ T8113] bond0: (slave dummy0): Releasing backup interface [ 114.013101][ T8113] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.021981][ T8113] team0: Failed to send options change via netlink (err -105) [ 114.029778][ T8113] team0: Port device dummy0 added [ 114.036645][ T8115] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 114.061575][ T8114] team0: Failed to send options change via netlink (err -105) [ 114.069229][ T8114] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.078930][ T8114] team0: Port device dummy0 removed [ 114.086830][ T8114] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.372115][ T8108] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.382818][ T8128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8128 comm=syz.1.1628 [ 114.398301][ T8108] team0: Failed to send options change via netlink (err -105) [ 114.414997][ T8108] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 114.426686][ T8108] team0: Port device dummy0 removed [ 114.460460][ T8108] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 114.469052][ T8138] program syz.0.1632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.479878][ T8140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1634'. [ 114.520873][ T8147] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 114.561161][ T8151] FAULT_INJECTION: forcing a failure. [ 114.561161][ T8151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.574396][ T8151] CPU: 0 UID: 0 PID: 8151 Comm: syz.1.1639 Not tainted syzkaller #0 PREEMPT(voluntary) [ 114.574421][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.574498][ T8151] Call Trace: [ 114.574505][ T8151] [ 114.574512][ T8151] __dump_stack+0x1d/0x30 [ 114.574536][ T8151] dump_stack_lvl+0x95/0xd0 [ 114.574570][ T8151] dump_stack+0x15/0x1b [ 114.574664][ T8151] should_fail_ex+0x265/0x280 [ 114.574685][ T8151] should_fail+0xb/0x20 [ 114.574729][ T8151] should_fail_usercopy+0x1a/0x20 [ 114.574753][ T8151] _copy_from_user+0x1c/0xb0 [ 114.574783][ T8151] __sys_bpf+0x183/0x7c0 [ 114.574806][ T8151] __x64_sys_bpf+0x41/0x50 [ 114.574950][ T8151] x64_sys_call+0x28e1/0x3000 [ 114.574972][ T8151] do_syscall_64+0xca/0x2b0 [ 114.574994][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.575019][ T8151] RIP: 0033:0x7ff2cf7af749 [ 114.575036][ T8151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.575074][ T8151] RSP: 002b:00007ff2ce20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.575111][ T8151] RAX: ffffffffffffffda RBX: 00007ff2cfa05fa0 RCX: 00007ff2cf7af749 [ 114.575188][ T8151] RDX: 0000000000000040 RSI: 00002000000005c0 RDI: 000000000000001c [ 114.575199][ T8151] RBP: 00007ff2ce20f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.575223][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.575234][ T8151] R13: 00007ff2cfa06038 R14: 00007ff2cfa05fa0 R15: 00007ffff68663c8 [ 114.575255][ T8151] [ 114.780186][ T8155] wg1 speed is unknown, defaulting to 1000 [ 114.786601][ T8155] lo speed is unknown, defaulting to 1000 [ 114.827279][ T8161] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1642'. [ 114.851214][ T8162] loop5: detected capacity change from 0 to 128 [ 114.891441][ T8162] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 115.186591][ T8173] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.317108][ T8183] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.350378][ T8186] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1654'. [ 115.369131][ T8189] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1655'. [ 115.407106][ T8197] FAULT_INJECTION: forcing a failure. [ 115.407106][ T8197] name failslab, interval 1, probability 0, space 0, times 0 [ 115.419954][ T8197] CPU: 0 UID: 0 PID: 8197 Comm: syz.5.1658 Not tainted syzkaller #0 PREEMPT(voluntary) [ 115.419980][ T8197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.419992][ T8197] Call Trace: [ 115.419997][ T8197] [ 115.420005][ T8197] __dump_stack+0x1d/0x30 [ 115.420069][ T8197] dump_stack_lvl+0x95/0xd0 [ 115.420097][ T8197] dump_stack+0x15/0x1b [ 115.420116][ T8197] should_fail_ex+0x265/0x280 [ 115.420163][ T8197] should_failslab+0x8c/0xb0 [ 115.420185][ T8197] __kvmalloc_node_noprof+0x149/0x6b0 [ 115.420249][ T8197] ? io_pin_pages+0x9f/0x170 [ 115.420273][ T8197] ? io_cache_alloc_new+0x2a/0xb0 [ 115.420298][ T8197] io_pin_pages+0x9f/0x170 [ 115.420342][ T8197] io_sqe_buffer_register+0x184/0x14c0 [ 115.420370][ T8197] ? __memcg_slab_post_alloc_hook+0x44b/0x530 [ 115.420402][ T8197] ? __kvmalloc_node_noprof+0x4f0/0x6b0 [ 115.420426][ T8197] ? iovec_from_user+0x179/0x210 [ 115.420459][ T8197] io_sqe_buffers_register+0x2b1/0x540 [ 115.420495][ T8197] __se_sys_io_uring_register+0x9ef/0xf20 [ 115.420551][ T8197] ? fput+0x8f/0xc0 [ 115.420573][ T8197] ? ksys_write+0x192/0x1a0 [ 115.420591][ T8197] __x64_sys_io_uring_register+0x55/0x70 [ 115.420679][ T8197] x64_sys_call+0x27ad/0x3000 [ 115.420701][ T8197] do_syscall_64+0xca/0x2b0 [ 115.420720][ T8197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.420739][ T8197] RIP: 0033:0x7f3b4d95f749 [ 115.420754][ T8197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.420773][ T8197] RSP: 002b:00007f3b4c3bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 115.420852][ T8197] RAX: ffffffffffffffda RBX: 00007f3b4dbb5fa0 RCX: 00007f3b4d95f749 [ 115.420863][ T8197] RDX: 00002000000001c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 115.420874][ T8197] RBP: 00007f3b4c3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 115.420945][ T8197] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 115.420958][ T8197] R13: 00007f3b4dbb6038 R14: 00007f3b4dbb5fa0 R15: 00007ffecfe568a8 [ 115.420977][ T8197] [ 115.698830][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1662'. [ 115.708467][ T8205] bond0: (slave dummy0): Releasing backup interface [ 115.716845][ T8205] team0: Device dummy0 is of different type [ 115.731718][ T8205] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 115.741969][ T8211] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 115.785781][ T8213] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.811852][ T8217] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 115.888094][ T8232] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 115.915049][ T8237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1672'. [ 115.945524][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1674'. [ 116.526698][ T8348] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 116.714371][ T8387] __nla_validate_parse: 1 callbacks suppressed [ 116.714387][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1685'. [ 116.757524][ T8395] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 116.775850][ T8399] validate_nla: 9 callbacks suppressed [ 116.775865][ T8399] netlink: 'syz.3.1689': attribute type 3 has an invalid length. [ 116.811197][ T8399] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1689'. [ 116.832260][ T8405] loop5: detected capacity change from 0 to 1764 [ 116.849410][ T8405] iso9660: Unknown parameter 'overriterockperm' [ 116.929673][ T8423] FAULT_INJECTION: forcing a failure. [ 116.929673][ T8423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.942870][ T8423] CPU: 0 UID: 0 PID: 8423 Comm: syz.0.1693 Not tainted syzkaller #0 PREEMPT(voluntary) [ 116.942899][ T8423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 116.942911][ T8423] Call Trace: [ 116.942918][ T8423] [ 116.942925][ T8423] __dump_stack+0x1d/0x30 [ 116.943001][ T8423] dump_stack_lvl+0x95/0xd0 [ 116.943024][ T8423] dump_stack+0x15/0x1b [ 116.943051][ T8423] should_fail_ex+0x265/0x280 [ 116.943077][ T8423] should_fail+0xb/0x20 [ 116.943097][ T8423] should_fail_usercopy+0x1a/0x20 [ 116.943153][ T8423] _copy_from_user+0x1c/0xb0 [ 116.943179][ T8423] ____sys_sendmsg+0x1c5/0x4a0 [ 116.943209][ T8423] ___sys_sendmsg+0x17b/0x1d0 [ 116.943349][ T8423] __sys_sendmmsg+0x178/0x300 [ 116.943390][ T8423] __x64_sys_sendmmsg+0x57/0x70 [ 116.943416][ T8423] x64_sys_call+0x1e28/0x3000 [ 116.943438][ T8423] do_syscall_64+0xca/0x2b0 [ 116.943533][ T8423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.943552][ T8423] RIP: 0033:0x7fc7b457f749 [ 116.943575][ T8423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.943595][ T8423] RSP: 002b:00007fc7b2fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 116.943617][ T8423] RAX: ffffffffffffffda RBX: 00007fc7b47d5fa0 RCX: 00007fc7b457f749 [ 116.943630][ T8423] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 116.943641][ T8423] RBP: 00007fc7b2fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 116.943652][ T8423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.943663][ T8423] R13: 00007fc7b47d6038 R14: 00007fc7b47d5fa0 R15: 00007ffe4291fd98 [ 116.943735][ T8423] [ 117.147160][ T8433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1696'. [ 117.187544][ T8439] 9pnet_virtio: no channels available for device 127.0.0.1 [ 117.232089][ T8441] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 117.251577][ T8443] netlink: 'syz.3.1701': attribute type 3 has an invalid length. [ 117.294610][ T8447] IPv6: Can't replace route, no match found [ 117.306319][ T8447] team0 (unregistering): Port device team_slave_0 removed [ 117.713469][ T8457] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1707'. [ 117.750605][ T8465] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 117.764580][ T8467] netlink: 'syz.1.1712': attribute type 3 has an invalid length. [ 118.273499][ T8494] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 118.283241][ T8494] bond0: (slave dummy0): Releasing backup interface [ 118.291438][ T8494] netlink: 'syz.3.1720': attribute type 10 has an invalid length. [ 118.300790][ T8494] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 118.326849][ T8496] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 118.336679][ T8496] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.384545][ T8496] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 118.394345][ T8496] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.441058][ T8496] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 118.450944][ T8496] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.480669][ T8496] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 118.490454][ T8496] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.525971][ T8063] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.534639][ T8063] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.545183][ T8063] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.553574][ T8063] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.565073][ T8063] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.573411][ T8063] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.584922][ T8063] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 118.593612][ T8063] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.631274][ T8503] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 118.650661][ T8505] netlink: 'syz.3.1724': attribute type 3 has an invalid length. [ 118.681394][ T8507] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 118.691831][ T8507] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 118.700944][ T8507] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 118.718737][ T8507] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 118.738757][ T8507] netlink: '+}[@': attribute type 13 has an invalid length. [ 118.756844][ T8507] gretap0: refused to change device tx_queue_len [ 118.773286][ T8507] netlink: '+}[@': attribute type 4 has an invalid length. [ 118.822330][ T8526] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 118.842186][ T8526] netlink: 'syz.3.1733': attribute type 29 has an invalid length. [ 118.865420][ T8526] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1733'. [ 119.044093][ T8558] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 119.057022][ T8558] 0ªî{X¹¦: left allmulticast mode [ 119.063184][ T8558] 0ªî{X¹¦: refused to change device tx_queue_len [ 119.082943][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 119.082957][ T29] audit: type=1326 audit(1768594122.871:23082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.113071][ T29] audit: type=1326 audit(1768594122.871:23083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.136574][ T29] audit: type=1326 audit(1768594122.871:23084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.160114][ T29] audit: type=1326 audit(1768594122.871:23085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.183591][ T29] audit: type=1326 audit(1768594122.871:23086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.207117][ T29] audit: type=1326 audit(1768594122.871:23087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.230946][ T29] audit: type=1326 audit(1768594122.871:23088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.254672][ T29] audit: type=1326 audit(1768594122.871:23089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.278333][ T29] audit: type=1326 audit(1768594122.871:23090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.301818][ T29] audit: type=1326 audit(1768594122.871:23091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8560 comm="syz.2.1745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 119.425440][ T8578] syz_tun: entered allmulticast mode [ 119.431721][ T8577] syz_tun: left allmulticast mode [ 119.581847][ T8591] bond0: (slave dummy0): Releasing backup interface [ 119.592815][ T8591] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 119.723552][ T8603] siw: device registration error -23 [ 120.027055][ T8633] FAULT_INJECTION: forcing a failure. [ 120.027055][ T8633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.040818][ T8633] CPU: 1 UID: 0 PID: 8633 Comm: syz.0.1777 Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.040854][ T8633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 120.040877][ T8633] Call Trace: [ 120.040887][ T8633] [ 120.040895][ T8633] __dump_stack+0x1d/0x30 [ 120.041027][ T8633] dump_stack_lvl+0x95/0xd0 [ 120.041049][ T8633] dump_stack+0x15/0x1b [ 120.041070][ T8633] should_fail_ex+0x265/0x280 [ 120.041133][ T8633] should_fail+0xb/0x20 [ 120.041150][ T8633] should_fail_usercopy+0x1a/0x20 [ 120.041245][ T8633] _copy_from_user+0x1c/0xb0 [ 120.041272][ T8633] ___sys_recvmsg+0xaa/0x370 [ 120.041303][ T8633] ? 0xffffffff81000000 [ 120.041317][ T8633] ? __rcu_read_unlock+0x4f/0x70 [ 120.041397][ T8633] __x64_sys_recvmsg+0xd1/0x160 [ 120.041432][ T8633] x64_sys_call+0x2cbf/0x3000 [ 120.041515][ T8633] do_syscall_64+0xca/0x2b0 [ 120.041568][ T8633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.041591][ T8633] RIP: 0033:0x7fc7b457f749 [ 120.041607][ T8633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.041627][ T8633] RSP: 002b:00007fc7b2fdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 120.041698][ T8633] RAX: ffffffffffffffda RBX: 00007fc7b47d5fa0 RCX: 00007fc7b457f749 [ 120.041712][ T8633] RDX: 0000000000000100 RSI: 0000200000000040 RDI: 0000000000000006 [ 120.041769][ T8633] RBP: 00007fc7b2fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 120.041782][ T8633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.041826][ T8633] R13: 00007fc7b47d6038 R14: 00007fc7b47d5fa0 R15: 00007ffe4291fd98 [ 120.041936][ T8633] [ 120.251367][ T8640] net_ratelimit: 8 callbacks suppressed [ 120.251382][ T8640] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 120.441794][ T8642] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.457655][ T5372] lo speed is unknown, defaulting to 1000 [ 120.463438][ T5372] syz2: Port: 1 Link ACTIVE [ 120.729977][ T8661] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 120.867724][ T8665] loop5: detected capacity change from 0 to 1024 [ 120.874623][ T8665] EXT4-fs: Ignoring removed mblk_io_submit option [ 120.885166][ T8665] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 121.020372][ T8674] wg1 speed is unknown, defaulting to 1000 [ 121.026677][ T8674] lo speed is unknown, defaulting to 1000 [ 121.044395][ T8677] 8021q: VLANs not supported on ip_vti0 [ 121.051659][ T8677] tipc: Enabled bearer , priority 10 [ 121.079663][ T8680] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 121.230771][ T8692] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 121.502687][ T8706] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 121.706327][ T8723] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 121.737221][ T8726] wg1 speed is unknown, defaulting to 1000 [ 121.743498][ T8726] lo speed is unknown, defaulting to 1000 [ 121.834638][ T8730] validate_nla: 8 callbacks suppressed [ 121.834723][ T8730] netlink: 'syz.2.1810': attribute type 13 has an invalid length. [ 121.867297][ T8730] 0ªî{X¹¦: refused to change device tx_queue_len [ 121.874234][ T8730] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 122.149345][ T8743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8743 comm=syz.3.1814 [ 122.173668][ T8745] __nla_validate_parse: 13 callbacks suppressed [ 122.173765][ T8745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1815'. [ 122.190110][ T4062] tipc: Node number set to 3222013613 [ 122.230049][ T8749] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1817'. [ 122.270594][ T8751] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 122.301296][ T8754] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1819'. [ 122.668417][ T8770] FAULT_INJECTION: forcing a failure. [ 122.668417][ T8770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.681654][ T8770] CPU: 0 UID: 0 PID: 8770 Comm: syz.1.1827 Not tainted syzkaller #0 PREEMPT(voluntary) [ 122.681691][ T8770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.681703][ T8770] Call Trace: [ 122.681710][ T8770] [ 122.681718][ T8770] __dump_stack+0x1d/0x30 [ 122.681758][ T8770] dump_stack_lvl+0x95/0xd0 [ 122.681782][ T8770] dump_stack+0x15/0x1b [ 122.681804][ T8770] should_fail_ex+0x265/0x280 [ 122.681830][ T8770] should_fail+0xb/0x20 [ 122.681858][ T8770] should_fail_usercopy+0x1a/0x20 [ 122.681928][ T8770] _copy_from_user+0x1c/0xb0 [ 122.681957][ T8770] __copy_msghdr+0x244/0x300 [ 122.681989][ T8770] ___sys_sendmsg+0x109/0x1d0 [ 122.682032][ T8770] __sys_sendmmsg+0x178/0x300 [ 122.682129][ T8770] __x64_sys_sendmmsg+0x57/0x70 [ 122.682157][ T8770] x64_sys_call+0x1e28/0x3000 [ 122.682180][ T8770] do_syscall_64+0xca/0x2b0 [ 122.682203][ T8770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.682302][ T8770] RIP: 0033:0x7ff2cf7af749 [ 122.682368][ T8770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.682411][ T8770] RSP: 002b:00007ff2ce20f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.682430][ T8770] RAX: ffffffffffffffda RBX: 00007ff2cfa05fa0 RCX: 00007ff2cf7af749 [ 122.682521][ T8770] RDX: 0000000000000001 RSI: 0000200000000800 RDI: 0000000000000004 [ 122.682533][ T8770] RBP: 00007ff2ce20f090 R08: 0000000000000000 R09: 0000000000000000 [ 122.682641][ T8770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.682686][ T8770] R13: 00007ff2cfa06038 R14: 00007ff2cfa05fa0 R15: 00007ffff68663c8 [ 122.682703][ T8770] [ 122.945261][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1834'. [ 122.964291][ T8790] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8790 comm=syz.0.1835 [ 123.021478][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1838'. [ 123.057900][ T8803] siw: device registration error -23 [ 123.090752][ T8808] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.149819][ T8808] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.216770][ T8812] loop5: detected capacity change from 0 to 512 [ 123.228436][ T8812] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 123.229169][ T8808] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.237507][ T8812] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 123.257012][ T8812] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 123.265154][ T8812] System zones: 0-2, 18-18, 34-35 [ 123.271117][ T8812] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 123.284110][ T8800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 123.302331][ T8808] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.432819][ T7762] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.447671][ T7762] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.477267][ T7762] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.496128][ T7762] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.603664][ T8812] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.701471][ T8825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1847'. [ 123.743396][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1848'. [ 123.780126][ T8837] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1852'. [ 123.810529][ T8839] netlink: 'syz.5.1853': attribute type 12 has an invalid length. [ 123.864185][ T8849] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1857'. [ 123.901134][ T8851] tipc: Started in network mode [ 123.906023][ T8851] tipc: Node identity 4, cluster identity 4711 [ 123.912840][ T8851] tipc: Node number set to 4 [ 123.922801][ T8847] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 124.073884][ T8863] netlink: '+}[@': attribute type 13 has an invalid length. [ 124.085464][ T8862] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 124.140847][ T8863] gretap0: refused to change device tx_queue_len [ 124.225503][ T8869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 124.261536][ T8874] netlink: 'syz.0.1866': attribute type 29 has an invalid length. [ 124.270856][ T8874] netlink: 'syz.0.1866': attribute type 29 has an invalid length. [ 124.332480][ T29] kauditd_printk_skb: 897 callbacks suppressed [ 124.332494][ T29] audit: type=1326 audit(1768594384.120:23989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.420316][ T29] audit: type=1326 audit(1768594384.150:23990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.442985][ T29] audit: type=1326 audit(1768594384.150:23991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.466476][ T29] audit: type=1326 audit(1768594384.150:23992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.489106][ T29] audit: type=1326 audit(1768594384.150:23993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.511774][ T29] audit: type=1326 audit(1768594384.150:23994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.534395][ T29] audit: type=1326 audit(1768594384.150:23995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.557878][ T29] audit: type=1326 audit(1768594384.150:23996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.581502][ T29] audit: type=1326 audit(1768594384.150:23997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.604192][ T29] audit: type=1326 audit(1768594384.150:23999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8877 comm="syz.0.1867" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 124.663055][ T8882] netlink: 'syz.2.1869': attribute type 12 has an invalid length. [ 124.704388][ T8886] netlink: 'syz.0.1870': attribute type 29 has an invalid length. [ 124.715185][ T8886] netlink: 'syz.0.1870': attribute type 29 has an invalid length. [ 124.723860][ T8885] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8885 comm=syz.3.1871 [ 125.051674][ T8920] 9p: Could not find request transport: rdm [ 125.232334][ T8938] netlink: 'syz.1.1892': attribute type 10 has an invalid length. [ 125.252866][ T8938] bond0: (slave dummy0): Releasing backup interface [ 125.273550][ T8938] team0: Port device dummy0 added [ 125.283013][ T8938] netlink: 'syz.1.1892': attribute type 10 has an invalid length. [ 125.294090][ T8938] team0: Port device dummy0 removed [ 125.302085][ T8938] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.349013][ T8939] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 125.474824][ T8947] net_ratelimit: 4 callbacks suppressed [ 125.474839][ T8947] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 125.505922][ T8914] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 125.657929][ T8955] bond0: (slave dummy0): Releasing backup interface [ 125.710143][ T8955] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.719067][ T8955] team0: Failed to send options change via netlink (err -105) [ 125.726612][ T8955] team0: Port device dummy0 added [ 125.749267][ T8962] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.767065][ T8962] team0: Failed to send options change via netlink (err -105) [ 125.771910][ T8965] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 125.778524][ T8962] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.801849][ T8962] team0: Port device dummy0 removed [ 125.812449][ T8962] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 125.841173][ T8967] loop5: detected capacity change from 0 to 512 [ 125.856979][ T8967] SELinux: Context system_u:object is not valid (left unmapped). [ 125.910063][ T8977] bond0: (slave dummy0): Releasing backup interface [ 125.923333][ T8977] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.932720][ T8977] team0: Failed to send options change via netlink (err -105) [ 125.940264][ T8977] team0: Port device dummy0 added [ 125.960520][ T8977] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 125.985898][ T8988] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 126.000123][ T8977] team0: Failed to send options change via netlink (err -105) [ 126.009430][ T8977] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 126.019068][ T8977] team0: Port device dummy0 removed [ 126.024381][ T8992] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 126.026586][ T8977] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.079864][ T8999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8999 comm=syz.0.1916 [ 126.102610][ T9007] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.230900][ T9026] bond0: (slave dummy0): Releasing backup interface [ 126.242983][ T9026] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.344467][ T9039] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.459023][ T9055] bond0: (slave dummy0): Releasing backup interface [ 126.468886][ T9055] team0: Port device dummy0 added [ 126.478663][ T9055] team0: Port device dummy0 removed [ 126.494876][ T9055] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.622035][ T9073] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 126.779416][ T9092] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 126.962611][ T9114] validate_nla: 15 callbacks suppressed [ 126.962627][ T9114] netlink: 'syz.2.1957': attribute type 12 has an invalid length. [ 126.987994][ T9121] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 127.112333][ T9136] loop5: detected capacity change from 0 to 128 [ 127.140759][ T9141] FAULT_INJECTION: forcing a failure. [ 127.140759][ T9141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.153904][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.0.1965 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.154010][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.154042][ T9141] Call Trace: [ 127.154048][ T9141] [ 127.154054][ T9141] __dump_stack+0x1d/0x30 [ 127.154077][ T9141] dump_stack_lvl+0x95/0xd0 [ 127.154097][ T9141] dump_stack+0x15/0x1b [ 127.154119][ T9141] should_fail_ex+0x265/0x280 [ 127.154199][ T9141] should_fail+0xb/0x20 [ 127.154217][ T9141] should_fail_usercopy+0x1a/0x20 [ 127.154290][ T9141] _copy_from_iter+0xcf/0xe70 [ 127.154305][ T9141] ? __alloc_skb+0x396/0x4b0 [ 127.154319][ T9141] ? __alloc_skb+0x228/0x4b0 [ 127.154333][ T9141] netlink_sendmsg+0x471/0x6b0 [ 127.154407][ T9141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.154425][ T9141] __sock_sendmsg+0x145/0x180 [ 127.154436][ T9141] ____sys_sendmsg+0x31e/0x4a0 [ 127.154454][ T9141] ___sys_sendmsg+0x17b/0x1d0 [ 127.154552][ T9141] __x64_sys_sendmsg+0xd4/0x160 [ 127.154571][ T9141] x64_sys_call+0x17ba/0x3000 [ 127.154584][ T9141] do_syscall_64+0xca/0x2b0 [ 127.154596][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.154616][ T9141] RIP: 0033:0x7fc7b457f749 [ 127.154626][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.154666][ T9141] RSP: 002b:00007fc7b2fdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.154679][ T9141] RAX: ffffffffffffffda RBX: 00007fc7b47d5fa0 RCX: 00007fc7b457f749 [ 127.154686][ T9141] RDX: 0000000000000044 RSI: 00002000000007c0 RDI: 0000000000000004 [ 127.154693][ T9141] RBP: 00007fc7b2fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 127.154752][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.154759][ T9141] R13: 00007fc7b47d6038 R14: 00007fc7b47d5fa0 R15: 00007ffe4291fd98 [ 127.154770][ T9141] [ 127.478087][ T9152] FAULT_INJECTION: forcing a failure. [ 127.478087][ T9152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.491992][ T9152] CPU: 1 UID: 0 PID: 9152 Comm: syz.0.1970 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.492088][ T9152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.492100][ T9152] Call Trace: [ 127.492106][ T9152] [ 127.492113][ T9152] __dump_stack+0x1d/0x30 [ 127.492141][ T9152] dump_stack_lvl+0x95/0xd0 [ 127.492197][ T9152] dump_stack+0x15/0x1b [ 127.492218][ T9152] should_fail_ex+0x265/0x280 [ 127.492244][ T9152] should_fail+0xb/0x20 [ 127.492266][ T9152] should_fail_usercopy+0x1a/0x20 [ 127.492293][ T9152] strncpy_from_user+0x27/0x260 [ 127.492344][ T9152] getname_flags+0xae/0x3b0 [ 127.492377][ T9152] do_sys_openat2+0x60/0x150 [ 127.492439][ T9152] __x64_sys_openat+0xf2/0x120 [ 127.492465][ T9152] x64_sys_call+0x2b07/0x3000 [ 127.492491][ T9152] do_syscall_64+0xca/0x2b0 [ 127.492514][ T9152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.492563][ T9152] RIP: 0033:0x7fc7b457f749 [ 127.492576][ T9152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.492620][ T9152] RSP: 002b:00007fc7b2fdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 127.492664][ T9152] RAX: ffffffffffffffda RBX: 00007fc7b47d5fa0 RCX: 00007fc7b457f749 [ 127.492676][ T9152] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 127.492687][ T9152] RBP: 00007fc7b2fdf090 R08: 0000000000000000 R09: 0000000000000000 [ 127.492698][ T9152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.492710][ T9152] R13: 00007fc7b47d6038 R14: 00007fc7b47d5fa0 R15: 00007ffe4291fd98 [ 127.492728][ T9152] [ 127.773860][ T9154] FAULT_INJECTION: forcing a failure. [ 127.773860][ T9154] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.787010][ T9154] CPU: 0 UID: 0 PID: 9154 Comm: syz.1.1971 Not tainted syzkaller #0 PREEMPT(voluntary) [ 127.787119][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.787197][ T9154] Call Trace: [ 127.787204][ T9154] [ 127.787212][ T9154] __dump_stack+0x1d/0x30 [ 127.787239][ T9154] dump_stack_lvl+0x95/0xd0 [ 127.787301][ T9154] dump_stack+0x15/0x1b [ 127.787318][ T9154] should_fail_ex+0x265/0x280 [ 127.787342][ T9154] should_fail+0xb/0x20 [ 127.787363][ T9154] should_fail_usercopy+0x1a/0x20 [ 127.787389][ T9154] _copy_from_user+0x1c/0xb0 [ 127.787461][ T9154] ____sys_sendmsg+0x1c5/0x4a0 [ 127.787493][ T9154] ___sys_sendmsg+0x17b/0x1d0 [ 127.787536][ T9154] __x64_sys_sendmsg+0xd4/0x160 [ 127.787617][ T9154] x64_sys_call+0x17ba/0x3000 [ 127.787653][ T9154] do_syscall_64+0xca/0x2b0 [ 127.787674][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.787697][ T9154] RIP: 0033:0x7ff2cf7af749 [ 127.787739][ T9154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.787758][ T9154] RSP: 002b:00007ff2ce20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.787778][ T9154] RAX: ffffffffffffffda RBX: 00007ff2cfa05fa0 RCX: 00007ff2cf7af749 [ 127.787789][ T9154] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 127.787800][ T9154] RBP: 00007ff2ce20f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.787811][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.787822][ T9154] R13: 00007ff2cfa06038 R14: 00007ff2cfa05fa0 R15: 00007ffff68663c8 [ 127.787855][ T9154] [ 128.175404][ T9160] netlink: 'syz.1.1972': attribute type 12 has an invalid length. [ 128.457149][ T9164] netlink: 'syz.5.1974': attribute type 10 has an invalid length. [ 128.467587][ T9164] bond0: (slave dummy0): Releasing backup interface [ 128.477049][ T9164] team0: Port device dummy0 added [ 128.483856][ T9164] netlink: 'syz.5.1974': attribute type 10 has an invalid length. [ 128.495826][ T9164] team0: Port device dummy0 removed [ 128.503483][ T9164] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.605277][ T9172] loop5: detected capacity change from 0 to 1024 [ 128.656468][ T9172] EXT4-fs: inline encryption not supported [ 128.744057][ T9182] __nla_validate_parse: 22 callbacks suppressed [ 128.744074][ T9182] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1983'. [ 128.780912][ T9184] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1984'. [ 128.814552][ T9184] netlink: 'syz.2.1984': attribute type 30 has an invalid length. [ 128.828855][ T9188] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 128.879651][ T9189] netlink: 'syz.1.1986': attribute type 10 has an invalid length. [ 128.945002][ T9188] bond0: (slave dummy0): Releasing backup interface [ 128.961123][ T9188] team0: Port device dummy0 added [ 128.972104][ T9189] team0: Port device dummy0 removed [ 128.986346][ T9189] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.995573][ T9193] gre0: entered allmulticast mode [ 129.014226][ T9194] loop5: detected capacity change from 0 to 512 [ 129.028155][ T9193] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1988'. [ 129.166150][ T9209] siw: device registration error -23 [ 129.223627][ T9211] netlink: '+}[@': attribute type 13 has an invalid length. [ 129.243920][ T9202] loop5: detected capacity change from 0 to 8192 [ 129.262570][ T9211] gretap0: refused to change device tx_queue_len [ 129.280710][ T9213] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1997'. [ 129.318700][ T9202] loop5: p1 p2 p4 < > [ 129.322870][ T9202] loop5: partition table partially beyond EOD, truncated [ 129.357429][ T9202] loop5: p1 start 16777216 is beyond EOD, truncated [ 129.364736][ T9202] loop5: p2 size 515840 extends beyond EOD, truncated [ 129.372708][ T29] kauditd_printk_skb: 1081 callbacks suppressed [ 129.372793][ T29] audit: type=1400 audit(1768594389.160:25080): avc: denied { read } for pid=9201 comm="syz.5.1992" name="usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.459116][ T9202] loop5: p4 start 16777216 is beyond EOD, truncated [ 129.468638][ T9226] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9226 comm=syz.0.2002 [ 129.527111][ T29] audit: type=1400 audit(1768594389.160:25081): avc: denied { open } for pid=9201 comm="syz.5.1992" path="/dev/usbmon5" dev="devtmpfs" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.551696][ T29] audit: type=1400 audit(1768594389.220:25082): avc: denied { ioctl } for pid=9201 comm="syz.5.1992" path="/dev/usbmon5" dev="devtmpfs" ino=157 ioctlcmd=0xffff scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 129.577143][ T29] audit: type=1326 audit(1768594389.240:25083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 129.600783][ T29] audit: type=1326 audit(1768594389.240:25084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 129.624916][ T29] audit: type=1326 audit(1768594389.240:25085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 129.649259][ T29] audit: type=1326 audit(1768594389.240:25086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 129.672894][ T29] audit: type=1326 audit(1768594389.240:25087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 129.696966][ T29] audit: type=1326 audit(1768594389.240:25088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 129.704549][ T9230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2004'. [ 129.721132][ T29] audit: type=1326 audit(1768594389.240:25089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9223 comm="syz.2.2001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 129.758324][ T9225] netlink: 'syz.2.2001': attribute type 12 has an invalid length. [ 129.783077][ T9235] loop5: detected capacity change from 0 to 1024 [ 129.790145][ T9235] EXT4-fs: inline encryption not supported [ 129.839467][ T9241] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2009'. [ 129.844050][ T9243] netlink: 'syz.2.2010': attribute type 29 has an invalid length. [ 129.867628][ T9243] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2010'. [ 129.892354][ T9246] loop5: detected capacity change from 0 to 1024 [ 129.907003][ T9246] EXT4-fs: Ignoring removed orlov option [ 129.948324][ T9259] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9259 comm=syz.1.2016 [ 130.002498][ T9268] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2015'. [ 130.154526][ T9282] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2027'. [ 130.552663][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 130.644017][ T9276] net_ratelimit: 7 callbacks suppressed [ 130.644035][ T9276] Set syz1 is full, maxelem 65536 reached [ 130.727443][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.736088][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.822106][ T9313] .`: renamed from bond0 (while UP) [ 130.888006][ T9318] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9318 comm=syz.3.2040 [ 130.953446][ T9320] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 131.016451][ T9278] Set syz1 is full, maxelem 65536 reached [ 131.069782][ T9330] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 131.103692][ T9333] bond0: (slave dummy0): Releasing backup interface [ 131.135682][ T9333] team0: Device dummy0 is of different type [ 131.170925][ T9333] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 131.228510][ T9342] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 131.294567][ T9340] loop5: detected capacity change from 0 to 128 [ 131.349222][ T9348] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 131.595476][ T9338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.800054][ T9360] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 131.992767][ T9372] loop5: detected capacity change from 0 to 128 [ 132.009195][ T9374] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 132.600362][ T9395] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 132.626895][ T9397] validate_nla: 10 callbacks suppressed [ 132.626912][ T9397] netlink: '+}[@': attribute type 13 has an invalid length. [ 132.641740][ T9397] gre0: left allmulticast mode [ 132.648023][ T9397] gretap0: refused to change device tx_queue_len [ 132.682053][ T9400] loop5: detected capacity change from 0 to 1024 [ 132.696983][ T9400] EXT4-fs: inline encryption not supported [ 132.776063][ T9404] loop5: detected capacity change from 0 to 1024 [ 132.792385][ T9404] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.013991][ T9422] netlink: 'syz.1.2084': attribute type 30 has an invalid length. [ 133.066015][ T9424] netlink: '+}[@': attribute type 13 has an invalid length. [ 133.088048][ T9424] gretap0: refused to change device tx_queue_len [ 133.205660][ T9436] loop5: detected capacity change from 0 to 512 [ 133.219855][ T9436] ext4: Unknown parameter 'fowner>00000000000000000000' [ 133.242246][ T9438] wg1 speed is unknown, defaulting to 1000 [ 133.259915][ T9438] lo speed is unknown, defaulting to 1000 [ 133.317505][ T9444] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9444 comm=syz.5.2095 [ 133.388870][ T9449] loop5: detected capacity change from 0 to 512 [ 133.515460][ T9455] loop5: detected capacity change from 0 to 2048 [ 133.563043][ T9455] Alternate GPT is invalid, using primary GPT. [ 133.570258][ T9455] loop5: p2 p3 p7 [ 133.631549][ T9469] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9469 comm=syz.3.2107 [ 133.661234][ T9473] loop5: detected capacity change from 0 to 1024 [ 133.668107][ T9473] EXT4-fs: inline encryption not supported [ 133.833897][ T9501] netlink: '+}[@': attribute type 13 has an invalid length. [ 133.855526][ T9501] 0ªî{X¹¦: refused to change device tx_queue_len [ 133.865977][ T9506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9506 comm=syz.3.2122 [ 133.942645][ T9516] __nla_validate_parse: 7 callbacks suppressed [ 133.942713][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2127'. [ 134.009238][ T9529] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9529 comm=syz.2.2133 [ 134.045872][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2137'. [ 134.119559][ T9549] netlink: 368 bytes leftover after parsing attributes in process `syz.2.2142'. [ 134.134418][ T9550] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2139'. [ 134.172088][ T9554] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2144'. [ 134.181917][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 134.193670][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2144'. [ 134.202876][ T9554] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2144'. [ 134.273357][ T9563] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 134.282952][ T9563] netlink: 'syz.1.2148': attribute type 1 has an invalid length. [ 134.297299][ T9567] netlink: 'syz.0.2150': attribute type 29 has an invalid length. [ 134.306676][ T9567] netlink: 'syz.0.2150': attribute type 29 has an invalid length. [ 134.315123][ T9567] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2150'. [ 134.439262][ T9587] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2155'. [ 134.608010][ T9605] netlink: 'syz.2.2162': attribute type 29 has an invalid length. [ 134.616220][ T9607] netlink: 'syz.5.2163': attribute type 29 has an invalid length. [ 134.625093][ T9607] netlink: 'syz.5.2163': attribute type 29 has an invalid length. [ 134.724384][ T9618] loop5: detected capacity change from 0 to 128 [ 135.077570][ T9648] FAULT_INJECTION: forcing a failure. [ 135.077570][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 135.090256][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.5.2177 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.090325][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.090337][ T9648] Call Trace: [ 135.090344][ T9648] [ 135.090352][ T9648] __dump_stack+0x1d/0x30 [ 135.090454][ T9648] dump_stack_lvl+0x95/0xd0 [ 135.090478][ T9648] dump_stack+0x15/0x1b [ 135.090498][ T9648] should_fail_ex+0x265/0x280 [ 135.090523][ T9648] should_failslab+0x8c/0xb0 [ 135.090547][ T9648] kmem_cache_alloc_noprof+0x69/0x4b0 [ 135.090639][ T9648] ? skb_clone+0x151/0x1f0 [ 135.090727][ T9648] skb_clone+0x151/0x1f0 [ 135.090845][ T9648] __netlink_deliver_tap+0x2c9/0x500 [ 135.090959][ T9648] netlink_unicast+0x66b/0x690 [ 135.091062][ T9648] netlink_sendmsg+0x58b/0x6b0 [ 135.091095][ T9648] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.091126][ T9648] __sock_sendmsg+0x145/0x180 [ 135.091161][ T9648] ____sys_sendmsg+0x31e/0x4a0 [ 135.091202][ T9648] ___sys_sendmsg+0x17b/0x1d0 [ 135.091314][ T9648] __x64_sys_sendmsg+0xd4/0x160 [ 135.091347][ T9648] x64_sys_call+0x17ba/0x3000 [ 135.091374][ T9648] do_syscall_64+0xca/0x2b0 [ 135.091395][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.091546][ T9648] RIP: 0033:0x7f3b4d95f749 [ 135.091563][ T9648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.091581][ T9648] RSP: 002b:00007f3b4c3bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.091599][ T9648] RAX: ffffffffffffffda RBX: 00007f3b4dbb5fa0 RCX: 00007f3b4d95f749 [ 135.091611][ T9648] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004 [ 135.091623][ T9648] RBP: 00007f3b4c3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 135.091637][ T9648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.091674][ T9648] R13: 00007f3b4dbb6038 R14: 00007f3b4dbb5fa0 R15: 00007ffecfe568a8 [ 135.091690][ T9648] [ 135.307711][ T9650] loop5: detected capacity change from 0 to 512 [ 135.324286][ T9650] loop5: detected capacity change from 0 to 512 [ 135.469935][ T29] kauditd_printk_skb: 653 callbacks suppressed [ 135.470025][ T29] audit: type=1326 audit(1768594395.260:25743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.516478][ T29] audit: type=1326 audit(1768594395.260:25744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.540657][ T29] audit: type=1326 audit(1768594395.260:25745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.564321][ T29] audit: type=1326 audit(1768594395.260:25746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.588425][ T29] audit: type=1326 audit(1768594395.260:25747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.612102][ T29] audit: type=1326 audit(1768594395.260:25748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.636443][ T29] audit: type=1326 audit(1768594395.260:25749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.660672][ T29] audit: type=1326 audit(1768594395.260:25750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.684252][ T29] audit: type=1326 audit(1768594395.260:25751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.708408][ T29] audit: type=1326 audit(1768594395.260:25752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9661 comm="syz.0.2183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 135.822986][ T8063] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.834413][ T9683] loop5: detected capacity change from 0 to 1024 [ 135.841936][ T9683] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.855449][ T9683] net_ratelimit: 19 callbacks suppressed [ 135.855463][ T9683] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.066891][ T9720] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.311625][ T9733] veth0_to_team: entered promiscuous mode [ 136.379939][ T9746] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.486015][ T9758] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 136.733537][ T9760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 136.872018][ T9766] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.952795][ T9754] Set syz1 is full, maxelem 65536 reached [ 136.982519][ T9766] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.108302][ T9766] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.171396][ T9766] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.227680][ T2246] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.281987][ T9784] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 137.327311][ T2246] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.336353][ T2246] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.344865][ T2246] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.386962][ T9791] gretap0: refused to change device tx_queue_len [ 137.395080][ T9791] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 137.522385][ T9806] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9806 comm=syz.5.2243 [ 137.535455][ T9806] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 137.602889][ T9812] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 137.630975][ T9814] validate_nla: 15 callbacks suppressed [ 137.630986][ T9814] netlink: 'syz.5.2247': attribute type 12 has an invalid length. [ 137.868350][ T4444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 137.868384][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 138.060974][ T9829] siw: device registration error -23 [ 138.085838][ T9831] netlink: 'syz.5.2255': attribute type 10 has an invalid length. [ 138.137594][ T9837] netlink: 'syz.5.2258': attribute type 12 has an invalid length. [ 138.820297][ T9860] netlink: 'syz.0.2267': attribute type 10 has an invalid length. [ 139.076451][ T9870] __nla_validate_parse: 20 callbacks suppressed [ 139.076469][ T9870] netlink: 268 bytes leftover after parsing attributes in process `syz.0.2270'. [ 140.229463][ T9933] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2296'. [ 140.291912][ T9941] FAULT_INJECTION: forcing a failure. [ 140.291912][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 140.304609][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.5.2300 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.304698][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.304712][ T9941] Call Trace: [ 140.304719][ T9941] [ 140.304727][ T9941] __dump_stack+0x1d/0x30 [ 140.304754][ T9941] dump_stack_lvl+0x95/0xd0 [ 140.304777][ T9941] dump_stack+0x15/0x1b [ 140.304876][ T9941] should_fail_ex+0x265/0x280 [ 140.304904][ T9941] should_failslab+0x8c/0xb0 [ 140.304929][ T9941] __kmalloc_cache_noprof+0x65/0x4c0 [ 140.305021][ T9941] ? audit_log_d_path+0x8d/0x150 [ 140.305045][ T9941] audit_log_d_path+0x8d/0x150 [ 140.305068][ T9941] audit_log_d_path_exe+0x42/0x70 [ 140.305166][ T9941] audit_log_task+0x1e9/0x250 [ 140.305194][ T9941] ? kstrtouint+0x76/0xc0 [ 140.305213][ T9941] audit_seccomp+0x61/0x100 [ 140.305246][ T9941] ? __seccomp_filter+0x832/0x1260 [ 140.305407][ T9941] __seccomp_filter+0x843/0x1260 [ 140.305436][ T9941] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 140.305461][ T9941] ? vfs_write+0x7e8/0x960 [ 140.305477][ T9941] ? __rcu_read_unlock+0x4f/0x70 [ 140.305533][ T9941] ? __fget_files+0x184/0x1c0 [ 140.305561][ T9941] __secure_computing+0x82/0x150 [ 140.305584][ T9941] syscall_trace_enter+0xcf/0x1e0 [ 140.305681][ T9941] do_syscall_64+0xa4/0x2b0 [ 140.305704][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.305728][ T9941] RIP: 0033:0x7f3b4d95f749 [ 140.305744][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.305761][ T9941] RSP: 002b:00007f3b4c3bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 140.305785][ T9941] RAX: ffffffffffffffda RBX: 00007f3b4dbb5fa0 RCX: 00007f3b4d95f749 [ 140.305799][ T9941] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 140.305810][ T9941] RBP: 00007f3b4c3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 140.305822][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.305833][ T9941] R13: 00007f3b4dbb6038 R14: 00007f3b4dbb5fa0 R15: 00007ffecfe568a8 [ 140.305849][ T9941] [ 140.318137][ T9945] netlink: 'syz.2.2302': attribute type 39 has an invalid length. [ 140.684275][ T9969] FAULT_INJECTION: forcing a failure. [ 140.684275][ T9969] name failslab, interval 1, probability 0, space 0, times 0 [ 140.697009][ T9969] CPU: 0 UID: 0 PID: 9969 Comm: syz.5.2311 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.697037][ T9969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 140.697080][ T9969] Call Trace: [ 140.697087][ T9969] [ 140.697096][ T9969] __dump_stack+0x1d/0x30 [ 140.697120][ T9969] dump_stack_lvl+0x95/0xd0 [ 140.697193][ T9969] dump_stack+0x15/0x1b [ 140.697214][ T9969] should_fail_ex+0x265/0x280 [ 140.697239][ T9969] should_failslab+0x8c/0xb0 [ 140.697321][ T9969] __kmalloc_noprof+0xb9/0x5a0 [ 140.697408][ T9969] ? kmp_init+0x4c/0x480 [ 140.697424][ T9969] kmp_init+0x4c/0x480 [ 140.697444][ T9969] textsearch_prepare+0x195/0x200 [ 140.697466][ T9969] string_mt_check+0x119/0x170 [ 140.697498][ T9969] xt_check_match+0x2ad/0x4f0 [ 140.697549][ T9969] ? xt_find_match+0x1d1/0x210 [ 140.697577][ T9969] ? xt_find_match+0x1b5/0x210 [ 140.697628][ T9969] translate_table+0xb4b/0x1070 [ 140.697658][ T9969] ? _copy_from_user+0x89/0xb0 [ 140.697741][ T9969] do_ip6t_set_ctl+0x678/0x840 [ 140.697762][ T9969] ? kstrtoull+0x111/0x140 [ 140.697779][ T9969] ? __rcu_read_unlock+0x4f/0x70 [ 140.697850][ T9969] nf_setsockopt+0x199/0x1b0 [ 140.697968][ T9969] ipv6_setsockopt+0x11a/0x130 [ 140.697991][ T9969] tcp_setsockopt+0x98/0xb0 [ 140.698010][ T9969] sock_common_setsockopt+0x69/0x80 [ 140.698030][ T9969] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 140.698050][ T9969] __sys_setsockopt+0x184/0x200 [ 140.698157][ T9969] __x64_sys_setsockopt+0x64/0x80 [ 140.698187][ T9969] x64_sys_call+0x21d5/0x3000 [ 140.698267][ T9969] do_syscall_64+0xca/0x2b0 [ 140.698286][ T9969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.698310][ T9969] RIP: 0033:0x7f3b4d95f749 [ 140.698327][ T9969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.698423][ T9969] RSP: 002b:00007f3b4c3bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.698440][ T9969] RAX: ffffffffffffffda RBX: 00007f3b4dbb5fa0 RCX: 00007f3b4d95f749 [ 140.698451][ T9969] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000006 [ 140.698465][ T9969] RBP: 00007f3b4c3bf090 R08: 0000000000000450 R09: 0000000000000000 [ 140.698480][ T9969] R10: 0000200000000980 R11: 0000000000000246 R12: 0000000000000001 [ 140.698493][ T9969] R13: 00007f3b4dbb6038 R14: 00007f3b4dbb5fa0 R15: 00007ffecfe568a8 [ 140.698513][ T9969] [ 140.994793][ T9975] siw: device registration error -23 [ 141.032691][ T9979] netlink: 'syz.5.2316': attribute type 30 has an invalid length. [ 141.041426][ T9983] veth0_to_team: entered promiscuous mode [ 141.047406][ T29] kauditd_printk_skb: 1758 callbacks suppressed [ 141.047420][ T29] audit: type=1326 audit(1768594400.830:27511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.077284][ T29] audit: type=1326 audit(1768594400.830:27512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.101016][ T29] audit: type=1326 audit(1768594400.830:27513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.124620][ T29] audit: type=1326 audit(1768594400.830:27514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.148150][ T29] audit: type=1326 audit(1768594400.830:27515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.171750][ T29] audit: type=1326 audit(1768594400.830:27517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.195302][ T29] audit: type=1326 audit(1768594400.830:27518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.218815][ T29] audit: type=1326 audit(1768594400.830:27519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.242373][ T29] audit: type=1326 audit(1768594400.830:27516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.265845][ T29] audit: type=1326 audit(1768594400.830:27520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9976 comm="syz.2.2315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 141.292022][ T9992] net_ratelimit: 11 callbacks suppressed [ 141.292037][ T9992] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 141.398813][T10004] Invalid argument reading file caps for ./file0 [ 141.423410][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2326'. [ 141.798304][T10024] ip6t_rpfilter: unknown options [ 142.001392][T10039] xt_policy: neither incoming nor outgoing policy selected [ 142.342974][T10047] netlink: 'syz.1.2339': attribute type 13 has an invalid length. [ 142.369904][T10047] gretap0: refused to change device tx_queue_len [ 142.376823][T10047] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 142.410134][T10051] ip6t_rpfilter: unknown options [ 142.508270][T10062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2345'. [ 142.612336][T10065] FAULT_INJECTION: forcing a failure. [ 142.612336][T10065] name failslab, interval 1, probability 0, space 0, times 0 [ 142.625630][T10065] CPU: 1 UID: 0 PID: 10065 Comm: syz.0.2342 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.625660][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.625671][T10065] Call Trace: [ 142.625677][T10065] [ 142.625684][T10065] __dump_stack+0x1d/0x30 [ 142.625709][T10065] dump_stack_lvl+0x95/0xd0 [ 142.625734][T10065] dump_stack+0x15/0x1b [ 142.625752][T10065] should_fail_ex+0x265/0x280 [ 142.625777][T10065] should_failslab+0x8c/0xb0 [ 142.625800][T10065] kmem_cache_alloc_noprof+0x69/0x4b0 [ 142.625824][T10065] ? vm_area_alloc+0x2c/0xb0 [ 142.625847][T10065] vm_area_alloc+0x2c/0xb0 [ 142.625865][T10065] mmap_region+0xadf/0x1410 [ 142.625916][T10065] do_mmap+0x9b3/0xbe0 [ 142.625944][T10065] vm_mmap_pgoff+0x17a/0x2e0 [ 142.625969][T10065] ksys_mmap_pgoff+0xc2/0x310 [ 142.625990][T10065] ? __x64_sys_mmap+0x49/0x70 [ 142.626016][T10065] x64_sys_call+0x16bb/0x3000 [ 142.626042][T10065] do_syscall_64+0xca/0x2b0 [ 142.626063][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.626083][T10065] RIP: 0033:0x7fc7b457f783 [ 142.626096][T10065] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 142.626112][T10065] RSP: 002b:00007fc7b2f9ce18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 142.626130][T10065] RAX: ffffffffffffffda RBX: 0000000000000538 RCX: 00007fc7b457f783 [ 142.626144][T10065] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 142.626156][T10065] RBP: 0000200000000c82 R08: 00000000ffffffff R09: 0000000000000000 [ 142.626169][T10065] R10: 0000000000000022 R11: 0000000000000246 R12: 000000000000000c [ 142.626181][T10065] R13: 00007fc7b2f9cef0 R14: 00007fc7b2f9ceb0 R15: 0000200000000080 [ 142.626196][T10065] [ 142.905532][T10069] netlink: 'syz.5.2347': attribute type 29 has an invalid length. [ 142.922981][T10069] netlink: 'syz.5.2347': attribute type 29 has an invalid length. [ 142.945905][T10069] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2347'. [ 143.200997][T10058] veth0_to_team: entered promiscuous mode [ 143.475724][T10090] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 143.763513][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 143.845348][T10104] netlink: 'syz.1.2361': attribute type 29 has an invalid length. [ 143.885109][T10104] netlink: 'syz.1.2361': attribute type 29 has an invalid length. [ 143.927022][T10104] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2361'. [ 144.013038][T10109] netlink: 'syz.5.2362': attribute type 10 has an invalid length. [ 144.066775][T10111] netlink: 'syz.1.2364': attribute type 13 has an invalid length. [ 144.097504][T10111] gretap0: refused to change device tx_queue_len [ 144.127170][T10111] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 144.184256][T10121] netlink: 'syz.3.2368': attribute type 30 has an invalid length. [ 144.232826][T10129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2371'. [ 144.235752][T10127] netlink: 'syz.5.2372': attribute type 10 has an invalid length. [ 144.272965][T10132] netlink: 'syz.2.2373': attribute type 13 has an invalid length. [ 144.282432][T10132] 0ªî{X¹¦: refused to change device tx_queue_len [ 144.289363][T10132] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 144.305411][T10135] netlink: 'syz.5.2375': attribute type 29 has an invalid length. [ 144.315084][T10135] netlink: 500 bytes leftover after parsing attributes in process `syz.5.2375'. [ 144.530549][T10150] siw: device registration error -23 [ 144.596649][T10146] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 144.826852][T10163] gretap0: refused to change device tx_queue_len [ 144.854903][T10163] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 144.873070][T10167] netlink: 500 bytes leftover after parsing attributes in process `syz.1.2388'. [ 145.389910][T10188] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 145.463165][T10194] siw: device registration error -23 [ 145.500455][T10196] netlink: 268 bytes leftover after parsing attributes in process `syz.2.2397'. [ 145.664859][T10202] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2401'. [ 145.872518][T10211] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2402'. [ 146.511495][T10223] bond0: (slave dummy0): Releasing backup interface [ 146.578379][T10223] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 146.610488][T10223] team0: Failed to send options change via netlink (err -105) [ 146.618377][T10223] team0: Port device dummy0 added [ 146.639680][T10228] gretap0: refused to change device tx_queue_len [ 146.647097][T10228] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 146.722025][T10234] netlink: 268 bytes leftover after parsing attributes in process `syz.3.2411'. [ 146.849042][T10240] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10240 comm=syz.5.2415 [ 146.895573][ T29] kauditd_printk_skb: 535 callbacks suppressed [ 146.895589][ T29] audit: type=1107 audit(1768594406.680:28056): pid=10239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 147.087795][T10254] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 147.110101][T10256] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10256 comm=syz.3.2420 [ 147.124067][ T29] audit: type=1107 audit(1768594406.910:28057): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 147.152811][ T29] audit: type=1326 audit(1768594406.930:28058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.176607][ T29] audit: type=1326 audit(1768594406.930:28059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.200212][ T29] audit: type=1326 audit(1768594406.930:28060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.223794][ T29] audit: type=1326 audit(1768594406.930:28061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.247895][ T29] audit: type=1326 audit(1768594406.930:28062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.271551][ T29] audit: type=1326 audit(1768594406.940:28063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.295270][ T29] audit: type=1326 audit(1768594406.940:28064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.318966][ T29] audit: type=1326 audit(1768594406.940:28065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10257 comm="syz.5.2421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b4d95f749 code=0x7ffc0000 [ 147.373990][T10233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 147.402910][T10260] bond0: (slave dummy0): Releasing backup interface [ 147.425979][T10269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2425'. [ 147.518426][T10273] siw: device registration error -23 [ 147.559206][T10288] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 147.822172][T10301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2437'. [ 147.851404][T10303] .`: (slave dummy0): Releasing backup interface [ 147.860702][T10303] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 147.869581][T10303] team0: Failed to send options change via netlink (err -105) [ 147.877070][T10303] team0: Port device dummy0 added [ 147.924664][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2440'. [ 147.958413][T10311] validate_nla: 15 callbacks suppressed [ 147.958428][T10311] netlink: 'syz.0.2441': attribute type 12 has an invalid length. [ 148.167661][T10321] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 148.210863][T10325] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 148.497340][T10348] bridge2: entered promiscuous mode [ 148.502743][T10348] bridge2: entered allmulticast mode [ 148.509977][T10348] team0: Port device bridge2 added [ 148.520392][T10348] bridge0: port 3(team0) entered blocking state [ 148.526693][T10348] bridge0: port 3(team0) entered disabled state [ 148.533190][T10348] team0: entered allmulticast mode [ 148.538988][T10348] team_slave_0: entered allmulticast mode [ 148.545881][T10348] team0: entered promiscuous mode [ 148.550944][T10348] team_slave_0: entered promiscuous mode [ 148.557214][T10348] bridge0: port 3(team0) entered blocking state [ 148.563577][T10348] bridge0: port 3(team0) entered forwarding state [ 148.623974][T10361] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 149.121262][T10354] Set syz1 is full, maxelem 65536 reached [ 149.184437][T10388] siw: device registration error -23 [ 149.244367][T10396] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 149.324766][T10405] netlink: 'syz.2.2476': attribute type 29 has an invalid length. [ 149.334028][T10405] netlink: 'syz.2.2476': attribute type 29 has an invalid length. [ 149.344025][T10405] __nla_validate_parse: 3 callbacks suppressed [ 149.344039][T10405] netlink: 500 bytes leftover after parsing attributes in process `syz.2.2476'. [ 149.360077][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2478'. [ 149.489545][T10419] netlink: 'syz.3.2481': attribute type 13 has an invalid length. [ 149.502207][T10419] gretap0: refused to change device tx_queue_len [ 149.509318][T10419] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 149.599255][T10425] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 149.701302][T10430] netlink: 'syz.5.2486': attribute type 13 has an invalid length. [ 149.712422][T10430] gretap0: refused to change device tx_queue_len [ 149.937792][T10421] siw: device registration error -23 [ 149.945304][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'. [ 149.954342][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2487'. [ 149.979154][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2487'. [ 149.988114][T10433] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2487'. [ 149.998486][ T43] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.014380][ T43] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.022623][ T43] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.034248][ T43] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 150.089851][T10449] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2490'. [ 150.190361][T10461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2496'. [ 150.214425][T10463] netlink: 'syz.2.2497': attribute type 10 has an invalid length. [ 150.234924][T10463] bond0: (slave dummy0): Releasing backup interface [ 150.254009][T10463] team0: Device dummy0 is of different type [ 150.305289][T10468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10468 comm=syz.5.2499 [ 150.321345][T10471] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10471 comm=syz.0.2500 [ 150.407541][T10482] FAULT_INJECTION: forcing a failure. [ 150.407541][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 150.420277][T10482] CPU: 0 UID: 0 PID: 10482 Comm: syz.5.2504 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.420362][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.420374][T10482] Call Trace: [ 150.420381][T10482] [ 150.420389][T10482] __dump_stack+0x1d/0x30 [ 150.420416][T10482] dump_stack_lvl+0x95/0xd0 [ 150.420476][T10482] dump_stack+0x15/0x1b [ 150.420565][T10482] should_fail_ex+0x265/0x280 [ 150.420591][T10482] should_failslab+0x8c/0xb0 [ 150.420611][T10482] __kmalloc_noprof+0xb9/0x5a0 [ 150.420634][T10482] ? nla_strdup+0x78/0xc0 [ 150.420738][T10482] ? __kvmalloc_node_noprof+0xb4/0x6b0 [ 150.420764][T10482] nla_strdup+0x78/0xc0 [ 150.420837][T10482] nf_tables_newset+0xe0b/0x14e0 [ 150.420866][T10482] nfnetlink_rcv+0xbc9/0x16c0 [ 150.420997][T10482] netlink_unicast+0x5c0/0x690 [ 150.421087][T10482] netlink_sendmsg+0x58b/0x6b0 [ 150.421119][T10482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.421213][T10482] __sock_sendmsg+0x145/0x180 [ 150.421236][T10482] ____sys_sendmsg+0x31e/0x4a0 [ 150.421270][T10482] ___sys_sendmsg+0x17b/0x1d0 [ 150.421312][T10482] __x64_sys_sendmsg+0xd4/0x160 [ 150.421464][T10482] x64_sys_call+0x17ba/0x3000 [ 150.421486][T10482] do_syscall_64+0xca/0x2b0 [ 150.421505][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.421543][T10482] RIP: 0033:0x7f3b4d95f749 [ 150.421560][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.421577][T10482] RSP: 002b:00007f3b4c3bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.421594][T10482] RAX: ffffffffffffffda RBX: 00007f3b4dbb5fa0 RCX: 00007f3b4d95f749 [ 150.421606][T10482] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 150.421631][T10482] RBP: 00007f3b4c3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 150.421643][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.421654][T10482] R13: 00007f3b4dbb6038 R14: 00007f3b4dbb5fa0 R15: 00007ffecfe568a8 [ 150.421673][T10482] [ 150.633276][T10485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2505'. [ 150.660378][T10489] netlink: 'syz.5.2506': attribute type 13 has an invalid length. [ 150.662402][T10479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.677170][T10479] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.691331][T10489] gretap0: refused to change device tx_queue_len [ 150.712932][T10491] bond0: Caught tx_queue_len zero misconfig [ 150.742521][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2509'. [ 150.775683][T10499] netlink: 'syz.2.2511': attribute type 10 has an invalid length. [ 150.797430][T10501] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10501 comm=syz.5.2512 [ 150.799186][T10499] team0: Device dummy0 is of different type [ 150.872173][T10507] netlink: 'syz.2.2514': attribute type 30 has an invalid length. [ 150.970030][T10512] netlink: 'syz.3.2516': attribute type 30 has an invalid length. [ 151.119523][T10517] siw: device registration error -23 [ 151.175215][T10526] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10526 comm=syz.2.2523 [ 151.240193][T10528] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 151.492171][T10524] gretap0: refused to change device tx_queue_len [ 151.990169][T10566] net_ratelimit: 9 callbacks suppressed [ 151.990187][T10566] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 152.054065][T10574] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 152.122592][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 152.122604][ T29] audit: type=1326 audit(1768594411.910:28490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.185844][ T29] audit: type=1326 audit(1768594411.910:28491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.210198][ T29] audit: type=1326 audit(1768594411.910:28492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.234005][ T29] audit: type=1326 audit(1768594411.940:28493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.257968][ T29] audit: type=1326 audit(1768594411.940:28494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.281757][ T29] audit: type=1326 audit(1768594411.940:28495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.305967][ T29] audit: type=1326 audit(1768594411.940:28496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.330342][ T29] audit: type=1326 audit(1768594411.940:28497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.353907][ T29] audit: type=1326 audit(1768594411.940:28498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.378102][ T29] audit: type=1326 audit(1768594411.940:28499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10575 comm="syz.2.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f897843f749 code=0x7ffc0000 [ 152.879879][T10619] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 153.793767][T10636] FAULT_INJECTION: forcing a failure. [ 153.793767][T10636] name failslab, interval 1, probability 0, space 0, times 0 [ 153.806453][T10636] CPU: 0 UID: 0 PID: 10636 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.806482][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 153.806493][T10636] Call Trace: [ 153.806576][T10636] [ 153.806585][T10636] __dump_stack+0x1d/0x30 [ 153.806610][T10636] dump_stack_lvl+0x95/0xd0 [ 153.806708][T10636] dump_stack+0x15/0x1b [ 153.806725][T10636] should_fail_ex+0x265/0x280 [ 153.806774][T10636] should_failslab+0x8c/0xb0 [ 153.806794][T10636] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 153.806906][T10636] ? __alloc_skb+0x2ff/0x4b0 [ 153.806934][T10636] __alloc_skb+0x2ff/0x4b0 [ 153.806960][T10636] ? __alloc_skb+0x228/0x4b0 [ 153.807005][T10636] netlink_ack+0xfd/0x500 [ 153.807039][T10636] netlink_rcv_skb+0x192/0x220 [ 153.807096][T10636] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.807124][T10636] rtnetlink_rcv+0x1c/0x30 [ 153.807140][T10636] netlink_unicast+0x5c0/0x690 [ 153.807167][T10636] netlink_sendmsg+0x58b/0x6b0 [ 153.807245][T10636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.807358][T10636] __sock_sendmsg+0x145/0x180 [ 153.807378][T10636] ____sys_sendmsg+0x31e/0x4a0 [ 153.807420][T10636] ___sys_sendmsg+0x17b/0x1d0 [ 153.807473][T10636] __x64_sys_sendmsg+0xd4/0x160 [ 153.807504][T10636] x64_sys_call+0x17ba/0x3000 [ 153.807528][T10636] do_syscall_64+0xca/0x2b0 [ 153.807604][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.807624][T10636] RIP: 0033:0x7ff2cf7af749 [ 153.807637][T10636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.807673][T10636] RSP: 002b:00007ff2ce20f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.807758][T10636] RAX: ffffffffffffffda RBX: 00007ff2cfa05fa0 RCX: 00007ff2cf7af749 [ 153.807772][T10636] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 153.807785][T10636] RBP: 00007ff2ce20f090 R08: 0000000000000000 R09: 0000000000000000 [ 153.807796][T10636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.807807][T10636] R13: 00007ff2cfa06038 R14: 00007ff2cfa05fa0 R15: 00007ffff68663c8 [ 153.807856][T10636] [ 154.054234][T10627] veth0_to_team: entered promiscuous mode [ 154.092599][ T7764] bridge0: port 3(team0) entered disabled state [ 154.136397][T10650] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 154.921116][T10677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10677 comm=syz.3.2578 [ 155.050532][T10684] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 155.133550][T10694] __nla_validate_parse: 7 callbacks suppressed [ 155.133565][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 155.136577][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2582'. [ 155.169056][T10698] netlink: 268 bytes leftover after parsing attributes in process `syz.5.2583'. [ 155.191437][T10700] validate_nla: 2 callbacks suppressed [ 155.191454][T10700] netlink: 'syz.0.2587': attribute type 29 has an invalid length. [ 155.213888][T10700] netlink: 'syz.0.2587': attribute type 29 has an invalid length. [ 155.241935][T10700] netlink: 500 bytes leftover after parsing attributes in process `syz.0.2587'. [ 155.340380][T10726] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 155.405395][T10734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2598'. [ 155.415281][T10742] netlink: 'syz.1.2602': attribute type 13 has an invalid length. [ 155.428416][T10742] gretap0: refused to change device tx_queue_len [ 155.439735][T10742] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.456350][T10733] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2599'. [ 155.512306][T10750] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2604'. [ 155.559260][T10755] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 155.574328][T10757] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 155.744615][T10773] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 155.759367][T10776] netlink: 268 bytes leftover after parsing attributes in process `syz.1.2612'. [ 155.844538][ T8063] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 155.854466][ T8063] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.895222][T10785] netlink: 'syz.1.2615': attribute type 13 has an invalid length. [ 155.908825][T10769] wg1 speed is unknown, defaulting to 1000 [ 155.915165][T10769] lo speed is unknown, defaulting to 1000 [ 155.930949][T10785] gretap0: refused to change device tx_queue_len [ 155.951340][T10785] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 155.968948][ T8063] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 155.978768][ T8063] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.025117][T10787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2616'. [ 156.039468][T10781] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2614'. [ 156.050915][ T8063] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 156.061335][ T8063] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.121601][T10792] FAULT_INJECTION: forcing a failure. [ 156.121601][T10792] name failslab, interval 1, probability 0, space 0, times 0 [ 156.134291][T10792] CPU: 0 UID: 0 PID: 10792 Comm: syz.5.2617 Not tainted syzkaller #0 PREEMPT(voluntary) [ 156.134319][T10792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 156.134329][T10792] Call Trace: [ 156.134334][T10792] [ 156.134338][T10792] __dump_stack+0x1d/0x30 [ 156.134355][T10792] dump_stack_lvl+0x95/0xd0 [ 156.134367][T10792] dump_stack+0x15/0x1b [ 156.134456][T10792] should_fail_ex+0x265/0x280 [ 156.134472][T10792] should_failslab+0x8c/0xb0 [ 156.134485][T10792] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 156.134499][T10792] ? __alloc_skb+0x2ff/0x4b0 [ 156.134581][T10792] __alloc_skb+0x2ff/0x4b0 [ 156.134595][T10792] ? __alloc_skb+0x228/0x4b0 [ 156.134609][T10792] netlink_alloc_large_skb+0xbf/0xf0 [ 156.134682][T10792] netlink_sendmsg+0x3cf/0x6b0 [ 156.134701][T10792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.134789][T10792] __sock_sendmsg+0x145/0x180 [ 156.134852][T10792] ____sys_sendmsg+0x31e/0x4a0 [ 156.134960][T10792] ___sys_sendmsg+0x17b/0x1d0 [ 156.135015][T10792] __x64_sys_sendmsg+0xd4/0x160 [ 156.135044][T10792] x64_sys_call+0x17ba/0x3000 [ 156.135070][T10792] do_syscall_64+0xca/0x2b0 [ 156.135143][T10792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.135163][T10792] RIP: 0033:0x7f3b4d95f749 [ 156.135180][T10792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.135197][T10792] RSP: 002b:00007f3b4c3bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.135272][T10792] RAX: ffffffffffffffda RBX: 00007f3b4dbb5fa0 RCX: 00007f3b4d95f749 [ 156.135283][T10792] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 156.135297][T10792] RBP: 00007f3b4c3bf090 R08: 0000000000000000 R09: 0000000000000000 [ 156.135310][T10792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.135324][T10792] R13: 00007f3b4dbb6038 R14: 00007f3b4dbb5fa0 R15: 00007ffecfe568a8 [ 156.135345][T10792] [ 156.337679][ T8063] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 156.348307][ T8063] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.467043][T10769] chnl_net:caif_netlink_parms(): no params data found [ 156.484755][T10804] netlink: 'syz.0.2622': attribute type 30 has an invalid length. [ 156.582123][ T8063] bridge_slave_1: left allmulticast mode [ 156.587953][ T8063] bridge_slave_1: left promiscuous mode [ 156.593725][ T8063] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.619350][ T8063] bridge_slave_0: left promiscuous mode [ 156.625119][ T8063] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.850945][ T8063] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.861798][ T8063] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.872174][ T8063] bond0 (unregistering): Released all slaves [ 156.886729][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.893859][T10769] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.901195][T10769] bridge_slave_0: entered allmulticast mode [ 156.907687][T10769] bridge_slave_0: entered promiscuous mode [ 156.921696][T10769] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.928792][T10769] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.937342][T10769] bridge_slave_1: entered allmulticast mode [ 156.947110][T10769] bridge_slave_1: entered promiscuous mode [ 156.975564][ T8063] hsr_slave_0: left promiscuous mode [ 156.990608][ T8063] hsr_slave_1: left promiscuous mode [ 156.996288][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.003722][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.011768][ T8063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.019255][ T8063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.035946][ T8063] veth1_macvtap: left promiscuous mode [ 157.041578][ T8063] veth0_macvtap: left promiscuous mode [ 157.047264][ T8063] veth1_vlan: left promiscuous mode [ 157.052673][ T8063] veth0_vlan: left promiscuous mode [ 157.165298][T10838] netlink: 'syz.2.2631': attribute type 29 has an invalid length. [ 157.174395][T10799] FAULT_INJECTION: forcing a failure. [ 157.174395][T10799] name fail_futex, interval 1, probability 0, space 0, times 1 [ 157.187230][T10799] CPU: 0 UID: 0 PID: 10799 Comm: syz.1.2618 Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.187274][T10799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 157.187287][T10799] Call Trace: [ 157.187294][T10799] [ 157.187301][T10799] __dump_stack+0x1d/0x30 [ 157.187327][T10799] dump_stack_lvl+0x95/0xd0 [ 157.187351][T10799] dump_stack+0x15/0x1b [ 157.187399][T10799] should_fail_ex+0x265/0x280 [ 157.187424][T10799] should_fail+0xb/0x20 [ 157.187442][T10799] get_futex_key+0x5b8/0xc00 [ 157.187470][T10799] futex_wake+0x7d/0x360 [ 157.187521][T10799] ? perf_lock_task_context+0x260/0x2d0 [ 157.187552][T10799] do_futex+0x323/0x380 [ 157.187580][T10799] mm_release+0xa1/0x190 [ 157.187622][T10799] exit_mm_release+0x25/0x30 [ 157.187642][T10799] exit_mm+0x38/0x180 [ 157.187665][T10799] do_exit+0x3fb/0x1590 [ 157.187739][T10799] do_group_exit+0xff/0x140 [ 157.187764][T10799] ? get_signal+0xe50/0xf70 [ 157.187792][T10799] get_signal+0xe58/0xf70 [ 157.187822][T10799] arch_do_signal_or_restart+0x96/0x450 [ 157.187969][T10799] exit_to_user_mode_loop+0x6a/0x740 [ 157.187989][T10799] do_syscall_64+0x1dd/0x2b0 [ 157.188008][T10799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.188029][T10799] RIP: 0033:0x7ff2cf7af749 [ 157.188045][T10799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.188136][T10799] RSP: 002b:00007ff2ce1ee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 157.188156][T10799] RAX: fffffffffffffe00 RBX: 00007ff2cfa06090 RCX: 00007ff2cf7af749 [ 157.188170][T10799] RDX: 0000000004000081 RSI: 0000200000000000 RDI: 0000000000000003 [ 157.188187][T10799] RBP: 00007ff2ce1ee090 R08: 0000000000000000 R09: 0000000000000000 [ 157.188200][T10799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.188213][T10799] R13: 00007ff2cfa06128 R14: 00007ff2cfa06090 R15: 00007ffff68663c8 [ 157.188239][T10799] [ 157.383227][T10769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.393228][T10839] netlink: 'syz.2.2631': attribute type 29 has an invalid length. [ 157.403661][T10769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.427841][T10769] team0: Port device team_slave_0 added [ 157.436696][T10769] team0: Port device team_slave_1 added [ 157.453733][T10769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.460731][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.486709][T10769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.498159][T10769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.505172][T10769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.531109][T10769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.580777][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 157.580792][ T29] audit: type=1326 audit(1768594417.370:28844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.612682][ T29] audit: type=1326 audit(1768594417.400:28845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.636488][ T29] audit: type=1326 audit(1768594417.400:28846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.660105][ T29] audit: type=1326 audit(1768594417.400:28847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.683685][ T29] audit: type=1326 audit(1768594417.400:28848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.707341][ T29] audit: type=1326 audit(1768594417.400:28849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.730934][ T29] audit: type=1326 audit(1768594417.400:28850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.756049][ T29] audit: type=1326 audit(1768594417.400:28851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.780347][ T29] audit: type=1326 audit(1768594417.400:28852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.805546][ T29] audit: type=1326 audit(1768594417.400:28853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10847 comm="syz.0.2634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b457f749 code=0x7ffc0000 [ 157.848064][T10769] hsr_slave_0: entered promiscuous mode [ 157.857180][T10769] hsr_slave_1: entered promiscuous mode [ 157.864400][T10769] debugfs: 'hsr0' already exists in 'hsr' [ 157.870198][T10769] Cannot create hsr debugfs directory [ 157.875899][T10846] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 157.942389][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 157.942861][T10855] $Hÿ: renamed from bond0 (while UP) [ 157.957090][T10855] $Hÿ: entered promiscuous mode [ 157.987838][ T8063] IPVS: stop unused estimator thread 0... [ 158.227909][T10769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.236897][T10769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.261122][T10769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.329827][T10880] net_ratelimit: 2 callbacks suppressed [ 158.329879][T10880] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 158.362005][T10769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.440404][T10769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.478718][T10769] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.496352][ T7758] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.503553][ T7758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.515665][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.523010][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.602600][T10769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.727121][T10769] veth0_vlan: entered promiscuous mode [ 158.735564][T10769] veth1_vlan: entered promiscuous mode [ 158.752042][T10769] veth0_macvtap: entered promiscuous mode [ 158.760245][T10769] veth1_macvtap: entered promiscuous mode [ 158.771646][T10913] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 158.780348][T10769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.781107][T10913] FAULT_INJECTION: forcing a failure. [ 158.781107][T10913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.791437][T10769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.801420][T10913] CPU: 1 UID: 0 PID: 10913 Comm: syz.0.2650 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.801455][T10913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 158.801468][T10913] Call Trace: [ 158.801475][T10913] [ 158.801483][T10913] __dump_stack+0x1d/0x30 [ 158.801508][T10913] dump_stack_lvl+0x95/0xd0 [ 158.801527][T10913] dump_stack+0x15/0x1b [ 158.801637][T10913] should_fail_ex+0x265/0x280 [ 158.801726][T10913] should_fail+0xb/0x20 [ 158.801746][T10913] should_fail_usercopy+0x1a/0x20 [ 158.801835][T10913] _copy_to_user+0x20/0xa0 [ 158.801864][T10913] simple_read_from_buffer+0xb5/0x130 [ 158.801886][T10913] proc_fail_nth_read+0x10e/0x150 [ 158.802022][T10913] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.802049][T10913] vfs_read+0x1a8/0x770 [ 158.802066][T10913] ? __rcu_read_unlock+0x4f/0x70 [ 158.802087][T10913] ? __fget_files+0x184/0x1c0 [ 158.802184][T10913] ? mutex_lock+0x58/0x90 [ 158.802212][T10913] ksys_read+0xda/0x1a0 [ 158.802272][T10913] __x64_sys_read+0x40/0x50 [ 158.802292][T10913] x64_sys_call+0x2889/0x3000 [ 158.802315][T10913] do_syscall_64+0xca/0x2b0 [ 158.802336][T10913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.802412][T10913] RIP: 0033:0x7fc7b457e15c [ 158.802465][T10913] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 158.802483][T10913] RSP: 002b:00007fc7b2fbe030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.802501][T10913] RAX: ffffffffffffffda RBX: 00007fc7b47d6090 RCX: 00007fc7b457e15c [ 158.802514][T10913] RDX: 000000000000000f RSI: 00007fc7b2fbe0a0 RDI: 000000000000000b [ 158.802527][T10913] RBP: 00007fc7b2fbe090 R08: 0000000000000000 R09: 0000000000000000 [ 158.802540][T10913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 158.802571][T10913] R13: 00007fc7b47d6128 R14: 00007fc7b47d6090 R15: 00007ffe4291fd98 [ 158.802590][T10913] [ 159.004935][ T8063] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.019341][ T8063] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.028659][ T8063] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.043757][ T8063] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.049714][T10917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56592 sclass=netlink_route_socket pid=10917 comm=syz.1.2653 [ 159.160352][T10930] netlink: 'syz.0.2658': attribute type 10 has an invalid length. [ 159.429869][T10974] netlink: 'syz.0.2676': attribute type 13 has an invalid length. [ 159.479576][T10977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.488079][T10977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.496469][T10974] ================================================================== [ 159.504558][T10974] BUG: KCSAN: data-race in fib6_del / fib6_walk_continue [ 159.511617][T10974] [ 159.513923][T10974] write to 0xffffc900077736a0 of 4 bytes by task 10977 on cpu 1: [ 159.521624][T10974] fib6_walk_continue+0x343/0x440 [ 159.526648][T10974] fib6_walk+0xc5/0x180 [ 159.530804][T10974] fib6_flush_trees+0x150/0x240 [ 159.535648][T10974] xfrm_policy_insert+0x1e6/0x790 [ 159.540669][T10974] xfrm_add_policy+0x1aa/0x450 [ 159.545427][T10974] xfrm_user_rcv_msg+0x566/0x660 [ 159.550444][T10974] netlink_rcv_skb+0x123/0x220 [ 159.555291][T10974] xfrm_netlink_rcv+0x48/0x60 [ 159.559962][T10974] netlink_unicast+0x5c0/0x690 [ 159.564726][T10974] netlink_sendmsg+0x58b/0x6b0 [ 159.569496][T10974] __sock_sendmsg+0x145/0x180 [ 159.574186][T10974] ____sys_sendmsg+0x31e/0x4a0 [ 159.578945][T10974] ___sys_sendmsg+0x17b/0x1d0 [ 159.583700][T10974] __x64_sys_sendmsg+0xd4/0x160 [ 159.588553][T10974] x64_sys_call+0x17ba/0x3000 [ 159.593221][T10974] do_syscall_64+0xca/0x2b0 [ 159.597708][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.603589][T10974] [ 159.605895][T10974] read to 0xffffc900077736a0 of 4 bytes by task 10974 on cpu 0: [ 159.613519][T10974] fib6_del+0x4e7/0x8b0 [ 159.617665][T10974] fib6_clean_node+0x167/0x280 [ 159.622419][T10974] fib6_walk_continue+0x39f/0x440 [ 159.627442][T10974] fib6_walk+0xc5/0x180 [ 159.631591][T10974] fib6_clean_all+0xca/0x140 [ 159.636172][T10974] rt6_disable_ip+0xa6/0x580 [ 159.640742][T10974] addrconf_ifdown+0x8a/0xf00 [ 159.645411][T10974] addrconf_notify+0x222/0x8f0 [ 159.650157][T10974] raw_notifier_call_chain+0x6f/0x1b0 [ 159.655524][T10974] __dev_notify_flags+0x1d9/0x360 [ 159.660544][T10974] netif_change_flags+0xac/0xd0 [ 159.665396][T10974] do_setlink+0x8db/0x2780 [ 159.669807][T10974] rtnl_newlink+0xdb5/0x1360 [ 159.674450][T10974] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 159.679379][T10974] netlink_rcv_skb+0x123/0x220 [ 159.684140][T10974] rtnetlink_rcv+0x1c/0x30 [ 159.688543][T10974] netlink_unicast+0x5c0/0x690 [ 159.693394][T10974] netlink_sendmsg+0x58b/0x6b0 [ 159.698156][T10974] __sock_sendmsg+0x145/0x180 [ 159.702828][T10974] ____sys_sendmsg+0x31e/0x4a0 [ 159.707583][T10974] ___sys_sendmsg+0x17b/0x1d0 [ 159.712252][T10974] __x64_sys_sendmsg+0xd4/0x160 [ 159.717096][T10974] x64_sys_call+0x17ba/0x3000 [ 159.721764][T10974] do_syscall_64+0xca/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 159.726251][T10974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.732127][T10974] [ 159.734434][T10974] value changed: 0x00000004 -> 0x00000003 [ 159.740129][T10974] [ 159.742445][T10974] Reported by Kernel Concurrency Sanitizer on: [ 159.748577][T10974] CPU: 0 UID: 0 PID: 10974 Comm: syz.0.2676 Not tainted syzkaller #0 PREEMPT(voluntary) [ 159.758365][T10974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 159.768429][T10974] ================================================================== [ 159.878392][T10974] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.933926][T10974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.944046][T10974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.951527][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 159.952653][ T4444] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 159.967797][T10974] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 159.983199][ T9] lo speed is unknown, defaulting to 1000 [ 159.989047][ T9] syz2: Port: 1 Link DOWN [ 159.994003][ T3889] wg1 speed is unknown, defaulting to 1000 [ 160.000582][ T3889] syz0: Port: 1 Link DOWN [ 160.005127][ T3505] syz: Port: 1 Link DOWN [ 160.045086][ T7758] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.053743][ T7758] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.069994][ T7758] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.081219][ T7758] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.477094][ T31] team0: Port device gtp0 removed [ 160.500871][ T31] $Hÿ (unregistering): Released all slaves [ 160.560469][ T31] tipc: Left network mode [ 160.579594][ T31] batman_adv: batadv0: Removing interface: veth1_vlan [ 160.615518][ T7758] smc: removing ib device syz! [ 161.000742][ T31] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.061935][ T31] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.140062][ T31] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.179823][ T31] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.262466][ T31] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.272295][ T31] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.309613][ T31] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.319785][ T31] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.349949][ T31] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.359771][ T31] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.420512][ T31] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 161.430355][ T31] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.479069][ T31] bridge_slave_1: left allmulticast mode [ 161.484745][ T31] bridge_slave_1: left promiscuous mode [ 161.490400][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.498089][ T31] bridge_slave_0: left allmulticast mode [ 161.503972][ T31] bridge_slave_0: left promiscuous mode [ 161.509611][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.517707][ T31] team0: left allmulticast mode [ 161.522583][ T31] team_slave_0: left allmulticast mode [ 161.528043][ T31] team0: left promiscuous mode [ 161.532850][ T31] team_slave_0: left promiscuous mode [ 161.538643][ T31] bridge0: port 3(team0) entered disabled state [ 161.545628][ T31] bridge_slave_1: left allmulticast mode [ 161.551323][ T31] bridge_slave_1: left promiscuous mode [ 161.557280][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.565270][ T31] bridge_slave_0: left allmulticast mode [ 161.570975][ T31] bridge_slave_0: left promiscuous mode [ 161.576728][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.660708][ T31] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 161.670222][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.679373][ T31] bond0 (unregistering): Released all slaves [ 161.769562][ T31] team0: Port device bridge2 removed [ 161.820504][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.829926][ T31] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 161.838394][ T31] bond0 (unregistering): Released all slaves [ 161.846467][ T5738] infiniband syb2: ib_query_port failed (-19) [ 161.871335][ T31] tipc: Left network mode [ 161.879672][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.887098][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.894975][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.902348][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.911272][ T31] hsr_slave_0: left promiscuous mode [ 161.916823][ T31] hsr_slave_1: left promiscuous mode [ 161.922922][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.930477][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.941369][ T31] veth1_macvtap: left promiscuous mode [ 161.946901][ T31] veth0_macvtap: left promiscuous mode [ 161.953059][ T31] veth1_macvtap: left promiscuous mode [ 161.958606][ T31] veth1_vlan: left promiscuous mode [ 161.963890][ T31] veth0_vlan: left promiscuous mode [ 162.022698][ T31] team0 (unregistering): Port device team_slave_0 removed [ 162.048120][ T31] team0 (unregistering): Port device dummy0 removed [ 162.080214][ T31] team0 (unregistering): Port device team_slave_0 removed [ 162.124066][T10974] syz.0.2676 (10974) used greatest stack depth: 8872 bytes left [ 162.782345][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.830794][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.880851][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.930743][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.991447][ T31] bridge_slave_1: left allmulticast mode [ 162.997254][ T31] bridge_slave_1: left promiscuous mode [ 163.002943][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.010415][ T31] bridge_slave_0: left allmulticast mode [ 163.016030][ T31] bridge_slave_0: left promiscuous mode [ 163.021732][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.029653][ T31] bridge_slave_1: left allmulticast mode [ 163.035320][ T31] bridge_slave_1: left promiscuous mode [ 163.041099][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.048849][ T31] bridge_slave_0: left allmulticast mode [ 163.054470][ T31] bridge_slave_0: left promiscuous mode [ 163.060189][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.129731][ T31] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.138586][ T31] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.147158][ T31] .` (unregistering): Released all slaves [ 163.155101][ T31] bond1 (unregistering): Released all slaves [ 163.210841][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.220718][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.230257][ T31] bond0 (unregistering): Released all slaves [ 163.271121][ T31] tipc: Disabling bearer [ 163.276100][ T31] tipc: Left network mode [ 163.281670][ T31] IPVS: stopping master sync thread 7929 ... [ 163.289979][ T31] hsr_slave_0: left promiscuous mode [ 163.295689][ T31] hsr_slave_1: left promiscuous mode [ 163.301302][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.308720][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.316179][ T31] batman_adv: batadv0: Removing interface: veth1_vlan [ 163.324907][ T31] hsr_slave_0: left promiscuous mode [ 163.330684][ T31] hsr_slave_1: left promiscuous mode [ 163.336342][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.343784][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.351842][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.359223][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.368612][ T31] veth1_macvtap: left promiscuous mode [ 163.374150][ T31] veth0_macvtap: left promiscuous mode [ 163.379655][ T31] veth1_vlan: left promiscuous mode [ 163.384921][ T31] veth0_vlan: left promiscuous mode [ 163.441056][ T31] team0 (unregistering): Port device team_slave_0 removed [ 163.465968][ T31] team0 (unregistering): Port device dummy0 removed [ 163.498702][ T31] team0 (unregistering): Port device team_slave_1 removed [ 163.507712][ T31] team0 (unregistering): Port device team_slave_0 removed