last executing test programs: 38.899730175s ago: executing program 4 (id=69): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x30) r4 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r4, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) 38.80962943s ago: executing program 4 (id=72): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_FLUSH(r0, 0x4000000, 0xd1, 0x0, 0x0) 38.737982124s ago: executing program 4 (id=74): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="a79325bd7000fedbdf251f000008"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0xe, 0x2, &(0x7f0000000040)=ANY=[@ANYBLOB="926a2c48b0925c23ba22d2fd358388dd7dff4a7c7b5de81a589b922c30074fd40b26e7b4be85b5a94169aef3409bc4e1b89463f8f70529f4f59f6825cd44435a577f27e9f7b1cb89867ed2dd27be6bb48957da9d93cefadaf68ce894cd5a1ded4ec27b061c232b44dda6717e3a66cac220f98fcebf4b3d1c68efc49c5c29093134"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r4 = eventfd2(0x0, 0x800) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x106020, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) socket(0x10, 0x3, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000000180)={0x80, 0xd, 0xc, 0x5f, 0x7fffffff, 0xb}) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24005000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYRES16=r9, @ANYBLOB="010027bd7000000018000100000008000100000000000400048008"], 0x140}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x240080d8}, 0x0) syz_io_uring_setup(0x20df, &(0x7f0000000180)={0x0, 0x58d9, 0x1, 0x0, 0xbc, 0x0, r1}, &(0x7f0000000200), &(0x7f0000000240)) 38.569627584s ago: executing program 4 (id=75): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = syz_clone(0x200, &(0x7f0000000140)="dfd0696d14dc745e8a3a8dafa6217d36b313cecfa3a83182719fb0c235ea0740021f378e6b5a913ea31394b31befb9ef5ca00037394c8a5f0d715caf9528c8935d5da57d67116c01861ff08d84d7a35a6b02b955f1a8c149c34ce7a17dabdc580327f29cc85b3cc809a991fe3e6cdc6653cfc4fc84242c551543a046516966d18fcc2f7985562e31859e9280238385b6896fed7367345ac7b6454c7e3361a0ec9fb2f9d68bd8448f69a42d11020c8a72b19b24656fac425ad3e7206d9f950f3b91479a9b3f5a1cea82f8943bcff544b1159cc2d6eda30c07a0de3ad45f18c7dff8859a9885f4830b", 0xe8, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000240)="9812a39d00f58ac1e678120c15d4127f087bb6c1c4c567f2ec1d3a1992afa32361bc59976f4a7a0f298f5ed0bd9d76a6ff5c710cce910192cf2b365cf855fa266c67e46e2de0636f6a43cb06200a4c3f88e636795ed34e6cb84d7d5880c0527ed4b9435e647213396b6e0732f438532f2eed145f2bba24b0d3a34981f8ca9eeb2badf180efce7c809da5e54fff28122a3414b0734119d8dbb49c45f78153f5495d7479788d19f5cc459c83f8027afedc80498b4d39b927990439715370a31ba60000000000000000") r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=@newtaction={0xfffffffffffffdef, 0x1e, 0x109, 0x0, 0x4, {}, [{0x58, 0x1, [@m_gact={0x54, 0x7, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x17fe}}, @TCA_GACT_PARMS={0x18, 0x2, {0x80000001, 0x2, 0x3, 0x1, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x2b1e}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8982, &(0x7f0000000340)={0x7, 'caif0\x00', {0x5}, 0x8}) (async) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000000), 0xfc, 0x59c, &(0x7f0000001500)="$eJzs3e9rJGcdAPDvbHbz4y6aKH1RhdbDFu6KXnLp2TaI9k4Q3xWU6usz5PZCuE32SDZtEw7N4R8giNiCb/SVbwT/AEHuTyiCYN+LFeXQq4JFtCMzO5vspTu3SS67q8nnA5N5duaZ+X6f2d3Z2ZlnMwGcWRci4npEjEXECxExU0yvFEPstoes3gcP7y5nQxJp+vpfk0iKaVm1JGIsKZY9Xyw22R49aqo92tzeub3UaNQ3isnzrbU785vbO5dX15ZW6iv19atXF15efGXxpcUrJ9LOrF2vfv1PP/nhL77x6m+++OYfbvzl0veyfKeL+Z12nLT2Nqll22JPNSI2BhFsBMaK9vwrbetdqzrstAAAKJEd4386Ij6fH//PxFifY7XxrnIy8OwAAACAk5Bem45/JxHpEdWOvAQAAAAwKpW8D2xSmSv6AkxHpTI31+7D+1ScqzSam60v3Gpurd9s95WdjVrl1mqjfiXvUzsREbUke7ywd0ah/fjFvG42JI/0Af7xzFQ+f2652bg5ihMeAAAAcAadP/D9/x8z7e//AAAAwCkzW4zPjTgPAAAAYHBmR50AAAAAMHDH+P4/Pog8AAAAgIH45muvZUPauf/1zTe2t24337h8s755e25ta3luublxZ26l2VxppBMRa/3W12g273wp1rfemm/VN1vzm9s7N9aaW+utG6uP3AIbAAAAGKJPfe7+e0lE7H55Kh+ic21/rGQBvxWAU6NyyHpp9uf9weYCDFfZxzxw+lUfP7usm+/EIHIBhqvWHiWjzgMYnX47gMmyGu8eK5yfDwEAwAhc/Mz999Lk49f/q/vnBoBT6rDX/4HTp+T6fzoz7ESAoSu9/t+nYwDw/6+mByCcef2v/5d4N591vX+ENO27LgAAYKCm8yGpzBXXAqej8mHaFrNRS26tNupXIuKTEfH7mdpE9nghXzLxowEAAAAAAAAAAAAAAAAAAAAAAAAAOKQ0TSI9huqxlgIAAABGIaLy56S4D/DFmeenD54fGE8+zG8F/FGapm/+9PW331pqtTYWsul/y6ePR0TrnWz6+ChOXwAAAABdOnf5z7+/v1gbcTYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFYfPLy73BmGGffB1yJitlf8akzm48moRcS5vydR7VouiYixE4i/ey8inu4VP8nSitkii4PxKxExlWfxxPErRbEs/jNpmvaMf/6Jo8PZdj/b/1zv9f6vxIV83Pv9X20P1540fmf/d75rH9yJ39n/je3F/+pe8GzP84lDxvjs73413/XwO/vFifb8au/9Xyd+UrL/fa5XsOrHJ3332zs7ZbmlP4+42Gl7GhFd8btjzbfW7sxvbu9cXl1bWqmv1NevXl14efGVxZcWr8zfWm3Ui7/7K3473Sv+6Jlff1QW/8GFiHMR6czDu8vjnZyKD5bZ9ugryV4q44/k9HxWqJWted9/9hfrrp2v9cG9iEvP7W3/9Ptdz//T+bjn9v/ZP9Nc/jmQzb9YfCYku+1yRPHyjYhnf/nbZ0vbf2+yKB39+b/Uv+m5F771gz8esioAMASb2zu3lxqN+sbAC++kaXq4ytlRaXmdtDga60xJInYP1skO4E64FVMRUTIrYicm96ZMFVs1Drvmp0pTfX8qYkjPzlEL145SOZ040ost2f0faOAZLoznL8iR7pYAAIAB2D/6H3UmAAAAAAAAAAAAAAAAAAAAcHYN4/+KHYy5O5qmAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA81n8DAAD//x3CzJ0=") (async) r3 = syz_open_procfs(r1, &(0x7f0000000380)='net/ip_vs\x00') futex(&(0x7f000000cffc)=0x800000, 0xeca5f9e0bad24de8, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x200080, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="fd4c5cbeaab3e2c3e32997ffb838371a57000000000000000000"]) 38.087530102s ago: executing program 4 (id=78): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x7c528000) r0 = socket$pppoe(0x18, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) unshare(0x58040000) pselect6(0x40, &(0x7f0000000040)={0xffffffffbffffffd, 0x80000001, 0x0, 0x7, 0x10000000, 0x1}, &(0x7f00000001c0)={0x15, 0x7, 0x6, 0x0, 0x7, 0x400000}, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000180)=0xc, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x10000000}, 0x1c) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x5}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040c5}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRESHEX=r3], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sched_setattr(0x0, 0x0, 0x0) epoll_create1(0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x97}]}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r8, &(0x7f0000000200)={0x1d, r9}, 0x10) close_range(r7, 0xffffffffffffffff, 0x3e00000000000000) 36.75140199s ago: executing program 4 (id=108): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 36.715218872s ago: executing program 32 (id=108): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 18.264938791s ago: executing program 5 (id=444): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000000ff80007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 18.263952371s ago: executing program 5 (id=446): bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00'}, 0x18) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x10) (async) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8800) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'vlan0\x00', @random="0100c3201000"}) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x2000000000009237, 0x12) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d616d65000000001c00030007682c020b7b37f27f51010054d4077549f4e74e86f469eb08000240100000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) unshare(0x9279fb82838bc017) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x5a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0), 0x1, 0x64f, &(0x7f0000000c40)="$eJzs3U9oHNcZAPBvdiVZktXKLqXUhlKBDzYUy5Jr6raXuu6hPvRgqA+llGJhSa7w+g+WDLVqsAQ9JJBACLmGYAKBnHMPvucWAkluOQecEBwSSII3zO6stVrtSCtZuytpfj9YzZs3s3rvm9m382ZGTxNAYU2kP0oRxyKeXU0ixpuWjUV94US23tOvHlxLX0lUq3//Mokky2usn2TTw9nMcER8eDHiZ+WN5S7eX74xU6nWPYw4s3TzzpnF+8unF27OXJ+7Pndr+uzvz52f+sP0ueldifNwNj0UEa/+/z+/m/+ocjqJC3Fl8H+z0RLHbpmIiXiWhdicPxAR59NEm+2y3xyAEAqtnH0eByPiFzEe5dpc3XgsvNLXygFdVS1HVIGCSrbb/tMOQiP97rKvD9i3Gv2Axrl9Z+fBV7rcK+mdJ3+unwBtjH+gfm0khmvnRqNPk6Yzo/q1jSO7UH5axg8Pjr+ZvmLddYhvn++dgV0oJ8/KakT8sl38Sa1uR2qRpvGX1tUjiYipiBjK6veXF6hD0pTuxnWYzew0/lJEXMimaf7FHZY/0TLf6/gBKKbasTc9kK+kibXjX9r3aPR/ok3/Z6zNsWsn+n38y+//NY73w7Vr5KWWfli63S63/5WDrRmfvXzp9bzym/t/6Sstv9EX7IUnqxHHW+J/KQ026/+k8Sdt9n+6ytULnZXx14+/uJS3bAfxD3UaWyeqjyJOtj3/WeuVpqlN7k+emV+ozE3Vf7Yt4/0P/vVOXhB7Yf+P5sTftP9Lre9Lt8mdDst47/Kjm3nLxuLfW8Rf+nwoqZ9v1rfZ26PD2ZKh5G/ZKvXJf2eWlu6e3bwujXVq0+l6/KdOtG//6z7/q+t/z0jjK7MDd/5x42nesub9nyT1emy1/5tuJj+rdliHPGn8s1vv/w3tP817rcMyvvnnvV/lLdvs8z/yIoEBAAAAAABAAZVq92CT0uTaDe/S5GR9vOzPY7RUub249Jv52/duzUacqv095GCpcad7vD6fpPPT2d/DNubPtsz/NiKORsQb5ZHa/OS125XZPscOAAAAAAAAAAAAAAAAAAAAe8XhbPx/4znVX5dLtfH/QEF08wFzwN6m/UNx1dr/hkc8AUWQd/xf7HE9gN7T/4fi0v6huLR/KC7tH4pL+4fi0v6huPLaf/VhjysCAAAAAOymo79+/GkSESt/HKm9UkPZMiOC4GAb3GqFod7UA+i9cr8rAPTN81v/OvtQOFv2/1PfZf8csPvVAfogaZdZ6xxUN2/8j9e90+kEAAAAAAAAAAAAAHTRyWNN4/9H14//72hsALBvbWPY32o36wH03gsM2DHWB/Y5j/6A4trxOf7w7tYD6J+24/+b5Db3x1u9c7slAQAAAAAAAAAAAAB5xmqvpDSZjQUei1JpcjLiJxFxJAaT+YXK3FRE/DQiPikPHkrnp/tdaQAAAAAAAAAAAAAAAAAAADhgFu8v35ipVObuNie+35BzsBONp6D2oKw/xTbfFUnvN8tIRPR9p3QtMdCUk0SspHs+zRnIaw69S8Re2D5Zos9fTAAAAAAAAAAAAAAAAAAAUEBNY4/bO/5Wj2sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL239vz/9YlkQ05r4kT+opZEv2MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPanHwMAAP//eSMz4g==") 18.021075915s ago: executing program 5 (id=456): socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x4}, 0x4) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x4}, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$packet(0x11, 0x3, 0x300) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mlock2(&(0x7f00000e3000/0x2000)=nil, 0x2000, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r2, 0x0) (async) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, r2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r5, &(0x7f0000000f40), 0x0, 0x2400c0c6) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x6358, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x3}, 0x5b28, 0xb5, 0x0, 0x1, 0x8, 0x20005, 0x77bc, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETVESABLANK(r8, 0x560e, 0x0) ioctl$RTC_ALM_READ(r6, 0x40187013, &(0x7f0000000180)) (async) ioctl$RTC_ALM_READ(r6, 0x40187013, &(0x7f0000000180)) pread64(r2, &(0x7f0000000080)=""/196, 0xc4, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) 17.900204753s ago: executing program 5 (id=460): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1a08050, &(0x7f0000000540)=ANY=[], 0x2, 0x57e, &(0x7f0000000bc0)="$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") r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb, 0x0, 0xffffffff}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="28000000120001abed30a9000000000027000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setuid(0xee00) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) ioctl$BLKRASET(0xffffffffffffffff, 0x1262, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e746572"], 0xdc}}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x4e0, &(0x7f00000000c0)={0x0, 0x79af, 0x400, 0x8000, 0x400252}, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={0x0, @phonet={0x23, 0xd0, 0xff, 0x8e}, @vsock={0x28, 0x0, 0xffffffff, @my=0x0}, @in={0x2, 0x4e21, @broadcast}, 0x9, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xffffffffffffffff, 0x3ff, 0x5}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r6 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregset(0x4205, r6, 0x202, &(0x7f00000000c0)={0x0}) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000800)=@generic={&(0x7f0000000880)='./file0/file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x2, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @exit], &(0x7f0000000280)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, 0x38}, 0x94) 17.841747216s ago: executing program 5 (id=461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x340, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 17.471262428s ago: executing program 5 (id=466): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x28020480) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x200000000000000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0xb, 0x5, @remote}]}]}, 0xc0}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000004c0)={r6, 0x83, "428efac647a8d3bc7f46ed1f53ad22553e0823aec90d584528bca1aec892cf1c76d32df6f8d02387176cf8d287ebdc40f7d5b2512d64d4aa7e9f5ff0df0de7ab1dab5239bd03836c64e0b132b5b76795c9281c72487df30f837aeb9fee838be1e9d73d1aff8d2acd757d54878405855a722a7f86d7d89a0cc3caa1b6da5153c0f6693f"}, &(0x7f0000000580)=0x8b) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4096, 0xffffffffffffffbb, 0x0, 0x0}, &(0x7f0000000280)=0x40) splice(r2, 0x0, r0, 0x0, 0x10020, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 17.454267189s ago: executing program 33 (id=466): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) unshare(0x28020480) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x200000000000000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x2c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0xb, 0x5, @remote}]}]}, 0xc0}}, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000004c0)={r6, 0x83, "428efac647a8d3bc7f46ed1f53ad22553e0823aec90d584528bca1aec892cf1c76d32df6f8d02387176cf8d287ebdc40f7d5b2512d64d4aa7e9f5ff0df0de7ab1dab5239bd03836c64e0b132b5b76795c9281c72487df30f837aeb9fee838be1e9d73d1aff8d2acd757d54878405855a722a7f86d7d89a0cc3caa1b6da5153c0f6693f"}, &(0x7f0000000580)=0x8b) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r3, r7, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4096, 0xffffffffffffffbb, 0x0, 0x0}, &(0x7f0000000280)=0x40) splice(r2, 0x0, r0, 0x0, 0x10020, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 11.685073536s ago: executing program 0 (id=560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYRES32=r0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) statx(0xffffffffffffffff, &(0x7f0000000180)='mnt/encrypted_dir/file0\x00', 0x400, 0x8, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x250, 0x0, 0xe, 0x101, 0x70bd2a, 0x25dfdbfe, {0x3, 0x0, 0xa}, [@generic="feffacee9a66271f79f5d93817e4b60f437967d984ca092dfe06370a66b7e7641357378c11280b58eeae84137340", @generic="6edd8ddc86eb8475af17438d39ba7f5c79ac44d0d675d3e4f36d4a1e82919c6b69804bfea1ce006eeb89145157505cc23f20b35a554dfb6fd22ef65383c8ad8b31bcadf819e7d694411fc2cdaa1d606c1630f61c6cefc0a74d16d1f835e3df1a624c9c1981b19db71637b6af0ad16be2527cc9c57c9ddd80092cda360199e24c5a4422b01f76653be8a5c8a7d8b45763bad7adc967f160610f805818", @generic="63c915ea9b1bf24a2602c44f0848dafe18e0a53c8ba9a405d3860fc81aa64cb7479e5ab86ec2694b803645f6422d906cf098938a2cbcba8e390f497c3a3f3f3ced1a7e3573e7b04dda7f6e0b2d3cc49bd552fdd5bc918628046acba11333a804a95718fd5daa6bb84dc3587f0c52b660508fd42e47e5eff3b3a2ac1080cf24dfd4d39964f3d568b83c", @generic="a535bd062eb9d42c531a10ef1139eeebf468fce40fd8e4c6a1606765d467862b79ea8174e7a34adfb5a201fc41456766dcb9c88fa034e8126a317ea3defd35317a6fc8d4e5168018af172dcea2eabcd96d0a36b349647dcbb982d6ecf95972bf42147a0ecf15b07ceb6479f6b17e230278dbdc14c8f26bba54b1ce66c880219c88fdf4ebce204d97c0f3125a3938e753cd77851c66ce9d46b7a55a3ac377fec1dcb6e0ab85b3c7cac2e4e984c6a4e65f032ef53e2e235105fa5387b6b918a6cf50bf0c28d8c88ae8f324ab9e43fa", @typed={0x8, 0xf5, 0x0, 0x0, @uid=r6}, @typed={0x8, 0x8f, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x6}]}, 0x250}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040000) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00'}, 0x80) r7 = epoll_create1(0x0) fcntl$dupfd(r7, 0x2, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000002700), 0x12) 11.465080599s ago: executing program 0 (id=562): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x0, {{0x0, 0x30c}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000000)=0x10000, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 11.432383511s ago: executing program 0 (id=564): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x68, 0x24, 0xd0f, 0x3, 0xeaffffff, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x3, 0x200, 0xee0e}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x2, 0x7, 0x9}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) 11.365229355s ago: executing program 0 (id=566): mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024001000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[], 0x80}}, 0x0) close(r1) 11.343408816s ago: executing program 0 (id=568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40890, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f0000000340)={0x1, 0x1, 0x1f, 0x18, 0x7, &(0x7f00000008c0)}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0x4cc, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4a0, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xea, 0x0, "9676fc8f87a543c28d91cdbc05a76f0400cd2647f611349bbcd756582549a333f31da28d8c718fa36fdf0ef7d86663e82c076a110dd7208924466a36b59b2791cc9b7d6532153669ff031c2137050ebb8e25eb7dc55e69b24378c5b3aefe7b78551235fedcf334538fd988f55744aa0c67e63e6f4f8adf59744242e9ed1cb4d99c9a5984a8856ebd83f8bdb18fc0409155203d1844528a68bee38b367e6717d40bf89c932dac15673f939162c204902133c684c3b52a1ec4d89d988ea4ff22c57267c491b038c767479cb57c3a21db9ca6e868a6b64b390d733485652ae3a381c50caf92d41d"}, @NL80211_BAND_2GHZ={0xeb, 0x0, "bb325e07d3536ecfcbe3f5b9e05732be3431100c231e235da2d2b22dfed9331108ecbb93a6292cd90ab24c8f2a5856d9bb708ca274ce907e2b379e38f2a619842c838e1100c3c3405910383a0dbac6d091beb9495c254d0d5a307075a6c979b1912b2a9b89ef9f547d46d8ea2a6c83c6673fd3e706a53aaae79a0d2ade0e5713ce67cd94aca29b89710dc9d4059cd35848d3665d5a061b4c0c52131bb2edf1f42194b9b4c0e521826a3f1b9c60dfe678c2903a6a4687ef84ddc64f95a6b051002bc759ffa0b7ccc3e97483ed499ade06a9c48cfa72ebe6586dae051c71d11aec607c927646139b"}, @NL80211_BAND_60GHZ={0x69, 0x2, "c4357c14407c6f3c9722d63df4e68da838dcdfee83717a556bc5284d4e2e8b4da3b169923b6ed8024e87402c524f21b26b0ca117ce03cc1dd1516bbb24167a4798bd68e876d0f46887c9ba97cfeaced063d2240bdc512966cf19da20779b58f3343de12415"}, @NL80211_BAND_6GHZ={0xbf, 0x3, "46efa7031c9de32d2901e1eb419f5f4b7c6fd146dac2f58e61d012c112857f26fac008667cf828886dd744d4b52dec30bc1b36ca0235667c5d719ac1b14f2f27fb00b138b31494acbfabbb9264c41728232cdc38621c23a690482685503e4b5397a1a81a9f7d001d7ed14cc98f3205b5e24678920d6b6300fea63faf12d6b5a9b61dc812c7d290354a54d1f3e0b15a36e24c08795eb3ba080915562e119f974306d49c6d452275c53d54d2d28f7aaf6729c75ca571336e5a460658"}, @NL80211_BAND_6GHZ={0xd8, 0x3, "63b56e1fdf05736e225da29f86123c6a4b1627bf4bfab0a139947533e26301a4838b5d16fc14f789c41377dcd02e7f05d0dd5e0355c8fd07af5e17361662eef72ddcd7011b1bf813831d7ee825468d9f3ba9885b4f5b185f390d050964fc011e2f9cd01f0dd3fe7b1d63b8ea3e5f8ad9465033bfd3d1e3f9f979b8a246ac17675b5328711cb99300eb829a8474908938333bbef379e5256b78f518b7b2d1725994a18201dcceb4d1bae4af75ef93c89a708cd3862343685d52b8536ec9ddec50f07157a1647f3167cc3bec52ad5f27b67ff1ceaf"}, @NL80211_BAND_2GHZ={0xb5, 0x0, "2bfafcfe6689f668ba674fa8dc9cc3c91714332202822170fd4d2b9b385678be185a7eff8d2d785c0256c23399229f06f8343fb5e8675751ff08fde5af38fa1dcf8d85de7feb706788f9da385a2d33b0da88ce63c9e08ed0f0224c7929380633500efea76b73eb5e8596df34b7807929b383fb3eaf3c25b92a7ab285ad33825b1fcd706673dfef5d5bf467f173e662062bd65ad0b82635aae368dc75bc744c12cc40b3f8f759c414209692f7ddc04b22e0"}, @NL80211_BAND_2GHZ={0x7, 0x0, "b3475c"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x1}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x40005}, 0x4000) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r6, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x21}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x40010}, 0x50) 10.972606538s ago: executing program 0 (id=575): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0), 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xc8842, 0x11) close(r0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]}) migrate_pages(0x0, 0x800, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080), 0x8ff46c2, 0x400000) getsockname$l2tp6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) sendmsg(r3, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x1) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sched_setscheduler(r7, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) getuid() sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 700.051509ms ago: executing program 2 (id=827): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0xfffe) 672.87364ms ago: executing program 2 (id=828): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x10000003, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x40010000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) 335.31139ms ago: executing program 1 (id=836): perf_event_open(&(0x7f0000000040)={0x2, 0xa2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000000005}, 0x0, 0x0, 0x0, 0x8, 0x100000001, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x24, 0x2, 0xffffffde, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_MODE={0x0, 0x2, {0x0, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0xffffffffffffff86}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0xc0}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NFT_BATCH(r1, 0x0, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x12, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)='syzkaller\x00'}, 0x30) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) syz_clone(0x8001500, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 335.02315ms ago: executing program 3 (id=837): close(0x4) 334.63981ms ago: executing program 6 (id=838): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "98"}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0xc7c) 312.284511ms ago: executing program 3 (id=839): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x8002, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x11, 0x3, 0x0) r2 = getpid() perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000300)=@framed={{}, [@jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x10}, @exit]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, @perf_config_ext={0x2000000008, 0x800}, 0x0, 0x9, 0x0, 0x7, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 311.769211ms ago: executing program 6 (id=840): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x6d}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x7c, 0x4}, 0x2, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0xa00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5f, 0xd, 0x0, 0x0, 0x0, 0x2, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x1946}, 0x0, 0x800001, 0x0, 0x8, 0x3, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x41, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x1, 0x6}, 0x986, 0xfc, 0x40000004, 0x9, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000002500010125bd7000fbfffffe73000000080003004800"], 0x1c}, 0x1, 0x0, 0x0, 0x10040}, 0x28040) 278.506073ms ago: executing program 2 (id=841): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) 277.714033ms ago: executing program 2 (id=842): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x6, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x7, 0x1, 0x9, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x1e, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0xf0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 207.376067ms ago: executing program 1 (id=843): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='FROZEN\x00', 0x7) 207.001737ms ago: executing program 6 (id=844): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22118, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3a9, 0x2}, 0x100081, 0xfd3b, 0x0, 0x1, 0x3fffffff, 0x445feeaf, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="0209000002000000"], 0x10}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 206.698977ms ago: executing program 3 (id=845): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x0, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f0000000100)=r0, 0x5042) 206.419727ms ago: executing program 1 (id=846): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x4, 0x201, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7ff, 0x7fffffff, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000580000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 152.92934ms ago: executing program 6 (id=847): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114815, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) close(r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x0, 0x80000000}, {}, {}, {}, {}, {}]}, @func={0x0, 0x0, 0x0, 0xc, 0x5}, @volatile, @volatile, @const={0x0, 0x0, 0x0, 0xa, 0x2}]}}, 0x0, 0x96, 0x0, 0x3}, 0x28) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0xfe, 0x0}}, 0x10) 152.76485ms ago: executing program 3 (id=848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x44080) 138.891141ms ago: executing program 3 (id=849): close(0x4) 113.062003ms ago: executing program 3 (id=850): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000001c0), 0x12) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 71.430735ms ago: executing program 1 (id=851): socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x5fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000680)={0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x1572e4e71c602e6b}, 0x20) r0 = socket$nl_rdma(0x10, 0x3, 0x14) syz_open_procfs$namespace(0x0, &(0x7f0000005380)='ns/pid_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000005440)={0x0, 0x0, &(0x7f0000005400)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x80) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x6, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x830f}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xcfa4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000), 0xe) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)}], 0x2, &(0x7f00000002c0)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 71.230515ms ago: executing program 6 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "98"}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0xc7c) 70.809355ms ago: executing program 2 (id=853): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x98) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x10, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 57.725426ms ago: executing program 6 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000b240)=ANY=[@ANYBLOB="140000002e00f10326bd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x4044080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newtaction={0x14, 0x30, 0xffff, 0xfffffffe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x3, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004043}, 0x4000000) 49.488286ms ago: executing program 2 (id=855): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x21, 0x2, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xa}, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000019000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) 39.580127ms ago: executing program 1 (id=856): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xf, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8e84, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7b2, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000580050001"], 0x80}, 0x1, 0x0, 0x0, 0x20044815}, 0x40000) 0s ago: executing program 1 (id=857): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c00000012000100000000000000000002"], 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x20004010) kernel console output (not intermixed with test programs): 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.929517][ T3654] RSP: 002b:00007fcf13597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.929538][ T3654] RAX: ffffffffffffffda RBX: 00007fcf14db5fa0 RCX: 00007fcf14b3aeb9 [ 32.929554][ T3654] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 32.929609][ T3654] RBP: 00007fcf13597090 R08: 0000000000000000 R09: 0000000000000000 [ 32.929671][ T3654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 32.929684][ T3654] R13: 00007fcf14db6038 R14: 00007fcf14db5fa0 R15: 00007ffd98a30358 [ 32.929758][ T3654] [ 32.941003][ T3652] EXT4-fs: Ignoring removed oldalloc option [ 32.965222][ T3656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.976685][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.60'. [ 33.108116][ T3656] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 33.117538][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.122456][ T3656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 33.151668][ T3652] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.61: Parent and EA inode have the same ino 15 [ 33.172980][ T3656] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 33.173003][ T3656] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 33.173435][ T3656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 33.204288][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.222231][ T3656] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 33.236181][ T3652] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.260387][ T3652] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: comm syz.2.61: Parent and EA inode have the same ino 15 [ 33.280667][ T3652] EXT4-fs (loop2): 1 orphan inode deleted [ 33.286760][ T3652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.331641][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.365253][ T3668] loop0: detected capacity change from 0 to 256 [ 33.409003][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.417968][ T3668] FAT-fs (loop0): Filesystem has been set read-only [ 33.429721][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.446562][ T3672] loop3: detected capacity change from 0 to 512 [ 33.448814][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.484781][ T3678] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.491607][ T3678] EXT4-fs: Ignoring removed bh option [ 33.500267][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.519311][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.530930][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.539739][ T3678] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.554945][ T3675] x_tables: duplicate underflow at hook 3 [ 33.576421][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.607955][ T3678] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 33.610266][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.653814][ T3678] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.70: corrupted inode contents [ 33.666161][ T3678] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #11: comm syz.3.70: mark_inode_dirty error [ 33.677523][ T3678] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.70: invalid indirect mapped block 1 (level 1) [ 33.691063][ T3678] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.70: corrupted inode contents [ 33.728678][ T3678] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 33.739517][ T3678] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #11: comm syz.3.70: corrupted inode contents [ 33.743529][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.785234][ T3678] EXT4-fs error (device loop3): ext4_truncate:4635: inode #11: comm syz.3.70: mark_inode_dirty error [ 33.819513][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.847429][ T3696] 9p: Bad value for 'rfdno' [ 33.852242][ T3678] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 33.867710][ T3697] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 33.876104][ T3668] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 33.885842][ T3678] EXT4-fs (loop3): 1 truncate cleaned up [ 33.931303][ T3683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=3683 comm=syz.1.71 [ 34.051245][ T3697] EXT4-fs error (device loop4): ext4_orphan_get:1417: comm syz.4.75: bad orphan inode 15 [ 34.071438][ T3697] ext4_test_bit(bit=14, block=18) = 1 [ 34.076825][ T3697] is_bad_inode(inode)=0 [ 34.081065][ T3697] NEXT_ORPHAN(inode)=1023 [ 34.085416][ T3697] max_ino=32 [ 34.088606][ T3697] i_nlink=0 [ 34.123146][ T3697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 34.152589][ T3678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.171658][ T3683] Zero length message leads to an empty skb [ 34.221816][ T3678] cgroup: name respecified [ 34.227791][ T3697] ext2 filesystem being mounted at /16/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 34.282907][ T3320] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /16/éq‰Y’3aK: bad entry in directory: directory entry overrun - offset=60, inode=458767, rec_len=4096, size=4096 fake=0 [ 34.322254][ T3709] ip6t_rpfilter: unknown options [ 34.383557][ T3715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.70'. [ 34.413297][ T3320] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 34.491784][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.536143][ T3320] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 34.536845][ T36] IPVS: starting estimator thread 0... [ 34.572162][ T3727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.591903][ T3727] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.603202][ T3736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 34.640295][ T3731] IPVS: using max 2352 ests per chain, 117600 per kthread [ 34.672439][ T3727] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.88: corrupted inode contents [ 34.707168][ T3727] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.88: mark_inode_dirty error [ 34.719124][ T3737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.84'. [ 34.729876][ T3744] ip6t_rpfilter: unknown options [ 34.735864][ T3727] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.88: corrupted inode contents [ 34.747891][ T3727] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.88: mark_inode_dirty error [ 34.762208][ T3623] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 34.777224][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 34.777239][ T29] audit: type=1400 audit(1769435909.199:251): avc: denied { create } for pid=3725 comm="syz.1.88" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.826001][ T3737] set_capacity_and_notify: 3 callbacks suppressed [ 34.826019][ T3737] loop2: detected capacity change from 0 to 1024 [ 34.840722][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.850092][ T3737] EXT4-fs: Ignoring removed orlov option [ 34.856059][ T3737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.864115][ T3737] ext4: Unknown parameter 'subj_role' [ 34.872966][ T29] audit: type=1400 audit(1769435909.299:252): avc: denied { write } for pid=3749 comm="syz.1.94" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.913990][ T3750] loop1: detected capacity change from 0 to 4096 [ 34.925492][ T3750] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 34.928833][ T3752] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3752 comm=syz.3.96 [ 34.970276][ T29] audit: type=1400 audit(1769435909.389:253): avc: denied { getopt } for pid=3754 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.000595][ T3446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.045312][ T3446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.067819][ T29] audit: type=1400 audit(1769435909.489:254): avc: denied { create } for pid=3761 comm="syz.1.100" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.105114][ T3446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.116585][ T29] audit: type=1400 audit(1769435909.489:255): avc: denied { write } for pid=3761 comm="syz.1.100" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.138931][ T29] audit: type=1400 audit(1769435909.489:256): avc: denied { open } for pid=3761 comm="syz.1.100" path="/18/file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.168787][ T3764] loop3: detected capacity change from 0 to 512 [ 35.179487][ T3764] EXT4-fs: inline encryption not supported [ 35.185391][ T3764] EXT4-fs: inline encryption not supported [ 35.191656][ T3764] EXT4-fs: Ignoring removed oldalloc option [ 35.200123][ T3764] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 35.212525][ T3446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.233951][ T29] audit: type=1400 audit(1769435909.659:257): avc: denied { unlink } for pid=3312 comm="syz-executor" name="file0" dev="tmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 35.266165][ T3764] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.101: invalid indirect mapped block 2683928664 (level 1) [ 35.281434][ T3764] EXT4-fs (loop3): 1 truncate cleaned up [ 35.287606][ T3764] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.316273][ T29] audit: type=1400 audit(1769435909.739:258): avc: denied { append } for pid=3763 comm="syz.3.101" path="/21/file1/file0/memory.events" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 35.326450][ T3774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.102'. [ 35.383309][ T3781] syz.2.104 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.394969][ T3781] FAULT_INJECTION: forcing a failure. [ 35.394969][ T3781] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 35.408040][ T3781] CPU: 1 UID: 0 PID: 3781 Comm: syz.2.104 Not tainted syzkaller #0 PREEMPT(voluntary) [ 35.408121][ T3781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 35.408134][ T3781] Call Trace: [ 35.408140][ T3781] [ 35.408148][ T3781] __dump_stack+0x1d/0x30 [ 35.408176][ T3781] dump_stack_lvl+0x95/0xd0 [ 35.408201][ T3781] dump_stack+0x15/0x1b [ 35.408333][ T3781] should_fail_ex+0x263/0x280 [ 35.408364][ T3781] should_fail+0xb/0x20 [ 35.408390][ T3781] should_fail_usercopy+0x1a/0x20 [ 35.408426][ T3781] _copy_from_user+0x1c/0xb0 [ 35.408445][ T3781] __sys_bpf+0x183/0x7b0 [ 35.408480][ T3781] __x64_sys_bpf+0x41/0x50 [ 35.408521][ T3781] x64_sys_call+0x28e1/0x3000 [ 35.408552][ T3781] do_syscall_64+0xc0/0x2a0 [ 35.408584][ T3781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.408608][ T3781] RIP: 0033:0x7f3ce6d4aeb9 [ 35.408653][ T3781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.408673][ T3781] RSP: 002b:00007f3ce57a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 35.408695][ T3781] RAX: ffffffffffffffda RBX: 00007f3ce6fc5fa0 RCX: 00007f3ce6d4aeb9 [ 35.408712][ T3781] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 35.408724][ T3781] RBP: 00007f3ce57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 35.408737][ T3781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 35.408780][ T3781] R13: 00007f3ce6fc6038 R14: 00007f3ce6fc5fa0 R15: 00007ffd881474d8 [ 35.408798][ T3781] [ 35.572653][ T3446] bridge_slave_1: left allmulticast mode [ 35.578331][ T3446] bridge_slave_1: left promiscuous mode [ 35.584193][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.620530][ T3446] bridge_slave_0: left allmulticast mode [ 35.626227][ T3446] bridge_slave_0: left promiscuous mode [ 35.632063][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.639923][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.744227][ T3805] loop1: detected capacity change from 0 to 512 [ 35.803253][ T3805] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.820471][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.838737][ T3805] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.855816][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.865812][ T3446] bond0 (unregistering): Released all slaves [ 35.881098][ T29] audit: type=1400 audit(1769435910.299:259): avc: denied { setattr } for pid=3804 comm="syz.1.110" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 35.932115][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.951493][ T29] audit: type=1400 audit(1769435910.349:260): avc: denied { connect } for pid=3784 comm="syz.2.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.972319][ T3446] hsr_slave_0: left promiscuous mode [ 35.982999][ T3446] hsr_slave_1: left promiscuous mode [ 35.988677][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.996201][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.005731][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.013179][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.024798][ T3446] veth1_macvtap: left promiscuous mode [ 36.031496][ T3446] veth0_macvtap: left promiscuous mode [ 36.045490][ T3446] veth1_vlan: left promiscuous mode [ 36.050844][ T3446] veth0_vlan: left promiscuous mode [ 36.175076][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 36.185446][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 36.344238][ T3809] chnl_net:caif_netlink_parms(): no params data found [ 36.396993][ T3809] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.404097][ T3809] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.411877][ T3809] bridge_slave_0: entered allmulticast mode [ 36.418270][ T3809] bridge_slave_0: entered promiscuous mode [ 36.425175][ T3809] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.432279][ T3809] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.440461][ T3809] bridge_slave_1: entered allmulticast mode [ 36.447024][ T3809] bridge_slave_1: entered promiscuous mode [ 36.466173][ T3809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.482986][ T3809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.506101][ T3809] team0: Port device team_slave_0 added [ 36.517180][ T3809] team0: Port device team_slave_1 added [ 36.520627][ T3893] unsupported nla_type 52263 [ 36.535175][ T3809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.542239][ T3809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.545134][ T3893] loop1: detected capacity change from 0 to 128 [ 36.568241][ T3809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.586344][ T3809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.593402][ T3809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.619375][ T3809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.642877][ T3893] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.650469][ T3809] hsr_slave_0: entered promiscuous mode [ 36.661315][ T3809] hsr_slave_1: entered promiscuous mode [ 36.667696][ T3809] debugfs: 'hsr0' already exists in 'hsr' [ 36.673512][ T3809] Cannot create hsr debugfs directory [ 36.707796][ T3893] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.788798][ T3893] EXT4-fs error (device loop1): ext4_validate_block_bitmap:423: comm syz.1.124: bg 0: bad block bitmap checksum [ 36.801436][ T3809] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.815068][ T3809] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.839205][ T3809] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.852557][ T3923] SELinux: syz.0.129 (3923) set checkreqprot to 1. This is no longer supported. [ 36.861781][ T3809] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.932605][ T3809] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.939684][ T3809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.947034][ T3809] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.954173][ T3809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.967179][ T3312] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.011718][ T3809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.033505][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.060636][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.087945][ T3941] macvlan1: entered promiscuous mode [ 37.097722][ T3941] dummy0: entered promiscuous mode [ 37.107074][ T3941] hsr1: Slave A (macvlan1) is not up; please bring it up to get a fully working HSR network [ 37.117199][ T3941] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 37.132768][ T3941] hsr1: entered promiscuous mode [ 37.137769][ T3941] hsr1: entered allmulticast mode [ 37.142837][ T3941] macvlan1: entered allmulticast mode [ 37.163949][ T3941] dummy0: entered allmulticast mode [ 37.190794][ T3809] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.231700][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.238829][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.251095][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.258197][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.290804][ T3946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 37.332213][ T3946] loop2: detected capacity change from 0 to 1024 [ 37.358742][ T3946] EXT4-fs: Ignoring removed orlov option [ 37.364539][ T3946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.398437][ T3809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.401463][ T3946] ext4: Unknown parameter 'subj_role' [ 37.507952][ T3985] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=3985 comm=syz.3.142 [ 37.553096][ T3809] veth0_vlan: entered promiscuous mode [ 37.571335][ T3809] veth1_vlan: entered promiscuous mode [ 37.582695][ T3993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.145'. [ 37.594073][ T3809] veth0_macvtap: entered promiscuous mode [ 37.610928][ T3809] veth1_macvtap: entered promiscuous mode [ 37.635360][ T3809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.645314][ T3809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.656256][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.667947][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.682785][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.696382][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.873592][ T4014] netlink: 'syz.5.150': attribute type 6 has an invalid length. [ 38.540845][ T4051] IPVS: set_ctl: invalid protocol: 0 0.0.0.6:20002 [ 38.721579][ T4064] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=4064 comm=syz.1.170 [ 38.817610][ T4074] FAULT_INJECTION: forcing a failure. [ 38.817610][ T4074] name failslab, interval 1, probability 0, space 0, times 0 [ 38.830426][ T4074] CPU: 1 UID: 0 PID: 4074 Comm: syz.3.175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.830454][ T4074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.830472][ T4074] Call Trace: [ 38.830478][ T4074] [ 38.830486][ T4074] __dump_stack+0x1d/0x30 [ 38.830527][ T4074] dump_stack_lvl+0x95/0xd0 [ 38.830552][ T4074] dump_stack+0x15/0x1b [ 38.830572][ T4074] should_fail_ex+0x263/0x280 [ 38.830677][ T4074] should_failslab+0x8c/0xb0 [ 38.830701][ T4074] kmem_cache_alloc_noprof+0x68/0x490 [ 38.830727][ T4074] ? security_inode_alloc+0x37/0x100 [ 38.830772][ T4074] security_inode_alloc+0x37/0x100 [ 38.830806][ T4074] inode_init_always_gfp+0x4b7/0x500 [ 38.830830][ T4074] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 38.830865][ T4074] alloc_inode+0x58/0x170 [ 38.830914][ T4074] new_inode+0x1d/0xe0 [ 38.830939][ T4074] __debugfs_create_file+0x97/0x2b0 [ 38.831043][ T4074] debugfs_create_file_full+0x3f/0x60 [ 38.831077][ T4074] ? __pfx_bond_setup+0x10/0x10 [ 38.831141][ T4074] ref_tracker_dir_debugfs+0x10e/0x220 [ 38.831235][ T4074] alloc_netdev_mqs+0x1a7/0xa40 [ 38.831274][ T4074] rtnl_create_link+0x239/0x720 [ 38.831370][ T4074] rtnl_newlink_create+0x174/0x650 [ 38.831400][ T4074] ? security_capable+0x7b/0x90 [ 38.831450][ T4074] ? netlink_ns_capable+0x86/0xa0 [ 38.831482][ T4074] rtnl_newlink+0xf5b/0x1370 [ 38.831521][ T4074] ? __rcu_read_unlock+0x4e/0x70 [ 38.831614][ T4074] ? __memcg_slab_free_hook+0x135/0x230 [ 38.831650][ T4074] ? __rcu_read_unlock+0x4e/0x70 [ 38.831687][ T4074] ? avc_has_perm_noaudit+0xab/0x130 [ 38.831720][ T4074] ? cred_has_capability+0x224/0x290 [ 38.831756][ T4074] ? selinux_capable+0x31/0x40 [ 38.831777][ T4074] ? security_capable+0x7b/0x90 [ 38.831849][ T4074] ? ns_capable+0x7c/0xb0 [ 38.831875][ T4074] ? __pfx_rtnl_newlink+0x10/0x10 [ 38.831901][ T4074] rtnetlink_rcv_msg+0x64b/0x720 [ 38.832009][ T4074] netlink_rcv_skb+0x123/0x220 [ 38.832041][ T4074] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 38.832140][ T4074] rtnetlink_rcv+0x1c/0x30 [ 38.832205][ T4074] netlink_unicast+0x5c0/0x690 [ 38.832240][ T4074] netlink_sendmsg+0x5c8/0x6f0 [ 38.832264][ T4074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.832335][ T4074] ____sys_sendmsg+0x5af/0x600 [ 38.832414][ T4074] ___sys_sendmsg+0x195/0x1e0 [ 38.832446][ T4074] __x64_sys_sendmsg+0xd4/0x160 [ 38.832517][ T4074] x64_sys_call+0x17ba/0x3000 [ 38.832543][ T4074] do_syscall_64+0xc0/0x2a0 [ 38.832643][ T4074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.832741][ T4074] RIP: 0033:0x7f7db17caeb9 [ 38.832759][ T4074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.832776][ T4074] RSP: 002b:00007f7db0227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.832830][ T4074] RAX: ffffffffffffffda RBX: 00007f7db1a45fa0 RCX: 00007f7db17caeb9 [ 38.832992][ T4074] RDX: 0000000004000040 RSI: 0000200000000240 RDI: 0000000000000003 [ 38.833005][ T4074] RBP: 00007f7db0227090 R08: 0000000000000000 R09: 0000000000000000 [ 38.833020][ T4074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 38.833034][ T4074] R13: 00007f7db1a46038 R14: 00007f7db1a45fa0 R15: 00007ffc804edfb8 [ 38.833055][ T4074] [ 38.833106][ T4074] debugfs: out of free dentries, can not create file 'netdev@ffff88810a774558' [ 38.863207][ T4075] process 'syz.1.172' launched '/dev/fd/7' with NULL argv: empty string added [ 39.171904][ T4079] loop5: detected capacity change from 0 to 512 [ 39.189398][ T4074] bond1: (slave bond_slave_1): Device is not our slave [ 39.196307][ T4074] bond1: option active_slave: invalid value (bond_slave_1) [ 39.214791][ T4074] bond1 (unregistering): Released all slaves [ 39.221496][ T4079] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 39.343042][ T4079] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.176: corrupted in-inode xattr: e_value out of bounds [ 39.360475][ T4079] EXT4-fs (loop5): Remounting filesystem read-only [ 39.369888][ T4087] Illegal XDP return value 4294967282 on prog (id 35) dev N/A, expect packet loss! [ 39.377671][ T4079] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.405623][ T4094] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=4094 comm=syz.1.181 [ 39.433468][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.434253][ T4096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 39.463535][ T4096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.471849][ T4098] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1f [ 39.481580][ T4096] batadv_slave_0: entered promiscuous mode [ 39.500414][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.183'. [ 39.518531][ T4100] hsr0: entered promiscuous mode [ 39.527383][ T4102] netlink: 32 bytes leftover after parsing attributes in process `syz.3.184'. [ 39.537276][ T4100] macvlan2: entered allmulticast mode [ 39.542794][ T4100] hsr0: entered allmulticast mode [ 39.547910][ T4100] hsr_slave_0: entered allmulticast mode [ 39.553577][ T4100] hsr_slave_1: entered allmulticast mode [ 40.065466][ T29] kauditd_printk_skb: 6659 callbacks suppressed [ 40.065479][ T29] audit: type=1400 audit(1769435914.489:6920): avc: denied { create } for pid=4125 comm="syz.3.193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 40.174364][ T29] audit: type=1400 audit(1769435914.599:6921): avc: denied { create } for pid=4129 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.194521][ T29] audit: type=1400 audit(1769435914.599:6922): avc: denied { write } for pid=4129 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 40.214863][ T29] audit: type=1400 audit(1769435914.599:6923): avc: denied { ioctl } for pid=4130 comm="syz.2.188" path="socket:[7434]" dev="sockfs" ino=7434 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 40.243182][ T4133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.251673][ T4133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.271847][ T4133] loop2: detected capacity change from 0 to 512 [ 40.284516][ T4133] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.188: inode has both inline data and extents flags [ 40.298238][ T4133] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.188: couldn't read orphan inode 15 (err -117) [ 40.311205][ T29] audit: type=1400 audit(1769435914.669:6924): avc: denied { write } for pid=4130 comm="syz.2.188" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.334281][ T29] audit: type=1400 audit(1769435914.679:6925): avc: denied { getopt } for pid=4129 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 40.353976][ T29] audit: type=1400 audit(1769435914.699:6926): avc: denied { mounton } for pid=4130 comm="syz.2.188" path="/syzcgroup/unified/syz2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 40.377298][ T4144] FAULT_INJECTION: forcing a failure. [ 40.377298][ T4144] name failslab, interval 1, probability 0, space 0, times 0 [ 40.410343][ T4133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.468481][ T4144] CPU: 1 UID: 0 PID: 4144 Comm: syz.3.197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 40.468544][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 40.468557][ T4144] Call Trace: [ 40.468565][ T4144] [ 40.468573][ T4144] __dump_stack+0x1d/0x30 [ 40.468599][ T4144] dump_stack_lvl+0x95/0xd0 [ 40.468622][ T4144] dump_stack+0x15/0x1b [ 40.468698][ T4144] should_fail_ex+0x263/0x280 [ 40.468730][ T4144] should_failslab+0x8c/0xb0 [ 40.468767][ T4144] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 40.468815][ T4144] ? __alloc_skb+0x2f0/0x4b0 [ 40.468846][ T4144] __alloc_skb+0x2f0/0x4b0 [ 40.468874][ T4144] ? __alloc_skb+0x219/0x4b0 [ 40.468904][ T4144] netlink_alloc_large_skb+0xbf/0xf0 [ 40.469009][ T4144] netlink_sendmsg+0x40c/0x6f0 [ 40.469031][ T4144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.469051][ T4144] ____sys_sendmsg+0x5af/0x600 [ 40.469137][ T4144] ___sys_sendmsg+0x195/0x1e0 [ 40.469166][ T4144] __x64_sys_sendmsg+0xd4/0x160 [ 40.469190][ T4144] x64_sys_call+0x17ba/0x3000 [ 40.469215][ T4144] do_syscall_64+0xc0/0x2a0 [ 40.469312][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.469336][ T4144] RIP: 0033:0x7f7db17caeb9 [ 40.469353][ T4144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.469372][ T4144] RSP: 002b:00007f7db0227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.469395][ T4144] RAX: ffffffffffffffda RBX: 00007f7db1a45fa0 RCX: 00007f7db17caeb9 [ 40.469481][ T4144] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000006 [ 40.469495][ T4144] RBP: 00007f7db0227090 R08: 0000000000000000 R09: 0000000000000000 [ 40.469509][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.469522][ T4144] R13: 00007f7db1a46038 R14: 00007f7db1a45fa0 R15: 00007ffc804edfb8 [ 40.469542][ T4144] [ 40.645230][ T4154] loop3: detected capacity change from 0 to 256 [ 40.654160][ T4133] EXT4-fs: Ignoring removed orlov option [ 40.694641][ T4133] EXT4-fs (loop2): can't enable nombcache during remount [ 40.782203][ T29] audit: type=1400 audit(1769435915.209:6927): avc: denied { getopt } for pid=4155 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 40.811531][ T29] audit: type=1400 audit(1769435915.209:6928): avc: denied { getopt } for pid=4155 comm="syz.0.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 40.831061][ T29] audit: type=1400 audit(1769435915.229:6929): avc: denied { override_creds } for pid=4153 comm="syz.3.200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.858851][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.201'. [ 40.894801][ T4163] netlink: 68 bytes leftover after parsing attributes in process `syz.1.203'. [ 40.905263][ T4163] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 41.023358][ T4176] FAULT_INJECTION: forcing a failure. [ 41.023358][ T4176] name failslab, interval 1, probability 0, space 0, times 0 [ 41.036080][ T4176] CPU: 0 UID: 0 PID: 4176 Comm: syz.0.207 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.036109][ T4176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.036121][ T4176] Call Trace: [ 41.036129][ T4176] [ 41.036146][ T4176] __dump_stack+0x1d/0x30 [ 41.036171][ T4176] dump_stack_lvl+0x95/0xd0 [ 41.036195][ T4176] dump_stack+0x15/0x1b [ 41.036277][ T4176] should_fail_ex+0x263/0x280 [ 41.036305][ T4176] should_failslab+0x8c/0xb0 [ 41.036332][ T4176] __kmalloc_noprof+0xb8/0x580 [ 41.036355][ T4176] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 41.036496][ T4176] usb_hcd_submit_urb+0x5d3/0x1200 [ 41.036533][ T4176] usb_submit_urb+0xaaa/0xbb0 [ 41.036579][ T4176] usbfs_start_wait_urb+0x9f/0x1d0 [ 41.036604][ T4176] do_proc_control+0x628/0x8b0 [ 41.036668][ T4176] proc_control+0x71/0xa0 [ 41.036701][ T4176] usbdev_ioctl+0x93a/0x1750 [ 41.036732][ T4176] ? __pfx_usbdev_ioctl+0x10/0x10 [ 41.036775][ T4176] __se_sys_ioctl+0xce/0x140 [ 41.036811][ T4176] __x64_sys_ioctl+0x43/0x50 [ 41.036907][ T4176] x64_sys_call+0x14b0/0x3000 [ 41.037004][ T4176] do_syscall_64+0xc0/0x2a0 [ 41.037115][ T4176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.037195][ T4176] RIP: 0033:0x7fcf14b3aeb9 [ 41.037209][ T4176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.037226][ T4176] RSP: 002b:00007fcf13597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.037244][ T4176] RAX: ffffffffffffffda RBX: 00007fcf14db5fa0 RCX: 00007fcf14b3aeb9 [ 41.037257][ T4176] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000004 [ 41.037302][ T4176] RBP: 00007fcf13597090 R08: 0000000000000000 R09: 0000000000000000 [ 41.037314][ T4176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.037326][ T4176] R13: 00007fcf14db6038 R14: 00007fcf14db5fa0 R15: 00007ffd98a30358 [ 41.037342][ T4176] [ 41.064442][ T4179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.206'. [ 41.230555][ T4183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 41.258883][ T4178] netlink: 'syz.5.208': attribute type 1 has an invalid length. [ 41.267020][ T4178] netlink: 'syz.5.208': attribute type 2 has an invalid length. [ 41.278757][ T4183] hsr0: entered promiscuous mode [ 41.284305][ T4183] macvlan2: entered allmulticast mode [ 41.289806][ T4183] hsr0: entered allmulticast mode [ 41.294931][ T4183] hsr_slave_0: entered allmulticast mode [ 41.300836][ T4183] hsr_slave_1: entered allmulticast mode [ 41.325448][ T4185] tipc: Enabling of bearer rejected, media not registered [ 41.494181][ T4195] netlink: 24 bytes leftover after parsing attributes in process `syz.5.211'. [ 41.588549][ T4195] loop5: detected capacity change from 0 to 1024 [ 41.604352][ T4195] EXT4-fs: Ignoring removed orlov option [ 41.610318][ T4195] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.642716][ T4195] ext4: Unknown parameter 'subj_role' [ 41.955987][ T4200] loop1: detected capacity change from 0 to 512 [ 41.988281][ T4200] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 41.996654][ T4200] EXT4-fs (loop1): orphan cleanup on readonly fs [ 42.003748][ T4200] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.018903][ T4200] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 42.028004][ T4200] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #16: comm syz.1.215: inode has both inline data and extents flags [ 42.045586][ T4200] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.215: couldn't read orphan inode 16 (err -117) [ 42.058083][ T4200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.158759][ T4208] bond1: (slave bond_slave_1): Device is not our slave [ 42.165668][ T4208] bond1: option active_slave: invalid value (bond_slave_1) [ 42.191127][ T4208] bond1 (unregistering): Released all slaves [ 42.271208][ T4222] FAULT_INJECTION: forcing a failure. [ 42.271208][ T4222] name failslab, interval 1, probability 0, space 0, times 0 [ 42.283980][ T4222] CPU: 0 UID: 0 PID: 4222 Comm: syz.3.221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.284005][ T4222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.284017][ T4222] Call Trace: [ 42.284024][ T4222] [ 42.284031][ T4222] __dump_stack+0x1d/0x30 [ 42.284056][ T4222] dump_stack_lvl+0x95/0xd0 [ 42.284079][ T4222] dump_stack+0x15/0x1b [ 42.284148][ T4222] should_fail_ex+0x263/0x280 [ 42.284182][ T4222] should_failslab+0x8c/0xb0 [ 42.284204][ T4222] kmem_cache_alloc_noprof+0x68/0x490 [ 42.284292][ T4222] ? skb_clone+0x151/0x1f0 [ 42.284310][ T4222] skb_clone+0x151/0x1f0 [ 42.284326][ T4222] __netlink_deliver_tap+0x2c9/0x500 [ 42.284366][ T4222] netlink_unicast+0x66b/0x690 [ 42.284410][ T4222] netlink_sendmsg+0x5c8/0x6f0 [ 42.284430][ T4222] ? __pfx_netlink_sendmsg+0x10/0x10 [ 42.284477][ T4222] ____sys_sendmsg+0x5af/0x600 [ 42.284501][ T4222] ___sys_sendmsg+0x195/0x1e0 [ 42.284556][ T4222] __x64_sys_sendmsg+0xd4/0x160 [ 42.284582][ T4222] x64_sys_call+0x17ba/0x3000 [ 42.284608][ T4222] do_syscall_64+0xc0/0x2a0 [ 42.284646][ T4222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.284708][ T4222] RIP: 0033:0x7f7db17caeb9 [ 42.284726][ T4222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.284746][ T4222] RSP: 002b:00007f7db0227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 42.284769][ T4222] RAX: ffffffffffffffda RBX: 00007f7db1a45fa0 RCX: 00007f7db17caeb9 [ 42.284785][ T4222] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 42.284800][ T4222] RBP: 00007f7db0227090 R08: 0000000000000000 R09: 0000000000000000 [ 42.284864][ T4222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.284878][ T4222] R13: 00007f7db1a46038 R14: 00007f7db1a45fa0 R15: 00007ffc804edfb8 [ 42.284932][ T4222] [ 42.482011][ T4229] FAULT_INJECTION: forcing a failure. [ 42.482011][ T4229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 42.498790][ T4229] CPU: 1 UID: 0 PID: 4229 Comm: syz.5.222 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.498861][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 42.498873][ T4229] Call Trace: [ 42.498878][ T4229] [ 42.498885][ T4229] __dump_stack+0x1d/0x30 [ 42.498908][ T4229] dump_stack_lvl+0x95/0xd0 [ 42.498929][ T4229] dump_stack+0x15/0x1b [ 42.499001][ T4229] should_fail_ex+0x263/0x280 [ 42.499085][ T4229] should_fail+0xb/0x20 [ 42.499112][ T4229] should_fail_usercopy+0x1a/0x20 [ 42.499143][ T4229] _copy_to_user+0x20/0xa0 [ 42.499164][ T4229] simple_read_from_buffer+0xb5/0x130 [ 42.499267][ T4229] proc_fail_nth_read+0x10e/0x150 [ 42.499346][ T4229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 42.499373][ T4229] vfs_read+0x1ab/0x7f0 [ 42.499392][ T4229] ? __rcu_read_unlock+0x4e/0x70 [ 42.499428][ T4229] ? __fget_files+0x184/0x1c0 [ 42.499598][ T4229] ? mutex_lock+0x57/0x90 [ 42.499668][ T4229] ksys_read+0xdc/0x1a0 [ 42.499750][ T4229] __x64_sys_read+0x40/0x50 [ 42.499767][ T4229] x64_sys_call+0x2889/0x3000 [ 42.499791][ T4229] do_syscall_64+0xc0/0x2a0 [ 42.499822][ T4229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.499886][ T4229] RIP: 0033:0x7f3d4d8cb78e [ 42.499904][ T4229] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 42.499923][ T4229] RSP: 002b:00007f3d4c366fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 42.499941][ T4229] RAX: ffffffffffffffda RBX: 00007f3d4c3676c0 RCX: 00007f3d4d8cb78e [ 42.500012][ T4229] RDX: 000000000000000f RSI: 00007f3d4c3670a0 RDI: 0000000000000004 [ 42.500027][ T4229] RBP: 00007f3d4c367090 R08: 0000000000000000 R09: 0000000000000000 [ 42.500042][ T4229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.500055][ T4229] R13: 00007f3d4db86038 R14: 00007f3d4db85fa0 R15: 00007ffdc78f1498 [ 42.500072][ T4229] [ 42.760226][ T3487] IPVS: starting estimator thread 0... [ 42.801549][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.229'. [ 42.811036][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.815301][ T4248] macvlan2: entered allmulticast mode [ 42.825514][ T4248] hsr0: entered allmulticast mode [ 42.830627][ T4248] hsr_slave_0: entered allmulticast mode [ 42.836258][ T4248] hsr_slave_1: entered allmulticast mode [ 42.850472][ T4239] IPVS: using max 2304 ests per chain, 115200 per kthread [ 42.856441][ T4246] loop5: detected capacity change from 0 to 1024 [ 42.885453][ T4246] EXT4-fs: Ignoring removed bh option [ 43.013735][ T4246] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.079103][ T3487] IPVS: starting estimator thread 0... [ 43.121058][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.132569][ T4281] netlink: 'syz.2.238': attribute type 3 has an invalid length. [ 43.256307][ T4278] IPVS: using max 2304 ests per chain, 115200 per kthread [ 43.483764][ T4288] delete_channel: no stack [ 43.541452][ T4303] can0: slcan on ttyS3. [ 43.621504][ T4303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.719078][ T4321] FAULT_INJECTION: forcing a failure. [ 43.719078][ T4321] name failslab, interval 1, probability 0, space 0, times 0 [ 43.731860][ T4321] CPU: 0 UID: 0 PID: 4321 Comm: syz.2.250 Not tainted syzkaller #0 PREEMPT(voluntary) [ 43.731887][ T4321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.731957][ T4321] Call Trace: [ 43.732025][ T4321] [ 43.732034][ T4321] __dump_stack+0x1d/0x30 [ 43.732059][ T4321] dump_stack_lvl+0x95/0xd0 [ 43.732079][ T4321] dump_stack+0x15/0x1b [ 43.732124][ T4321] should_fail_ex+0x263/0x280 [ 43.732158][ T4321] should_failslab+0x8c/0xb0 [ 43.732180][ T4321] kmem_cache_alloc_noprof+0x68/0x490 [ 43.732202][ T4321] ? skb_clone+0x151/0x1f0 [ 43.732294][ T4321] skb_clone+0x151/0x1f0 [ 43.732314][ T4321] __netlink_deliver_tap+0x2c9/0x500 [ 43.732441][ T4321] netlink_unicast+0x66b/0x690 [ 43.732471][ T4321] netlink_sendmsg+0x5c8/0x6f0 [ 43.732490][ T4321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 43.732510][ T4321] ____sys_sendmsg+0x5af/0x600 [ 43.732570][ T4321] ___sys_sendmsg+0x195/0x1e0 [ 43.732599][ T4321] __x64_sys_sendmsg+0xd4/0x160 [ 43.732679][ T4321] x64_sys_call+0x17ba/0x3000 [ 43.732704][ T4321] do_syscall_64+0xc0/0x2a0 [ 43.732751][ T4321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.732771][ T4321] RIP: 0033:0x7f3ce6d4aeb9 [ 43.732786][ T4321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.732803][ T4321] RSP: 002b:00007f3ce57a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.732834][ T4321] RAX: ffffffffffffffda RBX: 00007f3ce6fc5fa0 RCX: 00007f3ce6d4aeb9 [ 43.732850][ T4321] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 43.732869][ T4321] RBP: 00007f3ce57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 43.732884][ T4321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.732898][ T4321] R13: 00007f3ce6fc6038 R14: 00007f3ce6fc5fa0 R15: 00007ffd881474d8 [ 43.732919][ T4321] [ 43.760420][ T4308] can0 (unregistered): slcan off ttyS3. [ 43.984144][ T4338] loop3: detected capacity change from 0 to 128 [ 43.990783][ T4338] EXT4-fs: Ignoring removed orlov option [ 43.996437][ T4338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.003152][ T4338] EXT4-fs: Ignoring removed nomblk_io_submit option [ 44.080443][ T36] IPVS: starting estimator thread 0... [ 44.090414][ T4338] EXT4-fs: quotafile must be on filesystem root [ 44.191283][ T4368] FAULT_INJECTION: forcing a failure. [ 44.191283][ T4368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 44.204432][ T4368] CPU: 0 UID: 0 PID: 4368 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(voluntary) [ 44.204461][ T4368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.204472][ T4368] Call Trace: [ 44.204531][ T4368] [ 44.204537][ T4368] __dump_stack+0x1d/0x30 [ 44.204560][ T4368] dump_stack_lvl+0x95/0xd0 [ 44.204584][ T4368] dump_stack+0x15/0x1b [ 44.204620][ T4368] should_fail_ex+0x263/0x280 [ 44.204649][ T4368] should_fail+0xb/0x20 [ 44.204676][ T4368] should_fail_usercopy+0x1a/0x20 [ 44.204738][ T4368] _copy_to_user+0x20/0xa0 [ 44.204757][ T4368] simple_read_from_buffer+0xb5/0x130 [ 44.204792][ T4368] proc_fail_nth_read+0x10e/0x150 [ 44.204902][ T4368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 44.204927][ T4368] vfs_read+0x1ab/0x7f0 [ 44.204948][ T4368] ? __rcu_read_unlock+0x4e/0x70 [ 44.205023][ T4368] ? __fget_files+0x184/0x1c0 [ 44.205053][ T4368] ? mutex_lock+0x57/0x90 [ 44.205075][ T4368] ksys_read+0xdc/0x1a0 [ 44.205093][ T4368] __x64_sys_read+0x40/0x50 [ 44.205113][ T4368] x64_sys_call+0x2889/0x3000 [ 44.205167][ T4368] do_syscall_64+0xc0/0x2a0 [ 44.205198][ T4368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.205219][ T4368] RIP: 0033:0x7f3ce6d0b78e [ 44.205234][ T4368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 44.205250][ T4368] RSP: 002b:00007f3ce57a6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 44.205294][ T4368] RAX: ffffffffffffffda RBX: 00007f3ce57a76c0 RCX: 00007f3ce6d0b78e [ 44.205330][ T4368] RDX: 000000000000000f RSI: 00007f3ce57a70a0 RDI: 0000000000000004 [ 44.205412][ T4368] RBP: 00007f3ce57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 44.205424][ T4368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.205437][ T4368] R13: 00007f3ce6fc6038 R14: 00007f3ce6fc5fa0 R15: 00007ffd881474d8 [ 44.205454][ T4368] [ 44.208039][ T4352] IPVS: using max 2352 ests per chain, 117600 per kthread [ 44.585152][ T4399] __nla_validate_parse: 5 callbacks suppressed [ 44.585171][ T4399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 44.602355][ T4399] hsr0: entered promiscuous mode [ 44.607447][ T4399] macvlan2: entered allmulticast mode [ 44.612859][ T4399] hsr0: entered allmulticast mode [ 44.617881][ T4399] hsr_slave_0: entered allmulticast mode [ 44.623617][ T4399] hsr_slave_1: entered allmulticast mode [ 45.006639][ T4409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.276'. [ 45.022737][ T4411] loop1: detected capacity change from 0 to 512 [ 45.029471][ T4411] ext4: Unknown parameter 'nouser_xattr' [ 45.070372][ T29] kauditd_printk_skb: 475 callbacks suppressed [ 45.070414][ T29] audit: type=1326 audit(1769435919.499:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.115448][ T29] audit: type=1326 audit(1769435919.499:7405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.138810][ T29] audit: type=1326 audit(1769435919.499:7406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.162381][ T29] audit: type=1326 audit(1769435919.499:7407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.163918][ T4415] usb usb1: usbfs: process 4415 (syz.1.279) did not claim interface 0 before use [ 45.185753][ T29] audit: type=1326 audit(1769435919.499:7408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.218221][ T29] audit: type=1326 audit(1769435919.499:7409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.241563][ T29] audit: type=1326 audit(1769435919.499:7410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.264889][ T29] audit: type=1326 audit(1769435919.499:7411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.288205][ T29] audit: type=1326 audit(1769435919.499:7412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.311550][ T29] audit: type=1326 audit(1769435919.499:7413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4389 comm="syz.0.268" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcf14afb78e code=0x7ffc0000 [ 45.469792][ T4421] netlink: 48 bytes leftover after parsing attributes in process `syz.0.282'. [ 45.485273][ T4421] netlink: 20 bytes leftover after parsing attributes in process `syz.0.282'. [ 45.494944][ T4434] netlink: 'syz.1.284': attribute type 1 has an invalid length. [ 45.502733][ T4434] netlink: 'syz.1.284': attribute type 2 has an invalid length. [ 45.550291][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 45.589926][ T4442] loop1: detected capacity change from 0 to 256 [ 45.606718][ T4442] msdos: Unknown parameter 'dots ' [ 45.638793][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 45.799798][ T4475] loop5: detected capacity change from 0 to 512 [ 45.823776][ T4475] EXT4-fs: Ignoring removed bh option [ 45.829482][ T4475] EXT4-fs: dax option not supported [ 46.385665][ T4483] loop1: detected capacity change from 0 to 128 [ 46.392788][ T4483] FAT-fs (loop1): Directory bread(block 414) failed [ 46.399441][ T4483] FAT-fs (loop1): Directory bread(block 415) failed [ 46.406258][ T4483] FAT-fs (loop1): Directory bread(block 416) failed [ 46.413110][ T4483] FAT-fs (loop1): Directory bread(block 417) failed [ 46.419800][ T4483] FAT-fs (loop1): Directory bread(block 418) failed [ 46.426467][ T4483] FAT-fs (loop1): Directory bread(block 419) failed [ 46.433173][ T4483] FAT-fs (loop1): Directory bread(block 420) failed [ 46.439827][ T4483] FAT-fs (loop1): Directory bread(block 421) failed [ 46.447567][ T4483] netlink: 16 bytes leftover after parsing attributes in process `syz.1.296'. [ 46.471735][ T4453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.553320][ T4487] netlink: 60 bytes leftover after parsing attributes in process `syz.2.298'. [ 46.557752][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.573993][ T4494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.297'. [ 46.585266][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.623860][ T4499] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 46.690273][ T4494] C: renamed from team_slave_0 (while UP) [ 46.695753][ T4499] loop3: detected capacity change from 0 to 128 [ 46.708426][ T4494] netlink: 'syz.1.297': attribute type 3 has an invalid length. [ 46.716144][ T4494] netlink: 152 bytes leftover after parsing attributes in process `syz.1.297'. [ 46.755642][ T4499] syz.3.303: attempt to access beyond end of device [ 46.755642][ T4499] loop3: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 46.791512][ T4499] syz.3.303: attempt to access beyond end of device [ 46.791512][ T4499] loop3: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 46.805204][ T4499] Buffer I/O error on dev loop3, logical block 80, lost async page write [ 46.814209][ T4499] syz.3.303: attempt to access beyond end of device [ 46.814209][ T4499] loop3: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 46.859187][ T4499] syz.3.303: attempt to access beyond end of device [ 46.859187][ T4499] loop3: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 46.872903][ T4499] Buffer I/O error on dev loop3, logical block 84, lost async page write [ 46.919073][ T4510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4510 comm=syz.1.308 [ 46.949179][ T4499] syz.3.303: attempt to access beyond end of device [ 46.949179][ T4499] loop3: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 46.970494][ T4499] syz.3.303: attempt to access beyond end of device [ 46.970494][ T4499] loop3: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 46.970521][ T4499] Buffer I/O error on dev loop3, logical block 96, lost async page write [ 46.971323][ T4499] syz.3.303: attempt to access beyond end of device [ 46.971323][ T4499] loop3: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 46.972913][ T4499] syz.3.303: attempt to access beyond end of device [ 46.972913][ T4499] loop3: rw=8390657, sector=200, nr_sectors = 2 limit=128 [ 46.972941][ T4499] Buffer I/O error on dev loop3, logical block 100, lost async page write [ 46.973768][ T4499] syz.3.303: attempt to access beyond end of device [ 46.973768][ T4499] loop3: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 46.974118][ T4499] syz.3.303: attempt to access beyond end of device [ 46.974118][ T4499] loop3: rw=8390657, sector=224, nr_sectors = 2 limit=128 [ 47.053492][ T4521] openvswitch: netlink: Missing key (keys=40, expected=80) [ 47.059192][ T4499] Buffer I/O error on dev loop3, logical block 112, lost async page write [ 47.091038][ T4499] Buffer I/O error on dev loop3, logical block 116, lost async page write [ 47.104126][ T4499] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 47.122055][ T4499] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 47.132272][ T4499] Buffer I/O error on dev loop3, logical block 120, lost async page write [ 47.143800][ T4499] Buffer I/O error on dev loop3, logical block 124, lost async page write [ 47.170945][ T4534] netlink: 'syz.1.314': attribute type 2 has an invalid length. [ 47.178594][ T4534] netlink: 'syz.1.314': attribute type 3 has an invalid length. [ 47.233469][ T4536] loop5: detected capacity change from 0 to 256 [ 47.472159][ T4552] veth2: entered promiscuous mode [ 47.477256][ T4552] veth2: entered allmulticast mode [ 47.504411][ T4557] loop5: detected capacity change from 0 to 128 [ 47.510238][ T4560] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 47.620541][ T4572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2561 sclass=netlink_route_socket pid=4572 comm=syz.2.330 [ 47.715185][ T4585] syzkaller1: entered promiscuous mode [ 47.720811][ T4585] syzkaller1: entered allmulticast mode [ 48.044493][ T4625] netlink: 'syz.0.337': attribute type 10 has an invalid length. [ 48.053787][ T4625] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 48.335284][ T4649] loop3: detected capacity change from 0 to 1024 [ 48.342079][ T4649] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.351991][ T4649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.379080][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.501940][ T4658] macvlan3: entered allmulticast mode [ 48.796474][ T3379] IPVS: starting estimator thread 0... [ 48.863363][ T4700] loop3: detected capacity change from 0 to 1024 [ 48.880278][ T4695] IPVS: using max 2352 ests per chain, 117600 per kthread [ 48.896320][ T4700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.922881][ T4700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.957146][ T4708] netlink: 'syz.0.356': attribute type 2 has an invalid length. [ 48.989500][ T4708] macvlan3: entered promiscuous mode [ 49.033526][ T4708] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 49.048861][ T4716] FAULT_INJECTION: forcing a failure. [ 49.048861][ T4716] name failslab, interval 1, probability 0, space 0, times 0 [ 49.062231][ T4716] CPU: 1 UID: 0 PID: 4716 Comm: syz.1.359 Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.062261][ T4716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.062273][ T4716] Call Trace: [ 49.062279][ T4716] [ 49.062286][ T4716] __dump_stack+0x1d/0x30 [ 49.062307][ T4716] dump_stack_lvl+0x95/0xd0 [ 49.062326][ T4716] dump_stack+0x15/0x1b [ 49.062346][ T4716] should_fail_ex+0x263/0x280 [ 49.062377][ T4716] should_failslab+0x8c/0xb0 [ 49.062398][ T4716] kmem_cache_alloc_noprof+0x68/0x490 [ 49.062419][ T4716] ? mas_alloc_nodes+0x1a2/0x210 [ 49.062443][ T4716] mas_alloc_nodes+0x1a2/0x210 [ 49.062470][ T4716] mas_preallocate+0x2ca/0x510 [ 49.062500][ T4716] __split_vma+0x240/0x660 [ 49.062520][ T4716] ? mas_find+0x5d5/0x700 [ 49.062543][ T4716] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 49.062577][ T4716] do_vmi_align_munmap+0x1e1/0x400 [ 49.062611][ T4716] do_vmi_munmap+0x1da/0x220 [ 49.062630][ T4716] __vm_munmap+0x1a8/0x290 [ 49.062655][ T4716] __x64_sys_munmap+0x36/0x50 [ 49.062695][ T4716] x64_sys_call+0xbee/0x3000 [ 49.062717][ T4716] do_syscall_64+0xc0/0x2a0 [ 49.062742][ T4716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.062763][ T4716] RIP: 0033:0x7fe1ff0bace7 [ 49.062780][ T4716] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.062799][ T4716] RSP: 002b:00007fe1fdb15d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 49.062820][ T4716] RAX: ffffffffffffffda RBX: 00007fe1f8000000 RCX: 00007fe1ff0bace7 [ 49.062836][ T4716] RDX: 0000000000000000 RSI: 0000000001af7000 RDI: 00007fe1fc000000 [ 49.062847][ T4716] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 49.062861][ T4716] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 49.062875][ T4716] R13: 0000000000001000 R14: 00007fe1fc000000 R15: 0000000002509000 [ 49.062895][ T4716] [ 49.067956][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.292852][ T4723] veth0: entered promiscuous mode [ 49.354310][ T4722] veth0: left promiscuous mode [ 49.667840][ T4761] SELinux: failed to load policy [ 49.723349][ T4769] __nla_validate_parse: 8 callbacks suppressed [ 49.723368][ T4769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 50.067363][ T4788] ip6t_rpfilter: unknown options [ 50.207646][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 50.207660][ T29] audit: type=1400 audit(1769435924.629:7600): avc: denied { setopt } for pid=4790 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 50.209054][ T4791] loop1: detected capacity change from 0 to 1024 [ 50.286618][ T29] audit: type=1326 audit(1769435924.709:7601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 50.302852][ T4797] loop1: detected capacity change from 0 to 1764 [ 50.333311][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 50.353169][ T4800] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 50.359462][ T4802] FAULT_INJECTION: forcing a failure. [ 50.359462][ T4802] name failslab, interval 1, probability 0, space 0, times 0 [ 50.374087][ T4802] CPU: 1 UID: 0 PID: 4802 Comm: syz.0.390 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.374114][ T4802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.374128][ T4802] Call Trace: [ 50.374136][ T4802] [ 50.374188][ T4802] __dump_stack+0x1d/0x30 [ 50.374214][ T4802] dump_stack_lvl+0x95/0xd0 [ 50.374234][ T4802] dump_stack+0x15/0x1b [ 50.374253][ T4802] should_fail_ex+0x263/0x280 [ 50.374354][ T4802] should_failslab+0x8c/0xb0 [ 50.374381][ T4802] __kmalloc_noprof+0xb8/0x580 [ 50.374408][ T4802] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 50.374441][ T4802] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 50.374505][ T4802] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 50.374532][ T4802] ? selinux_capable+0x31/0x40 [ 50.374620][ T4802] ? security_capable+0x7b/0x90 [ 50.374652][ T4802] ? ns_capable+0x7c/0xb0 [ 50.374683][ T4802] genl_rcv_msg+0x432/0x470 [ 50.374710][ T4802] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 50.374808][ T4802] netlink_rcv_skb+0x123/0x220 [ 50.374851][ T4802] ? __pfx_genl_rcv_msg+0x10/0x10 [ 50.374879][ T4802] genl_rcv+0x28/0x40 [ 50.374946][ T4802] netlink_unicast+0x5c0/0x690 [ 50.374979][ T4802] netlink_sendmsg+0x5c8/0x6f0 [ 50.375003][ T4802] ? __pfx_netlink_sendmsg+0x10/0x10 [ 50.375025][ T4802] ____sys_sendmsg+0x5af/0x600 [ 50.375051][ T4802] ___sys_sendmsg+0x195/0x1e0 [ 50.375170][ T4802] __x64_sys_sendmsg+0xd4/0x160 [ 50.375196][ T4802] x64_sys_call+0x17ba/0x3000 [ 50.375221][ T4802] do_syscall_64+0xc0/0x2a0 [ 50.375297][ T4802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.375357][ T4802] RIP: 0033:0x7fcf14b3aeb9 [ 50.375413][ T4802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.375434][ T4802] RSP: 002b:00007fcf13597028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.375456][ T4802] RAX: ffffffffffffffda RBX: 00007fcf14db5fa0 RCX: 00007fcf14b3aeb9 [ 50.375472][ T4802] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 50.375486][ T4802] RBP: 00007fcf13597090 R08: 0000000000000000 R09: 0000000000000000 [ 50.375551][ T4802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.375583][ T4802] R13: 00007fcf14db6038 R14: 00007fcf14db5fa0 R15: 00007ffd98a30358 [ 50.375602][ T4802] [ 50.376058][ T29] audit: type=1326 audit(1769435924.709:7602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 50.404663][ T4807] netlink: 40 bytes leftover after parsing attributes in process `syz.1.392'. [ 50.407196][ T29] audit: type=1326 audit(1769435924.709:7603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 50.666273][ T29] audit: type=1326 audit(1769435924.709:7604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 50.689680][ T29] audit: type=1326 audit(1769435924.709:7605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 50.713718][ T29] audit: type=1400 audit(1769435924.709:7606): avc: denied { mount } for pid=4796 comm="syz.1.387" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 50.735634][ T29] audit: type=1326 audit(1769435924.709:7607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 50.759678][ T29] audit: type=1326 audit(1769435924.709:7608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 50.783705][ T29] audit: type=1326 audit(1769435924.709:7609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4796 comm="syz.1.387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe1ff0bac22 code=0x7ffc0000 [ 50.816489][ T4810] tmpfs: Bad value for 'mpol' [ 50.842381][ T4821] FAULT_INJECTION: forcing a failure. [ 50.842381][ T4821] name failslab, interval 1, probability 0, space 0, times 0 [ 50.855506][ T4821] CPU: 1 UID: 0 PID: 4821 Comm: syz.5.397 Not tainted syzkaller #0 PREEMPT(voluntary) [ 50.855533][ T4821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.855576][ T4821] Call Trace: [ 50.855583][ T4821] [ 50.855591][ T4821] __dump_stack+0x1d/0x30 [ 50.855615][ T4821] dump_stack_lvl+0x95/0xd0 [ 50.855641][ T4821] dump_stack+0x15/0x1b [ 50.855663][ T4821] should_fail_ex+0x263/0x280 [ 50.855730][ T4821] should_failslab+0x8c/0xb0 [ 50.855755][ T4821] __kmalloc_cache_noprof+0x64/0x4a0 [ 50.855784][ T4821] ? dev_ethtool+0x96/0x16a0 [ 50.855810][ T4821] dev_ethtool+0x96/0x16a0 [ 50.855889][ T4821] ? full_name_hash+0x92/0xe0 [ 50.855912][ T4821] ? strcmp+0x22/0x50 [ 50.855991][ T4821] dev_ioctl+0x2e0/0x960 [ 50.856011][ T4821] sock_do_ioctl+0x1aa/0x230 [ 50.856035][ T4821] sock_ioctl+0x41b/0x610 [ 50.856058][ T4821] ? mutex_lock+0x57/0x90 [ 50.856149][ T4821] ? __pfx_sock_ioctl+0x10/0x10 [ 50.856171][ T4821] __se_sys_ioctl+0xce/0x140 [ 50.856204][ T4821] __x64_sys_ioctl+0x43/0x50 [ 50.856235][ T4821] x64_sys_call+0x14b0/0x3000 [ 50.856304][ T4821] do_syscall_64+0xc0/0x2a0 [ 50.856334][ T4821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.856354][ T4821] RIP: 0033:0x7f3d4d90aeb9 [ 50.856419][ T4821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.856439][ T4821] RSP: 002b:00007f3d4c367028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 50.856460][ T4821] RAX: ffffffffffffffda RBX: 00007f3d4db85fa0 RCX: 00007f3d4d90aeb9 [ 50.856473][ T4821] RDX: 00002000000000c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 50.856486][ T4821] RBP: 00007f3d4c367090 R08: 0000000000000000 R09: 0000000000000000 [ 50.856555][ T4821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.856569][ T4821] R13: 00007f3d4db86038 R14: 00007f3d4db85fa0 R15: 00007ffdc78f1498 [ 50.856587][ T4821] [ 51.193283][ T36] kernel read not supported for file 200/net/vlan/config (pid: 36 comm: kworker/1:1) [ 51.203880][ T36] kernel read not supported for file 200/net/vlan/config (pid: 36 comm: kworker/1:1) [ 51.216817][ T4837] SELinux: Context system_u: is not valid (left unmapped). [ 51.278253][ T4838] loop5: detected capacity change from 0 to 1024 [ 51.310878][ T4838] EXT4-fs: Ignoring removed orlov option [ 51.316674][ T4838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.324200][ T4838] ext4: Unknown parameter 'subj_role' [ 51.574255][ T4844] ip6t_rpfilter: unknown options [ 51.671477][ T4849] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 51.678026][ T4849] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 51.686639][ T4849] vhci_hcd vhci_hcd.0: Device attached [ 51.693023][ T4849] vhci_hcd vhci_hcd.0: port 0 already used [ 51.700959][ T4850] vhci_hcd: connection closed [ 51.701160][ T4230] vhci_hcd vhci_hcd.0: stop threads [ 51.711695][ T4230] vhci_hcd vhci_hcd.0: release socket [ 51.717065][ T4230] vhci_hcd vhci_hcd.0: disconnect device [ 51.920390][ T4841] netlink: 256 bytes leftover after parsing attributes in process `syz.2.401'. [ 51.995185][ T4860] FAULT_INJECTION: forcing a failure. [ 51.995185][ T4860] name failslab, interval 1, probability 0, space 0, times 0 [ 52.007873][ T4860] CPU: 0 UID: 0 PID: 4860 Comm: syz.2.406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.007953][ T4860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.007961][ T4860] Call Trace: [ 52.007965][ T4860] [ 52.008023][ T4860] __dump_stack+0x1d/0x30 [ 52.008039][ T4860] dump_stack_lvl+0x95/0xd0 [ 52.008052][ T4860] dump_stack+0x15/0x1b [ 52.008064][ T4860] should_fail_ex+0x263/0x280 [ 52.008116][ T4860] should_failslab+0x8c/0xb0 [ 52.008130][ T4860] ? __pfx_free_modprobe_argv+0x10/0x10 [ 52.008181][ T4860] __kmalloc_cache_noprof+0x64/0x4a0 [ 52.008325][ T4860] ? call_usermodehelper_setup+0x72/0x190 [ 52.008423][ T4860] ? __pfx_free_modprobe_argv+0x10/0x10 [ 52.008441][ T4860] call_usermodehelper_setup+0x72/0x190 [ 52.008456][ T4860] __request_module+0x264/0x3d0 [ 52.008531][ T4860] ? crypto_alg_lookup+0x310/0x360 [ 52.008547][ T4860] crypto_alg_mod_lookup+0xe4/0x490 [ 52.008583][ T4860] crypto_find_alg+0x61/0x70 [ 52.008617][ T4860] crypto_type_has_alg+0x28/0x60 [ 52.008635][ T4860] crypto_has_ahash+0x27/0x40 [ 52.008702][ T4860] xfrm_aalg_get_byname+0x10a/0x170 [ 52.008717][ T4860] xfrm_add_sa+0x1447/0x25d0 [ 52.008763][ T4860] xfrm_user_rcv_msg+0x576/0x670 [ 52.008781][ T4860] ? __kfree_skb+0x109/0x150 [ 52.008799][ T4860] ? nlmon_xmit+0x4f/0x60 [ 52.008845][ T4860] ? consume_skb+0x49/0x140 [ 52.008868][ T4860] netlink_rcv_skb+0x123/0x220 [ 52.008887][ T4860] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 52.008947][ T4860] xfrm_netlink_rcv+0x48/0x60 [ 52.008961][ T4860] netlink_unicast+0x5c0/0x690 [ 52.008979][ T4860] netlink_sendmsg+0x5c8/0x6f0 [ 52.009064][ T4860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.009130][ T4860] ____sys_sendmsg+0x5af/0x600 [ 52.009163][ T4860] ___sys_sendmsg+0x195/0x1e0 [ 52.009199][ T4860] __x64_sys_sendmsg+0xd4/0x160 [ 52.009213][ T4860] x64_sys_call+0x17ba/0x3000 [ 52.009227][ T4860] do_syscall_64+0xc0/0x2a0 [ 52.009309][ T4860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.009322][ T4860] RIP: 0033:0x7f3ce6d4aeb9 [ 52.009333][ T4860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.009343][ T4860] RSP: 002b:00007f3ce57a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.009356][ T4860] RAX: ffffffffffffffda RBX: 00007f3ce6fc5fa0 RCX: 00007f3ce6d4aeb9 [ 52.009443][ T4860] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 52.009451][ T4860] RBP: 00007f3ce57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 52.009459][ T4860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.009527][ T4860] R13: 00007f3ce6fc6038 R14: 00007f3ce6fc5fa0 R15: 00007ffd881474d8 [ 52.009538][ T4860] [ 52.012514][ T4866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.409'. [ 52.394233][ T4900] netlink: 44 bytes leftover after parsing attributes in process `syz.0.415'. [ 52.494833][ T4915] ip6t_rpfilter: unknown options [ 52.543490][ T4919] netlink: 'syz.2.421': attribute type 13 has an invalid length. [ 52.564002][ T4927] FAULT_INJECTION: forcing a failure. [ 52.564002][ T4927] name failslab, interval 1, probability 0, space 0, times 0 [ 52.576824][ T4927] CPU: 1 UID: 0 PID: 4927 Comm: syz.1.424 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.576856][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.576870][ T4927] Call Trace: [ 52.576877][ T4927] [ 52.576885][ T4927] __dump_stack+0x1d/0x30 [ 52.576958][ T4927] dump_stack_lvl+0x95/0xd0 [ 52.576983][ T4927] dump_stack+0x15/0x1b [ 52.577006][ T4927] should_fail_ex+0x263/0x280 [ 52.577040][ T4927] should_failslab+0x8c/0xb0 [ 52.577094][ T4927] kmem_cache_alloc_noprof+0x68/0x490 [ 52.577123][ T4927] ? dst_alloc+0xbd/0x100 [ 52.577192][ T4927] dst_alloc+0xbd/0x100 [ 52.577227][ T4927] rt_dst_clone+0x3b/0x2e0 [ 52.577253][ T4927] NF_HOOK+0x65/0x230 [ 52.577276][ T4927] ? __pfx_ip_mc_finish_output+0x10/0x10 [ 52.577326][ T4927] ip_mc_output+0x139/0x370 [ 52.577430][ T4927] ? __pfx_dst_output+0x10/0x10 [ 52.577454][ T4927] ip_send_skb+0x151/0x160 [ 52.577552][ T4927] udp_send_skb+0x6e3/0xa40 [ 52.577581][ T4927] udp_sendmsg+0x48b/0x15d0 [ 52.577605][ T4927] ? avc_has_perm+0x101/0x190 [ 52.577639][ T4927] ? __rcu_read_unlock+0x4e/0x70 [ 52.577701][ T4927] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 52.577729][ T4927] ? avc_has_perm+0x101/0x190 [ 52.577768][ T4927] ? __pfx_udp_sendmsg+0x10/0x10 [ 52.577804][ T4927] inet_sendmsg+0xac/0xd0 [ 52.577826][ T4927] sock_write_iter+0x2e0/0x360 [ 52.577890][ T4927] do_iter_readv_writev+0x4fd/0x5a0 [ 52.577918][ T4927] vfs_writev+0x2e1/0x900 [ 52.577995][ T4927] do_writev+0xe9/0x210 [ 52.578025][ T4927] __x64_sys_writev+0x45/0x50 [ 52.578128][ T4927] x64_sys_call+0x1ba5/0x3000 [ 52.578208][ T4927] do_syscall_64+0xc0/0x2a0 [ 52.578243][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.578325][ T4927] RIP: 0033:0x7fe1ff0baeb9 [ 52.578344][ T4927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.578364][ T4927] RSP: 002b:00007fe1fdb17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 52.578387][ T4927] RAX: ffffffffffffffda RBX: 00007fe1ff335fa0 RCX: 00007fe1ff0baeb9 [ 52.578484][ T4927] RDX: 0000000000000004 RSI: 0000200000000840 RDI: 0000000000000005 [ 52.578499][ T4927] RBP: 00007fe1fdb17090 R08: 0000000000000000 R09: 0000000000000000 [ 52.578567][ T4927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.578582][ T4927] R13: 00007fe1ff336038 R14: 00007fe1ff335fa0 R15: 00007ffc14b7b4a8 [ 52.578604][ T4927] [ 52.823641][ T4925] FAULT_INJECTION: forcing a failure. [ 52.823641][ T4925] name failslab, interval 1, probability 0, space 0, times 0 [ 52.836469][ T4925] CPU: 1 UID: 0 PID: 4925 Comm: syz.5.423 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.836495][ T4925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.836507][ T4925] Call Trace: [ 52.836512][ T4925] [ 52.836519][ T4925] __dump_stack+0x1d/0x30 [ 52.836545][ T4925] dump_stack_lvl+0x95/0xd0 [ 52.836597][ T4925] dump_stack+0x15/0x1b [ 52.836615][ T4925] should_fail_ex+0x263/0x280 [ 52.836647][ T4925] should_failslab+0x8c/0xb0 [ 52.836673][ T4925] kmem_cache_alloc_noprof+0x68/0x490 [ 52.836713][ T4925] ? skb_clone+0x151/0x1f0 [ 52.836735][ T4925] skb_clone+0x151/0x1f0 [ 52.836752][ T4925] __netlink_deliver_tap+0x2c9/0x500 [ 52.836801][ T4925] netlink_unicast+0x66b/0x690 [ 52.836831][ T4925] netlink_sendmsg+0x5c8/0x6f0 [ 52.836850][ T4925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 52.836868][ T4925] ____sys_sendmsg+0x5af/0x600 [ 52.836899][ T4925] ___sys_sendmsg+0x195/0x1e0 [ 52.836928][ T4925] __x64_sys_sendmsg+0xd4/0x160 [ 52.836948][ T4925] x64_sys_call+0x17ba/0x3000 [ 52.837092][ T4925] do_syscall_64+0xc0/0x2a0 [ 52.837123][ T4925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.837167][ T4925] RIP: 0033:0x7f3d4d90aeb9 [ 52.837183][ T4925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.837202][ T4925] RSP: 002b:00007f3d4c367028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 52.837224][ T4925] RAX: ffffffffffffffda RBX: 00007f3d4db85fa0 RCX: 00007f3d4d90aeb9 [ 52.837238][ T4925] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 52.837250][ T4925] RBP: 00007f3d4c367090 R08: 0000000000000000 R09: 0000000000000000 [ 52.837329][ T4925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.837343][ T4925] R13: 00007f3d4db86038 R14: 00007f3d4db85fa0 R15: 00007ffdc78f1498 [ 52.837360][ T4925] [ 52.890965][ T4925] netlink: 16 bytes leftover after parsing attributes in process `syz.5.423'. [ 53.063783][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.071027][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.191378][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.202714][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.251633][ T4902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 53.298480][ T4934] loop1: detected capacity change from 0 to 512 [ 53.309443][ T4919] hsr0: left allmulticast mode [ 53.309464][ T4919] hsr_slave_0: left allmulticast mode [ 53.309478][ T4919] hsr_slave_1: left allmulticast mode [ 53.334013][ T4224] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.334062][ T4224] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.334167][ T4224] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.334199][ T4224] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.355136][ T4934] EXT4-fs: Ignoring removed i_version option [ 53.374804][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 53.374829][ T4961] netlink: 312 bytes leftover after parsing attributes in process `syz.5.427'. [ 53.374845][ T4961] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 53.436919][ T4967] loop3: detected capacity change from 0 to 512 [ 53.441098][ T4934] EXT4-fs (loop1): 1 truncate cleaned up [ 53.446177][ T4934] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.448414][ T4967] EXT4-fs (loop3): 1 truncate cleaned up [ 53.448853][ T4967] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.514511][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.920076][ T4995] sctp: [Deprecated]: syz.3.438 (pid 4995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 53.920076][ T4995] Use struct sctp_sack_info instead [ 53.995030][ T4998] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=4998 comm=syz.5.439 [ 54.023062][ T5001] netlink: 'syz.3.442': attribute type 4 has an invalid length. [ 54.112918][ T5018] blkio.reset_stats is deprecated [ 54.118413][ T5021] netlink: 'syz.3.442': attribute type 4 has an invalid length. [ 54.133223][ T5019] loop5: detected capacity change from 0 to 1024 [ 54.144265][ T5019] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.168194][ T5019] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #11: comm syz.5.446: iget: bogus i_mode (1) [ 54.185037][ T5019] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.446: couldn't read orphan inode 11 (err -117) [ 54.197651][ T5019] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.206713][ T5028] xt_hashlimit: max too large, truncated to 1048576 [ 54.225370][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.271434][ T5033] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 54.279065][ T5033] SELinux: failed to load policy [ 54.338307][ T3809] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.395558][ T4226] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.406118][ T4226] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.425269][ T4226] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.434390][ T4226] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.475063][ T5056] loop5: detected capacity change from 0 to 164 [ 54.484075][ T5056] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 54.499538][ T5056] syz_tun: entered allmulticast mode [ 54.505320][ T5056] syz_tun: left allmulticast mode [ 54.610021][ T5054] dvmrp1: entered allmulticast mode [ 54.658661][ T5060] FAULT_INJECTION: forcing a failure. [ 54.658661][ T5060] name failslab, interval 1, probability 0, space 0, times 0 [ 54.671872][ T5060] CPU: 1 UID: 0 PID: 5060 Comm: syz.0.462 Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.671986][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 54.671994][ T5060] Call Trace: [ 54.672048][ T5060] [ 54.672054][ T5060] __dump_stack+0x1d/0x30 [ 54.672070][ T5060] dump_stack_lvl+0x95/0xd0 [ 54.672083][ T5060] dump_stack+0x15/0x1b [ 54.672150][ T5060] should_fail_ex+0x263/0x280 [ 54.672168][ T5060] should_failslab+0x8c/0xb0 [ 54.672182][ T5060] __kmalloc_noprof+0xb8/0x580 [ 54.672292][ T5060] ? bpf_test_init+0x86/0x130 [ 54.672311][ T5060] bpf_test_init+0x86/0x130 [ 54.672331][ T5060] bpf_prog_test_run_xdp+0x306/0xa10 [ 54.672351][ T5060] ? __rcu_read_unlock+0x4e/0x70 [ 54.672423][ T5060] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 54.672501][ T5060] bpf_prog_test_run+0x204/0x340 [ 54.672530][ T5060] __sys_bpf+0x4c0/0x7b0 [ 54.672558][ T5060] __x64_sys_bpf+0x41/0x50 [ 54.672624][ T5060] x64_sys_call+0x28e1/0x3000 [ 54.672639][ T5060] do_syscall_64+0xc0/0x2a0 [ 54.672708][ T5060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.672732][ T5060] RIP: 0033:0x7fcf14b3aeb9 [ 54.672784][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.672872][ T5060] RSP: 002b:00007fcf13597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 54.672885][ T5060] RAX: ffffffffffffffda RBX: 00007fcf14db5fa0 RCX: 00007fcf14b3aeb9 [ 54.672913][ T5060] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 54.672921][ T5060] RBP: 00007fcf13597090 R08: 0000000000000000 R09: 0000000000000000 [ 54.672929][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.672937][ T5060] R13: 00007fcf14db6038 R14: 00007fcf14db5fa0 R15: 00007ffd98a30358 [ 54.672948][ T5060] [ 55.006018][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.016398][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.068325][ T5084] vlan2: entered promiscuous mode [ 55.074091][ T5084] bridge0: entered promiscuous mode [ 55.113253][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.123650][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.149372][ T5089] loop3: detected capacity change from 0 to 512 [ 55.161538][ T5089] SELinux: Context system_u:object_r:var_t:s0 is not valid (left unmapped). [ 55.216081][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.226453][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.261402][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 55.261417][ T29] audit: type=1326 audit(1769435929.689:7709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5071 comm="syz.2.469" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ce6d4aeb9 code=0x0 [ 55.305325][ T5102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.344897][ T29] audit: type=1400 audit(1769435929.759:7710): avc: denied { rmdir } for pid=3311 comm="syz-executor" name="bus" dev="tmpfs" ino=523 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:var_t:s0" [ 55.387316][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 55.397657][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.418033][ T5111] __nla_validate_parse: 6 callbacks suppressed [ 55.418049][ T5111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.481'. [ 55.437168][ T5074] chnl_net:caif_netlink_parms(): no params data found [ 55.468128][ T5102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.610087][ T5130] netlink: 28 bytes leftover after parsing attributes in process `syz.2.486'. [ 55.611977][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.626701][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.634145][ T5074] bridge_slave_0: entered allmulticast mode [ 55.641292][ T5074] bridge_slave_0: entered promiscuous mode [ 55.656000][ T5102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.704805][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.712630][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.720973][ T5074] bridge_slave_1: entered allmulticast mode [ 55.727439][ T5074] bridge_slave_1: entered promiscuous mode [ 55.762910][ T5102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.789099][ T57] bridge_slave_1: left allmulticast mode [ 55.794874][ T57] bridge_slave_1: left promiscuous mode [ 55.801390][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.844693][ T57] bridge_slave_0: left allmulticast mode [ 55.850514][ T57] bridge_slave_0: left promiscuous mode [ 55.856181][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.863711][ T29] audit: type=1400 audit(1769435930.279:7711): avc: denied { read write } for pid=5140 comm="syz.2.489" name="tty3" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 55.891711][ T29] audit: type=1400 audit(1769435930.279:7712): avc: denied { open } for pid=5140 comm="syz.2.489" path="/dev/tty3" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:system_dbusd_var_lib_t:s0" [ 55.912113][ T5148] xt_connbytes: Forcing CT accounting to be enabled [ 55.992541][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.002306][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.011871][ T57] bond0 (unregistering): Released all slaves [ 56.028518][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.038970][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.069209][ T5074] team0: Port device team_slave_0 added [ 56.076471][ T5074] team0: Port device team_slave_1 added [ 56.087320][ T4226] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.098413][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.106290][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.115885][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.123401][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.135074][ T57] hsr0: left allmulticast mode [ 56.140013][ T57] veth1_macvtap: left promiscuous mode [ 56.145678][ T57] veth0_macvtap: left promiscuous mode [ 56.151313][ T57] veth1_vlan: left promiscuous mode [ 56.156668][ T57] veth0_vlan: left promiscuous mode [ 56.217699][ T57] team0 (unregistering): Port device team_slave_1 removed [ 56.228330][ T57] team0 (unregistering): Port device team_slave_0 removed [ 56.267377][ T4226] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.275987][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.283670][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.309620][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.324763][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.331797][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.337465][ T5120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.357891][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.382841][ T4226] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.411190][ T4226] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.436515][ T5074] hsr_slave_0: entered promiscuous mode [ 56.456642][ T5074] hsr_slave_1: entered promiscuous mode [ 56.462937][ T5074] debugfs: 'hsr0' already exists in 'hsr' [ 56.468716][ T5074] Cannot create hsr debugfs directory [ 56.470221][ T29] audit: type=1400 audit(1769435930.889:7713): avc: denied { getopt } for pid=5166 comm="syz.3.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 56.523832][ T5171] loop3: detected capacity change from 0 to 128 [ 56.619361][ T5185] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=5185 comm=syz.1.497 [ 56.632807][ T5171] bio_check_eod: 129 callbacks suppressed [ 56.632821][ T5171] syz.3.495: attempt to access beyond end of device [ 56.632821][ T5171] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 56.671815][ T29] audit: type=1400 audit(1769435931.099:7714): avc: denied { connect } for pid=5188 comm="syz.1.499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.692516][ T5171] syz.3.495: attempt to access beyond end of device [ 56.692516][ T5171] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 56.719215][ T5192] capability: warning: `syz.1.500' uses 32-bit capabilities (legacy support in use) [ 56.729127][ T5192] program syz.1.500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.737255][ T5074] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 56.742244][ T29] audit: type=1400 audit(1769435931.159:7715): avc: denied { watch } for pid=5191 comm="syz.1.500" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 56.749327][ T5171] syz.3.495: attempt to access beyond end of device [ 56.749327][ T5171] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 56.782897][ T5074] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 56.859225][ T57] IPVS: stop unused estimator thread 0... [ 56.880603][ T5074] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 56.915624][ T5171] syz.3.495: attempt to access beyond end of device [ 56.915624][ T5171] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 56.920731][ T5074] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 56.935781][ T5171] syz.3.495: attempt to access beyond end of device [ 56.935781][ T5171] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 56.963143][ T5171] syz.3.495: attempt to access beyond end of device [ 56.963143][ T5171] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 56.989011][ T5171] syz.3.495: attempt to access beyond end of device [ 56.989011][ T5171] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 57.054420][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.061544][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.069229][ T5171] syz.3.495: attempt to access beyond end of device [ 57.069229][ T5171] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 57.087041][ T5229] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=5229 comm=syz.0.508 [ 57.102972][ T5233] FAULT_INJECTION: forcing a failure. [ 57.102972][ T5233] name failslab, interval 1, probability 0, space 0, times 0 [ 57.114399][ T5171] syz.3.495: attempt to access beyond end of device [ 57.114399][ T5171] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 57.115704][ T5233] CPU: 0 UID: 0 PID: 5233 Comm: syz.2.509 Not tainted syzkaller #0 PREEMPT(voluntary) [ 57.115732][ T5233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 57.115745][ T5233] Call Trace: [ 57.115754][ T5233] [ 57.115761][ T5233] __dump_stack+0x1d/0x30 [ 57.115786][ T5233] dump_stack_lvl+0x95/0xd0 [ 57.115808][ T5233] dump_stack+0x15/0x1b [ 57.115846][ T5233] should_fail_ex+0x263/0x280 [ 57.115893][ T5233] should_failslab+0x8c/0xb0 [ 57.115977][ T5233] __kmalloc_cache_noprof+0x64/0x4a0 [ 57.116047][ T5233] ? rtnl_newlink+0x5c/0x1370 [ 57.116071][ T5233] ? __pfx_rtnl_newlink+0x10/0x10 [ 57.116134][ T5233] rtnl_newlink+0x5c/0x1370 [ 57.116160][ T5233] ? xas_load+0x413/0x430 [ 57.116187][ T5233] ? xas_load+0x413/0x430 [ 57.116351][ T5233] ? __rcu_read_unlock+0x4e/0x70 [ 57.116387][ T5233] ? xa_load+0xb1/0xe0 [ 57.116415][ T5233] ? __rcu_read_unlock+0x4e/0x70 [ 57.116495][ T5233] ? avc_has_perm_noaudit+0xab/0x130 [ 57.116528][ T5233] ? cred_has_capability+0x224/0x290 [ 57.116574][ T5233] ? selinux_capable+0x31/0x40 [ 57.116594][ T5233] ? security_capable+0x7b/0x90 [ 57.116624][ T5233] ? ns_capable+0x7c/0xb0 [ 57.116665][ T5233] ? __pfx_rtnl_newlink+0x10/0x10 [ 57.116689][ T5233] rtnetlink_rcv_msg+0x64b/0x720 [ 57.116713][ T5233] ? avc_has_perm_noaudit+0xab/0x130 [ 57.116832][ T5233] netlink_rcv_skb+0x123/0x220 [ 57.116865][ T5233] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 57.116894][ T5233] rtnetlink_rcv+0x1c/0x30 [ 57.116916][ T5233] netlink_unicast+0x5c0/0x690 [ 57.116972][ T5233] netlink_sendmsg+0x5c8/0x6f0 [ 57.116994][ T5233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.117069][ T5233] ____sys_sendmsg+0x5af/0x600 [ 57.117093][ T5233] ___sys_sendmsg+0x195/0x1e0 [ 57.117122][ T5233] __x64_sys_sendmsg+0xd4/0x160 [ 57.117248][ T5233] x64_sys_call+0x17ba/0x3000 [ 57.117305][ T5233] do_syscall_64+0xc0/0x2a0 [ 57.117336][ T5233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.117364][ T5233] RIP: 0033:0x7f3ce6d4aeb9 [ 57.117395][ T5233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.117413][ T5233] RSP: 002b:00007f3ce57a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.117434][ T5233] RAX: ffffffffffffffda RBX: 00007f3ce6fc5fa0 RCX: 00007f3ce6d4aeb9 [ 57.117450][ T5233] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 57.117540][ T5233] RBP: 00007f3ce57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 57.117596][ T5233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.117610][ T5233] R13: 00007f3ce6fc6038 R14: 00007f3ce6fc5fa0 R15: 00007ffd881474d8 [ 57.117629][ T5233] [ 57.182338][ T4230] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.186182][ T5171] syz.3.495: attempt to access beyond end of device [ 57.186182][ T5171] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 57.188492][ T4230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.190785][ T4230] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.428945][ T4230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.478043][ T4950] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.491117][ T4950] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 57.545450][ T5253] loop3: detected capacity change from 0 to 512 [ 57.581740][ T5253] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.514: invalid indirect mapped block 256 (level 2) [ 57.582671][ T5248] fido_id[5248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.615052][ T5253] EXT4-fs (loop3): 2 truncates cleaned up [ 57.624670][ T5253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.649890][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.685245][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.692217][ T29] audit: type=1400 audit(1769435932.099:7716): avc: denied { mount } for pid=5265 comm="syz.0.516" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.773918][ T29] audit: type=1400 audit(1769435932.159:7717): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 57.861314][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 57.870387][ T5285] netlink: 'syz.3.517': attribute type 1 has an invalid length. [ 57.894647][ T5302] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2 sclass=netlink_audit_socket pid=5302 comm=syz.1.519 [ 57.924615][ T5285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.993658][ T5074] veth0_vlan: entered promiscuous mode [ 58.032020][ T5074] veth1_vlan: entered promiscuous mode [ 58.057678][ T5074] veth0_macvtap: entered promiscuous mode [ 58.067703][ T5074] veth1_macvtap: entered promiscuous mode [ 58.078039][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.095726][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.112980][ T5314] netlink: 12 bytes leftover after parsing attributes in process `syz.1.522'. [ 58.122090][ T5314] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 58.166311][ T29] audit: type=1400 audit(1769435932.579:7718): avc: denied { append } for pid=5318 comm="syz.2.524" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.199375][ T4223] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.231499][ T4223] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.245507][ T4223] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.258571][ T4223] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.353225][ T5329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 58.367365][ T5329] loop3: detected capacity change from 0 to 1024 [ 58.377614][ T5329] EXT4-fs: Ignoring removed orlov option [ 58.383319][ T5329] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.394452][ T5329] ext4: Unknown parameter 'subj_role' [ 58.426365][ T5356] FAULT_INJECTION: forcing a failure. [ 58.426365][ T5356] name failslab, interval 1, probability 0, space 0, times 0 [ 58.439803][ T5356] CPU: 1 UID: 0 PID: 5356 Comm: syz.6.529 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.439857][ T5356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.439869][ T5356] Call Trace: [ 58.439875][ T5356] [ 58.439883][ T5356] __dump_stack+0x1d/0x30 [ 58.439911][ T5356] dump_stack_lvl+0x95/0xd0 [ 58.439982][ T5356] dump_stack+0x15/0x1b [ 58.440075][ T5356] should_fail_ex+0x263/0x280 [ 58.440120][ T5356] should_failslab+0x8c/0xb0 [ 58.440147][ T5356] __kvmalloc_node_noprof+0x148/0x680 [ 58.440181][ T5356] ? fanout_add+0x5e4/0xad0 [ 58.440213][ T5356] fanout_add+0x5e4/0xad0 [ 58.440283][ T5356] packet_setsockopt+0x981/0xfd0 [ 58.440322][ T5356] ? __pfx_packet_setsockopt+0x10/0x10 [ 58.440422][ T5356] __sys_setsockopt+0x184/0x200 [ 58.440453][ T5356] __x64_sys_setsockopt+0x64/0x80 [ 58.440483][ T5356] x64_sys_call+0x21d5/0x3000 [ 58.440587][ T5356] do_syscall_64+0xc0/0x2a0 [ 58.440614][ T5356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.440689][ T5356] RIP: 0033:0x7fcd2270aeb9 [ 58.440706][ T5356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.440723][ T5356] RSP: 002b:00007fcd21167028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 58.440745][ T5356] RAX: ffffffffffffffda RBX: 00007fcd22985fa0 RCX: 00007fcd2270aeb9 [ 58.440762][ T5356] RDX: 0000000000000012 RSI: 0000000000000107 RDI: 0000000000000007 [ 58.440776][ T5356] RBP: 00007fcd21167090 R08: 0000000000000004 R09: 0000000000000000 [ 58.440848][ T5356] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.440860][ T5356] R13: 00007fcd22986038 R14: 00007fcd22985fa0 R15: 00007fff99af2868 [ 58.440880][ T5356] [ 58.628876][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz.6.529'. [ 58.638098][ T5356] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 58.703403][ T5367] loop1: detected capacity change from 0 to 512 [ 58.780604][ T5375] FAULT_INJECTION: forcing a failure. [ 58.780604][ T5375] name failslab, interval 1, probability 0, space 0, times 0 [ 58.793368][ T5375] CPU: 0 UID: 0 PID: 5375 Comm: syz.2.534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.793394][ T5375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.793411][ T5375] Call Trace: [ 58.793419][ T5375] [ 58.793427][ T5375] __dump_stack+0x1d/0x30 [ 58.793455][ T5375] dump_stack_lvl+0x95/0xd0 [ 58.793480][ T5375] dump_stack+0x15/0x1b [ 58.793499][ T5375] should_fail_ex+0x263/0x280 [ 58.793556][ T5375] should_failslab+0x8c/0xb0 [ 58.793583][ T5375] kmem_cache_alloc_node_noprof+0x6a/0x4a0 [ 58.793612][ T5375] ? __alloc_skb+0x2f0/0x4b0 [ 58.793676][ T5375] __alloc_skb+0x2f0/0x4b0 [ 58.793711][ T5375] ? __alloc_skb+0x219/0x4b0 [ 58.793743][ T5375] netlink_alloc_large_skb+0xbf/0xf0 [ 58.793777][ T5375] netlink_sendmsg+0x40c/0x6f0 [ 58.793878][ T5375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.793901][ T5375] ____sys_sendmsg+0x5af/0x600 [ 58.793926][ T5375] ___sys_sendmsg+0x195/0x1e0 [ 58.793995][ T5375] __x64_sys_sendmsg+0xd4/0x160 [ 58.794016][ T5375] x64_sys_call+0x17ba/0x3000 [ 58.794039][ T5375] do_syscall_64+0xc0/0x2a0 [ 58.794084][ T5375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.794110][ T5375] RIP: 0033:0x7f3ce6d4aeb9 [ 58.794129][ T5375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 58.794258][ T5375] RSP: 002b:00007f3ce57a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.794282][ T5375] RAX: ffffffffffffffda RBX: 00007f3ce6fc5fa0 RCX: 00007f3ce6d4aeb9 [ 58.794297][ T5375] RDX: 0000000000040000 RSI: 0000200000002580 RDI: 0000000000000004 [ 58.794309][ T5375] RBP: 00007f3ce57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 58.794376][ T5375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.794388][ T5375] R13: 00007f3ce6fc6038 R14: 00007f3ce6fc5fa0 R15: 00007ffd881474d8 [ 58.794408][ T5375] [ 58.829304][ T5375] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 59.048712][ T5375] netlink: 'syz.2.534': attribute type 2 has an invalid length. [ 59.122166][ T5395] FAULT_INJECTION: forcing a failure. [ 59.122166][ T5395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.136045][ T5395] CPU: 1 UID: 0 PID: 5395 Comm: syz.2.540 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.136078][ T5395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 59.136091][ T5395] Call Trace: [ 59.136098][ T5395] [ 59.136106][ T5395] __dump_stack+0x1d/0x30 [ 59.136168][ T5395] dump_stack_lvl+0x95/0xd0 [ 59.136264][ T5395] dump_stack+0x15/0x1b [ 59.136288][ T5395] should_fail_ex+0x263/0x280 [ 59.136323][ T5395] should_fail+0xb/0x20 [ 59.136348][ T5395] should_fail_usercopy+0x1a/0x20 [ 59.136415][ T5395] _copy_from_iter+0x21c/0xea0 [ 59.136491][ T5395] ? __kmalloc_noprof+0x2a3/0x580 [ 59.136515][ T5395] ? qrtr_tun_write_iter+0x87/0x140 [ 59.136544][ T5395] qrtr_tun_write_iter+0xa7/0x140 [ 59.136570][ T5395] do_iter_readv_writev+0x4fd/0x5a0 [ 59.136596][ T5395] vfs_writev+0x2e1/0x900 [ 59.136747][ T5395] do_writev+0xe9/0x210 [ 59.136777][ T5395] __x64_sys_writev+0x45/0x50 [ 59.136798][ T5395] x64_sys_call+0x1ba5/0x3000 [ 59.136869][ T5395] do_syscall_64+0xc0/0x2a0 [ 59.136900][ T5395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.136925][ T5395] RIP: 0033:0x7f3ce6d4aeb9 [ 59.136949][ T5395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.136969][ T5395] RSP: 002b:00007f3ce57a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 59.137058][ T5395] RAX: ffffffffffffffda RBX: 00007f3ce6fc5fa0 RCX: 00007f3ce6d4aeb9 [ 59.137075][ T5395] RDX: 0000000000000002 RSI: 0000200000000780 RDI: 0000000000000003 [ 59.137090][ T5395] RBP: 00007f3ce57a7090 R08: 0000000000000000 R09: 0000000000000000 [ 59.137161][ T5395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.137176][ T5395] R13: 00007f3ce6fc6038 R14: 00007f3ce6fc5fa0 R15: 00007ffd881474d8 [ 59.137197][ T5395] [ 59.138990][ T5393] tipc: Enabling of bearer rejected, media not registered [ 59.366359][ T5402] netlink: 28 bytes leftover after parsing attributes in process `syz.6.543'. [ 59.554719][ T5413] ip6t_rpfilter: unknown options [ 59.825135][ T5422] dvmrp1: left allmulticast mode [ 60.185909][ T5431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.549'. [ 60.349504][ T5408] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.361568][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 60.361651][ T29] audit: type=1326 audit(1769435934.789:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe1ff07b78e code=0x7ffc0000 [ 60.391803][ T29] audit: type=1326 audit(1769435934.789:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe1ff07b78e code=0x7ffc0000 [ 60.415094][ T29] audit: type=1326 audit(1769435934.789:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe1ff07b78e code=0x7ffc0000 [ 60.438272][ T29] audit: type=1326 audit(1769435934.789:7751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 60.462916][ T29] audit: type=1326 audit(1769435934.789:7752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.1.547" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ff0baeb9 code=0x7ffc0000 [ 60.558819][ T5441] netlink: 'syz.1.555': attribute type 39 has an invalid length. [ 60.572714][ T29] audit: type=1400 audit(1769435934.999:7753): avc: denied { append } for pid=5436 comm="syz.0.552" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.596820][ T29] audit: type=1400 audit(1769435934.999:7754): avc: denied { ioctl } for pid=5436 comm="syz.0.552" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.640362][ T5447] netlink: 'syz.6.557': attribute type 1 has an invalid length. [ 60.673330][ T5447] 8021q: VLANs not supported on caif0 [ 60.692543][ T5454] netlink: 28 bytes leftover after parsing attributes in process `syz.0.560'. [ 60.703492][ T5452] loop1: detected capacity change from 0 to 164 [ 60.760636][ T5452] erspan0: default FDB implementation only supports local addresses [ 60.768896][ T29] audit: type=1400 audit(1769435935.189:7755): avc: denied { write } for pid=5451 comm="syz.1.559" path="socket:[12630]" dev="sockfs" ino=12630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 60.852275][ T5450] netlink: 24 bytes leftover after parsing attributes in process `syz.3.558'. [ 60.871762][ T5450] loop3: detected capacity change from 0 to 1024 [ 60.878657][ T5450] EXT4-fs: Ignoring removed orlov option [ 60.885156][ T5450] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.895560][ T5450] ext4: Unknown parameter 'subj_role' [ 60.907177][ T29] audit: type=1400 audit(1769435935.329:7756): avc: denied { mount } for pid=5466 comm="syz.6.563" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.025307][ T5483] netlink: 36 bytes leftover after parsing attributes in process `syz.6.567'. [ 61.089370][ T5497] loop6: detected capacity change from 0 to 128 [ 61.114174][ T5497] FAT-fs (loop6): Directory bread(block 414) failed [ 61.137798][ T5497] FAT-fs (loop6): Directory bread(block 415) failed [ 61.153773][ T5497] FAT-fs (loop6): Directory bread(block 416) failed [ 61.153800][ T5497] FAT-fs (loop6): Directory bread(block 417) failed [ 61.153832][ T5497] FAT-fs (loop6): Directory bread(block 418) failed [ 61.153850][ T5497] FAT-fs (loop6): Directory bread(block 419) failed [ 61.153867][ T5497] FAT-fs (loop6): Directory bread(block 420) failed [ 61.153911][ T5497] FAT-fs (loop6): Directory bread(block 421) failed [ 61.155761][ T5497] FAT-fs (loop6): Directory bread(block 414) failed [ 61.155787][ T5497] FAT-fs (loop6): Directory bread(block 415) failed [ 61.298478][ T5523] loop6: detected capacity change from 0 to 128 [ 61.489936][ T29] audit: type=1400 audit(1769435935.909:7757): avc: denied { create } for pid=5533 comm="syz.0.575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 61.503256][ T5523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.541694][ T5523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.604035][ T5592] program syz.1.578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.662087][ T5594] can0: slcan on ttyS3. [ 61.681485][ T5566] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.697407][ T5594] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.748173][ T5566] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.776812][ T5605] ALSA: seq fatal error: cannot create timer (-22) [ 61.838151][ T5606] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.882410][ T5566] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.898425][ T5594] can0 (unregistered): slcan off ttyS3. [ 61.931091][ T5605] can0: slcan on ttyS3. [ 61.996605][ T5566] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.117722][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.139640][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.164739][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.187180][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.561417][ T5597] can0 (unregistered): slcan off ttyS3. [ 62.598315][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.592'. [ 62.612191][ T5661] vlan3: entered promiscuous mode [ 62.617305][ T5661] dummy0: entered promiscuous mode [ 62.626401][ T5663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.591'. [ 62.653048][ T5663] netlink: 'syz.2.591': attribute type 1 has an invalid length. [ 62.660776][ T5663] netlink: 'syz.2.591': attribute type 2 has an invalid length. [ 62.932219][ T5669] loop1: detected capacity change from 0 to 1024 [ 62.944467][ T5669] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 62.955467][ T5669] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 62.965589][ T5669] JBD2: no valid journal superblock found [ 62.971343][ T5669] EXT4-fs (loop1): Could not load journal inode [ 63.050854][ T5623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 63.095089][ T5683] loop3: detected capacity change from 0 to 512 [ 63.113164][ T5680] syzkaller1: entered promiscuous mode [ 63.118696][ T5680] syzkaller1: entered allmulticast mode [ 63.130623][ T5680] netlink: 68 bytes leftover after parsing attributes in process `syz.2.598'. [ 63.147963][ T5683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.153350][ T5681] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 63.164281][ T5683] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.187460][ T5683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.597'. [ 63.197102][ T5683] netlink: 48 bytes leftover after parsing attributes in process `syz.3.597'. [ 63.242994][ T5696] syzkaller0: entered promiscuous mode [ 63.248485][ T5696] syzkaller0: entered allmulticast mode [ 63.459157][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.490550][ T5709] syz.3.605 (5709): /proc/5709/oom_adj is deprecated, please use /proc/5709/oom_score_adj instead. [ 63.546335][ T5713] loop3: detected capacity change from 0 to 512 [ 63.603988][ T5713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.624717][ T5700] loop6: detected capacity change from 0 to 512 [ 63.659371][ T5713] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.684408][ T5700] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.604: bg 0: block 393: padding at end of block bitmap is not set [ 63.691175][ T5713] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.608'. [ 63.708028][ T5713] netlink: 5236 bytes leftover after parsing attributes in process `syz.3.608'. [ 63.717500][ T5700] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 63.738266][ T5700] EXT4-fs (loop6): 2 truncates cleaned up [ 63.752126][ T5700] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.760997][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.832971][ T5700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.854707][ T5725] vhci_hcd vhci_hcd.3: default hub control req: 2316 v07fc i0000 l0 [ 63.983431][ T5739] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.067262][ T5739] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.084518][ T5742] batman_adv: batadv0: Adding interface: ipvlan2 [ 64.091015][ T5742] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.117173][ T5742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.127629][ T5742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.137853][ T5742] batman_adv: batadv0: Interface activated: ipvlan2 [ 64.153344][ T5739] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.213793][ T5739] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.242831][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.251905][ T5750] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.261712][ T5750] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 64.268511][ T5750] batman_adv: batadv0: Removing interface: ipvlan2 [ 64.284131][ T52] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.299872][ T57] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.312286][ T57] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.320544][ T57] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.341370][ T5753] netlink: 'syz.6.622': attribute type 10 has an invalid length. [ 64.365927][ T5753] team0: Port device vlan0 added [ 64.479274][ T5767] loop6: detected capacity change from 0 to 512 [ 64.505932][ T5767] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.516749][ T5767] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.532680][ T5767] EXT4-fs (loop6): can't mount with data_err=abort, fs mounted w/o journal [ 64.623215][ T5767] veth3: entered promiscuous mode [ 65.109364][ T5798] xt_CT: No such helper "snmp_trap" [ 65.264624][ T5807] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 65.325812][ T5812] netlink: 'syz.1.641': attribute type 10 has an invalid length. [ 65.346543][ T5812] team0: Port device vlan0 added [ 65.568898][ T5826] loop6: detected capacity change from 0 to 512 [ 65.578247][ T5826] EXT4-fs: dax option not supported [ 65.606283][ T5826] loop6: detected capacity change from 0 to 512 [ 65.635473][ T5829] netlink: 'syz.3.648': attribute type 13 has an invalid length. [ 65.643385][ T5833] loop1: detected capacity change from 0 to 164 [ 65.663807][ T5829] gretap0: refused to change device tx_queue_len [ 65.691572][ T5829] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 65.724109][ T5840] bond1: option xmit_hash_policy: invalid value (8) [ 65.732620][ T5840] bond1 (unregistering): Released all slaves [ 65.870196][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 65.870212][ T29] audit: type=1400 audit(1769435940.289:7803): avc: denied { read } for pid=5852 comm="syz.6.657" lport=16813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.957080][ T5862] __nla_validate_parse: 8 callbacks suppressed [ 65.957097][ T5862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.662'. [ 65.972994][ T5862] openvswitch: netlink: Flow key attr not present in new flow. [ 66.142763][ T5880] netlink: 'syz.6.669': attribute type 21 has an invalid length. [ 66.424368][ T5904] netlink: 'syz.2.677': attribute type 1 has an invalid length. [ 66.432138][ T5904] netlink: 'syz.2.677': attribute type 2 has an invalid length. [ 66.461807][ T5906] netlink: 'syz.1.678': attribute type 1 has an invalid length. [ 66.469499][ T5906] netlink: 'syz.1.678': attribute type 2 has an invalid length. [ 66.731268][ T5925] netlink: 88 bytes leftover after parsing attributes in process `syz.6.685'. [ 66.830476][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz.2.688'. [ 67.047079][ T5949] netlink: 'syz.6.692': attribute type 10 has an invalid length. [ 67.331691][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.704'. [ 67.577163][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 67.586128][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 67.654449][ T6012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.720'. [ 67.672030][ T6012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.720'. [ 67.691816][ T6012] netlink: 60 bytes leftover after parsing attributes in process `syz.3.720'. [ 68.135753][ T29] audit: type=1400 audit(1769435942.559:7804): avc: denied { mounton } for pid=6037 comm="syz.2.730" path="/syzcgroup/unified/syz2/cgroup.procs" dev="cgroup2" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 68.164406][ T6040] netlink: 'syz.3.732': attribute type 10 has an invalid length. [ 69.116699][ T29] audit: type=1400 audit(1769435943.539:7805): avc: denied { setopt } for pid=6110 comm="syz.3.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 69.116912][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.755'. [ 69.618182][ T29] audit: type=1400 audit(1769435944.039:7806): avc: denied { create } for pid=6133 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 69.639012][ T29] audit: type=1400 audit(1769435944.039:7807): avc: denied { write } for pid=6133 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 70.182258][ T29] audit: type=1400 audit(1769435944.609:7808): avc: denied { write } for pid=6208 comm="syz.6.784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 70.687946][ T29] audit: type=1400 audit(1769435945.109:7809): avc: denied { create } for pid=6246 comm="syz.6.795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 71.112958][ T6275] bridge_slave_1: left allmulticast mode [ 71.118723][ T6275] bridge_slave_1: left promiscuous mode [ 71.124526][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.132921][ T6275] bridge_slave_0: left allmulticast mode [ 71.138587][ T6275] bridge_slave_0: left promiscuous mode [ 71.144558][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.337404][ T6280] __nla_validate_parse: 3 callbacks suppressed [ 71.337448][ T6280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.810'. [ 71.350562][ T6278] infiniband !yz!: set down [ 71.358287][ T6278] infiniband !yz!: added team_slave_0 [ 71.376149][ T6278] RDS/IB: !yz!: added [ 71.380996][ T6278] smc: adding ib device !yz! with port count 1 [ 71.390542][ T6278] smc: ib device !yz! port 1 has no pnetid [ 71.403052][ T6285] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 72.346677][ T3567] ================================================================== [ 72.354787][ T3567] BUG: KCSAN: data-race in __d_drop / fast_dput [ 72.361035][ T3567] [ 72.363354][ T3567] write to 0xffff888107a51550 of 8 bytes by task 3001 on cpu 0: [ 72.370978][ T3567] __d_drop+0x14d/0x240 [ 72.375170][ T3567] __dentry_kill+0x122/0x460 [ 72.379761][ T3567] finish_dput+0x2b/0x200 [ 72.384080][ T3567] dput+0x52/0x60 [ 72.387704][ T3567] lookup_one_qstr_excl+0x15a/0x250 [ 72.392897][ T3567] do_unlinkat+0x149/0x4b0 [ 72.397307][ T3567] __x64_sys_unlink+0x2e/0x40 [ 72.401973][ T3567] x64_sys_call+0x2f48/0x3000 [ 72.406652][ T3567] do_syscall_64+0xc0/0x2a0 [ 72.411168][ T3567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.417051][ T3567] [ 72.419368][ T3567] read to 0xffff888107a51550 of 8 bytes by task 3567 on cpu 1: [ 72.426898][ T3567] fast_dput+0x5f/0x2c0 [ 72.431047][ T3567] dput+0x24/0x60 [ 72.434672][ T3567] do_unlinkat+0x217/0x4b0 [ 72.439077][ T3567] __x64_sys_unlink+0x2e/0x40 [ 72.443742][ T3567] x64_sys_call+0x2f48/0x3000 [ 72.448413][ T3567] do_syscall_64+0xc0/0x2a0 [ 72.452911][ T3567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.458793][ T3567] [ 72.461099][ T3567] value changed: 0xffff8882379754c8 -> 0x0000000000000000 [ 72.468188][ T3567] [ 72.470498][ T3567] Reported by Kernel Concurrency Sanitizer on: [ 72.476631][ T3567] CPU: 1 UID: 0 PID: 3567 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.485913][ T3567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.495958][ T3567] ==================================================================