last executing test programs: 3m20.434746291s ago: executing program 1 (id=493): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x4000040) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) lsm_get_self_attr(0x69, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) r1 = perf_event_open(&(0x7f0000000740)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r3}, 0x18) r4 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) syz_socket_connect_nvme_tcp() 3m20.256061668s ago: executing program 1 (id=498): socket(0x10, 0x80002, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r0, &(0x7f0000000100)="15", 0x1, 0x1, &(0x7f0000000140)={0xa, 0x4e23, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000380)={&(0x7f0000000180)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000480)='y', 0x1}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, 0x0, 0x0, 0x4}, &(0x7f0000000080)=0x9c) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0209000007"], 0x38}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a0000000500040001000000c1590c9fe92c70409533a7acaf3d7072b144c5f5c963697b3ff9bea20eba159d251d57a146ac718289d253f3be698fed96dc6035adef29a07823dc76dea18307c0b1366c07f0145dcd4b55"], 0x4c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc00000000000000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000070601080020000000000000000000000500010006000000d632c8cea59044cde4d6fe0058e39a337253750228187a7d339d2b8ccc560f118a4e492ca2c89dd151f624d570245f8a3fa34fb766564ab02543a51f6488473af96788697db51302812f024634"], 0x1c}}, 0x0) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0xffff, 0x0, 0x1000, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) sendmsg$SMC_PNETID_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073797a"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000e07d31ae92b44400100001040000f500", @ANYRES32=r1, @ANYBLOB="3f00000000000000300012800b00010062726964676500002000028005000700080000000c002e0003000000030000000500170000000000548b67f7180f0ca391f3864383112267568d31ce6d00296d242dc3886e"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x3, 0x6}, {0x2, 0xb}, {0xc, 0xd}}, [{0x8, 0xb, 0xb}, {0x8, 0xb, 0xf31}, {0x8, 0xb, 0x8000}, {0x8, 0xb, 0x896}, {0x8, 0xb, 0xca}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24054}, 0x10) 3m19.401411119s ago: executing program 1 (id=515): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1ff, 0x1}, 0x4352, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f0000000080)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) fcntl$lock(r7, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x80000000000007, 0x401}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_clone(0x41aa1000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000240)={0xffffffffffffffff, r5, 0x5d32d793}) 3m18.388036877s ago: executing program 1 (id=522): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000140)=@v2={0x2000000, [{0xe6f, 0x5}, {0x5, 0x1}]}, 0x14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 3m18.267167558s ago: executing program 1 (id=526): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095", @ANYBLOB="0de326558ecdb6a40abf0be4dde82e7782c1d0c1b5e3a1443f7d3d7acadb03a6460b370df792244cc34a489608d599fcfd09f923f4a4b6aa9c9acdab72690e2543ec846f3a5e23681c6277e180f5ed86d279a59a35e3fb4744eb93d9a87a78087929c116f2c8cbb509ed29619a26b91ff9c03dc98dd7390e27fa645e8eaa53bb50b5523695e9845575a72cc2ddc76851fbb6c517f1e0da0579c98ef9ff50ad1ca963e061c5751c69f9e13ff8575c963ef4518af82a35b71341588c4298500668"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x5, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r5, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) waitid(0x0, r7, 0x0, 0x8, 0xfffffffffffffffd) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) r8 = socket(0x10, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) close_range(r8, 0xffffffffffffffff, 0x0) 3m18.084537335s ago: executing program 1 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000480)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 3m3.108467299s ago: executing program 32 (id=531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000480)='mm_page_free\x00', r3, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) 4.439396805s ago: executing program 5 (id=3933): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0xffffffffffffff8d, &(0x7f0000000080)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x48040}, 0x114) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000010140)=0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={r3, 0xffffffffffffffff}, 0x4) r10 = syz_open_dev$MSR(&(0x7f0000000800), 0x7f, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r12, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_PID={0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r14, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r15, r15) r16 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f0000000980)='ext4_evict_inode\x00', r4, 0x0, 0x9}, 0x18) r17 = syz_clone(0x84004600, &(0x7f0000000a00)="8e1401bfa9346dc9833cacd05c452532e99fe51f4fbf8c6104b3261e03f3b3be41f7d74ae8ec634d2bf554431920dfbd5e4f45d2984a42e6298be466a4fbd1240de7d377511455ed63e621e7780d61653188c15146ccacca3b07ff6b116e6f421729fc9ca49b561b9e5d4d19546cda2ba20dfc676e15086e4192ba7a6f432b8ea2fbd72d8b4c54c90d9eab31aceaad4100e5813378b61deabaae0ed412453f3b285ba5cd7764f8ec25ec5323d923719345b1cdc964ea2a67834231988460743a2e89e5c22485271dd7a2333976d30a6a88781a0037cff0dccd017a524005947b5eafefdc3573a122a5b2f37c186f8c63", 0xf0, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="16f7b80ae7e8") lstat(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000d80)={&(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000540)="7a4ac4b340ba0cfad72bc4dcf2f8a674f927d4bffca63c2389a2334ebe83ae3da380cf77a6774bc13b8079f5862039790134a38a0fe273d9dd1bbcb6001cf07b5f9d315aaf4ee13fedec7ce76b5a0761ba7942d6adb71a12ad984120fd51692f4adfc57cb22c675d1bc7677e42afce9b9e9c98d16f733d488dff38b15d5e01856df81b326d6f15ff61b8bab4d83883572f5038c4fb44b9b1d44952df08cd4d2aab3e5da47c8516cc15e025c67d5c73227c73ece32650fd893fb9c2af7e58a9dbf01058ab8d9f0dedf291523fa2749ad548b85a6f224ec92417db6b5fe29ada9270a7f8f49130ff3c", 0xe8}], 0x1, &(0x7f0000000c80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r4, r8, r9, r7, r5, r10]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r6]}}, @rights={{0x2c, 0x1, 0x1, [r5, r6, r0, r6, r16, r6, r6]}}, @cred={{0x1c, 0x1, 0x2, {r17, 0xffffffffffffffff, r18}}}], 0xd8, 0x40001}, 0x44080) 2.330665507s ago: executing program 5 (id=3957): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) vmsplice(r2, &(0x7f0000000080), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x91d1, 0x0, 0x3, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x59f1, 0x2, 0x8, 0x0, 0xb2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r7}, 0x18) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) 2.249788014s ago: executing program 5 (id=3959): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xffffffff, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xff8b, 0x2, @TCA_CBS_PARMS={0x5, 0x1, {0x7, '\x00', 0x8000, 0x1, 0x0, 0x51}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4940}, 0x24008890) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x69, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x147542, 0x2) pwritev2(r8, 0x0, 0x0, 0x1ff, 0x5, 0x1a) 2.126553536s ago: executing program 5 (id=3963): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x46004}, 0xc080) 2.123790347s ago: executing program 5 (id=3964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) getresgid(0x0, 0x0, 0x0) 2.103121298s ago: executing program 5 (id=3965): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000a00)="13977602000000", 0x7}], 0x2) (async) socket(0x10, 0x2, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000a40)={{r4}, "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"}) ioctl$TCFLSH(r4, 0x400455c8, 0x0) (async) creat(&(0x7f0000000200)='./file0\x00', 0x14f) (async) lsetxattr$trusted_overlay_redirect(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0) (async) llistxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=""/35, 0x23) (async) socket$nl_generic(0x10, 0x3, 0x10) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000002dc0)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002d80)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x20044000}, 0x8000000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x80) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='spi_setup\x00', r6, 0x0, 0x5}, 0x18) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x40033, 0xffffffffffffffff, 0x1000000) (async) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0x1}, 0x419, 0x40000000, 0x3, 0x8, 0x103fb, 0x1ff, 0x1ff, 0x0, 0x0, 0x0, 0x400000000000007}, 0x0, 0x1, 0xffffffffffffffff, 0xb) pipe(&(0x7f0000000200)) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r7, 0x6200}], 0x1, 0x0, 0x0, 0x0) (async) write$binfmt_aout(r7, &(0x7f0000000080)=ANY=[], 0xff2e) (async) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x1, "42341f9b0000744f00"}) 1.849806543s ago: executing program 3 (id=3970): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r2, 0x25, &(0x7f0000000240)={0x0, 0x0, 0x83, 0x7}) fcntl$lock(r2, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x80000000}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x9, 0x3, 0x1c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x160, 0xffffffff, 0xffffffff, 0x160, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x81}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0xa1, 0xfff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x228) r6 = socket$kcm(0x2d, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002b80)={0xffffffffffffffff, &(0x7f0000002b00)="113e514d0b3cf0f4ea9d38de9a4da04c0fa16747326c487b91ef6ce91a144e727186ecd7", &(0x7f0000002b40)=@tcp6=r6, 0x4}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) 1.829031125s ago: executing program 3 (id=3972): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9fea010018000000000000000c0000000c0000000c000000020000000000000901000000002e3061000030612e2e6100"], &(0x7f0000000200)=""/219, 0x30, 0xdb, 0x0, 0x5, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0xbc3, &(0x7f00000003c0)={0x0, 0x163e, 0x80, 0x1fffff, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r5, 0x0, 0x0) unshare(0x20400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r7, 0x93, 0x3) r8 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x4}, 0x18) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xd}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 1.695282278s ago: executing program 3 (id=3973): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES8], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x36, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x6, 0x1, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x94}, 0x8808) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000100)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0xfffffffffffffe41, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0xecdf, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x800}, {}, 0x0, 0x3505, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @srcaddr={0x0, 0xd, @in6=@dev={0xfe, 0x80, '\x00', 0x39}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1b0}}, 0x200008d2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000540)='afs_make_fs_call2\x00', r9, 0x0, 0x100}, 0x18) lsm_set_self_attr(0x66, 0x0, 0x43, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000480), 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r10}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_mreqsrc(r11, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 1.692644698s ago: executing program 4 (id=3974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0xac5}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x0) 1.632575224s ago: executing program 4 (id=3975): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x4, 0x80000, 0xf8c) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7ef, &(0x7f0000001fc0)="$eJzs3c1rHG8dAPDvbF42SauJIOivp4CggdKNqbFF8JDiQQQLBT3bhs021GyyJbspTQg0PQheBBUPgl569qUeBK++XPWfEA/SIpoG60lXZnY3L5vdTdJms+2vnw9M5pmZZ+aZb55nnn12Z9gN4IM1nf7JRXwUET9MIiab65OIGMlSwxELjXyvd7eL6ZREvf6tfyZZnt9eOjhW0pxfai58NiL++L2Iq7n2Useb83JpvZmara0+nK1ubl17sLq4XFourd2Ym5+/fvPLN28c3+tN/fsvW5df/ujrX/j1wnB85vkP/pTEQlxubtvb3S6+5eGPmY7p5v9kJP0XHvG18y5swJJBnwBvJL00hxpXeXwUkzGUpbp42wsQAHgnPImIOgDwgUlOev0fMkQAgI+X1ucAe7vbxdY02E8kLtY/bkXEWCP+1v3Nxpbh5j27sew+6MRecuTOSBIRU+dQ/nRE/Px33/llOkWf7kMCdLLztDHf28239f9J2v+NnnyEfNctX+y1W72x33Tb6lP3f8eeKQHO6ve3GqOa9vHflf0Hesayv23jn7F8h2v3TZx8/ededNn1FH3TydLx31cPPdt2MP7b72CmhppLn8jGfCPJ/QflUtq3fTIiZmIkny7PZVk7PwU18+q/r7qVf3j8968ff/cXafnp/CBH7sVwPuqN5/L+l43XlxZri+cRexb/04grw53iT/bHv8mR+l/Yj/RO16MerZpvfOX7P+uWM40/jbc1HY+/v+rPIj7fsf4P6jLp+XzibNYcZluNooPf/O2nE93KP6j/fDZPy2+9F7gIaf1P9I5/Kk1VN7dWFsvl0nr17GX8+dnkH7ptO9z+O8eftf8j0vY/mnw7S7da2uPFWm19LmI0+ebx9dcP9m0tt/Kn8c98rvP137n9N/qC9D3hvf2l3oZfjv6qeaiO8Wd2usXfX2n8S2eq/x6JenOftk3PX68MdSv/dPU/n6VmmmtO0/+dcKZv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4OxyEXE5klxhP53LFQqN3/D+dEzkypVq7er9ysbaUmS/lT0VI7nWV11OHvo+1Lnm9+G3lq+3LX8pIj4VET/Jj2fLhWKlvDTo4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dLR3/9/ks4Khca2v+cHfXYAQN+MDfoEAIAL5/UfAD48Z3v9H+/beQAAF+fM7//rSX9OBAC4MKd+/b/X3/MAAC6O+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD02Z3bt9Op/p/d7WK6vPRoc2Ol8ujaUqm6UljdKBaKlfWHheVKZblcKhQrq10PtNOYlSuVh/OxtvF4tlaq1marm1t3Vysba7W7D1YXl0t3SyMXFhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF51c2tlsVwurUv0SIyXxrvnSSJi4Gd4UiKt6/M84PA7GvLOX0eydt0zc0y9N41/tEee5DzLGm9fc7iXGB9E1wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwXvh/AAAA///lghJA") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 1.632207234s ago: executing program 3 (id=3976): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setuid(0x0) clock_adjtime(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 1.262071799s ago: executing program 4 (id=3979): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 1.261281829s ago: executing program 4 (id=3980): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000d3dafe31db96bb"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000001e00)=ANY=[@ANYRESHEX=r0], &(0x7f0000000080)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) accept(r2, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000080)={r4, 0x1, r3, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0xc, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x5}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='io_uring_create\x00', r6}, 0x18) r7 = syz_open_dev$sg(&(0x7f0000000740), 0x0, 0x18b203) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x14) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000640)={&(0x7f0000000580)=""/97, 0x61, 0x0, &(0x7f0000000600)=""/49, 0x31}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0xee01}}, './file0\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) 1.207896834s ago: executing program 2 (id=3981): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) vmsplice(r1, &(0x7f0000000080), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x91d1, 0x0, 0x3, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x59f1, 0x2, 0x8, 0x0, 0xb2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) 1.141573291s ago: executing program 2 (id=3982): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create(0xff7f) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000011c0)={[{}, {@errors_remount}, {@errors_remount}, {@noinit_itable}]}, 0x0, 0x4e5, &(0x7f0000000980)="$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") ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@barrier}, {@barrier}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f00000000c0)=[{{0x2, 0x1}, {0x4, 0x1, 0x1, 0x1}}], 0x8) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="5800000002060300000034e400000000000000080c000780080006400000000612000300686173683a6e65742c706f72740000000900020073797a3100000000050005000200000005000400000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeda}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r8}, 0x18) sendmsg$nl_route_sched(r7, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 980.838756ms ago: executing program 2 (id=3983): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001cc0)={&(0x7f0000001d00)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') readahead(r1, 0x6, 0xfffffffffffffffa) 886.871415ms ago: executing program 2 (id=3984): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9fea010018000000000000000c0000000c0000000c000000020000000000000901000000002e3061000030612e2e6100"], &(0x7f0000000200)=""/219, 0x30, 0xdb, 0x0, 0x5, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) statfs(&(0x7f0000001000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0xbc3, &(0x7f00000003c0)={0x0, 0x163e, 0x80, 0x1fffff, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) readv(r5, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/133, 0x85}], 0x1) write$evdev(r5, &(0x7f0000000040), 0x0) unshare(0x20400) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') lseek(r7, 0x93, 0x3) r8 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x4}, 0x18) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x52, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0xd}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r11, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 775.502265ms ago: executing program 3 (id=3985): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x118, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @gre={{0xd, 0x4, 0x1, 0x8, 0x10a, 0x64, 0x0, 0x6, 0x2f, 0x0, @empty, @local, {[@ssrr={0x89, 0x7, 0x55, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x13, 0xea, [@remote, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}]}, @noop, @noop, @noop, @generic={0x82, 0x2}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x62, 0x2, [0x2], "5ca9d7f2d7c9901ef1c65071966d3e24510fa963e1cd02257faad531a7a08cbb2244df731d35e2054e6ffb26baa37606f17af40438b8078f84ec7b99ebf362c19a2d26e85a6e69bd0b9ff6533abdcddfefd518e383b586a4251cb059f2550e40fd8e"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x8], "d92f93fae74220b92cf4a18fc2eee40a8e043583d46080d541e90e6a5f"}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xe, 0x2, 0x0, 0x3, 0x4, 0xb}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0x3, 0x2, 0x89, 0x2, 0x0, 0x0, 0x2, 0x3}, 0x2, {0x2, 0xfff7, 0x2, 0x5, 0x1, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x1, "9988839b688b1653f2cd535fe1f249"}}}}}}, 0x0) 764.538307ms ago: executing program 3 (id=3986): mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x2, &(0x7f0000ffd000/0x1000)=nil) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xf, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x1000, 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pread64(r2, 0x0, 0x0, 0x6) write$selinux_load(r1, &(0x7f0000003bc0)={0xf97cff8c, 0x8}, 0x10) 435.984728ms ago: executing program 0 (id=3987): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x79, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x4, 0xd, 0x6}, {0x4, 0x4, 0x3, 0x2}], 0x10, 0x26}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) 435.595728ms ago: executing program 0 (id=3988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001000000"], 0x28}}, 0x40044) 422.765359ms ago: executing program 0 (id=3989): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) syz_io_uring_setup(0x2a4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) write$cgroup_subtree(r2, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 414.76985ms ago: executing program 4 (id=3990): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8a1, 0x2, 0x2, 0x4, 0x7}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000851d028894136fe5db", @ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f00000000c0)='logon\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000280)='\x00', 0xfffffffffffffffc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$char_usb(r2, &(0x7f0000000040), 0x0) 259.183635ms ago: executing program 4 (id=3991): ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 258.119735ms ago: executing program 0 (id=3992): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) vmsplice(r1, &(0x7f0000000080), 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x14dd, &(0x7f0000000300)={0x0, 0x91d1, 0x0, 0x3, 0x11a}, &(0x7f0000000100)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x59f1, 0x2, 0x8, 0x0, 0xb2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) 186.085042ms ago: executing program 0 (id=3993): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x14, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) syz_io_uring_setup(0x4766, &(0x7f00000005c0)={0x0, 0x0, 0x2, 0x2}, &(0x7f0000000140), &(0x7f0000000280)) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=r2, 0x1e, 0x0, 0x362, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x1}, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="2e0000001000818807b62aa73f72cc9f0ba1f8483a0000005e120602000300000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20008800) 105.92769ms ago: executing program 0 (id=3994): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001cc0)={&(0x7f0000001d00)='kfree\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x44000, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00'}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') readahead(r1, 0x6, 0xfffffffffffffffa) 35.010127ms ago: executing program 2 (id=3995): syz_open_dev$evdev(&(0x7f0000000080), 0x5, 0x214040) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0x4) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r3}, 0x18) connect$inet6(r1, &(0x7f0000000100)={0xa, 0xfffe, 0x10000, @local, 0x7}, 0x1c) 0s ago: executing program 2 (id=3996): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xc}, 0x119310, 0x1, 0x1, 0x4, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setuid(0x0) clock_adjtime(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendto$inet6(r0, &(0x7f0000000080)='\x00', 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) kernel console output (not intermixed with test programs): =321 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 206.602814][ T29] audit: type=1326 audit(1766629586.181:14842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 206.626475][ T29] audit: type=1326 audit(1766629586.181:14844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 206.650029][ T29] audit: type=1326 audit(1766629586.181:14845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 206.674030][ T29] audit: type=1326 audit(1766629586.181:14846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.5.3099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 206.811725][T11822] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.823862][ T2162] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.870252][T11822] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.938737][ T2162] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.959819][T11785] chnl_net:caif_netlink_parms(): no params data found [ 206.993387][T11822] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.010211][ T2162] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.045708][T11785] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.052882][T11785] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.060217][T11785] bridge_slave_0: entered allmulticast mode [ 207.066851][T11785] bridge_slave_0: entered promiscuous mode [ 207.136433][T11822] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.152106][T11785] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.159190][T11785] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.166665][T11785] bridge_slave_1: entered allmulticast mode [ 207.174496][T11785] bridge_slave_1: entered promiscuous mode [ 207.189873][ T2162] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.220604][T11785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.234752][T11785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.243898][ T1858] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.261738][ T1858] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.292853][ T53] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.301405][ T53] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.333243][T11785] team0: Port device team_slave_0 added [ 207.339644][ T2162] batadv6: left allmulticast mode [ 207.344803][ T2162] batadv6: left promiscuous mode [ 207.350120][ T2162] bridge0: port 8(batadv6) entered disabled state [ 207.744612][ T2162] batadv5: left allmulticast mode [ 207.749698][ T2162] batadv5: left promiscuous mode [ 207.754839][ T2162] bridge0: port 7(batadv5) entered disabled state [ 207.764185][ T2162] batadv4: left allmulticast mode [ 207.769253][ T2162] batadv4: left promiscuous mode [ 207.774494][ T2162] bridge0: port 6(batadv4) entered disabled state [ 207.781733][ T2162] batadv3: left allmulticast mode [ 207.786821][ T2162] batadv3: left promiscuous mode [ 207.791835][ T2162] bridge0: port 5(batadv3) entered disabled state [ 207.799682][ T2162] batadv2: left allmulticast mode [ 207.804727][ T2162] batadv2: left promiscuous mode [ 207.809757][ T2162] bridge0: port 4(batadv2) entered disabled state [ 207.816816][ T2162] batadv1: left allmulticast mode [ 207.821927][ T2162] batadv1: left promiscuous mode [ 207.827083][ T2162] bridge0: port 3(batadv1) entered disabled state [ 207.834149][ T2162] bridge_slave_1: left allmulticast mode [ 207.839839][ T2162] bridge_slave_1: left promiscuous mode [ 207.845575][ T2162] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.853279][ T2162] bridge_slave_0: left allmulticast mode [ 207.859097][ T2162] bridge_slave_0: left promiscuous mode [ 207.864739][ T2162] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.061335][ T2162] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.071049][ T2162] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.080485][ T2162] .` (unregistering): Released all slaves [ 208.089454][T11785] team0: Port device team_slave_1 added [ 208.095186][T11852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3109'. [ 208.231418][T11785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.238399][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.264385][T11785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.283135][ T2162] hsr_slave_0: left promiscuous mode [ 208.295458][ T2162] hsr_slave_1: left promiscuous mode [ 208.305544][ T2162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.313152][ T2162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.320903][ T2162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.331361][ T2162] veth1_vlan: left promiscuous mode [ 208.339899][ T2162] veth0_vlan: left promiscuous mode [ 208.396041][ T2162] team0 (unregistering): Port device team_slave_1 removed [ 208.408335][ T2162] team0 (unregistering): Port device team_slave_0 removed [ 208.416004][ T802] smc: removing ib device !yz! [ 208.444733][T11785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.451723][T11785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.477662][T11785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.536056][T11785] hsr_slave_0: entered promiscuous mode [ 208.542634][T11884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.551728][T11785] hsr_slave_1: entered promiscuous mode [ 208.557897][T11884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.955607][T11898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3126'. [ 209.111551][T11785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.132180][T11785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.548913][T11785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.556869][ T2162] IPVS: stop unused estimator thread 0... [ 209.564712][T11785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.574021][T11916] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3132'. [ 209.624890][T11785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.651984][T11785] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.670400][T11785] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.680901][T11785] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.735982][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.743142][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.778407][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.785582][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.793144][T11884] loop4: detected capacity change from 0 to 32768 [ 209.839127][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3137'. [ 209.881252][T11884] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 209.886518][T11884] loop4: p1 start 460800 is beyond EOD, truncated [ 209.893085][T11884] loop4: p2 size 83886080 extends beyond EOD, truncated [ 209.913011][T11884] loop4: p5 start 460800 is beyond EOD, truncated [ 209.919508][T11884] loop4: p6 size 83886080 extends beyond EOD, truncated [ 209.981604][T11785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.031343][T11949] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 210.043880][T11949] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 210.055768][T11949] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 210.088475][T11953] loop5: detected capacity change from 0 to 2048 [ 210.102243][T11953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 210.148873][T11966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 210.182560][T11953] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 210.182672][T11785] veth0_vlan: entered promiscuous mode [ 210.202932][T11953] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1368 with error 28 [ 210.215530][T11953] EXT4-fs (loop5): This should not happen!! Data will be lost [ 210.215530][T11953] [ 210.225174][T11953] EXT4-fs (loop5): Total free blocks count 0 [ 210.231185][T11953] EXT4-fs (loop5): Free/Dirty block details [ 210.237024][T11785] veth1_vlan: entered promiscuous mode [ 210.237074][T11953] EXT4-fs (loop5): free_blocks=2415919104 [ 210.237089][T11953] EXT4-fs (loop5): dirty_blocks=1376 [ 210.237102][T11953] EXT4-fs (loop5): Block reservation details [ 210.251689][T11785] veth0_macvtap: entered promiscuous mode [ 210.253566][T11953] EXT4-fs (loop5): i_reserved_data_blocks=86 [ 210.274693][T11785] veth1_macvtap: entered promiscuous mode [ 210.279779][T11968] netlink: 'syz.4.3142': attribute type 10 has an invalid length. [ 210.286511][T11785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.301975][T11968] ipvlan0: entered allmulticast mode [ 210.307312][T11968] veth0_vlan: entered allmulticast mode [ 210.314231][T11968] team0: Device ipvlan0 failed to register rx_handler [ 210.326972][T11785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.341663][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.355423][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.379719][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.398978][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.426144][ T41] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.474084][T11980] SELinux: Context system_u:object_r:dhcpc_state_t:s0 is not valid (left unmapped). [ 210.576761][T11984] FAULT_INJECTION: forcing a failure. [ 210.576761][T11984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.589902][T11984] CPU: 1 UID: 0 PID: 11984 Comm: syz.4.3149 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.589995][T11984] Tainted: [W]=WARN [ 210.590002][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 210.590013][T11984] Call Trace: [ 210.590018][T11984] [ 210.590025][T11984] __dump_stack+0x1d/0x30 [ 210.590059][T11984] dump_stack_lvl+0x95/0xd0 [ 210.590077][T11984] dump_stack+0x15/0x1b [ 210.590097][T11984] should_fail_ex+0x265/0x280 [ 210.590178][T11984] should_fail+0xb/0x20 [ 210.590235][T11984] should_fail_usercopy+0x1a/0x20 [ 210.590260][T11984] strncpy_from_user+0x27/0x260 [ 210.590294][T11984] path_setxattrat+0xeb/0x310 [ 210.590356][T11984] __x64_sys_fsetxattr+0x6b/0x80 [ 210.590381][T11984] x64_sys_call+0x23c4/0x3000 [ 210.590426][T11984] do_syscall_64+0xca/0x2b0 [ 210.590467][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.590510][T11984] RIP: 0033:0x7f2e5503f749 [ 210.590523][T11984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.590541][T11984] RSP: 002b:00007f2e53a9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 210.590564][T11984] RAX: ffffffffffffffda RBX: 00007f2e55295fa0 RCX: 00007f2e5503f749 [ 210.590578][T11984] RDX: 0000200000000240 RSI: 0000200000000000 RDI: 0000000000000007 [ 210.590589][T11984] RBP: 00007f2e53a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 210.590599][T11984] R10: 0000000000000023 R11: 0000000000000246 R12: 0000000000000001 [ 210.590661][T11984] R13: 00007f2e55296038 R14: 00007f2e55295fa0 R15: 00007ffe84b2e9c8 [ 210.590681][T11984] [ 210.913414][T11993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.925292][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1368 with error 28 [ 210.942565][T11993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.044529][T11999] loop5: detected capacity change from 0 to 2048 [ 211.102221][T11999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 211.194862][T11999] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 211.209891][T11999] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1444 with error 28 [ 211.222407][T11999] EXT4-fs (loop5): This should not happen!! Data will be lost [ 211.222407][T11999] [ 211.232162][T11999] EXT4-fs (loop5): Total free blocks count 0 [ 211.238158][T11999] EXT4-fs (loop5): Free/Dirty block details [ 211.244318][T11999] EXT4-fs (loop5): free_blocks=2415919104 [ 211.250208][T11999] EXT4-fs (loop5): dirty_blocks=1456 [ 211.255490][T11999] EXT4-fs (loop5): Block reservation details [ 211.261479][T11999] EXT4-fs (loop5): i_reserved_data_blocks=91 [ 211.377594][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 211.377607][ T29] audit: type=1326 audit(1766629591.091:15028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2e55072005 code=0x7ffc0000 [ 211.497862][ T29] audit: type=1326 audit(1766629591.211:15029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11992 comm="syz.4.3153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 211.529295][T12010] netlink: 'syz.3.3157': attribute type 10 has an invalid length. [ 211.559932][T12010] ipvlan0: entered allmulticast mode [ 211.565403][T12010] veth0_vlan: entered allmulticast mode [ 211.578308][ T396] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1444 with error 28 [ 211.596907][T12010] team0: Device ipvlan0 failed to register rx_handler [ 211.670611][T12023] FAULT_INJECTION: forcing a failure. [ 211.670611][T12023] name failslab, interval 1, probability 0, space 0, times 0 [ 211.683321][T12023] CPU: 0 UID: 0 PID: 12023 Comm: syz.5.3162 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 211.683351][T12023] Tainted: [W]=WARN [ 211.683357][T12023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.683436][T12023] Call Trace: [ 211.683442][T12023] [ 211.683451][T12023] __dump_stack+0x1d/0x30 [ 211.683472][T12023] dump_stack_lvl+0x95/0xd0 [ 211.683499][T12023] dump_stack+0x15/0x1b [ 211.683515][T12023] should_fail_ex+0x265/0x280 [ 211.683535][T12023] should_failslab+0x8c/0xb0 [ 211.683557][T12023] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 211.683577][T12023] ? __alloc_skb+0x2ff/0x4b0 [ 211.683614][T12023] __alloc_skb+0x2ff/0x4b0 [ 211.683637][T12023] ? __alloc_skb+0x228/0x4b0 [ 211.683658][T12023] netlink_alloc_large_skb+0xbf/0xf0 [ 211.683681][T12023] netlink_sendmsg+0x3cf/0x6b0 [ 211.683730][T12023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.683761][T12023] __sock_sendmsg+0x145/0x180 [ 211.683782][T12023] ____sys_sendmsg+0x31e/0x4a0 [ 211.683888][T12023] ___sys_sendmsg+0x17b/0x1d0 [ 211.684061][T12023] __x64_sys_sendmsg+0xd4/0x160 [ 211.684166][T12023] x64_sys_call+0x17ba/0x3000 [ 211.684186][T12023] do_syscall_64+0xca/0x2b0 [ 211.684218][T12023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.684237][T12023] RIP: 0033:0x7ff7e0a1f749 [ 211.684294][T12023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.684313][T12023] RSP: 002b:00007ff7df47f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.684413][T12023] RAX: ffffffffffffffda RBX: 00007ff7e0c75fa0 RCX: 00007ff7e0a1f749 [ 211.684426][T12023] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 211.684440][T12023] RBP: 00007ff7df47f090 R08: 0000000000000000 R09: 0000000000000000 [ 211.684453][T12023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.684467][T12023] R13: 00007ff7e0c76038 R14: 00007ff7e0c75fa0 R15: 00007fffb3d53178 [ 211.684486][T12023] [ 211.904222][T12026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3164'. [ 211.922638][T12029] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 212.035385][T12034] loop4: detected capacity change from 0 to 2048 [ 212.078382][T12034] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 212.150862][T12038] loop3: detected capacity change from 0 to 8192 [ 212.165222][T12031] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 212.180610][T12031] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 754 with error 28 [ 212.193062][T12031] EXT4-fs (loop4): This should not happen!! Data will be lost [ 212.193062][T12031] [ 212.202729][T12031] EXT4-fs (loop4): Total free blocks count 0 [ 212.208767][T12031] EXT4-fs (loop4): Free/Dirty block details [ 212.214808][T12031] EXT4-fs (loop4): free_blocks=2415919104 [ 212.220632][T12031] EXT4-fs (loop4): dirty_blocks=768 [ 212.225855][T12031] EXT4-fs (loop4): Block reservation details [ 212.231838][T12031] EXT4-fs (loop4): i_reserved_data_blocks=48 [ 212.351905][ T2162] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 754 with error 28 [ 212.383440][T12042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.392136][T12042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.400902][ T29] audit: type=1326 audit(1766629592.121:15030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.424892][ T29] audit: type=1326 audit(1766629592.121:15031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.448495][ T29] audit: type=1326 audit(1766629592.121:15032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.448967][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 212.472224][ T29] audit: type=1326 audit(1766629592.121:15033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.488941][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 212.501722][ T29] audit: type=1326 audit(1766629592.121:15034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.531277][ T29] audit: type=1326 audit(1766629592.121:15035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.554849][ T29] audit: type=1326 audit(1766629592.121:15036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.579559][ T29] audit: type=1326 audit(1766629592.121:15037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12041 comm="syz.4.3168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 212.641521][T12047] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 212.777653][T12050] chnl_net:caif_netlink_parms(): no params data found [ 212.821272][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.828371][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.835787][T12050] bridge_slave_0: entered allmulticast mode [ 212.842614][T12050] bridge_slave_0: entered promiscuous mode [ 212.849131][T12069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3175'. [ 212.858180][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.865315][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.872678][T12050] bridge_slave_1: entered allmulticast mode [ 212.877984][T12071] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.879411][T12049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.892399][T12071] loop5: detected capacity change from 0 to 1024 [ 212.895538][T12050] bridge_slave_1: entered promiscuous mode [ 212.901787][T12071] EXT4-fs: Ignoring removed orlov option [ 212.907457][T12049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.914759][T12071] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.982945][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 212.993112][T12050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.023491][T12080] loop3: detected capacity change from 0 to 2048 [ 213.025273][T12050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.081433][T12050] team0: Port device team_slave_0 added [ 213.088263][T12050] team0: Port device team_slave_1 added [ 213.089361][T12080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 213.127054][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3176'. [ 213.139808][T12050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.146764][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.172748][T12050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.186767][T12080] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 213.186919][T12050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.201662][T12080] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 170 with error 28 [ 213.208461][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 213.220812][T12080] EXT4-fs (loop3): This should not happen!! Data will be lost [ 213.220812][T12080] [ 213.220828][T12080] EXT4-fs (loop3): Total free blocks count 0 [ 213.246794][T12050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.256386][T12080] EXT4-fs (loop3): Free/Dirty block details [ 213.256400][T12080] EXT4-fs (loop3): free_blocks=2415919104 [ 213.256411][T12080] EXT4-fs (loop3): dirty_blocks=176 [ 213.256422][T12080] EXT4-fs (loop3): Block reservation details [ 213.296063][T12080] EXT4-fs (loop3): i_reserved_data_blocks=11 [ 213.320346][ T53] batadv2: left allmulticast mode [ 213.325413][ T53] batadv2: left promiscuous mode [ 213.330532][ T53] bridge0: port 4(batadv2) entered disabled state [ 213.348981][ T53] batadv1: left allmulticast mode [ 213.354060][ T53] batadv1: left promiscuous mode [ 213.359222][ T53] bridge0: port 3(batadv1) entered disabled state [ 213.376723][ T53] bridge_slave_1: left allmulticast mode [ 213.382429][ T53] bridge_slave_1: left promiscuous mode [ 213.388093][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.397823][ T396] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 170 with error 28 [ 213.412852][ T53] bridge_slave_0: left allmulticast mode [ 213.418519][ T53] bridge_slave_0: left promiscuous mode [ 213.424278][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.446056][T12091] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 213.651369][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.662559][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.671824][ T53] bond0 (unregistering): Released all slaves [ 213.680908][ T53] bond1 (unregistering): Released all slaves [ 213.732097][T12050] hsr_slave_0: entered promiscuous mode [ 213.757998][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.767521][T12050] hsr_slave_1: entered promiscuous mode [ 213.774042][T12050] debugfs: 'hsr0' already exists in 'hsr' [ 213.779809][T12050] Cannot create hsr debugfs directory [ 213.785450][ T53] tipc: Disabling bearer [ 213.790868][ T53] tipc: Left network mode [ 213.861686][ T53] hsr_slave_0: left promiscuous mode [ 213.867376][ T53] hsr_slave_1: left promiscuous mode [ 213.879570][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.890230][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.908718][T12105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.920515][T12105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.132815][T12049] loop0: detected capacity change from 0 to 32768 [ 214.182427][T12049] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 214.187683][T12049] loop0: p1 start 460800 is beyond EOD, truncated [ 214.190851][T12115] loop5: detected capacity change from 0 to 2048 [ 214.194156][T12049] loop0: p2 size 83886080 extends beyond EOD, truncated [ 214.212861][T12049] loop0: p5 start 460800 is beyond EOD, truncated [ 214.213125][T12115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 214.219336][T12049] loop0: p6 size 83886080 extends beyond EOD, truncated [ 214.315606][T12115] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 214.343046][T12050] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.350125][T12115] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1784 with error 28 [ 214.362582][T12115] EXT4-fs (loop5): This should not happen!! Data will be lost [ 214.362582][T12115] [ 214.372232][T12115] EXT4-fs (loop5): Total free blocks count 0 [ 214.378265][T12115] EXT4-fs (loop5): Free/Dirty block details [ 214.384179][T12115] EXT4-fs (loop5): free_blocks=2415919104 [ 214.389971][T12115] EXT4-fs (loop5): dirty_blocks=1792 [ 214.395252][T12115] EXT4-fs (loop5): Block reservation details [ 214.401240][T12115] EXT4-fs (loop5): i_reserved_data_blocks=112 [ 214.409543][T12050] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.418522][T12050] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.440208][T12050] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.737938][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.755222][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.764192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.764292][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.766859][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.785957][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.802056][T12129] loop3: detected capacity change from 0 to 512 [ 214.802319][T12129] EXT4-fs: test_dummy_encryption option not supported [ 214.833901][ T53] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1784 with error 28 [ 214.910752][T12050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.953872][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3196'. [ 214.999372][ T3520] Bluetooth: hci0: command 0x1003 tx timeout [ 214.999395][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.051641][T12050] veth0_vlan: entered promiscuous mode [ 215.063952][T12156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3198'. [ 215.074827][T12050] veth1_vlan: entered promiscuous mode [ 215.095495][T12050] veth0_macvtap: entered promiscuous mode [ 215.097329][T12050] veth1_macvtap: entered promiscuous mode [ 215.115947][T12050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.127487][T12050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.129886][ T125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.176884][T12160] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.187862][ T125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.187903][ T125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.187963][ T125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.220710][T12160] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.252718][T12160] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.293064][T12160] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.356284][T12170] loop0: detected capacity change from 0 to 2048 [ 215.390087][T12170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 215.435013][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.450197][ T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.465837][ T52] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.474265][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.483316][T12170] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 215.509132][T12170] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 446 with error 28 [ 215.509161][T12170] EXT4-fs (loop0): This should not happen!! Data will be lost [ 215.509161][T12170] [ 215.509175][T12170] EXT4-fs (loop0): Total free blocks count 0 [ 215.509188][T12170] EXT4-fs (loop0): Free/Dirty block details [ 215.509213][T12170] EXT4-fs (loop0): free_blocks=2415919104 [ 215.509227][T12170] EXT4-fs (loop0): dirty_blocks=448 [ 215.509241][T12170] EXT4-fs (loop0): Block reservation details [ 215.509253][T12170] EXT4-fs (loop0): i_reserved_data_blocks=28 [ 215.544113][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 215.553623][ T125] Bluetooth: hci0: Frame reassembly failed (-84) [ 215.571098][T12185] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 215.571203][T12185] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 215.646883][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 446 with error 28 [ 215.781030][T12196] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.793553][T12196] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 215.818544][T12196] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 216.022499][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3218'. [ 216.173099][T12217] netlink: 8 bytes leftover after parsing attributes in process `LX[X'. [ 216.215595][T12213] loop5: detected capacity change from 0 to 2048 [ 216.236239][T12213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 216.373305][T12213] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 216.373520][T12213] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 318 with error 28 [ 216.373540][T12213] EXT4-fs (loop5): This should not happen!! Data will be lost [ 216.373540][T12213] [ 216.373551][T12213] EXT4-fs (loop5): Total free blocks count 0 [ 216.373611][T12213] EXT4-fs (loop5): Free/Dirty block details [ 216.373623][T12213] EXT4-fs (loop5): free_blocks=2415919104 [ 216.373651][T12213] EXT4-fs (loop5): dirty_blocks=320 [ 216.373664][T12213] EXT4-fs (loop5): Block reservation details [ 216.373675][T12213] EXT4-fs (loop5): i_reserved_data_blocks=20 [ 216.483160][T12226] loop3: detected capacity change from 0 to 512 [ 216.492693][T12226] EXT4-fs: test_dummy_encryption option not supported [ 216.521501][ T53] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 318 with error 28 [ 216.655304][T12235] netlink: 'syz.5.3224': attribute type 10 has an invalid length. [ 216.659765][T12235] team0: Device ipvlan0 failed to register rx_handler [ 216.858979][T12250] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 216.859001][T12250] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 216.859126][T12250] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 216.941647][T12255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.941777][T12255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.944827][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 216.944840][ T29] audit: type=1326 audit(1766629596.661:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.944943][ T29] audit: type=1326 audit(1766629596.661:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.944968][ T29] audit: type=1326 audit(1766629596.661:15213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.945117][ T29] audit: type=1326 audit(1766629596.661:15214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.945143][ T29] audit: type=1326 audit(1766629596.661:15215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.945179][ T29] audit: type=1326 audit(1766629596.661:15216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.945209][ T29] audit: type=1326 audit(1766629596.661:15217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.945240][ T29] audit: type=1326 audit(1766629596.661:15218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.945264][ T29] audit: type=1326 audit(1766629596.661:15219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.945288][ T29] audit: type=1326 audit(1766629596.661:15220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12254 comm="syz.5.3232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7e0a1f749 code=0x7ffc0000 [ 216.948282][T12257] __nla_validate_parse: 1 callbacks suppressed [ 216.948295][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3233'. [ 216.958065][T12253] loop0: detected capacity change from 0 to 512 [ 216.961702][T12253] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 217.257819][T12253] EXT4-fs (loop0): 1 truncate cleaned up [ 217.260481][T12253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.298387][T11785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.337183][T12260] loop0: detected capacity change from 0 to 2048 [ 217.350551][T12260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 217.365963][T12265] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.417736][T12260] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.432574][T12260] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1874 with error 28 [ 217.445076][T12260] EXT4-fs (loop0): This should not happen!! Data will be lost [ 217.445076][T12260] [ 217.454725][T12260] EXT4-fs (loop0): Total free blocks count 0 [ 217.460855][T12260] EXT4-fs (loop0): Free/Dirty block details [ 217.466898][T12260] EXT4-fs (loop0): free_blocks=2415919104 [ 217.472713][T12260] EXT4-fs (loop0): dirty_blocks=1888 [ 217.478002][T12260] EXT4-fs (loop0): Block reservation details [ 217.484128][T12260] EXT4-fs (loop0): i_reserved_data_blocks=118 [ 217.498357][T12265] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.524690][T12273] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 217.537181][T12273] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 217.558918][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 217.593211][T12273] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 217.608166][T12265] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.629202][T12276] loop4: detected capacity change from 0 to 2048 [ 217.643943][T12276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 217.682234][T12265] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.720779][T12275] loop5: detected capacity change from 0 to 512 [ 217.730813][T12276] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 217.746047][T12275] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 217.746924][T12276] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 490 with error 28 [ 217.768472][T12276] EXT4-fs (loop4): This should not happen!! Data will be lost [ 217.768472][T12276] [ 217.778188][T12276] EXT4-fs (loop4): Total free blocks count 0 [ 217.784198][T12276] EXT4-fs (loop4): Free/Dirty block details [ 217.790192][T12276] EXT4-fs (loop4): free_blocks=2415919104 [ 217.795918][T12276] EXT4-fs (loop4): dirty_blocks=496 [ 217.801172][T12276] EXT4-fs (loop4): Block reservation details [ 217.802547][T12275] EXT4-fs (loop5): 1 truncate cleaned up [ 217.807142][T12276] EXT4-fs (loop4): i_reserved_data_blocks=31 [ 217.822050][T12275] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.822133][ T52] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1874 with error 28 [ 217.874707][ T52] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.909733][ T52] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.928602][ T52] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.942062][ T52] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.961483][ T5436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.000144][ T125] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 490 with error 28 [ 218.059978][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.068504][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.171878][T12306] loop3: detected capacity change from 0 to 512 [ 218.172207][T12306] EXT4-fs: test_dummy_encryption option not supported [ 218.190635][T12308] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.203083][T12308] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 218.203602][T12308] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 218.241850][T12292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.241983][T12292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.705041][T12317] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3254'. [ 218.832640][T12325] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3258'. [ 218.896474][T12331] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.912386][T12333] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 218.924974][T12333] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 218.972092][T12333] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 218.991010][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 219.021976][T12331] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.048666][T12342] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.104067][T12331] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.128337][T12348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3268'. [ 219.141548][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3270'. [ 219.201156][T12331] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.244774][T12358] loop2: detected capacity change from 0 to 2048 [ 219.272289][T12358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 219.322137][ T125] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.343884][ T125] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.358652][T12358] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 219.384257][ T125] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.412873][ T125] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.421799][T12358] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 744 with error 28 [ 219.434162][T12358] EXT4-fs (loop2): This should not happen!! Data will be lost [ 219.434162][T12358] [ 219.443799][T12358] EXT4-fs (loop2): Total free blocks count 0 [ 219.449916][T12358] EXT4-fs (loop2): Free/Dirty block details [ 219.455837][T12358] EXT4-fs (loop2): free_blocks=2415919104 [ 219.461590][T12358] EXT4-fs (loop2): dirty_blocks=752 [ 219.466782][T12358] EXT4-fs (loop2): Block reservation details [ 219.472836][T12358] EXT4-fs (loop2): i_reserved_data_blocks=47 [ 219.487208][T12366] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 219.593938][T12292] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 219.599391][T12292] loop4: p1 start 460800 is beyond EOD, truncated [ 219.605831][T12292] loop4: p2 size 83886080 extends beyond EOD, truncated [ 219.687482][T12292] loop4: p5 start 460800 is beyond EOD, truncated [ 219.693976][T12292] loop4: p6 size 83886080 extends beyond EOD, truncated [ 219.771413][ T125] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 744 with error 28 [ 219.800471][T12373] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 219.888819][T12381] netlink: 'syz.4.3281': attribute type 10 has an invalid length. [ 219.897663][T12381] team0: Device ipvlan0 failed to register rx_handler [ 219.920892][T12386] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'. [ 220.415882][T12408] netlink: 'syz.5.3292': attribute type 10 has an invalid length. [ 220.424907][T12408] team0: Device ipvlan0 failed to register rx_handler [ 220.450541][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3293'. [ 220.471873][T12414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3294'. [ 220.497014][T12416] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 220.509325][T12400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.509489][T12416] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 220.518252][T12400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.528568][T12416] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 221.240037][T12441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.248607][T12441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.286991][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3305'. [ 221.364226][T12448] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.376717][T12448] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 221.387377][T12448] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 221.439357][T12451] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 221.472624][T12400] set_capacity_and_notify: 1 callbacks suppressed [ 221.472640][T12400] loop4: detected capacity change from 0 to 32768 [ 221.539560][T12400] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 221.544983][T12400] loop4: p1 start 460800 is beyond EOD, truncated [ 221.551455][T12400] loop4: p2 size 83886080 extends beyond EOD, truncated [ 221.560646][T12400] loop4: p5 start 460800 is beyond EOD, truncated [ 221.567148][T12400] loop4: p6 size 83886080 extends beyond EOD, truncated [ 221.853433][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 221.973808][T12474] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 221.986305][T12474] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 222.002476][T12474] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 222.022412][T12476] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 222.101604][T12479] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 222.109753][T12479] ipvlan0: entered allmulticast mode [ 222.115059][T12479] veth0_vlan: entered allmulticast mode [ 222.128075][T12479] team0: Device ipvlan0 failed to register rx_handler [ 222.137670][T12485] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 222.148045][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 222.148061][ T29] audit: type=1400 audit(1766629601.871:15412): avc: denied { listen } for pid=12484 comm="syz.3.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 222.151931][T12485] netlink: 'syz.3.3322': attribute type 1 has an invalid length. [ 222.204636][ T29] audit: type=1326 audit(1766629601.921:15413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.214634][T12485] bond1: entered promiscuous mode [ 222.233402][T12485] bond1: entered allmulticast mode [ 222.239822][ T29] audit: type=1326 audit(1766629601.921:15414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.263379][ T29] audit: type=1326 audit(1766629601.921:15415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.265047][T12488] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 222.287035][ T29] audit: type=1326 audit(1766629601.921:15416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.287066][ T29] audit: type=1326 audit(1766629601.921:15417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.343246][ T29] audit: type=1326 audit(1766629602.061:15418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.370155][ T29] audit: type=1326 audit(1766629602.091:15419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.393688][ T29] audit: type=1326 audit(1766629602.091:15420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.417315][ T29] audit: type=1326 audit(1766629602.091:15421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12487 comm="syz.0.3323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 222.470045][T12496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.478829][T12496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.493439][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3324'. [ 223.009329][T12515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3331'. [ 223.031343][ T1858] Bluetooth: hci1: Frame reassembly failed (-84) [ 223.038491][T12515] Bluetooth: hci1: Frame reassembly failed (-84) [ 223.164671][T12518] loop3: detected capacity change from 0 to 2048 [ 223.180685][T12518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 223.248175][T12518] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 223.263074][T12518] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1940 with error 28 [ 223.275551][T12518] EXT4-fs (loop3): This should not happen!! Data will be lost [ 223.275551][T12518] [ 223.285207][T12518] EXT4-fs (loop3): Total free blocks count 0 [ 223.291239][T12518] EXT4-fs (loop3): Free/Dirty block details [ 223.297108][T12518] EXT4-fs (loop3): free_blocks=2415919104 [ 223.302846][T12518] EXT4-fs (loop3): dirty_blocks=1952 [ 223.308106][T12518] EXT4-fs (loop3): Block reservation details [ 223.314087][T12518] EXT4-fs (loop3): i_reserved_data_blocks=122 [ 223.659020][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1940 with error 28 [ 223.705804][T12541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 223.792685][T12547] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3338'. [ 223.850041][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 223.878879][ T3623] Bluetooth: hci0: command 0x1003 tx timeout [ 223.884990][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 223.895785][T12555] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.908231][T12555] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 223.933639][T12555] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 223.955151][T12559] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.028542][T12562] netlink: 'syz.5.3348': attribute type 10 has an invalid length. [ 224.038117][T12562] team0: Device ipvlan0 failed to register rx_handler [ 224.047667][T12559] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.071950][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3350'. [ 224.089014][T12570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3351'. [ 224.096531][T12575] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.110695][T12559] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.174092][T12580] netlink: 'syz.5.3352': attribute type 3 has an invalid length. [ 224.193814][T12559] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.276036][ T1858] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.293385][ T1858] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.310924][ T1858] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.339205][ T1858] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.368555][T12590] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3357'. [ 224.494638][T12602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3363'. [ 224.549670][T12609] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.603010][T12609] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.662044][T12609] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.664927][T12613] netlink: 'syz.0.3369': attribute type 10 has an invalid length. [ 224.683787][T12613] team0: Device ipvlan0 failed to register rx_handler [ 224.721975][T12609] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.766241][ T53] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.785112][ T53] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.797166][ T53] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.806586][ T53] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.078793][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 225.079373][ T3520] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 225.289884][T12655] FAULT_INJECTION: forcing a failure. [ 225.289884][T12655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.302974][T12655] CPU: 0 UID: 0 PID: 12655 Comm: syz.2.3384 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 225.303012][T12655] Tainted: [W]=WARN [ 225.303025][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 225.303035][T12655] Call Trace: [ 225.303041][T12655] [ 225.303048][T12655] __dump_stack+0x1d/0x30 [ 225.303139][T12655] dump_stack_lvl+0x95/0xd0 [ 225.303194][T12655] dump_stack+0x15/0x1b [ 225.303214][T12655] should_fail_ex+0x265/0x280 [ 225.303267][T12655] should_fail+0xb/0x20 [ 225.303283][T12655] should_fail_usercopy+0x1a/0x20 [ 225.303302][T12655] _copy_to_user+0x20/0xa0 [ 225.303409][T12655] simple_read_from_buffer+0xb5/0x130 [ 225.303427][T12655] proc_fail_nth_read+0x10e/0x150 [ 225.303451][T12655] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 225.303473][T12655] vfs_read+0x1a8/0x770 [ 225.303488][T12655] ? __rcu_read_unlock+0x4f/0x70 [ 225.303517][T12655] ? __fget_files+0x184/0x1c0 [ 225.303536][T12655] ? mutex_lock+0x58/0x90 [ 225.303558][T12655] ksys_read+0xda/0x1a0 [ 225.303617][T12655] __x64_sys_read+0x40/0x50 [ 225.303633][T12655] x64_sys_call+0x2889/0x3000 [ 225.303653][T12655] do_syscall_64+0xca/0x2b0 [ 225.303681][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.303738][T12655] RIP: 0033:0x7fbcc852e15c [ 225.303752][T12655] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 225.303766][T12655] RSP: 002b:00007fbcc6f8f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 225.303783][T12655] RAX: ffffffffffffffda RBX: 00007fbcc8785fa0 RCX: 00007fbcc852e15c [ 225.303794][T12655] RDX: 000000000000000f RSI: 00007fbcc6f8f0a0 RDI: 0000000000000004 [ 225.303805][T12655] RBP: 00007fbcc6f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 225.303870][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.303881][T12655] R13: 00007fbcc8786038 R14: 00007fbcc8785fa0 R15: 00007ffc72690968 [ 225.303965][T12655] [ 225.512856][T12657] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 225.525313][T12657] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 225.558943][T12657] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 225.573537][T12660] loop4: detected capacity change from 0 to 512 [ 225.580557][T12660] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 225.592159][T12660] EXT4-fs (loop4): 1 truncate cleaned up [ 225.598238][T12660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.632797][T12667] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 225.654367][T11574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.688665][T12674] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 225.715652][T12676] netlink: 'syz.3.3389': attribute type 3 has an invalid length. [ 225.994053][T12700] netlink: 'syz.5.3402': attribute type 10 has an invalid length. [ 226.062608][T12700] team0: Device ipvlan0 failed to register rx_handler [ 226.233931][T12706] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.246381][T12706] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 226.265435][T12706] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 226.288343][T12709] loop4: detected capacity change from 0 to 512 [ 226.295257][T12709] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 226.307788][T12709] EXT4-fs (loop4): 1 truncate cleaned up [ 226.313979][T12709] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.349622][T11574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.366080][T12716] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 226.719556][T12736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3417'. [ 226.731678][T12737] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 226.744116][T12737] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 226.754760][T12737] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 226.962831][T12756] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 227.004186][T12758] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 227.035638][T12761] netlink: 'syz.2.3423': attribute type 3 has an invalid length. [ 227.364645][T12774] smc: net device bond0 applied user defined pnetid SYZ0 [ 227.372451][T12774] smc: net device bond0 erased user defined pnetid SYZ0 [ 227.382875][ T29] kauditd_printk_skb: 324 callbacks suppressed [ 227.382888][ T29] audit: type=1400 audit(1766629607.101:15746): avc: denied { override_creds } for pid=12773 comm="syz.4.3430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.008514][ T29] audit: type=1326 audit(1766629607.721:15747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.032519][ T29] audit: type=1326 audit(1766629607.721:15748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.056279][ T29] audit: type=1326 audit(1766629607.721:15749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.080051][ T29] audit: type=1326 audit(1766629607.721:15750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.104167][ T29] audit: type=1326 audit(1766629607.721:15751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.128222][ T29] audit: type=1326 audit(1766629607.721:15752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.152054][ T29] audit: type=1326 audit(1766629607.721:15753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.175707][ T29] audit: type=1326 audit(1766629607.721:15754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.199980][ T29] audit: type=1326 audit(1766629607.761:15755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12801 comm="syz.2.3440" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc852f749 code=0x7ffc0000 [ 228.242744][T12809] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 229.090063][T12841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.157561][T12841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.588280][T12863] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 229.600755][T12863] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 229.628991][T12863] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 229.641666][T12868] __nla_validate_parse: 1 callbacks suppressed [ 229.641737][T12868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3461'. [ 229.703552][T12870] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 229.835495][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3469'. [ 230.367633][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3475'. [ 230.706922][T12907] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3479'. [ 230.797875][T12919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.841060][T12923] FAULT_INJECTION: forcing a failure. [ 230.841060][T12923] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.854212][T12923] CPU: 0 UID: 0 PID: 12923 Comm: syz.4.3485 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 230.854302][T12923] Tainted: [W]=WARN [ 230.854307][T12923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.854318][T12923] Call Trace: [ 230.854323][T12923] [ 230.854372][T12923] __dump_stack+0x1d/0x30 [ 230.854394][T12923] dump_stack_lvl+0x95/0xd0 [ 230.854411][T12923] dump_stack+0x15/0x1b [ 230.854427][T12923] should_fail_ex+0x265/0x280 [ 230.854519][T12923] should_fail+0xb/0x20 [ 230.854541][T12923] should_fail_usercopy+0x1a/0x20 [ 230.854616][T12923] _copy_from_user+0x1c/0xb0 [ 230.854663][T12923] __sys_bpf+0x183/0x7c0 [ 230.854733][T12923] __x64_sys_bpf+0x41/0x50 [ 230.854758][T12923] x64_sys_call+0x28e1/0x3000 [ 230.854809][T12923] do_syscall_64+0xca/0x2b0 [ 230.854838][T12923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.854856][T12923] RIP: 0033:0x7f2e5503f749 [ 230.854945][T12923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.854961][T12923] RSP: 002b:00007f2e53a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 230.854978][T12923] RAX: ffffffffffffffda RBX: 00007f2e55295fa0 RCX: 00007f2e5503f749 [ 230.854988][T12923] RDX: 0000000000000050 RSI: 00002000000015c0 RDI: 0000000000000000 [ 230.854999][T12923] RBP: 00007f2e53a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.855010][T12923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.855063][T12923] R13: 00007f2e55296038 R14: 00007f2e55295fa0 R15: 00007ffe84b2e9c8 [ 230.855103][T12923] [ 230.857873][T12919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.062028][T12919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.070101][T12929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3488'. [ 231.132948][T12919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.175552][ T1858] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.187278][ T1858] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.235324][ T1858] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.252191][ T1858] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.442767][T12948] FAULT_INJECTION: forcing a failure. [ 231.442767][T12948] name failslab, interval 1, probability 0, space 0, times 0 [ 231.455459][T12948] CPU: 0 UID: 0 PID: 12948 Comm: syz.2.3493 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.455491][T12948] Tainted: [W]=WARN [ 231.455498][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 231.455510][T12948] Call Trace: [ 231.455518][T12948] [ 231.455526][T12948] __dump_stack+0x1d/0x30 [ 231.455551][T12948] dump_stack_lvl+0x95/0xd0 [ 231.455570][T12948] dump_stack+0x15/0x1b [ 231.455585][T12948] should_fail_ex+0x265/0x280 [ 231.455604][T12948] should_failslab+0x8c/0xb0 [ 231.455630][T12948] kmem_cache_alloc_noprof+0x69/0x4b0 [ 231.455648][T12948] ? vm_area_dup+0x33/0x2c0 [ 231.455671][T12948] vm_area_dup+0x33/0x2c0 [ 231.455693][T12948] __split_vma+0xe9/0x660 [ 231.455712][T12948] ? __rcu_read_unlock+0x4f/0x70 [ 231.455731][T12948] ? terminate_walk+0x1e6/0x210 [ 231.455752][T12948] ? path_openat+0x1d88/0x23b0 [ 231.455775][T12948] vms_gather_munmap_vmas+0x17a/0x7b0 [ 231.455804][T12948] ? _parse_integer_limit+0x170/0x190 [ 231.455827][T12948] do_vmi_align_munmap+0x1ac/0x3d0 [ 231.455861][T12948] do_vmi_munmap+0x1db/0x220 [ 231.455885][T12948] __vm_munmap+0x193/0x270 [ 231.455903][T12948] __x64_sys_munmap+0x36/0x50 [ 231.455930][T12948] x64_sys_call+0xbee/0x3000 [ 231.455953][T12948] do_syscall_64+0xca/0x2b0 [ 231.455985][T12948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.456006][T12948] RIP: 0033:0x7fbcc852f749 [ 231.456021][T12948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.456038][T12948] RSP: 002b:00007fbcc6f6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 231.456054][T12948] RAX: ffffffffffffffda RBX: 00007fbcc8786090 RCX: 00007fbcc852f749 [ 231.456064][T12948] RDX: 0000000000000000 RSI: 0000000000e06500 RDI: 0000200000470000 [ 231.456074][T12948] RBP: 00007fbcc6f6e090 R08: 0000000000000000 R09: 0000000000000000 [ 231.456084][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.456094][T12948] R13: 00007fbcc8786128 R14: 00007fbcc8786090 R15: 00007ffc72690968 [ 231.456111][T12948] [ 232.212395][T12968] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.224916][T12968] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 232.246411][T12968] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 232.309174][T12973] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 232.352998][ T6040] syz_tun (unregistering): left allmulticast mode [ 232.532993][T12980] chnl_net:caif_netlink_parms(): no params data found [ 232.577261][ T396] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.592545][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 232.607083][T12980] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.607116][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.607231][T12980] bridge_slave_0: entered allmulticast mode [ 232.607726][T12980] bridge_slave_0: entered promiscuous mode [ 232.636404][ T396] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.646816][T12980] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.646928][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.647098][T12980] bridge_slave_1: entered allmulticast mode [ 232.667581][T12980] bridge_slave_1: entered promiscuous mode [ 232.693017][T12980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.695814][T12980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.727026][ T396] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.738830][T12980] team0: Port device team_slave_0 added [ 232.739901][T12980] team0: Port device team_slave_1 added [ 232.745869][T13006] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 232.767373][ T396] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.784689][T12980] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.784702][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.784728][T12980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.785320][T12980] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.835697][T12980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.861718][T12980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.882608][T12980] hsr_slave_0: entered promiscuous mode [ 232.883116][T12980] hsr_slave_1: entered promiscuous mode [ 232.883336][T12980] debugfs: 'hsr0' already exists in 'hsr' [ 232.883350][T12980] Cannot create hsr debugfs directory [ 232.962643][ T396] bridge_slave_1: left allmulticast mode [ 232.962697][ T396] bridge_slave_1: left promiscuous mode [ 232.962850][ T396] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.975238][ T396] bridge_slave_0: left promiscuous mode [ 232.975392][ T396] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.065579][T13014] netlink: 'syz.4.3514': attribute type 10 has an invalid length. [ 233.121402][ T396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.130466][ T396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.131659][ T396] bond0 (unregistering): Released all slaves [ 233.152751][T13011] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.166202][T13014] team0: Device ipvlan0 failed to register rx_handler [ 233.198087][ T396] hsr_slave_0: left promiscuous mode [ 233.198452][ T396] hsr_slave_1: left promiscuous mode [ 233.204447][ T396] veth1_macvtap: left promiscuous mode [ 233.215492][ T396] veth0_macvtap: left promiscuous mode [ 233.221175][ T396] veth1_vlan: left promiscuous mode [ 233.221277][ T396] veth0_vlan: left promiscuous mode [ 233.292055][ T396] team0 (unregistering): Port device team_slave_1 removed [ 233.299966][ T396] team0 (unregistering): Port device team_slave_0 removed [ 233.330931][T13011] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.384248][ T29] kauditd_printk_skb: 280 callbacks suppressed [ 233.384261][ T29] audit: type=1400 audit(1766629613.101:16036): avc: denied { create } for pid=13022 comm="syz.4.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.386437][T13023] tipc: Enabling of bearer rejected, failed to enable media [ 233.390577][ T29] audit: type=1400 audit(1766629613.101:16037): avc: denied { write } for pid=13022 comm="syz.4.3518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 233.472666][T13011] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.486872][T13028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3520'. [ 233.518459][T13040] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.531896][T13011] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.580747][T13040] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.638049][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.648588][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.660473][T13040] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.676748][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.690067][ T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.700537][T12980] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 233.710510][T12980] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 233.723335][T12980] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 233.733475][T13040] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.745030][T12980] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 233.760587][T13044] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 233.783598][ T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.795936][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.806943][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.818448][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.827761][T13051] netlink: 'syz.3.3524': attribute type 3 has an invalid length. [ 233.830292][T12980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.857587][ T29] audit: type=1326 audit(1766629613.571:16038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 233.859631][T12980] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.890318][ T29] audit: type=1326 audit(1766629613.601:16039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 233.902104][T12980] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.913975][ T29] audit: type=1326 audit(1766629613.611:16040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 233.924298][T12980] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.958246][ T29] audit: type=1326 audit(1766629613.611:16041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 233.963127][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.981866][ T29] audit: type=1326 audit(1766629613.611:16042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 233.988998][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.012449][ T29] audit: type=1326 audit(1766629613.611:16043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 234.019338][ T29] audit: type=1326 audit(1766629613.611:16044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 234.059504][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.066980][ T29] audit: type=1326 audit(1766629613.611:16045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13052 comm="syz.4.3525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 234.073988][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.168057][T12980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.172170][T13062] netlink: 'syz.4.3528': attribute type 10 has an invalid length. [ 234.183912][T13062] team0: Device ipvlan0 failed to register rx_handler [ 234.209557][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3529'. [ 234.218582][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3529'. [ 234.233010][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 234.261538][T13069] bridge2: entered promiscuous mode [ 234.266779][T13069] bridge2: entered allmulticast mode [ 234.333553][T12980] veth0_vlan: entered promiscuous mode [ 234.368123][T12980] veth1_vlan: entered promiscuous mode [ 234.388004][T12980] veth0_macvtap: entered promiscuous mode [ 234.396391][T12980] veth1_macvtap: entered promiscuous mode [ 234.411521][T12980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.423937][T12980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.450196][ T53] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.474851][ T53] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.492965][ T53] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.502094][ T53] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.666938][T13111] netlink: 'syz.3.3538': attribute type 10 has an invalid length. [ 234.677673][T13111] team0: Device ipvlan0 failed to register rx_handler [ 234.732251][T13114] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 234.744661][T13114] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 234.773352][T13114] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 234.975988][T13132] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.030322][T13136] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.042190][T13137] netlink: 'syz.2.3548': attribute type 3 has an invalid length. [ 235.052122][T13138] __nla_validate_parse: 2 callbacks suppressed [ 235.052135][T13138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3545'. [ 235.114987][T13136] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.157016][T13136] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.220076][T13136] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.007541][T13171] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 236.007561][T13171] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 236.007651][T13171] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 236.335178][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3568'. [ 236.443191][T13187] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 236.494881][T13188] netlink: 'syz.4.3570': attribute type 3 has an invalid length. [ 236.693278][T13200] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 236.705695][T13200] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 236.716599][T13200] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 236.947889][T13210] netem: incorrect gi model size [ 236.952886][T13210] netem: change failed [ 237.099071][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3582'. [ 237.212091][T13224] netlink: 'syz.2.3586': attribute type 10 has an invalid length. [ 237.220358][T13224] ipvlan0: entered allmulticast mode [ 237.225768][T13224] veth0_vlan: entered allmulticast mode [ 237.232718][T13224] team0: Device ipvlan0 failed to register rx_handler [ 237.411877][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.439821][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.577778][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.727317][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.755388][T13247] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 238.317589][T13267] netlink: 'syz.0.3599': attribute type 10 has an invalid length. [ 238.327009][T13267] team0: Device ipvlan0 failed to register rx_handler [ 238.628366][ T29] kauditd_printk_skb: 366 callbacks suppressed [ 238.628380][ T29] audit: type=1326 audit(1766629618.341:16412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.636844][ T29] audit: type=1326 audit(1766629618.351:16413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.688068][ T29] audit: type=1326 audit(1766629618.401:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.697881][ T29] audit: type=1326 audit(1766629618.411:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.736533][ T29] audit: type=1326 audit(1766629618.431:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.760273][ T29] audit: type=1326 audit(1766629618.431:16417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.784033][ T29] audit: type=1326 audit(1766629618.461:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.784065][ T29] audit: type=1326 audit(1766629618.461:16420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.784132][ T29] audit: type=1326 audit(1766629618.461:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.784208][ T29] audit: type=1326 audit(1766629618.461:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13273 comm="syz.0.3601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 238.914370][T13278] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 238.926937][T13278] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 238.946917][T13278] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 238.962559][T13284] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 238.975009][T13284] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 238.986564][T13284] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 238.992303][T13280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3604'. [ 239.073311][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3613'. [ 239.799675][T13329] program syz.0.3622 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 240.066138][T13354] netlink: 'syz.3.3631': attribute type 10 has an invalid length. [ 240.085568][T13353] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.097950][T13353] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 240.111260][T13356] FAULT_INJECTION: forcing a failure. [ 240.111260][T13356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.124434][T13356] CPU: 0 UID: 0 PID: 13356 Comm: syz.5.3634 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.124462][T13356] Tainted: [W]=WARN [ 240.124468][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.124512][T13356] Call Trace: [ 240.124517][T13356] [ 240.124524][T13356] __dump_stack+0x1d/0x30 [ 240.124546][T13356] dump_stack_lvl+0x95/0xd0 [ 240.124587][T13356] dump_stack+0x15/0x1b [ 240.124605][T13356] should_fail_ex+0x265/0x280 [ 240.124625][T13356] should_fail+0xb/0x20 [ 240.124644][T13356] should_fail_usercopy+0x1a/0x20 [ 240.124691][T13356] _copy_from_user+0x1c/0xb0 [ 240.124752][T13356] get_timespec64+0x4c/0x100 [ 240.124774][T13356] __se_sys_clock_nanosleep+0x10b/0x250 [ 240.124795][T13356] __x64_sys_clock_nanosleep+0x55/0x70 [ 240.124817][T13356] x64_sys_call+0x2734/0x3000 [ 240.124911][T13356] do_syscall_64+0xca/0x2b0 [ 240.124944][T13356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.124964][T13356] RIP: 0033:0x7fe7dc972005 [ 240.124977][T13356] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 240.125038][T13356] RSP: 002b:00007fe7db3a6fa0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 240.125055][T13356] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe7dc972005 [ 240.125069][T13356] RDX: 00007fe7db3a6fe0 RSI: 0000000000000000 RDI: 0000000000000000 [ 240.125082][T13356] RBP: 00007fe7db3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.125095][T13356] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 240.125175][T13356] R13: 00007fe7dcb96038 R14: 00007fe7dcb95fa0 R15: 00007ffefa265fe8 [ 240.125191][T13356] [ 240.132068][T13353] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 240.310082][T13325] FAULT_INJECTION: forcing a failure. [ 240.310082][T13325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.323201][T13325] CPU: 1 UID: 0 PID: 13325 Comm: syz.2.3620 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 240.323232][T13325] Tainted: [W]=WARN [ 240.323238][T13325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 240.323248][T13325] Call Trace: [ 240.323274][T13325] [ 240.323281][T13325] __dump_stack+0x1d/0x30 [ 240.323305][T13325] dump_stack_lvl+0x95/0xd0 [ 240.323330][T13325] dump_stack+0x15/0x1b [ 240.323348][T13325] should_fail_ex+0x265/0x280 [ 240.323368][T13325] should_fail+0xb/0x20 [ 240.323384][T13325] should_fail_usercopy+0x1a/0x20 [ 240.323404][T13325] _copy_from_user+0x1c/0xb0 [ 240.323587][T13325] ___sys_recvmsg+0xaa/0x370 [ 240.323620][T13325] do_recvmmsg+0x1ef/0x540 [ 240.323648][T13325] ? fput+0x8f/0xc0 [ 240.323734][T13325] __x64_sys_recvmmsg+0xe5/0x170 [ 240.323765][T13325] x64_sys_call+0x2b75/0x3000 [ 240.323784][T13325] do_syscall_64+0xca/0x2b0 [ 240.323818][T13325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.323863][T13325] RIP: 0033:0x7fbcc852f749 [ 240.323879][T13325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.323897][T13325] RSP: 002b:00007fbcc6f8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 240.323917][T13325] RAX: ffffffffffffffda RBX: 00007fbcc8785fa0 RCX: 00007fbcc852f749 [ 240.323937][T13325] RDX: 0000000000000002 RSI: 0000200000003240 RDI: 0000000000000004 [ 240.323948][T13325] RBP: 00007fbcc6f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.324017][T13325] R10: 0000000040000102 R11: 0000000000000246 R12: 0000000000000001 [ 240.324120][T13325] R13: 00007fbcc8786038 R14: 00007fbcc8785fa0 R15: 00007ffc72690968 [ 240.324137][T13325] [ 240.500526][T13354] team0: Device ipvlan0 failed to register rx_handler [ 240.766144][T13388] netlink: 'syz.0.3648': attribute type 10 has an invalid length. [ 240.776294][T13388] team0: Device ipvlan0 failed to register rx_handler [ 241.534270][T13432] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13432 comm=syz.0.3665 [ 241.547474][T13432] tmpfs: Unknown parameter 'usrquota' [ 241.553089][T13432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3665'. [ 242.048940][T13444] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3669'. [ 242.130698][T13448] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3672'. [ 242.347390][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3670'. [ 242.452311][T13469] FAULT_INJECTION: forcing a failure. [ 242.452311][T13469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.452368][T13469] CPU: 1 UID: 0 PID: 13469 Comm: syz.4.3676 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 242.452403][T13469] Tainted: [W]=WARN [ 242.452409][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.452472][T13469] Call Trace: [ 242.452479][T13469] [ 242.452486][T13469] __dump_stack+0x1d/0x30 [ 242.452507][T13469] dump_stack_lvl+0x95/0xd0 [ 242.452599][T13469] dump_stack+0x15/0x1b [ 242.452634][T13469] should_fail_ex+0x265/0x280 [ 242.452654][T13469] should_fail+0xb/0x20 [ 242.452670][T13469] should_fail_usercopy+0x1a/0x20 [ 242.452771][T13469] _copy_to_user+0x20/0xa0 [ 242.452795][T13469] simple_read_from_buffer+0xb5/0x130 [ 242.452817][T13469] proc_fail_nth_read+0x10e/0x150 [ 242.452904][T13469] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.452961][T13469] vfs_read+0x1a8/0x770 [ 242.452987][T13469] ? __rcu_read_unlock+0x4f/0x70 [ 242.453007][T13469] ? __fget_files+0x184/0x1c0 [ 242.453050][T13469] ? mutex_lock+0x58/0x90 [ 242.453072][T13469] ksys_read+0xda/0x1a0 [ 242.453089][T13469] __x64_sys_read+0x40/0x50 [ 242.453135][T13469] x64_sys_call+0x2889/0x3000 [ 242.453159][T13469] do_syscall_64+0xca/0x2b0 [ 242.453189][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.453211][T13469] RIP: 0033:0x7f2e5503e15c [ 242.453226][T13469] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.453243][T13469] RSP: 002b:00007f2e53a7e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.453264][T13469] RAX: ffffffffffffffda RBX: 00007f2e55296090 RCX: 00007f2e5503e15c [ 242.453333][T13469] RDX: 000000000000000f RSI: 00007f2e53a7e0a0 RDI: 0000000000000007 [ 242.453345][T13469] RBP: 00007f2e53a7e090 R08: 0000000000000000 R09: 000000000000000e [ 242.453359][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.453371][T13469] R13: 00007f2e55296128 R14: 00007f2e55296090 R15: 00007ffe84b2e9c8 [ 242.453391][T13469] [ 243.065362][T13487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3683'. [ 243.187492][T13491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.203649][T13491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.292863][T13497] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 243.305260][T13497] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 243.315874][T13497] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 243.454489][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3693'. [ 243.474597][ T802] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.482754][T13510] Bluetooth: hci0: Frame reassembly failed (-84) [ 243.632532][ T29] kauditd_printk_skb: 317 callbacks suppressed [ 243.632546][ T29] audit: type=1326 audit(1766629623.351:16739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.0.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f63df6d2005 code=0x7ffc0000 [ 243.644659][T13516] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3692'. [ 243.694097][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3694'. [ 243.736187][ T29] audit: type=1326 audit(1766629623.451:16740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13490 comm="syz.0.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f63df69f749 code=0x7ffc0000 [ 243.777436][T13524] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.784758][T13524] IPv6: NLM_F_CREATE should be set when creating new route [ 244.495678][T13541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.504376][T13541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.673403][ T29] audit: type=1326 audit(1766629624.391:16741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 244.701925][ T29] audit: type=1326 audit(1766629624.421:16742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 244.727431][ T29] audit: type=1326 audit(1766629624.451:16743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 244.808784][ T29] audit: type=1326 audit(1766629624.471:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 244.832501][ T29] audit: type=1326 audit(1766629624.471:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 244.856220][ T29] audit: type=1326 audit(1766629624.471:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 244.879970][ T29] audit: type=1326 audit(1766629624.471:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 244.903621][ T29] audit: type=1326 audit(1766629624.471:16748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13556 comm="syz.4.3708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 245.294657][T13573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3713'. [ 245.558910][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 245.564940][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 245.944887][T13600] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 245.961580][T13600] team0: Device ipvlan0 failed to register rx_handler [ 246.085755][T13616] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.098331][T13616] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 246.109246][T13616] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 246.203700][T13622] netlink: 'syz.4.3732': attribute type 10 has an invalid length. [ 246.213189][T13622] team0: Device ipvlan0 failed to register rx_handler [ 246.224980][T13627] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 246.237392][T13627] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 246.253688][T13627] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 246.375123][T13634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3736'. [ 246.502740][T13639] netlink: 'syz.3.3737': attribute type 10 has an invalid length. [ 246.513949][T13639] team0: Device ipvlan0 failed to register rx_handler [ 246.615367][T13648] FAULT_INJECTION: forcing a failure. [ 246.615367][T13648] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.615394][T13648] CPU: 0 UID: 0 PID: 13648 Comm: syz.3.3740 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.615422][T13648] Tainted: [W]=WARN [ 246.615429][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.615519][T13648] Call Trace: [ 246.615526][T13648] [ 246.615533][T13648] __dump_stack+0x1d/0x30 [ 246.615617][T13648] dump_stack_lvl+0x95/0xd0 [ 246.615635][T13648] dump_stack+0x15/0x1b [ 246.615651][T13648] should_fail_ex+0x265/0x280 [ 246.615675][T13648] should_fail+0xb/0x20 [ 246.615704][T13648] should_fail_usercopy+0x1a/0x20 [ 246.615724][T13648] _copy_to_user+0x20/0xa0 [ 246.615749][T13648] simple_read_from_buffer+0xb5/0x130 [ 246.615780][T13648] proc_fail_nth_read+0x10e/0x150 [ 246.615833][T13648] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.615860][T13648] vfs_read+0x1a8/0x770 [ 246.615877][T13648] ? __rcu_read_unlock+0x4f/0x70 [ 246.615902][T13648] ? __fget_files+0x184/0x1c0 [ 246.615973][T13648] ? mutex_lock+0x58/0x90 [ 246.616047][T13648] ksys_read+0xda/0x1a0 [ 246.616066][T13648] __x64_sys_read+0x40/0x50 [ 246.616085][T13648] x64_sys_call+0x2889/0x3000 [ 246.616109][T13648] do_syscall_64+0xca/0x2b0 [ 246.616141][T13648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.616209][T13648] RIP: 0033:0x7f05deebe15c [ 246.616225][T13648] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 246.616242][T13648] RSP: 002b:00007f05dd906030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.616309][T13648] RAX: ffffffffffffffda RBX: 00007f05df116090 RCX: 00007f05deebe15c [ 246.616322][T13648] RDX: 000000000000000f RSI: 00007f05dd9060a0 RDI: 0000000000000007 [ 246.616335][T13648] RBP: 00007f05dd906090 R08: 0000000000000000 R09: 0000000000000000 [ 246.616347][T13648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.616475][T13648] R13: 00007f05df116128 R14: 00007f05df116090 R15: 00007ffdae0e4ec8 [ 246.616494][T13648] [ 247.285773][T13669] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 247.285857][T13669] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 247.286021][T13669] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 247.660215][T13693] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 247.672743][T13693] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 247.689243][T13693] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 248.990455][T13709] netlink: 'syz.3.3760': attribute type 10 has an invalid length. [ 249.014040][T13709] team0: Device ipvlan0 failed to register rx_handler [ 249.108658][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 249.108672][ T29] audit: type=1326 audit(1766629628.821:16909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.169146][ T29] audit: type=1326 audit(1766629628.831:16910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.192861][ T29] audit: type=1326 audit(1766629628.831:16911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.216507][ T29] audit: type=1326 audit(1766629628.831:16912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.240161][ T29] audit: type=1326 audit(1766629628.831:16913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.263913][ T29] audit: type=1326 audit(1766629628.831:16914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.287488][ T29] audit: type=1326 audit(1766629628.831:16915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.311163][ T29] audit: type=1326 audit(1766629628.831:16916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.334800][ T29] audit: type=1326 audit(1766629628.831:16917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.358354][ T29] audit: type=1326 audit(1766629628.831:16918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13722 comm="syz.3.3765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 249.573833][T13727] netlink: 'syz.2.3768': attribute type 10 has an invalid length. [ 249.590753][T13727] team0: Device ipvlan0 failed to register rx_handler [ 249.747479][T13749] syzkaller0: entered promiscuous mode [ 249.753001][T13749] syzkaller0: entered allmulticast mode [ 249.814084][T13753] netlink: 'syz.5.3776': attribute type 10 has an invalid length. [ 249.845901][T13753] ipvlan0: entered allmulticast mode [ 249.851260][T13753] veth0_vlan: entered allmulticast mode [ 249.858233][T13753] team0: Device ipvlan0 failed to register rx_handler [ 249.902581][T13761] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 249.915005][T13761] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 249.925503][T13761] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 250.123213][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3782'. [ 250.721082][T13797] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 250.881766][T13816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3801'. [ 251.764246][T13849] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.878521][T13849] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.963023][T13849] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.024924][T13849] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.098765][ T53] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.116892][ T53] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.125687][ T53] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.143109][ T53] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.161346][T13857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3816'. [ 252.518707][T13891] netlink: 'syz.4.3829': attribute type 10 has an invalid length. [ 252.530562][T13894] netlink: 'syz.0.3823': attribute type 10 has an invalid length. [ 252.531240][T13891] team0: Device ipvlan0 failed to register rx_handler [ 252.552810][T13894] team0: Device ipvlan0 failed to register rx_handler [ 252.591210][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3833'. [ 252.600297][T13901] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3833'. [ 252.609293][T13903] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3834'. [ 252.609962][T13903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3834'. [ 252.618365][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3833'. [ 252.648223][T13903] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3834'. [ 252.657723][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3834'. [ 252.910845][T13930] netlink: 'syz.0.3843': attribute type 10 has an invalid length. [ 252.927148][T13930] team0: Device ipvlan0 failed to register rx_handler [ 252.948060][T13927] netlink: 'syz.4.3844': attribute type 10 has an invalid length. [ 252.959059][T13938] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 252.964770][T13927] team0: Device ipvlan0 failed to register rx_handler [ 252.985912][T13940] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 252.994877][T13940] 9p: Bad value for 'rfdno' [ 253.021485][T13945] block device autoloading is deprecated and will be removed. [ 253.244765][T13967] netlink: 'syz.4.3859': attribute type 10 has an invalid length. [ 253.274900][T13967] team0: Device ipvlan0 failed to register rx_handler [ 253.312636][T13972] netlink: 'syz.3.3860': attribute type 10 has an invalid length. [ 253.343303][T13972] team0: Device ipvlan0 failed to register rx_handler [ 253.398929][T13982] block device autoloading is deprecated and will be removed. [ 253.469388][T13982] FAULT_INJECTION: forcing a failure. [ 253.469388][T13982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.482553][T13982] CPU: 0 UID: 0 PID: 13982 Comm: syz.4.3865 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 253.482582][T13982] Tainted: [W]=WARN [ 253.482588][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.482749][T13982] Call Trace: [ 253.482757][T13982] [ 253.482765][T13982] __dump_stack+0x1d/0x30 [ 253.482786][T13982] dump_stack_lvl+0x95/0xd0 [ 253.482812][T13982] dump_stack+0x15/0x1b [ 253.482832][T13982] should_fail_ex+0x265/0x280 [ 253.482924][T13982] should_fail+0xb/0x20 [ 253.482940][T13982] should_fail_usercopy+0x1a/0x20 [ 253.482964][T13982] _copy_to_user+0x20/0xa0 [ 253.483024][T13982] simple_read_from_buffer+0xb5/0x130 [ 253.483061][T13982] proc_fail_nth_read+0x10e/0x150 [ 253.483086][T13982] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.483127][T13982] vfs_read+0x1a8/0x770 [ 253.483142][T13982] ? __rcu_read_unlock+0x4f/0x70 [ 253.483162][T13982] ? __fget_files+0x184/0x1c0 [ 253.483185][T13982] ? mutex_lock+0x58/0x90 [ 253.483209][T13982] ksys_read+0xda/0x1a0 [ 253.483275][T13982] __x64_sys_read+0x40/0x50 [ 253.483353][T13982] x64_sys_call+0x2889/0x3000 [ 253.483373][T13982] do_syscall_64+0xca/0x2b0 [ 253.483400][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.483420][T13982] RIP: 0033:0x7f2e5503e15c [ 253.483451][T13982] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 253.483469][T13982] RSP: 002b:00007f2e53a9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.483488][T13982] RAX: ffffffffffffffda RBX: 00007f2e55295fa0 RCX: 00007f2e5503e15c [ 253.483501][T13982] RDX: 000000000000000f RSI: 00007f2e53a9f0a0 RDI: 0000000000000004 [ 253.483514][T13982] RBP: 00007f2e53a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 253.483528][T13982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.483581][T13982] R13: 00007f2e55296038 R14: 00007f2e55295fa0 R15: 00007ffe84b2e9c8 [ 253.483598][T13982] [ 254.046799][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.053586][T14023] Bluetooth: hci0: Frame reassembly failed (-84) [ 254.061903][T14024] netlink: 'syz.4.3877': attribute type 10 has an invalid length. [ 254.103327][T14024] team0: Device ipvlan0 failed to register rx_handler [ 254.256423][ T29] kauditd_printk_skb: 1201 callbacks suppressed [ 254.256438][ T29] audit: type=1326 audit(1766629633.971:18120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.289036][ T29] audit: type=1326 audit(1766629633.991:18121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.312762][ T29] audit: type=1326 audit(1766629633.991:18122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.336331][ T29] audit: type=1326 audit(1766629633.991:18123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.360134][ T29] audit: type=1326 audit(1766629633.991:18124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.383751][ T29] audit: type=1326 audit(1766629633.991:18125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.407257][ T29] audit: type=1326 audit(1766629633.991:18126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.430856][ T29] audit: type=1326 audit(1766629633.991:18127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14040 comm="syz.3.3887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f05deebf749 code=0x7ffc0000 [ 254.454676][ T29] audit: type=1326 audit(1766629634.051:18128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14042 comm="syz.5.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dc93f749 code=0x7ffc0000 [ 254.478278][ T29] audit: type=1326 audit(1766629634.051:18129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14042 comm="syz.5.3888" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7dc93f749 code=0x7ffc0000 [ 255.171417][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.179248][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.187005][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.208070][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.215914][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.223689][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.231631][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.239616][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.247420][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.255202][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: unknown main item tag 0x0 [ 255.267316][ T3480] hid-generic 0000:0000:FFFFFFFC.0003: hidraw0: HID v8.00 Device [syz0] on syz0 [ 255.318070][T14086] x_tables: unsorted entry at hook 1 [ 255.623641][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.634283][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.645195][T14107] __nla_validate_parse: 4 callbacks suppressed [ 255.645207][T14107] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3916'. [ 255.651795][T14109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3911'. [ 255.687128][T14113] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.732514][T14113] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.770460][T14115] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3919'. [ 255.790770][T14113] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.804905][T14117] netlink: 'syz.0.3920': attribute type 10 has an invalid length. [ 255.813878][T14117] team0: Device ipvlan0 failed to register rx_handler [ 255.850169][T14113] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.118779][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 256.244606][ T52] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.258625][ T52] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.274122][ T52] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.285930][ T52] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.410110][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.418651][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.437545][T14150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3933'. [ 256.453920][T14148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3932'. [ 256.455034][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 256.469662][T14150] Bluetooth: hci0: Frame reassembly failed (-84) [ 257.285099][T14167] netlink: 'syz.2.3938': attribute type 10 has an invalid length. [ 257.286472][T14167] team0: Device ipvlan0 failed to register rx_handler [ 257.339856][T14170] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 257.398320][T14175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3941'. [ 257.466856][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3944'. [ 257.599095][T14190] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 257.758177][T14197] netlink: 'syz.2.3950': attribute type 10 has an invalid length. [ 257.767485][T14197] team0: Device ipvlan0 failed to register rx_handler [ 257.794840][T14203] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.796050][T14189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.815750][T14189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.860057][T14203] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.921175][T14203] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.011031][T14203] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.047033][ T52] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.058004][ T52] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.069025][ T52] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.080459][ T52] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.518797][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 258.518884][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.634386][T14227] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3959'. [ 258.645028][T14227] netlink: 'syz.5.3959': attribute type 1 has an invalid length. [ 258.652861][T14227] netlink: 'syz.5.3959': attribute type 4 has an invalid length. [ 258.660613][T14227] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3959'. [ 258.672189][T14227] netlink: 'syz.5.3959': attribute type 1 has an invalid length. [ 258.680015][T14227] netlink: 'syz.5.3959': attribute type 4 has an invalid length. [ 258.687749][T14227] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3959'. [ 258.715984][T14234] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 258.778526][ T1858] Bluetooth: hci0: Frame reassembly failed (-84) [ 259.744003][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 259.744017][ T29] audit: type=1400 audit(1766629639.461:18395): avc: denied { append } for pid=14287 comm="syz.2.3982" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 259.774280][ T29] audit: type=1400 audit(1766629639.461:18396): avc: denied { open } for pid=14287 comm="syz.2.3982" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 259.798203][ T29] audit: type=1400 audit(1766629639.471:18397): avc: denied { ioctl } for pid=14287 comm="syz.2.3982" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 260.163274][ T29] audit: type=1400 audit(1766629639.881:18398): avc: denied { load_policy } for pid=14298 comm="syz.3.3986" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 260.163456][T14300] SELinux: failed to load policy [ 260.460070][ T29] audit: type=1326 audit(1766629640.181:18399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.4.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 260.484037][ T29] audit: type=1326 audit(1766629640.181:18400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.4.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 260.507800][ T29] audit: type=1326 audit(1766629640.181:18401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.4.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 260.531322][ T29] audit: type=1326 audit(1766629640.181:18402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.4.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 260.554939][ T29] audit: type=1326 audit(1766629640.181:18403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.4.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 260.578556][ T29] audit: type=1326 audit(1766629640.181:18404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14307 comm="syz.4.3990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2e5503f749 code=0x7ffc0000 [ 260.621628][T14311] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.660651][T14311] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.726955][T14314] netlink: 'syz.0.3993': attribute type 10 has an invalid length. [ 260.736716][T14311] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.748358][T14314] team0: Device ipvlan0 failed to register rx_handler [ 260.788142][T14311] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.840081][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 260.840095][ T3520] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 260.840201][ T44] ================================================================== [ 260.840229][ T44] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 260.840261][ T44] [ 260.840269][ T44] write to 0xffffffff88ebdd88 of 9 bytes by task 3520 on cpu 1: [ 260.840286][ T44] vsnprintf+0x2ce/0x860 [ 260.840307][ T44] pointer+0x821/0xcb0 [ 260.840327][ T44] vsnprintf+0x491/0x860 [ 260.840348][ T44] vscnprintf+0x41/0x90 [ 260.840366][ T44] printk_sprint+0x30/0x2d0 [ 260.840391][ T44] vprintk_store+0x568/0x830 [ 260.840419][ T44] vprintk_emit+0x15a/0x5c0 [ 260.840447][ T44] vprintk_default+0x26/0x30 [ 260.840476][ T44] vprintk+0x1d/0x30 [ 260.840495][ T44] _printk+0x79/0xa0 [ 260.840509][ T44] bt_err+0x9d/0xd0 [ 260.840538][ T44] hci_dev_open_sync+0xfa4/0x2290 [ 260.840563][ T44] hci_power_on+0xef/0x390 [ 260.840581][ T44] process_scheduled_works+0x4ce/0x9d0 [ 260.840600][ T44] worker_thread+0x582/0x770 [ 260.840622][ T44] kthread+0x489/0x510 [ 260.840649][ T44] ret_from_fork+0x149/0x290 [ 260.840681][ T44] ret_from_fork_asm+0x1a/0x30 [ 260.840703][ T44] [ 260.840708][ T44] read to 0xffffffff88ebdd88 of 8 bytes by task 44 on cpu 0: [ 260.840724][ T44] data_push_tail+0x100/0x470 [ 260.840748][ T44] data_alloc+0x11b/0x390 [ 260.840770][ T44] prb_reserve+0x8d7/0xad0 [ 260.840792][ T44] vprintk_store+0x53c/0x830 [ 260.840820][ T44] vprintk_emit+0x15a/0x5c0 [ 260.840858][ T44] vprintk_default+0x26/0x30 [ 260.840887][ T44] vprintk+0x1d/0x30 [ 260.840908][ T44] _printk+0x79/0xa0 [ 260.840924][ T44] bt_err+0x9d/0xd0 [ 260.840949][ T44] hci_cmd_timeout+0x97/0x140 [ 260.840970][ T44] process_scheduled_works+0x4ce/0x9d0 [ 260.840994][ T44] worker_thread+0x582/0x770 [ 260.841017][ T44] kthread+0x489/0x510 [ 260.841042][ T44] ret_from_fork+0x149/0x290 [ 260.841065][ T44] ret_from_fork_asm+0x1a/0x30 [ 260.841089][ T44] [ 260.841095][ T44] value changed: 0x00000000fffff3ce -> 0x2d203a64656c6961 [ 260.841114][ T44] [ 260.841120][ T44] Reported by Kernel Concurrency Sanitizer on: [ 260.841135][ T44] CPU: 0 UID: 0 PID: 44 Comm: kworker/u9:0 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.841162][ T44] Tainted: [W]=WARN [ 260.841169][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.841182][ T44] Workqueue: hci0 hci_cmd_timeout [ 260.841203][ T44] ================================================================== [ 261.108157][ T802] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.120252][ T802] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.131454][ T802] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.142436][ T802] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0