last executing test programs: 2.575387614s ago: executing program 1 (id=6077): syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @val={@void, {0x8100, 0x7, 0x1, 0x2}}, {@llc_tr={0x11, {@snap={0xaa, 0xaa, "d0", "3823fd", 0xf8, "c105ffff558907882c7a38b2f13bd74b78a45564ec2ecec8d8138cae"}}}}}, &(0x7f0000000340)={0x1, 0x1, [0xa9a, 0x3a7, 0x65c, 0x7d9]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9a, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x6, 0x12, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, [@jmp={0x5, 0x1, 0x7931a00109dc121, 0xb, 0x2, 0x4, 0x1}, @generic={0x9, 0x5, 0x9, 0x0, 0xd}, @func={0x85, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000003c0)='syzkaller\x00', 0x4, 0x82, &(0x7f0000000a00)=""/130, 0x41000, 0x4, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1086}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000b80)={r2, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r3, &(0x7f0000000000)='./file0\x00', 0x5) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x4, 0x84082, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x3, 0x2, 0x3a, 0x6, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x2}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r10, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_io_uring_setup(0x10cf, &(0x7f0000000540)={0x0, 0x7734, 0x800, 0x0, 0x34f}, &(0x7f0000000600), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendto$inet6(r4, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) 1.798643586s ago: executing program 2 (id=6083): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x7, 0x0, 0x94}, {0x7, 0xf7, 0x10, 0x5}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001893ebd8", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x70bd27, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x4}}, @TCA_CT_MARK={0x8, 0x10, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000400000000000000010000009500005693d9db008eeca282a2dee5efa44dfb20e0068f00c230e02b593120a802584a5743e38f8847a9ace0fb6eea5c95f5c44a89da9f39fb073219029c6bc4496510d9d4dcf92f14fd37571232828f6a7388891a89b7180d63124c99938a011c030bbc87dad8f0b76923a0a6b95d3acdcc51b5dce706236928028f4cd080f43209777e3083c4f5055c32fa1aab697072b4d3ab1ce8f982c8ac76f4ab4edfba0b7c1c2b8ea44168bbf1c20c462730344c65db531223b575bf5506970c403577a054ef"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xb}}}, 0x24}}, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="67727e10ea340180c200000086dd6012000800183a000008000000000000000000000000000100000000000000000000000000000001"], 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) open_by_handle_at(0xffffffffffffff9c, 0x0, 0xc000) 1.723765772s ago: executing program 4 (id=6085): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "02473778c9f9cf3e"}}}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0xfc76) r5 = fsmount(r4, 0x0, 0x0) r6 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8080, &(0x7f0000000500)={[{@norecovery}, {@grpquota}, {@sysvgroups}, {@lazytime}]}, 0xee, 0x4b9, &(0x7f0000000a00)="$eJzs3EtsVFUfAPD/nb55fPRDfICgVXwQlZaWhyzcaDRxoYmJLjCuaikEKdTQmghpFFzg0pC4Jy5N3Ju40o1RF8bEre4NCTHdgKyuuTP3DtP2zlDaoaXO75fM9Jy5pz3nf8+c3jPnzEwAHWsou0sitkTEHxGxrZZdWGCo9uPm/NzEP/NzE0mk6dt/J9VyN+bnJoqixe9trmXSvoi+LNlXUu/l9yLGp6Ymz+X5kdkzH47MnL+w/9SZ8ZOTJyfPjh09eujgnt4jY4erx9Mm7e+5Q3yV/GcW141dn0zv3vn6u1fenDh25f2fv8nauyU/3hjHiqRLWzhUO7uLPZ7dPb2qyu4rv2Z3WxseSLqbFx5egwaxfF0R0V0fR0l0xUD92LZ47bN1bBpwj6VpmpZdn6Phup0C/1GJ8Q0dqrjWZ69/i9vazDzuD9dfjoj9eWZ+buJmPf7u+tpBz6LXt+00FBHHLt66mt2iHesQAAB38H02/3mhbP5XiYcayv0v30MZjIj/R8T2iHggInZExIMR1bIPR5x55C7rX7xDsnT+U7m2osCWKZv/vZTvbd1cMP8rZn8x2JXntlbj70lOnJqaPJCfk33R05flR1vU8cOrv39RpPsXHavN/y7luVtXs/qLuWDejmvdixbojo/PjlcTaZp+uvLQq65fitjVXRZ/EsU2ThIROyNi1wrrOPXc17ubHWuc/2a3pfG30GKfabnSryKerfX/xYXz/9tdlTTuTw5ERH1/cvTFI2OHR/pjavLASPGsWOqX3y6/1az+VcXfBln/byp9/td3gQeT/oiZ8xdOV/drZ+6+jst/ft4wphfsLmfxV76NaBF/+fO/N3mnmu7NH/t4fHb23GhEb/LG0sfHbv9ukS/KZ/Hv21s+/rc3tPjRiMiexHsi4rF8Ezfruyci4smI2Nsi/p9eeeqDIl0+/sv6v9mqfHtdz09Uy/6Pxv6/+0TX6R+/a1b/UL4HGfl5KO//Q9XUvvyR+v+/FpbbwBWdNAAAANhgKtX3wCeV4Xq6Uhkerr2Hf0dsqkxNz8w+f2L6o7PHa++VH4yeSrHSta1hPXQ0Xxsu8mOL8gfzdeMvuwaq+eGJ6anj6x08dLjNTcZ/5q+u9W4dcM+1YR8N2KCMf+hcxj90LuMfOpfxD52rbPyv9oMFwMbg+g+dqzr+n7m43s0A1oHrP3Qu4x86UtPPxldW9ZH/pomk3X+wNFF8d8Ja1DV5bqa/9cksvoviXjdjSWJgWYW7Sg713/nURWWtw9mQieJ7NFb+d7qX9EV0t7WpfaWH1uO/EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQPv9GwAA///tM8YX") r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001580)={0xb, 0x0}, 0x8) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000168, &(0x7f00000015c0)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r9, @ANYRES16=r5, @ANYRES8, @ANYRES32=r4, @ANYBLOB="4dec25285c19294adbcc8cd69d02d1079263ae49b29cdfe87a062526b43b8e0a9ea9e8743c510f47d849c1fc66578768e130600eb2be4fee8079cc41370be132bc9aab758c57a9adbb89e09b6e0f95f7416e60176b27c5145868daeb15d657bebf46eb1d02b623c01c8b04491fb5facf5ba1e6f678", @ANYRES8=r7, @ANYRES16=r6, @ANYRESDEC=r1], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x4, &(0x7f0000000040)=0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @multicast2}], 0x10) sendmsg$inet_sctp(r12, &(0x7f0000000700)={&(0x7f00000001c0)=@in6={0xa, 0x4e24, 0x3000, @mcast2}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x804c001}, 0x40891) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32, @ANYBLOB="0800c3007413"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) r14 = dup(r12) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r5, 0x84, 0x85, &(0x7f0000000540), &(0x7f00000000c0)=0x8) io_submit(r11, 0x3, &(0x7f00000014c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x2, 0xffffffffffffffff, &(0x7f0000000340)="b5ac24e95100bfd3", 0x8, 0x0, 0x0, 0x2, r5}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r10, &(0x7f0000003b00)="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", 0x104d, 0x7, 0x0, 0x2, r5}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x8, r3, &(0x7f0000000400)="72e86a", 0x3, 0x4, 0x0, 0x2, r14}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r10}, 0x18) open_tree(0xffffffffffffffff, &(0x7f0000000280)='\x00', 0x89901) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f00000001c0)=ANY=[], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801440010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) process_vm_writev(0x0, &(0x7f0000001880)=[{&(0x7f0000001540)=""/29, 0x1d}, {&(0x7f00000016c0)=""/66, 0x42}, {&(0x7f0000001740)=""/25, 0x19}, {&(0x7f0000001780)=""/233, 0xe9}], 0x4, &(0x7f0000002a80)=[{&(0x7f00000018c0)=""/148, 0x94}, {&(0x7f0000001980)=""/217, 0xd9}, {&(0x7f0000001a80)=""/4096, 0x1000}], 0x3, 0x0) 1.672259196s ago: executing program 3 (id=6086): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_pidfd_open(r1, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r9 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r9, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r11, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000804) 1.558003235s ago: executing program 1 (id=6087): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="7edfe0e514fbe711a791ef80d8401a68731ee2b1d19902841b06e9ed8266fcdede3fd976b7d40b4500e08f34e1fbd83e8974c0b47bb86b6512c251e16fd6413b785b7ddacc3272a15e63b2cfa4b18c64225c961197bfc3710f17f8e426b0b088bce1c688ea5edd74cfe7a8b12e4922e02acf2fc3a8400efd7dd7aa8662961d", 0x7f}, {&(0x7f0000000380)="409328a2aefef1daf1651514c29243154dc3565f57e76c0e837b919fe905585d2664e35fb71f9a3cff81184b5db7a5308552bae7ef452340023ecba1ccc72644245b431c325871c3639b078d63426fdc0e5b65af29961b815765065f8d54e77084e535230c0ed7c8516d660fe835c0375e737165a32b505f19bedcf3ea743870b86f2959cc7eb9ee9b81b98a627c0037fbda9828932f927fae9ebba29d3b237b4b3e998102e0206f93d006c440b6fd4c24acae069daeda8b79c55622c112f574", 0xc0}, {&(0x7f0000000580)="3818984737e900d8944ab4965b052c9036af3b25865570196fceeb69bfe081d93a0732b1332c0c86a5bfc549e140949ce9c628e04197a8685a91b2a25a9fd1e71ae14ff5a6208978939bd25d8b00ed65aca421805af679b0076434b0c7a2a7df197a86cc44282b99eede650d1555afb8c7cf1db39a21b319ad71696cb9a2e530d753d6c463630a9b1ec92de5d14b04b2c837af36e23c82bd3ef828", 0x9b}], 0x3) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2c7766646e6f3d821d6282917c0c4a51b04acf288a23d7a6a0562aa559786f8d09ac0f8cde7037c8a6db710207cd1292b0a9311038aba23eaac475447bded4df7ad088878f57483ecfe7d34d5d0a0a45", @ANYRESHEX=0x0]) utime(&(0x7f0000000100)='./file0\x00', 0x0) 1.557123086s ago: executing program 3 (id=6088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000780)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000007c0)="9751884360702deb6133eb226d740530f332d1a2f34b19351eb2bec043383540c6bfe694f3fac4145c70ceed7760bc469812debad3890142a8f5039553307638fd674d4ca5520137a90f00c5909aeed3c029b9dc19e0ec50d0ef0d87c0dbf0be1d256a1b49dd6982e97f4e30c16d6536ecd0f600f1278af8", 0x78}, {&(0x7f0000000980)="e8095b1b728bad3e5b794ed73a2d04d987470f196c1ef56da14f9ba1ac619a1e86c9e3ee8f0921679e439ff8d923f9c7a392a4552cd604cc83e3f092d95d18bfde8be9db45ee5150edaf17d9731645e57c37f6aa60a8106a9c92d5e11ff590ef3b74b325ff84d76f7fb58581a30e731ab07afe1cda8f", 0x76}], 0x2, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf29}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbf, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@remote, 0x4}, {@rand_addr=0x64010101, 0xd791}]}, @end, @rr={0x7, 0xb, 0xcf, [@remote, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0xe8}}, {{&(0x7f0000000c40)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}}], 0x2, 0x20041010) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x2a9e02a, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0]) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRESDEC=r7, @ANYBLOB="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"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c000000", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x8000) sendmsg$NL80211_CMD_ADD_TX_TS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7fff}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5f18}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000000000000046400010073797a300000000044000000090a01040000000000000000010000000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900bcd55a7107cd99c54d65020073797a32000000000900010073797a30000000003800038061e9d8733fd1370b638f72a32d06b9b9296eff58afe8f71557eb284a16daa9874d90f882f94c16f2dc"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.458149773s ago: executing program 1 (id=6089): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000400), 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000200), 0x1, 0x46f, &(0x7f00000008c0)="$eJzs3M9vFFUcAPDvbFsQEFsM/uCHUkUj0djSgsrBAxhNPGhiogc81rYQpFBDayKESDUGj4ZEozfj0cS/wJNejHoy8ap3Q0IMF5DTmNmdYbfL/ujShW3ZzyeZ9L2ZN33v25nXfW9epwH0rdGI+Cwi7o+IvyJiOCKS+gKjlS/Xr56f/u/q+ekk0vTtf5NyuWtXz08XRYvzthSZpUp+V4N6F86eOzk1Nzd7Js+PL576YHzh7LnnT5yaOj57fPb05KFDBw9MvPTi5AsriGKgbYmsTdd2fjy/e8fr7156c/ropfd++yHJw4u6OLpktNXBp7tcWa9trUkngz1sCB3Jek52uYbK/X84BqJ68YbjtU972jjgjkrTNN3Y/PBSCtzDklhxyTvbEOAuKz7os/lvsd2loceacOVIZQKUxX093ypHBqOUlxmqm992UzbbOrp049tsizvzHAIAYJmfjlS+3jr+K8XDNeUO52tDIxGxrWZxY3tEPBRRLvtIRDzaYf31iyS3jn9Klzv8lh3Jxn8v52tby8d/xegvRgby3NZy/EPJsRNzs/sj4oGI2BdDG7P8RIs6fn71zy+aHRutGf9lW1Z/MRbM23F5sO4B3czU4tRqYq515ZOInYON4k9urgQkEbEjInbuqTlxw8rrOPHs97ubHWsffwtdWGdKv4t4pnL9l6Iu/kLSen1y/L6Ym90/XtwVt/r9j4tvNau/0/i3fVOds3VDdv03N7z/b8Y/kg7UrNcudF7Hxb8/bzqnud37f0PyTjld3IYfTS0unpmI2JC8ke8/XN0/WT23yBfls/j37W3c/x+M6k9iV0RkN/FjEfF4ROzJ2/5ERDwZEXtbxP/rK0+9v2zHjerke1X3fxdk8c+0uf5J7Xr9bSQGTv7y47JKR6rJlV3/g+XUvnxP+fff163jWmkDV/8TBAAAgLWvVP7b/6Q0djNdKo2NVf5efntsLs3NLyw+d2z+w9MzlXcERmKoVDzpGq55HjqRT+uL/GRd/kD+3PjLgU3l/Nj0/NxMr4OHPrelSf/P/NP+tRpgvfO+FvQv/R/6l/4P/Uv/h77V6P3/Te3KpB4Owj2h0ef/hR60A7j7jP+hf3Xa/yuTgxb/NgxYN3z+Q//S/6Evrea9/lUmin8/2LBMsf7Qi4a1TaRpuzKDrU6/0DjkdZaI0ppoRpcSX62NZqyhRG9/LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTL/wEAAP//lrDxFg==") ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) inotify_init() r2 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0xb8}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f00000003c0)=""/4096, 0x1000) 1.352665792s ago: executing program 4 (id=6090): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000640)='./file1/file0\x00', &(0x7f0000000680), 0x100) (fail_nth: 2) 1.038420807s ago: executing program 0 (id=6093): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x400e, &(0x7f0000000280)={[{@i_version}, {@nobh}, {@data_err_ignore}, {@nolazytime}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@acl}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) write$tun(r0, &(0x7f0000000100)={@void, @val={0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, @eth={@multicast, @local, @val={@val, {0x4305}}}}, 0x20) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) r3 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f00000003c0)=0xe8, 0xfed3) sendto$inet6(r3, 0x0, 0x0, 0x4000840, &(0x7f0000000240)={0xa, 0x4e23, 0x8be6, @mcast2}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c000780080013401100040e0500b5acf9d37c008dc585ccfa010006000000000005000400000000000900020073797a31000073683a697000000000000000"], 0x50}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xffff}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB="05"], 0x10) close(r6) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r7}, &(0x7f0000000500), &(0x7f0000000540)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008050000000000000000030008000000"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 1.029142047s ago: executing program 3 (id=6094): syz_io_uring_setup(0x161e, &(0x7f0000000580)={0x0, 0xe84, 0x10100, 0x3, 0x18b}, &(0x7f0000002000), &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@hci={0x1f, 0x3, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="a6", 0x1}, {0x0}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRESDEC=r1], 0x10b8}, 0x0) r2 = dup2(r0, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4e20, 0x0, 0x401, 0x4, 0xa, 0x60, 0xa0}, {0x800, 0x80000001, 0x993b, 0xfffffffffffffffa, 0x80000000, 0x7fffffff, 0x9, 0x8}, {0xffffffffffffffff, 0x9, 0x0, 0x3}, 0x1, 0x6e6bb4, 0x0, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@loopback, 0x3505, 0x3, 0x5e0cb218ac1489d9, 0x8, 0x8, 0xffff, 0x7}}, 0xe8) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="00022cbd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000b000000080001007063690011000200303030303a30303a31302e000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00010000800e0021006e657464657673696d0000000f0002006e657464657673696d30913c1e050b0007000000080001007063690011000200303030303a30303a31302e300000000008000b0008000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4010}, 0x840) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 991.084431ms ago: executing program 4 (id=6095): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x4, 0xff, 0xb, 0x4, 0x0, 0x778a, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x2, 0x5, 0x45b, 0x3, 0x401, 0x0, 0x100007, 0x0, 0x4fac}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 990.650321ms ago: executing program 3 (id=6096): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000012) 989.959501ms ago: executing program 2 (id=6097): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x1, [{0x200, 0x5}]}}) r3 = socket(0xa, 0x3, 0x87) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x890b, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$FIONREAD(r4, 0x541b, &(0x7f00000005c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400)={0x0, r1}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000ac1414bb000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRESOCT=r0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r6, 0x10e, 0xa, &(0x7f0000000180)=0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0x8}, 0xfffffffffffffe97) r8 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711223000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r8, 0x1b) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x23, 0x5, 0x0) 948.173155ms ago: executing program 0 (id=6098): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = getpgrp(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000ac0)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_pidfd_open(r1, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r7}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r9 = socket$tipc(0x1e, 0x1, 0x0) sendmsg$tipc(r9, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d0003"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r4) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, r11, 0x100, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000804) 947.722904ms ago: executing program 4 (id=6099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 920.089016ms ago: executing program 3 (id=6100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000300)={'gre0\x00', 0x0, 0x10, 0x8, 0xfffffffe, 0xe09d, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010100, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0xb6, [@rand_addr=0x64010102]}, @ssrr={0x89, 0xb, 0xcd, [@private=0xa010100, @local]}]}}}}}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"/476], 0x0, 0x307, &(0x7f0000000200)="$eJzs3UtrG1cUwPEzeliSXddalFJKCxcXSkvxYAu666Km2FAqaLGtQhwIjONxIjSWjEYYZEKsRSDbrLPwIssQCIHssgkhW2/yCZI4O2+8ixciE0bzsB4TRSLIj+T/W1hHc8+Zez1zZeNraebwjzubpY20iGhyIt7ISkzi/rOG/Pp879WPy8++8p4rtTi/MpdTKiYil288mH5am/j/8ddPUrKfvXJ4lHuz/8OKyLuV6xJTRVuVHUcZaq1SqbldqPWiXdKV+s8yDdtUxbJtVmt+u7FmmWrDqmxt1ZVRXp8c36qatq2Mcl2VzLqqVVStWlfGNaNYVrquq8lxgYhkwyjW06b1KyzcP3YcOXIcx0k1xHGciOxGECT9x9SnDRbnSdf575vbMznioxwZTsOxkxj4/OPz473+X98d7Pw7u6c0LJyS5Uur/8zn8wtLSqVFNm9vF7YL3qPX/nJCimKJKXtLv602xZ0jPtHcr4t/5xdmVUtWft7c9et3twveL4f5jVb9QVDUVi9B/ZxXrzrrkzJ+Um9KTqbkG4mszwX1EmurH5Nffmqr12VKXlyViliy7s7ktvqbc0r99W++q/9MKw8AAAAAAAAAgItIV6GT9Xst/FdvRtdTrXd8hO0Zd7Ob5yWE6+uzMiXN6PX52cj1/YR8nzjDbxwAAAAAgC+IXd8pGZZlVkcTxO9l+nSRFBE3ELk17Q6m7w6/9Uc8WO9jItLbFO/fRUeQ+d3r7+GSPzAZ5YEKgvQQI4wIgg9rlIzmo6ApI1HJsaEmwMxY5JFPVzUZ6fzpCGSQZEkPPbG1hF3fSQ08tXrKm8GW7yJzHO3j+3EMK+ltkfAM9q/6c6iXwweDdPeBmjnw9mv1+aHxNlziAwAAAHCBtP3hBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzkj4+X/Nv9P/IBcPC67b39kk/i3iey/J1n2feK77DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAceh8AAP//8yCz0A==") syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='f2fs_writepages\x00', r3, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r4) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000b00)=ANY=[@ANYBLOB="85660a3e0000000098950000643c083195b4cce400000000"]) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r5}, 0x10) unlinkat(0xffffffffffffffff, 0x0, 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) setuid(0xee01) fsmount(0xffffffffffffffff, 0x0, 0xc) socket(0x15, 0x1, 0x4) 880.39619ms ago: executing program 4 (id=6101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) (fail_nth: 11) 866.439751ms ago: executing program 0 (id=6102): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000a5"], 0x48) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000018c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xc}}}, 0x24}}, 0x2004080) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r9}, 0x10) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r11 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x200081, 0x0) 793.378977ms ago: executing program 3 (id=6103): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000020601086c0000000000000000000000050005000a0000000500010006000000050004000051c36b811a168e78020000000900020073797a320000000011000300686173683a69702c6d61726b000000001400078008000b4000000009080077d87ebc59ec2f55cde10ec4fa2b660840000000da"], 0x60}}, 0x0) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r4, 0x0, 0x8000002b) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010002020000fcdbdf25200000000800f800", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 732.948642ms ago: executing program 4 (id=6104): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6566c8bd20f39915734b4a24e9b596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6861cd700b4f8c0f594861c0296", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb1aeeb70c4294fb9be03e73d06a9", 0x3a}, {&(0x7f0000000500)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="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", 0xda9}, {&(0x7f00000001c0)="aba1501aab68c98b25f2a20fd588ccbb9eb6a11a63c2af70c8d13d17203fcea6070b6cef7d3590e1fdb152e02a93faa1d6dbdc5521f78e31514c75451251", 0x3e}], 0x6) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r1, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0xdc, &(0x7f0000000200), 0x1, 0x46f, &(0x7f00000008c0)="$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") ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) inotify_init() r2 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0xb8}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read(r5, &(0x7f00000003c0)=""/4096, 0x1000) 732.520611ms ago: executing program 0 (id=6105): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, 0x0}, &(0x7f0000000ac0)=0x14) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000780)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000a40)=[{&(0x7f00000007c0)="9751884360702deb6133eb226d740530f332d1a2f34b19351eb2bec043383540c6bfe694f3fac4145c70ceed7760bc469812debad3890142a8f5039553307638fd674d4ca5520137a90f00c5909aeed3c029b9dc19e0ec50d0ef0d87c0dbf0be1d256a1b49dd6982e97f4e30c16d6536ecd0f600f1278af8", 0x78}, {&(0x7f0000000980)="e8095b1b728bad3e5b794ed73a2d04d987470f196c1ef56da14f9ba1ac619a1e86c9e3ee8f0921679e439ff8d923f9c7a392a4552cd604cc83e3f092d95d18bfde8be9db45ee5150edaf17d9731645e57c37f6aa60a8106a9c92d5e11ff590ef3b74b325ff84d76f7fb58581a30e731ab07afe1cda8f0b247599fe02c7fb1f7823afd139fcc612eb936d", 0x8a}], 0x2, &(0x7f0000000b00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xf29}}, @ip_retopts={{0x38, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0xbf, 0x1, 0xa, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8000}, {@remote, 0x4}, {@rand_addr=0x64010101, 0xd791}]}, @end, @rr={0x7, 0xb, 0xcf, [@remote, @broadcast]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @rand_addr=0x64010102}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfd}}], 0xe8}}, {{&(0x7f0000000c40)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}}], 0x2, 0x20041010) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) mount$9p_unix(0x0, &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x2a9e02a, &(0x7f0000000300)=ANY=[@ANYRESDEC=0x0]) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x4, @perf_bp={0x0, 0x15}, 0xc92, 0xffffffff, 0xd15, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x40000000000000, 0xffffffffffffffff, 0x9) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYRES16, @ANYRES32=r7, @ANYRESDEC=r7, @ANYBLOB="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"], 0x150}}, 0x804) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x4, &(0x7f0000006680)) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="301aadf06f8c99013d1c000000", @ANYRES16=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x30}, 0x8000) sendmsg$NL80211_CMD_ADD_TX_TS(r10, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x68, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xe}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x7fff}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x5f18}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getgroups(0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000000000000046400010073797a300000000044000000090a01040000000000000000010000000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900bcd55a7107cd99c54d65020073797a32000000000900010073797a30000000003800038061e9d8733fd1370b638f72a32d06b9b9296eff58afe8f71557eb284a16daa9874d90f882f94c16f2dc"], 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 673.316816ms ago: executing program 1 (id=6106): io_setup(0x8, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x2) r1 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000000)='map_files\x00') fchdir(r3) socket$caif_stream(0x25, 0x1, 0x2) r4 = epoll_create(0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x20, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRESDEC=r4, @ANYRES32=r0, @ANYRES8=0x0, @ANYRES32=r5, @ANYRESDEC], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r7, @ANYRESDEC, @ANYBLOB="e5a376210f682115e6f05e7152bd6a40bcec9b3290353d2259b3abb27aa7c0b2b31d25bf491a0b835d931e4020adac1e732a239f8454", @ANYRES16=r6, @ANYRES16=r4, @ANYRES8=r7, @ANYRESOCT, @ANYRESDEC=r1, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r5, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) unshare(0x2040600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x70, &(0x7f0000000600)=ANY=[], 0x0, 0xfffffff9, 0x0, 0x0, 0x41100, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = gettid() syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0xcc000000, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r9, 0x1b) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000000009307690a00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0xfd82, 0x10180, 0x2200, 0x168}, &(0x7f0000000100), &(0x7f00000000c0)) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000180)=ANY=[], 0x118) 495.08484ms ago: executing program 1 (id=6107): syz_io_uring_setup(0x161e, &(0x7f0000000580)={0x0, 0xe84, 0x10100, 0x3, 0x18b}, &(0x7f0000002000), &(0x7f0000000440)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@hci={0x1f, 0x3, 0x2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="a6", 0x1}, {0x0}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRESDEC=r1], 0x10b8}, 0x0) r2 = dup2(r0, r0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x4e20, 0x0, 0x401, 0x4, 0xa, 0x60, 0xa0}, {0x800, 0x80000001, 0x993b, 0xfffffffffffffffa, 0x80000000, 0x7fffffff, 0x9, 0x8}, {0xffffffffffffffff, 0x9, 0x0, 0x3}, 0x1, 0x6e6bb4, 0x0, 0x0, 0x2, 0x1}, {{@in=@loopback, 0x4d5, 0x6c}, 0xa, @in=@loopback, 0x3505, 0x3, 0x5e0cb218ac1489d9, 0x8, 0x8, 0xffff, 0x7}}, 0xe8) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r3, @ANYBLOB="00022cbd7000fcdbdf251c000000080001007063690011000200303030303a30303a31302e300000000008000b000b000000080001007063690011000200303030303a30303a31302e000008000b0009000000080001007063690011000200303030303a30303a31302e300000000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00010000800e0021006e657464657673696d0000000f0002006e657464657673696d30913c1e050b0007000000080001007063690011000200303030303a30303a31302e300000000008000b0008000000"], 0xf4}, 0x1, 0x0, 0x0, 0x4010}, 0x840) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) 362.095771ms ago: executing program 1 (id=6108): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}, {0x7, 0x0, 0x94}, {0x7, 0xf7, 0x10, 0x5}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x2, 0x2, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001893ebd8", @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x70bd27, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb, 0x0, 0x4}}, @TCA_CT_MARK={0x8, 0x10, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000400000000000000010000009500005693d9db008eeca282a2dee5efa44dfb20e0068f00c230e02b593120a802584a5743e38f8847a9ace0fb6eea5c95f5c44a89da9f39fb073219029c6bc4496510d9d4dcf92f14fd37571232828f6a7388891a89b7180d63124c99938a011c030bbc87dad8f0b76923a0a6b95d3acdcc51b5dce706236928028f4cd080f43209777e3083c4f5055c32fa1aab697072b4d3ab1ce8f982c8ac76f4ab4edfba0b7c1c2b8ea44168bbf1c20c462730344c65db531223b575bf5506970c403577a054ef"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xe, 0xb}}}, 0x24}}, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="67727e10ea340180c200000086dd6012000800183a000008000000000000000000000000000100000000000000000000000000000001"], 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) open_by_handle_at(0xffffffffffffff9c, 0x0, 0xc000) 175.414896ms ago: executing program 2 (id=6109): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r0, 0x0, 0x2000000005}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) write$qrtrtun(r1, &(0x7f0000000600)="72cc5a900065e0f0", 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 123.96007ms ago: executing program 0 (id=6110): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x40000012) 92.871823ms ago: executing program 0 (id=6111): syz_mount_image$ext4(&(0x7f0000001380)='ext4\x00', &(0x7f0000001240)='./file1\x00', 0x21000, &(0x7f0000000000)={[{@sysvgroups}, {@test_dummy_encryption_v1}, {@usrquota}, {@dioread_lock}, {@commit={'commit', 0x3d, 0x400}}, {@mb_optimize_scan}, {@dioread_nolock}, {@nojournal_checksum}, {@abort}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@auto_da_alloc}]}, 0x1, 0x57d, &(0x7f0000000580)="$eJzs3d9rW1UcAPDvTX9s66brYAwVkcIenOjStfXHBMH5KDoc6PssbSyj6TKadKx1sO3BvfgiQxBxID74pu8+Dv8B/4qBDoeMog++VG5602ZLsmZZ1mTm84Fbzrk/es43956Tc3NuSAADayL9k4t4PiK+SiIORkSSbRuObOPE5n7r9y7PpUsSGxsf/5VU90vztf9VO25/lnkuIn79IuLVXGO55dW1xdlisbCc5ScrSxcmy6tDcW5pdqGwUDg/PTNz8o2Z6bfferNrsb5y5p9vP7r1/skvj65/8/OdQzeSOBUHsm31cTyGq/WZiZjIXpOROPXAjlNdKKyfJL2uAB0Zytr5SKR9wMEYylo98P93JSI2OvVux0cCfSHpvP0DT7XaOKB2b9+l++Cnxt33Nm+AGuMf3vxsJPZW743G1pP77ozS+93xLpSflvHLHzdvpEt073MIgB1dvRYRJ4aHG/u/JOv/OneijX0eLEP/B7vnVjr+ea3Z+Ce3Nf6JJuOf/U3abid2bv+5O10opqV0/PdO0/Hv1qTV+FCWe6Y65htJPjtXLKR927MRcSxG9qT5h83nnFy/vdFqW/34L13S8mtjwawed4b33H/M/Gxl9nFirnf3WsQLTce/ydb5T5qc//T1ONNmGUcKN19qtW3n+J+sjR8iXm56/rdntJLt+cm1443zk5PV62GydlU0+vv6kd9ald8Y/2jsZvzp+R97ePzjSf18bfnRy/h+77+FVtvuiz/av/5Hk0+q6dFs3aXZSmV5KmI0+bBx/fT2sbV8bf80/mNHH97/Nbv+90XEp23Gf/3wTy+2FX8Prv80/vlHOv+Pnrj9wefftSq/vf7v9WrqWLamnf5vp3qNdXw1AwAAAAAAQP/KRcSBSHL5rXQul89vPt9xOMZyxfHN5z9iPqrflR2PkVxtpvtg3fMQU9nzsLX89AP5mYg4FBFfD+2r5vNzpeJ8r4MHAAAAAAAAAAAAAAAAAACAPrG/xff/U78P9bp2wBPnJ79hcO3Y/rvxS09AX/L+D4NL+4fBpf3D4NL+YXDVtf89vawHsPu8/8Pg0v5hcGn/AAAAAAAAAAAAAAAAAAAAAAAAAAAA0FVnTp9Ol431e5fn0vz8xdWVxdLF4/OF8mJ+aWUuP1davpBfKJUWioX8XGlpp/9XLJUuTE3HyqXJSqFcmSyvrp1dKq2cr5w9tzS7UDhbGNmVqAAAAAAAAAAAAAAAAAAAAODpUl5dW5wtFgvLEhIdJYb7oxqbifSSrltzpZYY7XXFmiT+/LEvqtEq0eueCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/RcAAP//NFYwZA==") mkdirat(0xffffffffffffff9c, 0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e000000080000000000000081000000002000008ea54229a9269736dc4a16a3581bcaa8503c1800d08f01b6ab7a74e0dd352f5e3eda02a4c257ac401c877f91d27046149d11f37536664c04bdbdf8bb083118f5a685b78ab92da18f1541fe29b384e6b4151fb3601d785cdc", @ANYRES32=0x1, @ANYBLOB='$X\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000005000000030000000400"/28], 0x50) r1 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xffeb}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0xf, &(0x7f0000000b00)=ANY=[@ANYRES32=0x0], &(0x7f0000000400)='GPL\x00', 0x2ee3c000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0x19, &(0x7f0000000140)=0x400030, 0x4) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)=ANY=[], 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 20.942619ms ago: executing program 2 (id=6112): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x10) 20.504329ms ago: executing program 2 (id=6113): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x4, 0xff, 0xb, 0x4, 0x0, 0x778a, 0x20000, 0xa, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x4}, 0x1001, 0x2, 0x2, 0x5, 0x45b, 0x3, 0x401, 0x0, 0x100007, 0x0, 0x4fac}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) 0s ago: executing program 2 (id=6114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001a80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001ac0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027dbdf252500000005002b000100170000000000000000000000000000000000806ad1f31d4eaeedafe0fb67e6cd", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r7}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f1d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r8, 0x0, 0x5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001600500026bd7000ffdb0a0001ff", @ANYRES32=r11, @ANYBLOB="14000100fe8800000000000000000000000001010800080020000000080009008e0000000800090081000000"], 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x13, &(0x7f0000000040)=[0x1, 0x6], 0x2) inotify_init() socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) kernel console output (not intermixed with test programs): sysadm_t pid=17300 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 283.223176][T17307] lo speed is unknown, defaulting to 1000 [ 283.223225][ T29] audit: type=1326 audit(1756205960.435:32386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 283.223251][ T29] audit: type=1326 audit(1756205960.435:32387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 283.276096][ T29] audit: type=1326 audit(1756205960.435:32388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 283.300024][ T29] audit: type=1326 audit(1756205960.435:32389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17300 comm="syz.3.4858" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 283.409421][T17330] team0: Device gtp1 is up. Set it down before adding it as a team port [ 283.426720][T17332] lo speed is unknown, defaulting to 1000 [ 283.433029][T17332] lo speed is unknown, defaulting to 1000 [ 283.576481][T17348] __nla_validate_parse: 33 callbacks suppressed [ 283.576495][T17348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4875'. [ 283.591905][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4875'. [ 283.645681][T17359] team0: Device gtp0 is up. Set it down before adding it as a team port [ 283.672165][T17361] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4881'. [ 283.691311][T17361] lo speed is unknown, defaulting to 1000 [ 283.697422][T17361] lo speed is unknown, defaulting to 1000 [ 283.862748][T17373] lo speed is unknown, defaulting to 1000 [ 283.869040][T17373] lo speed is unknown, defaulting to 1000 [ 284.005653][T17390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4892'. [ 284.021510][T17394] team0: Cannot enslave team device to itself [ 284.091485][T17399] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4893'. [ 284.100558][T17399] netlink: 212 bytes leftover after parsing attributes in process `syz.1.4893'. [ 284.106511][T17401] team0: Cannot enslave team device to itself [ 284.115774][T17401] net_ratelimit: 3 callbacks suppressed [ 284.115790][T17401] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 284.200356][T17407] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4895'. [ 284.209417][T17407] netlink: 212 bytes leftover after parsing attributes in process `syz.3.4895'. [ 284.253904][T17411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4899'. [ 284.291715][T17415] netlink: 'syz.4.4901': attribute type 4 has an invalid length. [ 284.299597][T17415] netlink: 17 bytes leftover after parsing attributes in process `syz.4.4901'. [ 284.309843][T17411] lo speed is unknown, defaulting to 1000 [ 284.315938][T17411] lo speed is unknown, defaulting to 1000 [ 284.423491][T17420] lo speed is unknown, defaulting to 1000 [ 284.429693][T17420] lo speed is unknown, defaulting to 1000 [ 284.670257][T17444] lo speed is unknown, defaulting to 1000 [ 284.697189][T17444] lo speed is unknown, defaulting to 1000 [ 285.276151][T17511] lo speed is unknown, defaulting to 1000 [ 285.282156][T17511] lo speed is unknown, defaulting to 1000 [ 285.351028][T17516] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.396689][T17516] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.444478][T17516] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.512003][T17516] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.601201][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.620001][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.628447][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.636863][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.716000][T17535] 9pnet_fd: Insufficient options for proto=fd [ 286.042695][T17542] team0: Device gtp0 is up. Set it down before adding it as a team port [ 286.284581][T17564] 9pnet_fd: Insufficient options for proto=fd [ 286.299985][T17564] 9pnet: Could not find request transport: fdo [ 286.406629][T17583] lo speed is unknown, defaulting to 1000 [ 286.412777][T17583] lo speed is unknown, defaulting to 1000 [ 286.521179][T17596] lo speed is unknown, defaulting to 1000 [ 286.527536][T17596] lo speed is unknown, defaulting to 1000 [ 286.565071][T17600] netlink: 'syz.4.4968': attribute type 4 has an invalid length. [ 286.726873][T17608] lo speed is unknown, defaulting to 1000 [ 286.733686][T17608] lo speed is unknown, defaulting to 1000 [ 287.047192][T17636] siw: device registration error -23 [ 287.097340][T17647] lo speed is unknown, defaulting to 1000 [ 287.103743][T17647] lo speed is unknown, defaulting to 1000 [ 287.145027][T17650] team0: Device gtp0 is up. Set it down before adding it as a team port [ 287.367113][T17675] lo speed is unknown, defaulting to 1000 [ 287.373546][T17675] lo speed is unknown, defaulting to 1000 [ 287.423434][T17682] lo speed is unknown, defaulting to 1000 [ 287.429593][T17682] lo speed is unknown, defaulting to 1000 [ 287.609647][T17710] lo speed is unknown, defaulting to 1000 [ 287.616261][T17710] lo speed is unknown, defaulting to 1000 [ 287.810172][T17723] lo speed is unknown, defaulting to 1000 [ 287.816421][T17723] lo speed is unknown, defaulting to 1000 [ 287.878498][ T29] kauditd_printk_skb: 662 callbacks suppressed [ 287.878514][ T29] audit: type=1326 audit(1756205965.475:33052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 287.909344][ T29] audit: type=1326 audit(1756205965.475:33053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 287.909445][T17736] team0: Cannot enslave team device to itself [ 287.933385][ T29] audit: type=1326 audit(1756205965.475:33054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 287.933411][ T29] audit: type=1326 audit(1756205965.475:33055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 287.939911][T17736] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 288.003335][ T29] audit: type=1326 audit(1756205965.475:33056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 288.027951][ T29] audit: type=1326 audit(1756205965.475:33057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 288.052104][ T29] audit: type=1326 audit(1756205965.475:33058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 288.076040][ T29] audit: type=1326 audit(1756205965.475:33059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 288.100579][ T29] audit: type=1326 audit(1756205965.475:33060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 288.124556][ T29] audit: type=1326 audit(1756205965.486:33061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17735 comm="syz.0.5021" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 288.345376][T17756] 0猉功D: entered promiscuous mode [ 288.350594][T17756] 0猉功D: left allmulticast mode [ 288.357567][T17756] __nla_validate_parse: 25 callbacks suppressed [ 288.357580][T17756] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5027'. [ 288.373903][T17756] 1猉功D: renamed from 30猉功D [ 288.403058][T17756] 1猉功D: left promiscuous mode [ 288.408433][T17756] 1猉功D: entered allmulticast mode [ 288.428108][T17765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17765 comm=syz.4.5027 [ 288.454838][T17756] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 288.512712][T17775] netlink: 'syz.1.5032': attribute type 4 has an invalid length. [ 288.520597][T17775] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5032'. [ 288.548571][T17778] lo speed is unknown, defaulting to 1000 [ 288.555064][T17778] lo speed is unknown, defaulting to 1000 [ 288.676438][T17789] team0: Device gtp0 is up. Set it down before adding it as a team port [ 288.762054][T17801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5039'. [ 288.771117][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5039'. [ 288.850444][T17806] lo speed is unknown, defaulting to 1000 [ 288.856763][T17806] lo speed is unknown, defaulting to 1000 [ 288.975966][T17829] netlink: 'syz.2.5049': attribute type 4 has an invalid length. [ 288.978804][T17827] lo speed is unknown, defaulting to 1000 [ 288.983855][T17829] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5049'. [ 288.990769][T17827] lo speed is unknown, defaulting to 1000 [ 289.091803][T17840] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5053'. [ 289.095918][T17838] lo speed is unknown, defaulting to 1000 [ 289.109952][T17838] lo speed is unknown, defaulting to 1000 [ 289.130304][T17836] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5051'. [ 289.142275][T17836] 1猉功D: entered promiscuous mode [ 289.147884][T17836] 1猉功D: left allmulticast mode [ 289.187262][T17836] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5051'. [ 289.198244][T17836] 0猉功D: renamed from 31猉功D [ 289.205200][T17836] 0猉功D: left promiscuous mode [ 289.210143][T17836] 0猉功D: entered allmulticast mode [ 289.243700][T17841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17841 comm=syz.4.5051 [ 289.260992][T17851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5056'. [ 289.269890][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5056'. [ 289.280143][T17836] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 289.656019][T17873] 1猉功D: entered promiscuous mode [ 289.661347][T17873] 1猉功D: left allmulticast mode [ 289.672385][T17873] 0猉功D: renamed from 31猉功D [ 289.678955][T17873] 0猉功D: left promiscuous mode [ 289.684145][T17873] 0猉功D: entered allmulticast mode [ 289.691494][T17873] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 289.709785][T17873] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17873 comm=syz.1.5060 [ 289.717698][T17875] lo speed is unknown, defaulting to 1000 [ 289.739267][T17875] lo speed is unknown, defaulting to 1000 [ 289.940298][T17898] team0: Cannot enslave team device to itself [ 289.946526][T17898] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 290.092375][T17908] lo speed is unknown, defaulting to 1000 [ 290.158055][T17908] lo speed is unknown, defaulting to 1000 [ 290.214337][T17911] lo speed is unknown, defaulting to 1000 [ 290.220756][T17911] lo speed is unknown, defaulting to 1000 [ 290.443226][T17934] lo speed is unknown, defaulting to 1000 [ 290.449922][T17934] lo speed is unknown, defaulting to 1000 [ 290.585857][T17947] team0: Cannot enslave team device to itself [ 290.592683][T17947] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 291.108407][T17988] lo speed is unknown, defaulting to 1000 [ 291.117937][T17988] lo speed is unknown, defaulting to 1000 [ 291.356535][T18019] netlink: 'syz.3.5108': attribute type 4 has an invalid length. [ 291.501610][T18040] lo speed is unknown, defaulting to 1000 [ 291.507734][T18040] lo speed is unknown, defaulting to 1000 [ 291.753011][T18062] netlink: 'syz.3.5123': attribute type 4 has an invalid length. [ 291.925756][T18068] lo speed is unknown, defaulting to 1000 [ 291.931773][T18068] lo speed is unknown, defaulting to 1000 [ 292.130901][T18075] team0: Cannot enslave team device to itself [ 292.137080][T18075] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 292.243285][T18090] lo speed is unknown, defaulting to 1000 [ 292.249492][T18090] lo speed is unknown, defaulting to 1000 [ 292.273883][T18093] netlink: 'syz.4.5135': attribute type 4 has an invalid length. [ 292.306093][T18095] team0: Device gtp0 is up. Set it down before adding it as a team port [ 292.417193][T18103] 1猉功D: entered promiscuous mode [ 292.422344][T18103] 1猉功D: left allmulticast mode [ 292.432824][T18103] 0猉功D: renamed from 31猉功D [ 292.450055][T18103] 0猉功D: left promiscuous mode [ 292.455007][T18103] 0猉功D: entered allmulticast mode [ 292.488171][T18103] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 292.495356][T18113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18113 comm=syz.0.5139 [ 292.626885][T18123] lo speed is unknown, defaulting to 1000 [ 292.633270][T18123] lo speed is unknown, defaulting to 1000 [ 292.680818][T18127] netlink: 'syz.4.5149': attribute type 4 has an invalid length. [ 292.700162][ T29] kauditd_printk_skb: 1559 callbacks suppressed [ 292.700180][ T29] audit: type=1326 audit(1756205970.525:34621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.730919][ T29] audit: type=1326 audit(1756205970.525:34622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.755394][ T29] audit: type=1326 audit(1756205970.525:34623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.779178][ T29] audit: type=1326 audit(1756205970.525:34624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.802973][ T29] audit: type=1326 audit(1756205970.536:34625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.827916][ T29] audit: type=1326 audit(1756205970.536:34626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.852187][ T29] audit: type=1326 audit(1756205970.536:34627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.876865][ T29] audit: type=1326 audit(1756205970.536:34628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.900477][ T29] audit: type=1326 audit(1756205970.536:34629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.924827][ T29] audit: type=1326 audit(1756205970.536:34630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18126 comm="syz.4.5149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 292.974519][T18139] 1猉功D: entered promiscuous mode [ 292.979776][T18139] 1猉功D: left allmulticast mode [ 293.004264][T18139] 0猉功D: renamed from 31猉功D [ 293.011678][T18139] 0猉功D: left promiscuous mode [ 293.016716][T18139] 0猉功D: entered allmulticast mode [ 293.034193][T18139] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 293.052934][T18152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18152 comm=syz.3.5155 [ 293.194106][T18157] lo speed is unknown, defaulting to 1000 [ 293.209947][T18157] lo speed is unknown, defaulting to 1000 [ 293.250583][T18171] team0: Device gtp0 is up. Set it down before adding it as a team port [ 293.276697][T18169] lo speed is unknown, defaulting to 1000 [ 293.290896][T18169] lo speed is unknown, defaulting to 1000 [ 293.315357][T18175] lo speed is unknown, defaulting to 1000 [ 293.330950][T18175] lo speed is unknown, defaulting to 1000 [ 293.506377][T18188] __nla_validate_parse: 30 callbacks suppressed [ 293.506394][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5168'. [ 293.527025][T18200] netlink: 'syz.1.5173': attribute type 4 has an invalid length. [ 293.535434][T18200] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5173'. [ 293.651751][T18210] lo speed is unknown, defaulting to 1000 [ 293.669073][T18210] lo speed is unknown, defaulting to 1000 [ 293.735058][T18220] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5179'. [ 293.761028][T18220] 0猉功D: entered promiscuous mode [ 293.766471][T18220] 0猉功D: left allmulticast mode [ 293.773719][T18220] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5179'. [ 293.783973][T18220] 1猉功D: renamed from 30猉功D [ 293.802638][T18220] 1猉功D: left promiscuous mode [ 293.807589][T18220] 1猉功D: entered allmulticast mode [ 293.815016][T18220] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 293.834061][T18220] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18220 comm=syz.1.5179 [ 293.853240][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5180'. [ 293.862778][T18222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5180'. [ 293.913794][T18231] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5184'. [ 293.936479][T18233] netlink: 'syz.2.5185': attribute type 4 has an invalid length. [ 293.944296][T18233] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5185'. [ 294.181899][T18254] lo speed is unknown, defaulting to 1000 [ 294.207730][T18254] lo speed is unknown, defaulting to 1000 [ 294.227369][T18264] team0: Device gtp0 is up. Set it down before adding it as a team port [ 294.403095][T18285] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11776 sclass=netlink_route_socket pid=18285 comm=syz.1.5206 [ 294.420254][T18286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5205'. [ 294.550374][T18308] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5214'. [ 294.571365][T18311] team0: Device gtp0 is up. Set it down before adding it as a team port [ 294.622842][T18313] lo speed is unknown, defaulting to 1000 [ 294.630131][T18313] lo speed is unknown, defaulting to 1000 [ 294.713881][T18327] netlink: 'syz.4.5220': attribute type 4 has an invalid length. [ 295.038123][T18352] team0: Device gtp0 is up. Set it down before adding it as a team port [ 295.123661][T18362] 0猉功D: entered promiscuous mode [ 295.128845][T18362] 0猉功D: left allmulticast mode [ 295.136099][T18362] 1猉功D: renamed from 30猉功D [ 295.154091][T18362] 1猉功D: left promiscuous mode [ 295.159333][T18362] 1猉功D: entered allmulticast mode [ 295.166916][T18362] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 295.186391][T18362] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18362 comm=syz.0.5232 [ 295.387868][T18384] rdma_op ffff888119fa6d80 conn xmit_rdma 0000000000000000 [ 295.397258][T18384] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 295.406671][T18384] FAT-fs (loop7): unable to read boot sector [ 295.443532][T18392] team0: Device gtp0 is up. Set it down before adding it as a team port [ 295.587298][T18414] 1猉功D: entered promiscuous mode [ 295.593004][T18414] 1猉功D: left allmulticast mode [ 295.600469][T18414] 0猉功D: renamed from 31猉功D [ 295.606920][T18414] 0猉功D: left promiscuous mode [ 295.611808][T18414] 0猉功D: entered allmulticast mode [ 295.618980][T18414] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 295.636160][T18414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18414 comm=syz.1.5252 [ 295.753133][T18420] lo speed is unknown, defaulting to 1000 [ 295.759338][T18420] lo speed is unknown, defaulting to 1000 [ 295.887450][T18430] lo speed is unknown, defaulting to 1000 [ 295.894775][T18430] lo speed is unknown, defaulting to 1000 [ 295.948435][T18444] team0: Cannot enslave team device to itself [ 295.955028][T18444] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 296.070118][T18459] lo speed is unknown, defaulting to 1000 [ 296.080252][T18459] lo speed is unknown, defaulting to 1000 [ 296.182420][T18467] lo speed is unknown, defaulting to 1000 [ 296.188573][T18467] lo speed is unknown, defaulting to 1000 [ 296.350459][T18474] vlan2: entered allmulticast mode [ 296.355819][T18474] bridge_slave_0: entered allmulticast mode [ 296.384397][T18478] netlink: 'syz.3.5276': attribute type 4 has an invalid length. [ 296.554432][T18497] lo speed is unknown, defaulting to 1000 [ 296.561048][T18497] lo speed is unknown, defaulting to 1000 [ 297.229342][T18526] lo speed is unknown, defaulting to 1000 [ 297.235713][T18526] lo speed is unknown, defaulting to 1000 [ 297.393264][T18531] lo speed is unknown, defaulting to 1000 [ 297.399803][T18531] lo speed is unknown, defaulting to 1000 [ 297.511014][ T29] kauditd_printk_skb: 949 callbacks suppressed [ 297.511027][ T29] audit: type=1326 audit(1756205975.596:35580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.1.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 297.541982][ T29] audit: type=1326 audit(1756205975.596:35581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18540 comm="syz.1.5300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 297.570227][ T29] audit: type=1326 audit(1756205975.596:35582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 297.596116][ T29] audit: type=1326 audit(1756205975.596:35583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 297.619943][ T29] audit: type=1326 audit(1756205975.596:35584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 297.644018][ T29] audit: type=1326 audit(1756205975.596:35585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 297.668261][ T29] audit: type=1326 audit(1756205975.596:35586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 297.692178][ T29] audit: type=1326 audit(1756205975.596:35587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 297.716355][ T29] audit: type=1326 audit(1756205975.596:35588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 297.741496][ T29] audit: type=1326 audit(1756205975.596:35589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18542 comm="syz.3.5301" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f0cce0febe9 code=0x7ffc0000 [ 298.728233][T18580] __nla_validate_parse: 13 callbacks suppressed [ 298.728246][T18580] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5312'. [ 299.043521][T18621] lo speed is unknown, defaulting to 1000 [ 299.049986][T18621] lo speed is unknown, defaulting to 1000 [ 299.123394][T18640] lo speed is unknown, defaulting to 1000 [ 299.130314][T18640] lo speed is unknown, defaulting to 1000 [ 299.277784][T18657] team0: Cannot enslave team device to itself [ 299.284110][T18657] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 299.371499][T18659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5338'. [ 299.380571][T18659] netlink: 212 bytes leftover after parsing attributes in process `syz.4.5338'. [ 299.610013][T18672] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5342'. [ 299.660120][T18674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5343'. [ 299.661872][T18675] lo speed is unknown, defaulting to 1000 [ 299.669978][T18674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5343'. [ 299.675263][T18675] lo speed is unknown, defaulting to 1000 [ 299.780732][T18691] lo speed is unknown, defaulting to 1000 [ 299.785312][T18693] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5349'. [ 299.788544][T18691] lo speed is unknown, defaulting to 1000 [ 299.801386][T18693] 1猉功D: entered promiscuous mode [ 299.806684][T18693] 1猉功D: left allmulticast mode [ 299.813495][T18693] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5349'. [ 299.825251][T18693] 0猉功D: renamed from 31猉功D [ 299.831549][T18693] 0猉功D: left promiscuous mode [ 299.836458][T18693] 0猉功D: entered allmulticast mode [ 299.842952][T18693] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 299.860997][T18693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18693 comm=syz.0.5349 [ 299.889856][T18696] netlink: 'syz.4.5350': attribute type 4 has an invalid length. [ 299.897662][T18696] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5350'. [ 300.134023][T18729] tipc: Enabling of bearer rejected, failed to enable media [ 300.149231][T18729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.775984][T18749] lo speed is unknown, defaulting to 1000 [ 300.782337][T18749] lo speed is unknown, defaulting to 1000 [ 301.116394][T18790] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5381'. [ 301.125840][T18790] 0猉功D: entered promiscuous mode [ 301.131070][T18790] 0猉功D: left allmulticast mode [ 301.137751][T18790] 1猉功D: renamed from 30猉功D [ 301.144002][T18790] 1猉功D: left promiscuous mode [ 301.149030][T18790] 1猉功D: entered allmulticast mode [ 301.155801][T18790] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 301.172719][T18790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18790 comm=syz.4.5381 [ 301.259518][T18807] lo speed is unknown, defaulting to 1000 [ 301.265682][T18807] lo speed is unknown, defaulting to 1000 [ 301.725325][T18837] lo speed is unknown, defaulting to 1000 [ 301.731669][T18837] lo speed is unknown, defaulting to 1000 [ 301.881203][T18852] netlink: 'syz.1.5405': attribute type 4 has an invalid length. [ 301.956531][T18858] netlink: 'syz.1.5407': attribute type 4 has an invalid length. [ 302.282103][ T29] kauditd_printk_skb: 1312 callbacks suppressed [ 302.282117][ T29] audit: type=1326 audit(1756205980.604:36902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.312398][ T29] audit: type=1326 audit(1756205980.604:36903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.336193][ T29] audit: type=1326 audit(1756205980.604:36904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.359934][ T29] audit: type=1326 audit(1756205980.604:36905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.383671][ T29] audit: type=1326 audit(1756205980.604:36906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.408076][ T29] audit: type=1326 audit(1756205980.604:36907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.432059][ T29] audit: type=1326 audit(1756205980.604:36908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.455845][ T29] audit: type=1326 audit(1756205980.604:36909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.479402][ T29] audit: type=1326 audit(1756205980.604:36910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.503037][ T29] audit: type=1326 audit(1756205980.604:36911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18901 comm="syz.1.5424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 302.677090][T18925] 1猉功D: entered promiscuous mode [ 302.682256][T18925] 1猉功D: left allmulticast mode [ 302.706989][T18925] 0猉功D: renamed from 31猉功D [ 302.715291][T18925] 0猉功D: left promiscuous mode [ 302.720336][T18925] 0猉功D: entered allmulticast mode [ 302.727398][T18925] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 302.747110][T18925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18925 comm=syz.4.5433 [ 303.705053][T18959] __nla_validate_parse: 11 callbacks suppressed [ 303.705069][T18959] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5444'. [ 303.897772][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5445'. [ 303.949917][T18974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5448'. [ 303.958957][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5448'. [ 304.143800][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a46b000: rx timeout, send abort [ 304.152049][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a46ac00: rx timeout, send abort [ 304.163155][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a46b000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 304.177453][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a46ac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 304.241676][T18980] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5450'. [ 304.251705][T18980] 0猉功D: entered promiscuous mode [ 304.256868][T18980] 0猉功D: left allmulticast mode [ 304.285213][T18980] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5450'. [ 304.302374][T18980] 1猉功D: renamed from 30猉功D [ 304.323481][T18980] 1猉功D: left promiscuous mode [ 304.328436][T18980] 1猉功D: entered allmulticast mode [ 304.335151][T18980] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 304.352132][T18980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18980 comm=syz.4.5450 [ 304.533055][T19013] lo speed is unknown, defaulting to 1000 [ 304.539461][T19013] lo speed is unknown, defaulting to 1000 [ 304.736947][T19022] lo speed is unknown, defaulting to 1000 [ 304.743344][T19022] lo speed is unknown, defaulting to 1000 [ 305.346139][T19041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5466'. [ 305.407745][T19045] lo speed is unknown, defaulting to 1000 [ 305.439755][T19045] lo speed is unknown, defaulting to 1000 [ 305.914149][T19067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5474'. [ 306.032715][ C1] vcan0: j1939_tp_rxtimer: 0xffff888101245c00: rx timeout, send abort [ 306.040987][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a55be00: rx timeout, send abort [ 306.049276][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888101245c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.063587][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a55be00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 306.200907][T19089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5479'. [ 306.748281][T19109] lo speed is unknown, defaulting to 1000 [ 306.766295][T19109] lo speed is unknown, defaulting to 1000 [ 306.785468][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5484'. [ 307.074652][ T29] kauditd_printk_skb: 490 callbacks suppressed [ 307.074666][ T29] audit: type=1326 audit(1756205985.633:37402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.104504][ T29] audit: type=1326 audit(1756205985.633:37403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.130210][ T29] audit: type=1326 audit(1756205985.633:37404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.153916][ T29] audit: type=1326 audit(1756205985.633:37405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.177781][ T29] audit: type=1326 audit(1756205985.633:37406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.192383][T19153] lo speed is unknown, defaulting to 1000 [ 307.201355][ T29] audit: type=1326 audit(1756205985.633:37407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.230688][ T29] audit: type=1326 audit(1756205985.633:37408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.231159][T19153] lo speed is unknown, defaulting to 1000 [ 307.254319][ T29] audit: type=1326 audit(1756205985.633:37409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.284293][ T29] audit: type=1326 audit(1756205985.633:37410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.308295][ T29] audit: type=1326 audit(1756205985.633:37411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19144 comm="syz.4.5497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 307.510751][T19176] lo speed is unknown, defaulting to 1000 [ 307.516976][T19176] lo speed is unknown, defaulting to 1000 [ 308.529025][T19211] netlink: 'syz.4.5517': attribute type 4 has an invalid length. [ 308.536856][T19211] __nla_validate_parse: 4 callbacks suppressed [ 308.536872][T19211] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5517'. [ 308.560393][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5516'. [ 308.569383][T19209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5516'. [ 309.128969][T19248] team0: Device gtp0 is up. Set it down before adding it as a team port [ 309.176457][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119371a00: rx timeout, send abort [ 309.184686][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119371c00: rx timeout, send abort [ 309.196125][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119371a00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 309.210426][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119371c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 309.294219][T19254] netlink: 'syz.3.5533': attribute type 4 has an invalid length. [ 309.302116][T19254] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5533'. [ 309.396612][T19262] lo speed is unknown, defaulting to 1000 [ 309.402835][T19262] lo speed is unknown, defaulting to 1000 [ 309.485655][T19272] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5540'. [ 309.506458][T19270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5539'. [ 309.515423][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5539'. [ 309.717816][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5547'. [ 309.723808][T19298] lo speed is unknown, defaulting to 1000 [ 309.733572][T19298] lo speed is unknown, defaulting to 1000 [ 310.041612][T19323] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5559'. [ 310.262461][T19327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5560'. [ 310.659191][T19355] lo speed is unknown, defaulting to 1000 [ 310.666084][T19355] lo speed is unknown, defaulting to 1000 [ 310.839748][T19364] lo speed is unknown, defaulting to 1000 [ 310.847972][T19364] lo speed is unknown, defaulting to 1000 [ 310.908714][T19378] 1猉功D: entered promiscuous mode [ 310.913978][T19378] 1猉功D: left allmulticast mode [ 310.920819][T19378] 0猉功D: renamed from 31猉功D [ 310.927617][T19378] 0猉功D: left promiscuous mode [ 310.932731][T19378] 0猉功D: entered allmulticast mode [ 310.939498][T19378] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 310.967823][T19378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19378 comm=syz.4.5575 [ 311.003448][T19387] lo speed is unknown, defaulting to 1000 [ 311.029376][T19387] lo speed is unknown, defaulting to 1000 [ 311.146044][T19400] lo speed is unknown, defaulting to 1000 [ 311.166736][T19400] lo speed is unknown, defaulting to 1000 [ 311.304728][T19413] lo speed is unknown, defaulting to 1000 [ 311.318399][T19413] lo speed is unknown, defaulting to 1000 [ 311.410191][T19436] team0: Device gtp1 is up. Set it down before adding it as a team port [ 311.496175][T19444] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 311.803612][T19498] siw: device registration error -23 [ 311.858012][ T29] kauditd_printk_skb: 650 callbacks suppressed [ 311.858027][ T29] audit: type=1326 audit(1756205990.652:38062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 311.887949][ T29] audit: type=1326 audit(1756205990.652:38063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 311.911693][ T29] audit: type=1326 audit(1756205990.652:38064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 311.935265][ T29] audit: type=1326 audit(1756205990.652:38065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 311.958891][ T29] audit: type=1326 audit(1756205990.652:38066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 311.982526][ T29] audit: type=1326 audit(1756205990.652:38067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 312.006109][ T29] audit: type=1326 audit(1756205990.652:38068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 312.030077][ T29] audit: type=1326 audit(1756205990.652:38069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 312.053609][ T29] audit: type=1326 audit(1756205990.652:38070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 312.077209][ T29] audit: type=1326 audit(1756205990.652:38071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19497 comm="syz.4.5616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6ce26ebe9 code=0x7ffc0000 [ 312.448556][T19538] netlink: 'syz.2.5628': attribute type 4 has an invalid length. [ 312.722494][T19577] 0猉功D: entered promiscuous mode [ 312.727687][T19577] 0猉功D: left allmulticast mode [ 312.735237][T19577] 1猉功D: renamed from 30猉功D [ 312.741668][T19577] 1猉功D: left promiscuous mode [ 312.746549][T19577] 1猉功D: entered allmulticast mode [ 312.753745][T19577] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 312.856089][T19577] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19577 comm=syz.3.5643 [ 313.240790][T19585] team0: Device gtp1 is up. Set it down before adding it as a team port [ 313.547929][T19595] __nla_validate_parse: 15 callbacks suppressed [ 313.547944][T19595] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5649'. [ 313.656548][T19601] lo speed is unknown, defaulting to 1000 [ 313.692262][T19601] lo speed is unknown, defaulting to 1000 [ 313.774444][T19613] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5656'. [ 313.796596][T19613] 1猉功D: entered promiscuous mode [ 313.801850][T19613] 1猉功D: left allmulticast mode [ 313.822093][T19613] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5656'. [ 313.839743][T19613] 0猉功D: renamed from 31猉功D [ 313.871167][T19613] 0猉功D: left promiscuous mode [ 313.876166][T19613] 0猉功D: entered allmulticast mode [ 313.897536][T19623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19623 comm=syz.3.5656 [ 313.921413][T19613] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 314.163576][T19641] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5665'. [ 314.178063][T19641] 0猉功D: entered promiscuous mode [ 314.183308][T19641] 0猉功D: left allmulticast mode [ 314.197045][T19641] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5665'. [ 314.211062][T19641] 1猉功D: renamed from 30猉功D [ 314.218560][T19641] 1猉功D: left promiscuous mode [ 314.223434][T19641] 1猉功D: entered allmulticast mode [ 314.231255][T19641] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 314.235256][T19649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5669'. [ 314.250113][T19647] team0: Device gtp0 is up. Set it down before adding it as a team port [ 314.257026][T19641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19641 comm=syz.4.5665 [ 314.402234][T19651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5670'. [ 314.411312][T19651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5670'. [ 314.602771][T19683] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5682'. [ 314.614024][T19683] 0猉功D: entered promiscuous mode [ 314.619282][T19683] 0猉功D: left allmulticast mode [ 314.626351][T19683] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5682'. [ 314.635806][T19683] 1猉功D: renamed from 30猉功D [ 314.642022][T19683] 1猉功D: left promiscuous mode [ 314.647095][T19683] 1猉功D: entered allmulticast mode [ 314.653366][T19683] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 314.670248][T19683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19683 comm=syz.0.5682 [ 315.021316][T19726] 1猉功D: entered promiscuous mode [ 315.026522][T19726] 1猉功D: left allmulticast mode [ 315.036513][T19726] 0猉功D: renamed from 31猉功D [ 315.042920][T19726] 0猉功D: left promiscuous mode [ 315.047938][T19726] 0猉功D: entered allmulticast mode [ 315.054874][T19726] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 315.072364][T19726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19726 comm=syz.0.5698 [ 315.432161][T19741] lo speed is unknown, defaulting to 1000 [ 315.457658][T19741] lo speed is unknown, defaulting to 1000 [ 315.585153][T19741] chnl_net:caif_netlink_parms(): no params data found [ 315.633161][T19775] siw: device registration error -23 [ 315.641712][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.648829][T19741] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.673256][T19741] bridge_slave_0: entered allmulticast mode [ 315.684198][T19741] bridge_slave_0: entered promiscuous mode [ 315.708335][T19741] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.715479][T19741] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.722977][T19741] bridge_slave_1: entered allmulticast mode [ 315.729550][T19741] bridge_slave_1: entered promiscuous mode [ 315.764312][T19741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.782326][T19782] team0: Device gtp0 is up. Set it down before adding it as a team port [ 315.795868][T19741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.817537][T19741] team0: Port device team_slave_0 added [ 315.824597][T19741] team0: Port device team_slave_1 added [ 315.842531][T19741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.849686][T19741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.875741][T19741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.889794][T19741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.896920][T19741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.923094][T19741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.953491][T19741] hsr_slave_0: entered promiscuous mode [ 315.959672][T19741] hsr_slave_1: entered promiscuous mode [ 316.026998][T19741] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.099070][T19741] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.112109][T19791] netlink: 'syz.4.5719': attribute type 4 has an invalid length. [ 316.155192][T19741] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.190462][T19741] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.208906][T19795] lo speed is unknown, defaulting to 1000 [ 316.214984][T19795] lo speed is unknown, defaulting to 1000 [ 316.265921][T19741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.275429][T19741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.285392][T19741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 316.294785][T19741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 316.314747][T19741] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.321995][T19741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.329401][T19741] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.336534][T19741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.363619][T19741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.380547][ T3486] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.388687][ T3486] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.421162][T19741] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.433314][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.440416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.465642][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.472819][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.489978][T19741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 316.561052][T19741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.640456][T19741] veth0_vlan: entered promiscuous mode [ 316.651852][T19839] team0: Device gtp1 is up. Set it down before adding it as a team port [ 316.664488][T19741] veth1_vlan: entered promiscuous mode [ 316.680841][T19741] veth0_macvtap: entered promiscuous mode [ 316.689023][T19741] veth1_macvtap: entered promiscuous mode [ 316.700098][T19741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.711314][T19741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 316.724790][ T177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.738652][ T177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.749401][ T177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.761697][ T177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.856730][T19854] 1猉功D: entered promiscuous mode [ 316.861891][T19854] 1猉功D: left allmulticast mode [ 316.869943][T19854] 0猉功D: renamed from 31猉功D [ 316.876814][T19854] 0猉功D: left promiscuous mode [ 316.881752][T19854] 0猉功D: entered allmulticast mode [ 316.888888][T19854] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 316.909504][T19854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19854 comm=syz.4.5736 [ 317.098815][T19869] team0: Device gtp0 is of different type [ 317.107278][T19867] lo speed is unknown, defaulting to 1000 [ 317.113895][T19867] lo speed is unknown, defaulting to 1000 [ 317.175186][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 317.175216][ T29] audit: type=1400 audit(1756205996.227:38429): avc: denied { ioctl } for pid=19872 comm="syz.4.5744" path="socket:[58806]" dev="sockfs" ino=58806 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 317.194975][T19877] syzkaller0: entered promiscuous mode [ 317.212101][T19877] syzkaller0: entered allmulticast mode [ 317.355920][T19892] syzkaller0: entered promiscuous mode [ 317.361542][T19892] syzkaller0: entered allmulticast mode [ 317.369139][T19892] FAULT_INJECTION: forcing a failure. [ 317.369139][T19892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.382300][T19892] CPU: 0 UID: 0 PID: 19892 Comm: syz.3.5752 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 317.382333][T19892] Tainted: [W]=WARN [ 317.382340][T19892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 317.382360][T19892] Call Trace: [ 317.382365][T19892] [ 317.382373][T19892] __dump_stack+0x1d/0x30 [ 317.382394][T19892] dump_stack_lvl+0xe8/0x140 [ 317.382448][T19892] dump_stack+0x15/0x1b [ 317.382464][T19892] should_fail_ex+0x265/0x280 [ 317.382484][T19892] should_fail+0xb/0x20 [ 317.382542][T19892] should_fail_usercopy+0x1a/0x20 [ 317.382560][T19892] _copy_to_iter+0x251/0xe70 [ 317.382585][T19892] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 317.382695][T19892] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 317.382723][T19892] __skb_datagram_iter+0xc6/0x690 [ 317.382745][T19892] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 317.382769][T19892] skb_copy_datagram_iter+0x3d/0x110 [ 317.382792][T19892] netlink_recvmsg+0x1a8/0x550 [ 317.382942][T19892] ? __pfx_netlink_recvmsg+0x10/0x10 [ 317.382963][T19892] sock_recvmsg+0x139/0x170 [ 317.383052][T19892] ____sys_recvmsg+0xf5/0x280 [ 317.383068][T19892] ___sys_recvmsg+0x11f/0x370 [ 317.383085][T19892] do_recvmmsg+0x1ef/0x540 [ 317.383113][T19892] ? fput+0x8f/0xc0 [ 317.383129][T19892] __x64_sys_recvmmsg+0xe5/0x170 [ 317.383161][T19892] x64_sys_call+0x27a6/0x2ff0 [ 317.383230][T19892] do_syscall_64+0xd2/0x200 [ 317.383244][T19892] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.383257][T19892] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 317.383352][T19892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.383364][T19892] RIP: 0033:0x7f610f8febe9 [ 317.383373][T19892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.383404][T19892] RSP: 002b:00007f610e35f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 317.383416][T19892] RAX: ffffffffffffffda RBX: 00007f610fb25fa0 RCX: 00007f610f8febe9 [ 317.383423][T19892] RDX: 0000000000000001 RSI: 0000200000005140 RDI: 0000000000000009 [ 317.383429][T19892] RBP: 00007f610e35f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.383436][T19892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.383443][T19892] R13: 00007f610fb26038 R14: 00007f610fb25fa0 R15: 00007ffe9ad9f678 [ 317.383453][T19892] [ 317.747255][ T29] audit: type=1326 audit(1756205996.836:38430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19900 comm="syz.2.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e5bebe9 code=0x7ffc0000 [ 317.771094][ T29] audit: type=1326 audit(1756205996.836:38431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19900 comm="syz.2.5757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e5bebe9 code=0x7ffc0000 [ 317.822587][ T29] audit: type=1326 audit(1756205996.878:38432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.0.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 317.846264][ T29] audit: type=1326 audit(1756205996.878:38433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.0.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 317.869984][ T29] audit: type=1326 audit(1756205996.878:38434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.0.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 317.893812][ T29] audit: type=1326 audit(1756205996.878:38435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.0.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 317.917510][ T29] audit: type=1326 audit(1756205996.878:38436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.0.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 317.941247][ T29] audit: type=1326 audit(1756205996.878:38437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.0.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 317.964866][ T29] audit: type=1326 audit(1756205996.878:38438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19906 comm="syz.0.5759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 317.995350][T19915] netlink: 'syz.2.5760': attribute type 4 has an invalid length. [ 318.217609][T19941] lo speed is unknown, defaulting to 1000 [ 318.224025][T19941] lo speed is unknown, defaulting to 1000 [ 318.237554][T19943] siw: device registration error -23 [ 318.337671][T19953] netlink: 'syz.2.5772': attribute type 4 has an invalid length. [ 318.345610][T19953] __nla_validate_parse: 12 callbacks suppressed [ 318.345625][T19953] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5772'. [ 318.511169][T19963] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5775'. [ 318.525030][T19963] gretap0: entered promiscuous mode [ 318.532778][T19963] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5775'. [ 318.541894][T19963] 0猉功D: renamed from gretap0 [ 318.548278][T19963] 0猉功D: left promiscuous mode [ 318.553189][T19963] 0猉功D: entered allmulticast mode [ 318.559630][T19963] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 318.576774][T19963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19963 comm=syz.3.5775 [ 318.710679][T19972] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5779'. [ 319.208444][T20004] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5789'. [ 319.239651][T20004] 0猉功D: entered promiscuous mode [ 319.244973][T20004] 0猉功D: left allmulticast mode [ 319.252746][T20004] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5789'. [ 319.262500][T20004] 1猉功D: renamed from 30猉功D [ 319.279631][T20004] 1猉功D: left promiscuous mode [ 319.284677][T20004] 1猉功D: entered allmulticast mode [ 319.303826][T20011] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20011 comm=syz.1.5789 [ 319.304658][T20004] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 319.653298][T20028] siw: device registration error -23 [ 320.118687][T20038] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5802'. [ 320.422479][T20048] FAULT_INJECTION: forcing a failure. [ 320.422479][T20048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.435905][T20048] CPU: 0 UID: 0 PID: 20048 Comm: syz.3.5806 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 320.435938][T20048] Tainted: [W]=WARN [ 320.435945][T20048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 320.435956][T20048] Call Trace: [ 320.435962][T20048] [ 320.435970][T20048] __dump_stack+0x1d/0x30 [ 320.436035][T20048] dump_stack_lvl+0xe8/0x140 [ 320.436053][T20048] dump_stack+0x15/0x1b [ 320.436069][T20048] should_fail_ex+0x265/0x280 [ 320.436089][T20048] should_fail+0xb/0x20 [ 320.436103][T20048] should_fail_usercopy+0x1a/0x20 [ 320.436196][T20048] strncpy_from_user+0x25/0x230 [ 320.436218][T20048] ? kmem_cache_alloc_noprof+0x186/0x310 [ 320.436240][T20048] ? getname_flags+0x80/0x3b0 [ 320.436263][T20048] getname_flags+0xae/0x3b0 [ 320.436340][T20048] do_sys_openat2+0x60/0x110 [ 320.436392][T20048] __x64_sys_openat+0xf2/0x120 [ 320.436417][T20048] x64_sys_call+0x2e9c/0x2ff0 [ 320.436434][T20048] do_syscall_64+0xd2/0x200 [ 320.436510][T20048] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 320.436549][T20048] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 320.436569][T20048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.436586][T20048] RIP: 0033:0x7f610f8fd550 [ 320.436599][T20048] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 320.436664][T20048] RSP: 002b:00007f610e35ef10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 320.436742][T20048] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f610f8fd550 [ 320.436753][T20048] RDX: 0000000000000002 RSI: 00007f610e35efa0 RDI: 00000000ffffff9c [ 320.436763][T20048] RBP: 00007f610e35efa0 R08: 0000000000000000 R09: 0000000000000000 [ 320.436774][T20048] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 320.436784][T20048] R13: 00007f610fb26038 R14: 00007f610fb25fa0 R15: 00007ffe9ad9f678 [ 320.436799][T20048] [ 320.676664][T20055] loop3: detected capacity change from 0 to 512 [ 320.687284][T20055] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5808: bg 0: block 131: padding at end of block bitmap is not set [ 320.702885][T20055] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 320.714325][T20055] EXT4-fs (loop3): 1 truncate cleaned up [ 320.720225][T20055] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.852868][T20071] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5811'. [ 320.872366][T20071] 0猉功D: entered promiscuous mode [ 320.877624][T20071] 0猉功D: left allmulticast mode [ 320.884974][T20073] netlink: 'syz.1.5812': attribute type 4 has an invalid length. [ 320.885392][T20071] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5811'. [ 320.892919][T20073] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5812'. [ 320.902441][T20071] 1猉功D: renamed from 30猉功D [ 320.919051][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.919303][T20071] 1猉功D: left promiscuous mode [ 320.932921][T20071] 1猉功D: entered allmulticast mode [ 320.933578][T20074] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20074 comm=syz.0.5811 [ 320.941413][T20071] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 321.287062][T20099] lo speed is unknown, defaulting to 1000 [ 321.293476][T20099] lo speed is unknown, defaulting to 1000 [ 321.474786][T20111] netlink: 'syz.4.5824': attribute type 4 has an invalid length. [ 321.900944][T20135] tipc: Started in network mode [ 321.905976][T20135] tipc: Node identity ac14140f, cluster identity 4711 [ 321.913856][T20135] tipc: New replicast peer: 255.255.255.255 [ 321.920291][T20135] tipc: Enabled bearer , priority 10 [ 321.944362][T20137] loop3: detected capacity change from 0 to 512 [ 321.953854][T20137] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5834: bg 0: block 131: padding at end of block bitmap is not set [ 321.968608][T20137] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 321.978982][T20137] EXT4-fs (loop3): 1 truncate cleaned up [ 321.985314][T20137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.032868][T20144] netlink: 'syz.0.5836': attribute type 4 has an invalid length. [ 322.043006][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 322.043018][ T29] audit: type=1326 audit(1756206001.351:38950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20143 comm="syz.0.5836" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 322.076114][ T29] audit: type=1326 audit(1756206001.361:38951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.100854][ T29] audit: type=1326 audit(1756206001.361:38952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.124703][ T29] audit: type=1326 audit(1756206001.361:38953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.149346][ T29] audit: type=1326 audit(1756206001.361:38954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.173053][ T29] audit: type=1326 audit(1756206001.361:38955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.196626][ T29] audit: type=1326 audit(1756206001.361:38956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.221627][ T29] audit: type=1326 audit(1756206001.361:38957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.246048][ T29] audit: type=1326 audit(1756206001.361:38958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.270494][ T29] audit: type=1326 audit(1756206001.361:38959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20136 comm="syz.3.5834" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f610f8febe9 code=0x7ffc0000 [ 322.326359][T20154] team0: Device gtp0 is up. Set it down before adding it as a team port [ 322.376910][T20156] 1猉功D: entered promiscuous mode [ 322.382708][T20156] 1猉功D: left allmulticast mode [ 322.390509][T20156] 0猉功D: renamed from 31猉功D [ 322.396990][T20156] 0猉功D: left promiscuous mode [ 322.401941][T20156] 0猉功D: entered allmulticast mode [ 322.409911][T20156] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 322.429082][T20156] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20156 comm=syz.1.5841 [ 322.542637][T20170] netlink: 'syz.0.5847': attribute type 4 has an invalid length. [ 322.624440][T20179] lo speed is unknown, defaulting to 1000 [ 322.630467][T20179] lo speed is unknown, defaulting to 1000 [ 322.838084][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.664184][ T6410] tipc: Node number set to 2886997007 [ 323.698883][T20206] netlink: 'syz.4.5860': attribute type 4 has an invalid length. [ 323.706872][T20206] __nla_validate_parse: 9 callbacks suppressed [ 323.706888][T20206] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5860'. [ 323.725288][T20204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5853'. [ 323.846710][T20212] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 323.855950][T20212] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 323.864591][T20212] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 323.909543][T20212] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 323.918230][T20212] netlink: '+}[@': attribute type 6 has an invalid length. [ 324.034585][T20219] lo speed is unknown, defaulting to 1000 [ 324.063255][T20219] lo speed is unknown, defaulting to 1000 [ 324.333504][T20254] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5877'. [ 324.518107][T20255] netlink: 'syz.0.5876': attribute type 13 has an invalid length. [ 324.526055][T20255] netlink: 'syz.0.5876': attribute type 17 has an invalid length. [ 324.536761][T20255] 1猉功D: left allmulticast mode [ 324.559928][T20255] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.585372][T20255] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 324.658174][T20264] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5880'. [ 324.673960][T20264] 0猉功D: entered promiscuous mode [ 324.679203][T20264] 0猉功D: left allmulticast mode [ 324.687485][T20264] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5880'. [ 324.698984][T20264] 1猉功D: renamed from 30猉功D [ 324.705832][T20264] 1猉功D: left promiscuous mode [ 324.710717][T20264] 1猉功D: entered allmulticast mode [ 324.717627][T20264] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 324.735222][T20264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20264 comm=syz.1.5880 [ 324.868650][T20271] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5881'. [ 324.880420][T20271] 1猉功D: entered promiscuous mode [ 324.886178][T20271] 1猉功D: left allmulticast mode [ 324.897447][T20275] pim6reg: entered allmulticast mode [ 324.905900][T20271] 0猉功D: renamed from 31猉功D [ 324.927451][T20271] 0猉功D: left promiscuous mode [ 324.932848][T20271] 0猉功D: entered allmulticast mode [ 324.938807][T20280] FAULT_INJECTION: forcing a failure. [ 324.938807][T20280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.939690][T20271] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 324.953038][T20280] CPU: 0 UID: 0 PID: 20280 Comm: syz.3.5885 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 324.953070][T20280] Tainted: [W]=WARN [ 324.953077][T20280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 324.953088][T20280] Call Trace: [ 324.953093][T20280] [ 324.953101][T20280] __dump_stack+0x1d/0x30 [ 324.953175][T20280] dump_stack_lvl+0xe8/0x140 [ 324.953198][T20280] dump_stack+0x15/0x1b [ 324.953214][T20280] should_fail_ex+0x265/0x280 [ 324.953233][T20280] should_fail+0xb/0x20 [ 324.953249][T20280] should_fail_usercopy+0x1a/0x20 [ 324.953288][T20280] _copy_from_user+0x1c/0xb0 [ 324.953314][T20280] ___sys_sendmsg+0xc1/0x1d0 [ 324.953426][T20280] __x64_sys_sendmsg+0xd4/0x160 [ 324.953492][T20280] x64_sys_call+0x191e/0x2ff0 [ 324.953512][T20280] do_syscall_64+0xd2/0x200 [ 324.953536][T20280] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 324.953569][T20280] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 324.953592][T20280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.953684][T20280] RIP: 0033:0x7f610f8febe9 [ 324.953699][T20280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.953714][T20280] RSP: 002b:00007f610e35f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 324.953733][T20280] RAX: ffffffffffffffda RBX: 00007f610fb25fa0 RCX: 00007f610f8febe9 [ 324.953752][T20280] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000005 [ 324.953763][T20280] RBP: 00007f610e35f090 R08: 0000000000000000 R09: 0000000000000000 [ 324.953775][T20280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.953786][T20280] R13: 00007f610fb26038 R14: 00007f610fb25fa0 R15: 00007ffe9ad9f678 [ 324.953804][T20280] [ 324.962469][T20288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20288 comm=syz.1.5881 [ 325.191468][T20296] openvswitch: netlink: Message has 6 unknown bytes. [ 325.210646][T20292] loop3: detected capacity change from 0 to 128 [ 325.263440][T20302] lo speed is unknown, defaulting to 1000 [ 325.269895][T20302] lo speed is unknown, defaulting to 1000 [ 325.286785][T20304] 1猉功D: entered promiscuous mode [ 325.302929][T20304] 0猉功D: renamed from 31猉功D [ 325.317349][T20304] 0猉功D: left promiscuous mode [ 325.322281][T20304] 0猉功D: entered allmulticast mode [ 325.339109][T20304] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 325.376139][T20309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20309 comm=syz.0.5892 [ 325.407642][T20315] lo speed is unknown, defaulting to 1000 [ 325.413835][T20315] lo speed is unknown, defaulting to 1000 [ 325.488554][T20322] team0: Device gtp1 is up. Set it down before adding it as a team port [ 325.685763][T20344] netlink: 'syz.2.5904': attribute type 4 has an invalid length. [ 325.715849][T20292] Process accounting resumed [ 325.720577][T20292] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 325.728477][T20292] FAT-fs (loop3): Filesystem has been set read-only [ 325.738195][ T6405] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 325.796605][T20363] FAULT_INJECTION: forcing a failure. [ 325.796605][T20363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.810810][T20363] CPU: 1 UID: 0 PID: 20363 Comm: syz.3.5911 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 325.810843][T20363] Tainted: [W]=WARN [ 325.810848][T20363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 325.810859][T20363] Call Trace: [ 325.810873][T20363] [ 325.810882][T20363] __dump_stack+0x1d/0x30 [ 325.810972][T20363] dump_stack_lvl+0xe8/0x140 [ 325.810991][T20363] dump_stack+0x15/0x1b [ 325.811008][T20363] should_fail_ex+0x265/0x280 [ 325.811030][T20363] should_fail+0xb/0x20 [ 325.811080][T20363] should_fail_usercopy+0x1a/0x20 [ 325.811131][T20363] _copy_from_user+0x1c/0xb0 [ 325.811201][T20363] ucma_set_option+0x54/0x7f0 [ 325.811225][T20363] ? _parse_integer+0x27/0x40 [ 325.811245][T20363] ? kstrtoull+0x111/0x140 [ 325.811274][T20363] ? kstrtouint+0x76/0xc0 [ 325.811293][T20363] ? kstrtouint_from_user+0x9f/0xf0 [ 325.811314][T20363] ? should_fail_ex+0xdb/0x280 [ 325.811331][T20363] ucma_write+0x1b3/0x250 [ 325.811391][T20363] ? __pfx_ucma_write+0x10/0x10 [ 325.811408][T20363] vfs_write+0x269/0x960 [ 325.811427][T20363] ? __rcu_read_unlock+0x4f/0x70 [ 325.811444][T20363] ? __fget_files+0x184/0x1c0 [ 325.811524][T20363] ksys_write+0xda/0x1a0 [ 325.811546][T20363] __x64_sys_write+0x40/0x50 [ 325.811566][T20363] x64_sys_call+0x27fe/0x2ff0 [ 325.811638][T20363] do_syscall_64+0xd2/0x200 [ 325.811723][T20363] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.811745][T20363] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 325.811769][T20363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.811856][T20363] RIP: 0033:0x7f610f8febe9 [ 325.811881][T20363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.811895][T20363] RSP: 002b:00007f610e35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.811915][T20363] RAX: ffffffffffffffda RBX: 00007f610fb25fa0 RCX: 00007f610f8febe9 [ 325.811927][T20363] RDX: 0000000000000020 RSI: 0000200000000380 RDI: 0000000000000003 [ 325.811939][T20363] RBP: 00007f610e35f090 R08: 0000000000000000 R09: 0000000000000000 [ 325.811951][T20363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.811963][T20363] R13: 00007f610fb26038 R14: 00007f610fb25fa0 R15: 00007ffe9ad9f678 [ 325.812028][T20363] [ 326.080246][T20369] loop3: detected capacity change from 0 to 512 [ 326.089203][T20369] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5914: bg 0: block 131: padding at end of block bitmap is not set [ 326.104370][T20369] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 326.113988][T20369] EXT4-fs (loop3): 1 truncate cleaned up [ 326.121877][T20369] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.122204][T20373] siw: device registration error -23 [ 326.195541][T20379] netlink: 'syz.2.5917': attribute type 4 has an invalid length. [ 326.248369][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.456004][T20422] netlink: 'syz.2.5928': attribute type 4 has an invalid length. [ 326.466140][T20396] loop3: detected capacity change from 0 to 128 [ 326.504228][T20424] team0: Device gtp0 is up. Set it down before adding it as a team port [ 326.680182][T20440] lo speed is unknown, defaulting to 1000 [ 326.688906][T20440] lo speed is unknown, defaulting to 1000 [ 326.718897][T20442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.797895][T20442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.825435][T20460] netlink: 'syz.1.5940': attribute type 4 has an invalid length. [ 326.852970][ T29] kauditd_printk_skb: 835 callbacks suppressed [ 326.852987][ T29] audit: type=1326 audit(1756206006.390:39795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 326.883631][ T29] audit: type=1326 audit(1756206006.390:39796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 326.908058][ T29] audit: type=1326 audit(1756206006.390:39797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 326.932415][ T29] audit: type=1326 audit(1756206006.390:39798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 326.956739][ T29] audit: type=1326 audit(1756206006.390:39799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 326.980846][ T29] audit: type=1326 audit(1756206006.390:39800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 327.004904][ T29] audit: type=1326 audit(1756206006.390:39801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 327.026949][T20396] Process accounting resumed [ 327.028676][ T29] audit: type=1326 audit(1756206006.390:39802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 327.033337][T20396] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 327.057176][ T29] audit: type=1326 audit(1756206006.390:39803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 327.064373][T20396] FAT-fs (loop3): Filesystem has been set read-only [ 327.074568][ T3404] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 327.088513][ T29] audit: type=1326 audit(1756206006.390:39804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20457 comm="syz.1.5940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f0fc1ebe9 code=0x7ffc0000 [ 327.176915][T20442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.224622][T20442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.283824][ T3330] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.295709][ T7008] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.306544][T20485] 0猉功D: entered promiscuous mode [ 327.311699][T20485] 0猉功D: left allmulticast mode [ 327.318802][T20485] 1猉功D: renamed from 30猉功D [ 327.326190][T20485] 1猉功D: left promiscuous mode [ 327.331135][T20485] 1猉功D: entered allmulticast mode [ 327.341545][T20485] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 327.364630][ T7008] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.366091][T20485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20485 comm=syz.3.5952 [ 327.373205][ T7008] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.786871][T20497] lo speed is unknown, defaulting to 1000 [ 327.794707][T20497] lo speed is unknown, defaulting to 1000 [ 327.876056][T20497] chnl_net:caif_netlink_parms(): no params data found [ 327.910083][ T7008] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.930183][T20518] team0: Device gtp0 is up. Set it down before adding it as a team port [ 327.948711][T20497] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.957451][T20497] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.964843][T20497] bridge_slave_0: entered allmulticast mode [ 327.971546][T20497] bridge_slave_0: entered promiscuous mode [ 327.980334][ T7008] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.991306][T20497] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.998412][T20497] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.005603][T20497] bridge_slave_1: entered allmulticast mode [ 328.013134][T20497] bridge_slave_1: entered promiscuous mode [ 328.032299][T20497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.043728][T20497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.068651][ T7008] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.081839][T20497] team0: Port device team_slave_0 added [ 328.089056][T20497] team0: Port device team_slave_1 added [ 328.109351][T20497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.116367][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.142376][T20497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.166533][ T7008] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.198392][T20497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.205385][T20497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.232956][T20497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.281320][T20539] netlink: 'syz.1.5966': attribute type 4 has an invalid length. [ 328.334529][T20497] hsr_slave_0: entered promiscuous mode [ 328.360568][T20497] hsr_slave_1: entered promiscuous mode [ 328.366711][T20497] debugfs: 'hsr0' already exists in 'hsr' [ 328.372544][T20497] Cannot create hsr debugfs directory [ 328.531311][T20550] __nla_validate_parse: 24 callbacks suppressed [ 328.531327][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5967'. [ 328.551429][ T7008] bond0 (unregistering): Released all slaves [ 328.558938][T20541] lo speed is unknown, defaulting to 1000 [ 328.568584][T20548] team0: Device gtp0 is up. Set it down before adding it as a team port [ 328.610960][T20541] lo speed is unknown, defaulting to 1000 [ 328.649508][ T7008] hsr_slave_0: left promiscuous mode [ 328.656675][ T7008] hsr_slave_1: left promiscuous mode [ 328.666767][ T7008] veth1_macvtap: left promiscuous mode [ 328.674593][ T7008] veth0_macvtap: left promiscuous mode [ 328.680257][ T7008] veth1_vlan: left promiscuous mode [ 328.686869][ T7008] veth0_vlan: left promiscuous mode [ 328.695057][T20561] loop3: detected capacity change from 0 to 2048 [ 328.726207][T20561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.760609][T20559] tipc: Started in network mode [ 328.765634][T20559] tipc: Node identity ac14140f, cluster identity 4711 [ 328.772663][T20559] tipc: New replicast peer: 255.255.255.255 [ 328.778705][T20559] tipc: Enabled bearer , priority 10 [ 328.904688][T20572] netlink: 'syz.2.5974': attribute type 1 has an invalid length. [ 328.918950][T20572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 328.919444][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.001817][T20575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5976'. [ 329.010758][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5976'. [ 329.040971][T20577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5975'. [ 329.049961][T20577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5975'. [ 329.107365][T20586] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5979'. [ 329.144914][T20590] FAULT_INJECTION: forcing a failure. [ 329.144914][T20590] name failslab, interval 1, probability 0, space 0, times 0 [ 329.157627][T20590] CPU: 0 UID: 0 PID: 20590 Comm: syz.3.5982 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 329.157657][T20590] Tainted: [W]=WARN [ 329.157662][T20590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.157725][T20590] Call Trace: [ 329.157731][T20590] [ 329.157781][T20590] __dump_stack+0x1d/0x30 [ 329.157800][T20590] dump_stack_lvl+0xe8/0x140 [ 329.157816][T20590] dump_stack+0x15/0x1b [ 329.157830][T20590] should_fail_ex+0x265/0x280 [ 329.157850][T20590] ? audit_log_d_path+0x8d/0x150 [ 329.157937][T20590] should_failslab+0x8c/0xb0 [ 329.157962][T20590] __kmalloc_cache_noprof+0x4c/0x320 [ 329.157985][T20590] audit_log_d_path+0x8d/0x150 [ 329.158007][T20590] audit_log_d_path_exe+0x42/0x70 [ 329.158075][T20590] audit_log_task+0x1e9/0x250 [ 329.158098][T20590] audit_seccomp+0x61/0x100 [ 329.158121][T20590] ? __seccomp_filter+0x68c/0x10d0 [ 329.158150][T20590] __seccomp_filter+0x69d/0x10d0 [ 329.158184][T20590] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 329.158206][T20590] ? vfs_write+0x7e8/0x960 [ 329.158222][T20590] ? __rcu_read_unlock+0x4f/0x70 [ 329.158239][T20590] ? __fget_files+0x184/0x1c0 [ 329.158263][T20590] __secure_computing+0x82/0x150 [ 329.158320][T20590] syscall_trace_enter+0xcf/0x1e0 [ 329.158340][T20590] do_syscall_64+0xac/0x200 [ 329.158408][T20590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.158449][T20590] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 329.158471][T20590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.158514][T20590] RIP: 0033:0x7f610f8febe9 [ 329.158529][T20590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.158543][T20590] RSP: 002b:00007f610e35f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000144 [ 329.158559][T20590] RAX: ffffffffffffffda RBX: 00007f610fb25fa0 RCX: 00007f610f8febe9 [ 329.158572][T20590] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000010 [ 329.158584][T20590] RBP: 00007f610e35f090 R08: 0000000000000000 R09: 0000000000000000 [ 329.158675][T20590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.158685][T20590] R13: 00007f610fb26038 R14: 00007f610fb25fa0 R15: 00007ffe9ad9f678 [ 329.158700][T20590] [ 329.435352][T20601] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5986'. [ 329.444043][T20497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 329.454143][T20601] 1猉功D: entered promiscuous mode [ 329.459442][T20601] 1猉功D: left allmulticast mode [ 329.467757][T20497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 329.468093][T20601] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5986'. [ 329.485882][T20497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 329.494458][T20601] 0猉功D: renamed from 31猉功D [ 329.500703][T20601] 0猉功D: left promiscuous mode [ 329.505610][T20601] 0猉功D: entered allmulticast mode [ 329.513032][T20601] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 329.532002][T20497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.533620][T20601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20601 comm=syz.3.5986 [ 329.681184][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5989'. [ 329.690235][T20615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5989'. [ 329.798061][ T3463] tipc: Node number set to 2886997007 [ 329.986988][T20636] loop3: detected capacity change from 0 to 1024 [ 329.994873][T20636] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 330.059446][T20636] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 330.067957][T20636] EXT4-fs (loop3): orphan cleanup on readonly fs [ 330.074994][T20636] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 330.089724][T20636] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 330.099641][T20636] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.5992: Freeing blocks not in datazone - block = 0, count = 4096 [ 330.115812][T20636] EXT4-fs (loop3): 1 orphan inode deleted [ 330.122074][T20636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 330.138306][T20636] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.5992: iget: bad extended attribute block 6 [ 330.456433][ T7008] bond0 (unregistering): Released all slaves [ 330.464647][ T7008] bond1 (unregistering): Released all slaves [ 330.533539][T20497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.543024][ T7008] hsr_slave_0: left promiscuous mode [ 330.548667][ T7008] hsr_slave_1: left promiscuous mode [ 330.555266][ T7008] veth1_macvtap: left promiscuous mode [ 330.560900][ T7008] veth0_macvtap: left promiscuous mode [ 330.566409][ T7008] veth1_vlan: left promiscuous mode [ 330.571722][ T7008] veth0_vlan: left promiscuous mode [ 330.644880][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.675934][T20650] loop3: detected capacity change from 0 to 512 [ 330.700957][T20650] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.5999: bg 0: block 16: invalid block bitmap [ 330.714510][T20650] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 330.724570][T20650] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.5999: attempt to clear invalid blocks 1669132790 len 1 [ 330.727807][T20497] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.745584][T20650] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5999: invalid indirect mapped block 4294967295 (level 1) [ 330.764292][T20650] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.5999: invalid indirect mapped block 4294967295 (level 2) [ 330.775247][ T3463] lo speed is unknown, defaulting to 1000 [ 330.779790][T20650] EXT4-fs (loop3): 1 truncate cleaned up [ 330.784211][ T3463] infiniband syz2: ib_query_port failed (-19) [ 330.791507][T20650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.824766][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.839246][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.846349][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.860832][T20657] 0猉功D: entered promiscuous mode [ 330.866113][T20657] 0猉功D: left allmulticast mode [ 330.875771][T20659] netlink: 'syz.3.6002': attribute type 3 has an invalid length. [ 330.883947][ T3330] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.891058][ T3330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.927218][T20657] 1猉功D: renamed from 30猉功D [ 330.935146][T20657] 1猉功D: left promiscuous mode [ 330.940050][T20657] 1猉功D: entered allmulticast mode [ 330.947484][T20657] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 330.968029][T20497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.975641][T20657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20657 comm=syz.0.6001 [ 330.978588][T20497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.081455][T20497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.260340][T20497] veth0_vlan: entered promiscuous mode [ 331.283110][T20497] veth1_vlan: entered promiscuous mode [ 331.313275][T20497] veth0_macvtap: entered promiscuous mode [ 331.333838][T20497] veth1_macvtap: entered promiscuous mode [ 331.353800][T20497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.370455][T20497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.400216][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.409497][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.418593][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.431754][T20698] loop3: detected capacity change from 0 to 1024 [ 331.446982][T20698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.474949][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.483955][T20698] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 331.500324][T20698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.603539][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.616921][ T29] kauditd_printk_skb: 553 callbacks suppressed [ 331.616936][ T29] audit: type=1326 audit(1756206011.398:40357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20710 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0c8aaebe9 code=0x7ffc0000 [ 331.646893][ T29] audit: type=1326 audit(1756206011.398:40358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20710 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c8aaebe9 code=0x7ffc0000 [ 331.670889][ T29] audit: type=1326 audit(1756206011.398:40359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20710 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0c8aaebe9 code=0x7ffc0000 [ 331.694838][ T29] audit: type=1326 audit(1756206011.398:40360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20710 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c8aaebe9 code=0x7ffc0000 [ 331.718408][ T29] audit: type=1326 audit(1756206011.398:40361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20710 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc0c8aaebe9 code=0x7ffc0000 [ 331.820976][ T29] audit: type=1326 audit(1756206011.587:40362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20710 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c8aaebe9 code=0x7ffc0000 [ 331.844836][ T29] audit: type=1326 audit(1756206011.587:40364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20710 comm="syz.4.6012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc0c8aaebe9 code=0x7ffc0000 [ 331.868501][ T29] audit: type=1400 audit(1756206011.587:40363): avc: denied { watch watch_reads } for pid=20717 comm="syz.3.6013" path="/51/file0" dev="tmpfs" ino=297 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 331.952112][T20731] gretap0: entered promiscuous mode [ 331.960606][T20731] 0猉功D: renamed from gretap0 [ 331.974193][T20731] 0猉功D: left promiscuous mode [ 331.979167][T20731] 0猉功D: entered allmulticast mode [ 331.986527][ T29] audit: type=1400 audit(1756206011.776:40365): avc: denied { read } for pid=20729 comm="syz.2.6018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.999241][T20731] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 332.032777][T20715] lo speed is unknown, defaulting to 1000 [ 332.046183][T20731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20731 comm=syz.4.6017 [ 332.089037][T20720] lo speed is unknown, defaulting to 1000 [ 332.116182][ T3330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.221096][ T29] audit: type=1326 audit(1756206012.007:40366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20740 comm="syz.0.6020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4aa7caebe9 code=0x7ffc0000 [ 332.398285][ T3330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.426338][T20715] chnl_net:caif_netlink_parms(): no params data found [ 332.446448][ T3330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.498240][T20715] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.505445][T20715] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.512789][T20715] bridge_slave_0: entered allmulticast mode [ 332.519147][T20715] bridge_slave_0: entered promiscuous mode [ 332.526109][T20715] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.533428][T20715] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.540843][T20715] bridge_slave_1: entered allmulticast mode [ 332.545413][T20763] loop4: detected capacity change from 0 to 512 [ 332.547351][T20715] bridge_slave_1: entered promiscuous mode [ 332.570866][ T3330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.583222][T20763] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6023: bg 0: block 131: padding at end of block bitmap is not set [ 332.605514][T20763] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 332.616794][T20715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.627041][T20763] EXT4-fs (loop4): 1 truncate cleaned up [ 332.628547][T20715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.634259][T20763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.114079][ T3330] bond0 (unregistering): Released all slaves [ 333.122789][ T3330] bond1 (unregistering): Released all slaves [ 333.144525][T20715] team0: Port device team_slave_0 added [ 333.151951][T20715] team0: Port device team_slave_1 added [ 333.175484][ T3330] tipc: Disabling bearer [ 333.180875][ T3330] tipc: Left network mode [ 333.185907][T20715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.192889][T20715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.218836][T20715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.234817][T20715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.241856][T20715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.267809][T20715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.297169][T20497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.312557][T20715] hsr_slave_0: entered promiscuous mode [ 333.321130][T20783] __nla_validate_parse: 14 callbacks suppressed [ 333.321145][T20783] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6029'. [ 333.327517][T20715] hsr_slave_1: entered promiscuous mode [ 333.327926][T20715] debugfs: 'hsr0' already exists in 'hsr' [ 333.347955][T20715] Cannot create hsr debugfs directory [ 333.358134][ T3330] hsr_slave_0: left promiscuous mode [ 333.364011][ T3330] hsr_slave_1: left promiscuous mode [ 333.369949][T20785] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6030'. [ 333.380464][ T3330] veth1_macvtap: left promiscuous mode [ 333.386003][ T3330] veth0_macvtap: left promiscuous mode [ 333.392056][ T3330] veth1_vlan: left promiscuous mode [ 333.397301][ T3330] veth0_vlan: left promiscuous mode [ 333.489701][T20791] openvswitch: netlink: Message has 6 unknown bytes. [ 333.568500][T20797] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6033'. [ 333.578622][T20797] 0猉功D: entered promiscuous mode [ 333.583924][T20797] 0猉功D: left allmulticast mode [ 333.607082][T20797] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6033'. [ 333.624181][T20797] 1猉功D: renamed from 30猉功D [ 333.630881][T20799] loop3: detected capacity change from 0 to 256 [ 333.639749][T20797] 1猉功D: left promiscuous mode [ 333.644644][T20797] 1猉功D: entered allmulticast mode [ 333.651806][T20797] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 333.673565][T20797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20797 comm=syz.4.6033 [ 333.743848][T20803] loop3: detected capacity change from 0 to 512 [ 333.754551][T20803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6035: bg 0: block 131: padding at end of block bitmap is not set [ 333.771083][T20803] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 333.785242][T20803] EXT4-fs (loop3): 1 truncate cleaned up [ 333.791490][T20803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.902407][T20815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6039'. [ 333.997169][T20715] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 334.018753][T20819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6040'. [ 334.019921][T20715] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 334.041563][T20819] hsr_slave_0: left promiscuous mode [ 334.047398][T20819] hsr_slave_1: left promiscuous mode [ 334.071518][T20715] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 334.082327][T20715] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 334.146615][T20837] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6045'. [ 334.155836][T20715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.168532][T20715] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.177934][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.185057][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.201770][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.208873][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.236081][T20841] team0: entered allmulticast mode [ 334.278151][T20715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.394956][T20715] veth0_vlan: entered promiscuous mode [ 334.403288][T20715] veth1_vlan: entered promiscuous mode [ 334.424625][T20715] veth0_macvtap: entered promiscuous mode [ 334.438058][T20715] veth1_macvtap: entered promiscuous mode [ 334.451323][T20715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 334.463501][T20715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 334.478391][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.500959][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.511270][T19741] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.530396][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.539859][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.640491][T20864] loop3: detected capacity change from 0 to 8192 [ 334.650810][T20866] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6050'. [ 334.666471][T20866] gretap0: entered promiscuous mode [ 334.673517][T20866] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6050'. [ 334.691012][T20866] 0猉功D: renamed from gretap0 [ 334.699880][T20866] 0猉功D: left promiscuous mode [ 334.704904][T20866] 0猉功D: entered allmulticast mode [ 334.711424][T20866] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 334.742612][T20866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20866 comm=syz.1.6050 [ 334.745510][T20869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6051'. [ 335.049471][T20891] dummy0: entered allmulticast mode [ 335.055353][T20891] dummy0: left allmulticast mode [ 335.060552][T20891] FAULT_INJECTION: forcing a failure. [ 335.060552][T20891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.073615][T20891] CPU: 1 UID: 0 PID: 20891 Comm: syz.1.6061 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 335.073680][T20891] Tainted: [W]=WARN [ 335.073686][T20891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.073697][T20891] Call Trace: [ 335.073703][T20891] [ 335.073709][T20891] __dump_stack+0x1d/0x30 [ 335.073730][T20891] dump_stack_lvl+0xe8/0x140 [ 335.073813][T20891] dump_stack+0x15/0x1b [ 335.073857][T20891] should_fail_ex+0x265/0x280 [ 335.073876][T20891] should_fail+0xb/0x20 [ 335.073951][T20891] should_fail_usercopy+0x1a/0x20 [ 335.073971][T20891] _copy_to_user+0x20/0xa0 [ 335.074055][T20891] simple_read_from_buffer+0xb5/0x130 [ 335.074078][T20891] proc_fail_nth_read+0x10e/0x150 [ 335.074111][T20891] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 335.074134][T20891] vfs_read+0x1a8/0x770 [ 335.074151][T20891] ? __rcu_read_unlock+0x4f/0x70 [ 335.074168][T20891] ? __fget_files+0x184/0x1c0 [ 335.074237][T20891] ksys_read+0xda/0x1a0 [ 335.074256][T20891] __x64_sys_read+0x40/0x50 [ 335.074277][T20891] x64_sys_call+0x27bc/0x2ff0 [ 335.074301][T20891] do_syscall_64+0xd2/0x200 [ 335.074361][T20891] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.074380][T20891] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 335.074405][T20891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.074426][T20891] RIP: 0033:0x7f704e73d5fc [ 335.074441][T20891] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 335.074538][T20891] RSP: 002b:00007f704d1a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 335.074556][T20891] RAX: ffffffffffffffda RBX: 00007f704e965fa0 RCX: 00007f704e73d5fc [ 335.074569][T20891] RDX: 000000000000000f RSI: 00007f704d1a70a0 RDI: 0000000000000008 [ 335.074660][T20891] RBP: 00007f704d1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 335.074670][T20891] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 335.074680][T20891] R13: 00007f704e966038 R14: 00007f704e965fa0 R15: 00007ffeb0dc4938 [ 335.074696][T20891] [ 335.298294][T20895] loop3: detected capacity change from 0 to 1024 [ 335.676557][T20925] 0猉功D: entered promiscuous mode [ 335.681724][T20925] 0猉功D: left allmulticast mode [ 335.705238][T20925] 1猉功D: renamed from 30猉功D [ 335.718916][T20925] 1猉功D: left promiscuous mode [ 335.723843][T20925] 1猉功D: entered allmulticast mode [ 335.734447][T20925] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 335.775185][T20925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20925 comm=syz.1.6070 [ 336.124900][T20953] : renamed from vlan0 (while UP) [ 336.211475][T20959] FAULT_INJECTION: forcing a failure. [ 336.211475][T20959] name failslab, interval 1, probability 0, space 0, times 0 [ 336.224213][T20959] CPU: 0 UID: 0 PID: 20959 Comm: syz.3.6079 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 336.224257][T20959] Tainted: [W]=WARN [ 336.224264][T20959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.224322][T20959] Call Trace: [ 336.224330][T20959] [ 336.224338][T20959] __dump_stack+0x1d/0x30 [ 336.224359][T20959] dump_stack_lvl+0xe8/0x140 [ 336.224438][T20959] dump_stack+0x15/0x1b [ 336.224455][T20959] should_fail_ex+0x265/0x280 [ 336.224477][T20959] should_failslab+0x8c/0xb0 [ 336.224498][T20959] kmem_cache_alloc_noprof+0x50/0x310 [ 336.224573][T20959] ? skb_clone+0x151/0x1f0 [ 336.224593][T20959] skb_clone+0x151/0x1f0 [ 336.224615][T20959] __netlink_deliver_tap+0x2c9/0x500 [ 336.224663][T20959] netlink_unicast+0x66b/0x690 [ 336.224691][T20959] netlink_sendmsg+0x58b/0x6b0 [ 336.224712][T20959] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.224732][T20959] __sock_sendmsg+0x142/0x180 [ 336.224795][T20959] ____sys_sendmsg+0x31e/0x4e0 [ 336.224853][T20959] ___sys_sendmsg+0x17b/0x1d0 [ 336.224885][T20959] __x64_sys_sendmsg+0xd4/0x160 [ 336.224911][T20959] x64_sys_call+0x191e/0x2ff0 [ 336.224931][T20959] do_syscall_64+0xd2/0x200 [ 336.224955][T20959] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 336.225011][T20959] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 336.225032][T20959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.225054][T20959] RIP: 0033:0x7f610f8febe9 [ 336.225067][T20959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.225084][T20959] RSP: 002b:00007f610e35f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.225133][T20959] RAX: ffffffffffffffda RBX: 00007f610fb25fa0 RCX: 00007f610f8febe9 [ 336.225146][T20959] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 336.225157][T20959] RBP: 00007f610e35f090 R08: 0000000000000000 R09: 0000000000000000 [ 336.225197][T20959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.225210][T20959] R13: 00007f610fb26038 R14: 00007f610fb25fa0 R15: 00007ffe9ad9f678 [ 336.225229][T20959] [ 336.439135][T20939] lo speed is unknown, defaulting to 1000 [ 336.445655][T20939] lo speed is unknown, defaulting to 1000 [ 336.452466][ T29] kauditd_printk_skb: 793 callbacks suppressed [ 336.452478][ T29] audit: type=1326 audit(1756206016.480:41160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e5b5ba7 code=0x7ffc0000 [ 336.469935][T20939] lo speed is unknown, defaulting to 1000 [ 336.498910][ T29] audit: type=1326 audit(1756206016.480:41161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e55ade9 code=0x7ffc0000 [ 336.522524][ T29] audit: type=1326 audit(1756206016.480:41162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e5bebe9 code=0x7ffc0000 [ 336.546237][ T29] audit: type=1326 audit(1756206016.490:41163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e5b5ba7 code=0x7ffc0000 [ 336.569772][ T29] audit: type=1326 audit(1756206016.490:41164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e55ade9 code=0x7ffc0000 [ 336.593347][ T29] audit: type=1326 audit(1756206016.490:41165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e5bebe9 code=0x7ffc0000 [ 336.616983][ T29] audit: type=1326 audit(1756206016.511:41166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e5b5ba7 code=0x7ffc0000 [ 336.640773][ T29] audit: type=1326 audit(1756206016.511:41167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d2e55ade9 code=0x7ffc0000 [ 336.664404][ T29] audit: type=1326 audit(1756206016.511:41168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d2e5bebe9 code=0x7ffc0000 [ 336.703329][T20939] infiniband sz1: set active [ 336.708094][T20939] infiniband sz1: added lo [ 336.712577][ T29] audit: type=1326 audit(1756206016.532:41169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20944 comm="syz.2.6076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d2e5b5ba7 code=0x7ffc0000 [ 336.712680][ T6405] lo speed is unknown, defaulting to 1000 [ 336.759465][T20939] RDS/IB: sz1: added [ 336.784778][T20939] smc: adding ib device sz1 with port count 1 [ 336.792354][T20939] smc: ib device sz1 port 1 has pnetid [ 336.798366][ T6405] lo speed is unknown, defaulting to 1000 [ 336.804622][T20939] lo speed is unknown, defaulting to 1000 [ 336.836034][T20980] loop4: detected capacity change from 0 to 512 [ 336.843597][T20980] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 336.852599][T20939] lo speed is unknown, defaulting to 1000 [ 336.852720][T20980] EXT4-fs (loop4): invalid journal inode [ 336.870235][T20980] EXT4-fs (loop4): can't get journal size [ 336.902037][T20939] lo speed is unknown, defaulting to 1000 [ 336.913079][T20980] EXT4-fs (loop4): 1 truncate cleaned up [ 336.932544][T20980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.979567][T20939] lo speed is unknown, defaulting to 1000 [ 337.014192][T20994] 0猉功D: entered promiscuous mode [ 337.019619][T20994] 0猉功D: left allmulticast mode [ 337.027523][T20994] 1猉功D: renamed from 30猉功D [ 337.033820][T20992] 9pnet_fd: Insufficient options for proto=fd [ 337.041421][T20994] 1猉功D: left promiscuous mode [ 337.046450][T20994] 1猉功D: entered allmulticast mode [ 337.057179][T20994] A link change request failed with some changes committed already. Interface 31猉功D may have been left with an inconsistent configuration, please check. [ 337.074038][T20994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20994 comm=syz.3.6088 [ 337.074464][T20939] lo speed is unknown, defaulting to 1000 [ 337.144893][T20998] loop1: detected capacity change from 0 to 512 [ 337.161018][T20998] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6089: bg 0: block 131: padding at end of block bitmap is not set [ 337.180317][T20998] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 337.201265][T20497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.229812][T20998] EXT4-fs (loop1): 1 truncate cleaned up [ 337.252096][T20998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.282844][T21006] FAULT_INJECTION: forcing a failure. [ 337.282844][T21006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.296265][T21006] CPU: 0 UID: 0 PID: 21006 Comm: syz.4.6090 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 337.296296][T21006] Tainted: [W]=WARN [ 337.296301][T21006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 337.296311][T21006] Call Trace: [ 337.296318][T21006] [ 337.296358][T21006] __dump_stack+0x1d/0x30 [ 337.296379][T21006] dump_stack_lvl+0xe8/0x140 [ 337.296467][T21006] dump_stack+0x15/0x1b [ 337.296483][T21006] should_fail_ex+0x265/0x280 [ 337.296505][T21006] should_fail+0xb/0x20 [ 337.296583][T21006] should_fail_usercopy+0x1a/0x20 [ 337.296605][T21006] _copy_from_user+0x1c/0xb0 [ 337.296626][T21006] get_timespec64+0x4c/0x100 [ 337.296648][T21006] __x64_sys_utimensat+0xd7/0x170 [ 337.296713][T21006] ? ksys_write+0x192/0x1a0 [ 337.296738][T21006] x64_sys_call+0x2fba/0x2ff0 [ 337.296756][T21006] do_syscall_64+0xd2/0x200 [ 337.296777][T21006] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 337.296854][T21006] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 337.296877][T21006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.296992][T21006] RIP: 0033:0x7fc0c8aaebe9 [ 337.297031][T21006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.297048][T21006] RSP: 002b:00007fc0c7517038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 337.297073][T21006] RAX: ffffffffffffffda RBX: 00007fc0c8cd5fa0 RCX: 00007fc0c8aaebe9 [ 337.297084][T21006] RDX: 0000200000000680 RSI: 0000200000000640 RDI: ffffffffffffffff [ 337.297094][T21006] RBP: 00007fc0c7517090 R08: 0000000000000000 R09: 0000000000000000 [ 337.297120][T21006] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 337.297130][T21006] R13: 00007fc0c8cd6038 R14: 00007fc0c8cd5fa0 R15: 00007ffcf2b2be08 [ 337.297150][T21006] [ 337.682184][T21025] loop3: detected capacity change from 0 to 128 [ 337.792840][T21037] loop4: detected capacity change from 0 to 512 [ 337.804675][T21037] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6104: bg 0: block 131: padding at end of block bitmap is not set [ 337.804801][T21038] 1猉功D: entered promiscuous mode [ 337.824376][T21038] 1猉功D: left allmulticast mode [ 337.828970][T21037] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 337.852495][T21037] EXT4-fs (loop4): 1 truncate cleaned up [ 337.865714][T21037] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.878541][T20715] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.948946][T21041] 0猉功D: renamed from 31猉功D [ 337.973457][T21041] 0猉功D: left promiscuous mode [ 337.978398][T21041] 0猉功D: entered allmulticast mode [ 337.990561][T21041] A link change request failed with some changes committed already. Interface 30猉功D may have been left with an inconsistent configuration, please check. [ 338.018478][T21038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21038 comm=syz.0.6105 [ 338.120884][T21052] __nla_validate_parse: 24 callbacks suppressed [ 338.120899][T21052] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6107'. [ 338.230067][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6108'. [ 338.252038][T21056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.265971][T21056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.576628][T21074] 9pnet_fd: Insufficient options for proto=fd [ 338.584349][T21037] ================================================================== [ 338.592448][T21037] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 338.599041][T21037] [ 338.601349][T21037] write to 0xffff8881198e9f78 of 104 bytes by task 21074 on cpu 1: [ 338.609226][T21037] __bpf_get_stackid+0x761/0x800 [ 338.614242][T21037] bpf_get_stackid+0xee/0x120 [ 338.618993][T21037] bpf_get_stackid_raw_tp+0xf6/0x120 [ 338.624263][T21037] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 338.629706][T21037] bpf_trace_run2+0x107/0x1c0 [ 338.634373][T21037] __traceiter_kfree+0x2e/0x50 [ 338.639124][T21037] kfree+0x27b/0x320 [ 338.643010][T21037] check_cfg+0xe7f/0x1110 [ 338.647325][T21037] bpf_check+0x1333/0xd9e0 [ 338.651731][T21037] bpf_prog_load+0xedd/0x1070 [ 338.656422][T21037] __sys_bpf+0x462/0x7b0 [ 338.660665][T21037] __x64_sys_bpf+0x41/0x50 [ 338.665174][T21037] x64_sys_call+0x2aea/0x2ff0 [ 338.669843][T21037] do_syscall_64+0xd2/0x200 [ 338.674338][T21037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.680217][T21037] [ 338.682526][T21037] read to 0xffff8881198e9fa8 of 8 bytes by task 21037 on cpu 0: [ 338.690136][T21037] bcmp+0x23/0x90 [ 338.693765][T21037] __bpf_get_stackid+0x371/0x800 [ 338.698701][T21037] bpf_get_stackid+0xee/0x120 [ 338.703455][T21037] bpf_get_stackid_raw_tp+0xf6/0x120 [ 338.708726][T21037] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 338.714170][T21037] bpf_trace_run2+0x107/0x1c0 [ 338.718838][T21037] __traceiter_kfree+0x2e/0x50 [ 338.723589][T21037] kfree+0x27b/0x320 [ 338.727474][T21037] audit_log_d_path+0xf4/0x150 [ 338.732227][T21037] audit_log_d_path_exe+0x42/0x70 [ 338.737243][T21037] audit_log_task+0x1e9/0x250 [ 338.741911][T21037] audit_seccomp+0x61/0x100 [ 338.746410][T21037] __seccomp_filter+0x69d/0x10d0 [ 338.751331][T21037] __secure_computing+0x82/0x150 [ 338.756250][T21037] syscall_trace_enter+0xcf/0x1e0 [ 338.761259][T21037] do_syscall_64+0xac/0x200 [ 338.765764][T21037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.771648][T21037] [ 338.773960][T21037] value changed: 0xffffffff815623d2 -> 0xffffffff81639663 [ 338.781049][T21037] [ 338.783354][T21037] Reported by Kernel Concurrency Sanitizer on: [ 338.789492][T21037] CPU: 0 UID: 0 PID: 21037 Comm: syz.4.6104 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 338.801027][T21037] Tainted: [W]=WARN [ 338.804819][T21037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.814942][T21037] ================================================================== [ 338.843523][T20497] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.