last executing test programs: 1m3.921526193s ago: executing program 2 (id=4162): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x402, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m3.371174727s ago: executing program 2 (id=4171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRESHEX, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 1m3.285133266s ago: executing program 2 (id=4175): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x3, 0x0, 0x4}}, 0x2e) connect$pppl2tp(r0, 0x0, 0x0) 1m3.247153159s ago: executing program 2 (id=4176): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x9}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000003000000040000000108000001000000", @ANYRES32=r1], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000006c0)=r2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r4, 0x25, 0x2, @val=@tcx={@void, @value=r2}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 1m3.24585047s ago: executing program 2 (id=4177): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) acct(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00') r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x810) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x596, &(0x7f0000000c00)="$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") bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000000080300000000000000000001000001d994f03ffdb810daaf86cc723e7206000240000100000c0004800800064000000001090001007379"], 0x3c}, 0x1, 0x0, 0x0, 0x40114}, 0x4000) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r6, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010030000000ffdbdf2500000000", @ANYRES32=r9, @ANYBLOB="0000000000100000240012800b0001006d616373656300001400028005000f"], 0x44}}, 0x0) 1m3.056713278s ago: executing program 2 (id=4186): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) flistxattr(r0, &(0x7f00000004c0)=""/144, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x200000000000006}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400443b70cfd59b531a8c1ceeffff116effffff000000", @ANYRES32=r12, @ANYRESHEX=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r12, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x1}}]}}]}, 0x3c}}, 0x4000000) 52.417319881s ago: executing program 1 (id=4322): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 52.275676154s ago: executing program 1 (id=4323): listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) syslog(0x2, &(0x7f0000000040)=""/19, 0xe2) 52.243837327s ago: executing program 1 (id=4324): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xb99}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x7, 0x7, 0x1000}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000080)=""/142, 0x20000, 0x0, 0x8, 0x2}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x20590, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x4c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x81}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000040000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) syz_emit_ethernet(0x4e, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000200)) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socketpair(0x22, 0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000007abdf36ef8ffffffb702000008000000b70300000002000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) 52.141794968s ago: executing program 0 (id=4326): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1}, 0x48) epoll_create1(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) 52.076454814s ago: executing program 1 (id=4327): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) acct(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x810) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x596, &(0x7f0000000c00)="$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") bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000000080300000000000000000001000001d994f03ffdb810daaf86cc723e7206000240000100000c0004800800064000000001090001007379"], 0x3c}, 0x1, 0x0, 0x0, 0x40114}, 0x4000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 51.978930523s ago: executing program 1 (id=4328): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 51.772877923s ago: executing program 0 (id=4331): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$kcm(0xa, 0x3, 0x87) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000006c0)=r1}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value=r1}}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) 51.716610289s ago: executing program 0 (id=4333): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r2) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14) 51.638364697s ago: executing program 0 (id=4336): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) acct(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00') r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008080}, 0x810) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x596, &(0x7f0000000c00)="$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") bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000000080300000000000000000001000001d994f03ffdb810daaf86cc723e7206000240000100000c0004800800064000000001090001007379"], 0x3c}, 0x1, 0x0, 0x0, 0x40114}, 0x4000) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000080)={0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 51.527768598s ago: executing program 0 (id=4340): syz_emit_ethernet(0x7e, &(0x7f0000000480)=ANY=[@ANYBLOB="bbbbbbbbbbbb7e4173edf6b30800450000700000000000019078ac1e0001ac1414aa03009078030000004500000000000000006c00000000000000000000441c0001e00000020000030000000000000000007f00000100000000862100000001632a3a835e9504005d8b0000000000094ef661e96b401400000000000000"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000580)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200183aff00000000000000000000000000000000ff020000000000000000000000000001870090780000000000000000000000000000000000005168c8d34a2e74ccb567f0a19c474da3d36a18decd7c244a0da7a116836efbd3df8881974497adb09899eb15acb5f7e6021512368a7be1144f0afe72730746a484ef3b9d49c1120154c9f2"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001cc0)={0x0, ""/256, 0x0, 0x0}) r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r12 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r12, 0xee01, 0x0) keyctl$describe(0x6, r12, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r11, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000400)='./file0\x00', 0x1a4243c, &(0x7f0000002ec0)=ANY=[@ANYRES64=0x0, @ANYRES64=r15, @ANYRES32=r5, @ANYBLOB="bcc098d0b22949f72f16e99c026a385897d2c5c350995afbfd66a8efee3910237c87fd9dcd0c3cee6b5e0fe3e36a4dbf379afff11800f3f89450778c2acbae8bc702257de63f5eef912c805faf832332e55d98416099128888faf93dbd7913c76216", @ANYRESDEC=r13, @ANYRES16=r14, @ANYRESDEC=0x0, @ANYRESHEX=r7, @ANYBLOB="1a7ac5b3b24b5de65f2beba602ee11b7937c6b4c88042e66851d0f6b2c22a06e35ac9b5ea363657c4d2344c5a69e65cce18f534cffe585f9b24a908cb867ad67d8f039cbe08dc80caac2edb2833ddf253b817c0ed157f5cbe00bd9e38d0cc9ccb0555abb777b3b", @ANYRES16], 0x0, 0x0, &(0x7f0000000000)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f0000001ec0)={r10, r13, "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", "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"}) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000"], 0xe4}}, 0x0) 51.290408561s ago: executing program 0 (id=4342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="4c262be70100000005000500020000000900020073797a3107ff6daacafe0000000c0007800500140001000000050005000a0000000500040001000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000004400048014000180090001006c61737400000000040002802c0001800e000100696d6d656469617465", @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES8=r1, @ANYBLOB="63ddf562f20fabda3c49907aee6fe35b5e2020ef279af4ce2959b0c4c396e279006a4d9d522d54f73c022449c79cbddacd4ac241a828880e77a45caeccd1fcc2d27029f582fc7d54d76d6f720b6bd7a6e7fbbfe8f82ec50ce75651208ec7e3a23ef001fdd02b"], 0xf4}}, 0x0) 51.289094871s ago: executing program 32 (id=4342): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)=ANY=[@ANYBLOB="4c262be70100000005000500020000000900020073797a3107ff6daacafe0000000c0007800500140001000000050005000a0000000500040001000000050001"], 0x4c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000006c000000060a010400000000000000000100000008000b40000000000900010073797a30000000004400048014000180090001006c61737400000000040002802c0001800e000100696d6d656469617465", @ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES8=r1, @ANYBLOB="63ddf562f20fabda3c49907aee6fe35b5e2020ef279af4ce2959b0c4c396e279006a4d9d522d54f73c022449c79cbddacd4ac241a828880e77a45caeccd1fcc2d27029f582fc7d54d76d6f720b6bd7a6e7fbbfe8f82ec50ce75651208ec7e3a23ef001fdd02b"], 0xf4}}, 0x0) 51.288844571s ago: executing program 1 (id=4344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd01}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000100)=""/146, 0x92, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x59, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000400), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 51.271248743s ago: executing program 33 (id=4344): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd01}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = mq_open(&(0x7f0000000000)='e_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000040000000, 0x4, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x18}) mq_timedreceive(r2, &(0x7f0000000100)=""/146, 0x92, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x59, 0x0, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000400), 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') 47.986454335s ago: executing program 34 (id=4186): r0 = socket(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c0000000800124000000000050005000a000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a0000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r1, &(0x7f00000014c0), &(0x7f0000000b40)=""/31}, 0x20) flistxattr(r0, &(0x7f00000004c0)=""/144, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) r6 = socket(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r9, 0x0, 0x200000000000006}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd64}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) r11 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400443b70cfd59b531a8c1ceeffff116effffff000000", @ANYRES32=r12, @ANYRESHEX=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r12, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x1}}]}}]}, 0x3c}}, 0x4000000) 1.485775994s ago: executing program 4 (id=5631): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r1, 0x1276, 0x0) syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0xd6ee, 0x800, 0x2, 0x20e}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0xfe, 0x0}}}, @in=@remote, {@in6=@mcast2, @in6=@local, 0x0, 0x0, 0x0, 0x6}, {{@in=@local, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20}, {}, {}, 0x4}, 0xfffffffe}, [@tmpl={0x44, 0x8, [{{@in6=@loopback, 0x4}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0xfc}]}]}, 0x16c}}, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x67) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) r8 = syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x80000) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', r8, 0x400, 0x1, {0x0, r7}}) 1.32181121s ago: executing program 3 (id=5635): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 1.005701261s ago: executing program 4 (id=5640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) read(r2, &(0x7f0000000200)=""/209, 0x128) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x2bd, @tick=0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x2, 0x5, 0x1, 'queue1\x00', 0x1}) tkill(r1, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x14, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r6) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01022dbd7000ffdbdf252100000009001f00706879310000000005002000000000000c0005"], 0x34}, 0x1, 0x0, 0x0, 0x24008800}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18efffffffffe04b00000000000088d924d8dac4", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x7fff}, 0x18) ioctl$KDSKBENT(r9, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) execve(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='dlm_lock_end\x00', r0, 0x0, 0x100000000}, 0x18) 757.290125ms ago: executing program 4 (id=5654): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/stat\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) r5 = gettid() ustat(0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r7, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c000640000008000000000214000000020a01"], 0x70}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db19717495fcb791b6"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket(0xa, 0xa, 0x3) epoll_create(0x4) 620.602769ms ago: executing program 7 (id=5661): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a69"], 0x50}}, 0x0) 619.723609ms ago: executing program 4 (id=5662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10132) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 599.357061ms ago: executing program 7 (id=5663): getrlimit(0xf, &(0x7f0000000180)) 566.231424ms ago: executing program 3 (id=5666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f310000140001007767320000000000000000000000000014000100776732000000000000000000000000000800"], 0xa8}}, 0x0) 547.443626ms ago: executing program 7 (id=5668): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000b00)={0xa, 0x4e22, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x5, 0x0, {0xa, 0x0, 0x10f9d, @private2}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 533.845247ms ago: executing program 3 (id=5669): getrlimit(0xf, &(0x7f0000000180)) (fail_nth: 2) 528.090808ms ago: executing program 5 (id=5670): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 507.66562ms ago: executing program 3 (id=5671): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x61]}}, 0x0, 0x2b, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, [@tail_call, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xf7, &(0x7f0000000140)=""/247, 0x41100, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x2, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x1, 0x10, 0x9}, {0x3, 0x3, 0xb, 0x2}], 0x10, 0x5}, 0x94) 506.38137ms ago: executing program 5 (id=5672): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/stat\x00', 0x0, 0x0) read$rfkill(r2, &(0x7f0000000040), 0x8) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r4, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) r5 = gettid() ustat(0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000100)='kfree\x00', r7, 0x0, 0x4}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f31000014000100776732000000000000000000000000001400010077673200000000000000000000000000080001"], 0xa8}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c000640000008000000000214000000020a01"], 0x70}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r5, @ANYBLOB="2a997dee7022a69a668b5d91e4fc5efe77bcb02013af3a43884aa6fd8b38b1bc00000101000000db19717495fcb791b6"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket(0xa, 0xa, 0x3) epoll_create(0x4) 496.843991ms ago: executing program 3 (id=5673): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) wait4(0x0, &(0x7f0000000200), 0x8, &(0x7f00000004c0)) 437.322707ms ago: executing program 3 (id=5674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000009060101000000000000000003000000380008800c00078005001500070000000c00078006001d4000010000100007800c001840001272b359e2c1ac780007800800084000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2f2}, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRESDEC=r1, @ANYRESOCT], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r3, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000"], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002340)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x401, @private0, 0x1}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000001600)='3', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3f10466d}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000001700)="a9", 0x1}], 0x1}}], 0x2, 0x4000) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x5, 0x8000, 0x80, 0xe2, 0x800000, 0x9, 0x4}, &(0x7f0000000440)=0x20) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000240)=0xffffffffffffffb5) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x2c020400) unshare(0x4020400) syz_read_part_table(0x5cd, &(0x7f0000000a00)="$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") 436.906407ms ago: executing program 4 (id=5675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 436.284367ms ago: executing program 5 (id=5676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001803000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x8}, {@in=@local, 0x4d5, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0x12}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {}, {0x0, 0x20}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}]}, 0x13c}}, 0x0) 431.547038ms ago: executing program 4 (id=5677): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) add_key$user(&(0x7f0000002100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 351.987405ms ago: executing program 7 (id=5678): timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x36, 0x80000003, 0x0, 0x0, &(0x7f0000000640)) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 326.176108ms ago: executing program 7 (id=5679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000980)='mm_page_free\x00', r1, 0x0, 0x200000000000006}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, 0x0, 0x0) 299.89329ms ago: executing program 6 (id=5680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a01010000000000000000020000000900020073797a31000000000900010073797a300000000054000380080002400000000840000380140001006272696467655f736c6176655f310000140001007767320000000000000000000000000014000100776732000000000000000000000000000800"], 0xa8}}, 0x0) 297.571071ms ago: executing program 5 (id=5681): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 268.159834ms ago: executing program 7 (id=5682): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x72, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1181, 0x2, @perf_bp={0x0, 0x8}, 0x1004, 0x0, 0xfffe, 0x9, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0xfe, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x2, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8001, 0xb99}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$INCFS_IOC_PERMIT_FILL(r6, 0x40046721, &(0x7f0000000f00)) sendmsg$MPTCP_PM_CMD_REMOVE(r6, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x1) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000000000)=0x2d, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 267.560224ms ago: executing program 6 (id=5683): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) 261.343594ms ago: executing program 5 (id=5684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) dup2(r1, r0) 219.133018ms ago: executing program 6 (id=5685): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) wait4(0x0, &(0x7f0000000200), 0x8, &(0x7f00000004c0)) 156.092954ms ago: executing program 5 (id=5686): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x9, @local, 0x4}, 0x1c) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfffffffff7fffffc}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, "6bf125058e637b44e58c1c72a4c01c47e50a2793c042d4aea4dcf9c014d0e072a3f096bdbdce0ceb94cb576a5d539a0f68412e32c7881104f7a2a88bb4a033af", "563e7e5b61a321b296a4d858a1a07e3c87df2f85a1df2c909cda49a11ff76e906b13a0c26ef2f2b18d4dcaffbc3200f99d6f328ccecaf9ec49aa55fba663c523", "6dd072b5e9aa72a58f2d1e56225ed54c50d0fc588f0800", [0xa2, 0x3562]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 46.276415ms ago: executing program 6 (id=5687): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r2) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x10132) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x0) 25.620668ms ago: executing program 6 (id=5688): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5, 0x0, 0x0, 0xf, 0x0, 0x7}]}, {0x0, [0x2e, 0x0, 0x61, 0x61, 0x61]}}, 0x0, 0x2b, 0x0, 0x9}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, [@tail_call, @exit]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0xf7, &(0x7f0000000140)=""/247, 0x41100, 0x4, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f00000002c0)={0x2, 0x7}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000380)=[{0x4, 0x1, 0x10, 0x9}, {0x3, 0x3, 0xb, 0x2}, {0x4, 0x5, 0xb}], 0x10, 0x5}, 0x94) 0s ago: executing program 6 (id=5689): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) kernel console output (not intermixed with test programs): id length. [ 338.779625][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4310'. [ 339.010736][T16687] loop0: detected capacity change from 0 to 2048 [ 339.072632][T16687] Alternate GPT is invalid, using primary GPT. [ 339.080067][T16687] loop0: p1 p2 p3 [ 339.083869][T16687] loop0: partition table partially beyond EOD, truncated [ 339.457560][T16716] SELinux: failed to load policy [ 339.467379][T16716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.486080][T16716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.514422][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4319'. [ 339.524657][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4319'. [ 339.574411][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4319'. [ 339.584620][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4319'. [ 339.650075][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4319'. [ 339.660269][T16716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4319'. [ 339.688395][T16727] netlink: 'syz.1.4322': attribute type 7 has an invalid length. [ 340.024829][T16737] loop1: detected capacity change from 0 to 1024 [ 340.046847][T16737] EXT4-fs (loop1): filesystem too large to mount safely on this system [ 340.081619][T16737] Process accounting resumed [ 340.377041][T16750] netlink: 'syz.0.4333': attribute type 7 has an invalid length. [ 340.462658][T16755] loop0: detected capacity change from 0 to 1024 [ 340.480008][T16755] EXT4-fs (loop0): filesystem too large to mount safely on this system [ 340.528929][T16760] 9pnet_fd: Insufficient options for proto=fd [ 340.529949][T16755] Process accounting resumed [ 340.541530][T16760] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.588559][T16760] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.711051][T16760] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.745515][T11187] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.790152][T16760] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.839239][T11187] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.854764][T16770] Process accounting resumed [ 340.895567][T11151] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.923719][T11151] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.937468][T11187] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.958800][T11151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.976208][T11151] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.988923][T11187] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.049415][T16791] netlink: 'syz.3.4347': attribute type 7 has an invalid length. [ 341.369629][T11187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.381064][T11187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.392178][T11187] bond0 (unregistering): Released all slaves [ 341.402136][T16771] lo speed is unknown, defaulting to 1000 [ 341.519186][T16778] lo speed is unknown, defaulting to 1000 [ 341.555744][T11187] hsr_slave_0: left promiscuous mode [ 341.565432][T11187] hsr_slave_1: left promiscuous mode [ 341.575433][T11187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.584286][T11187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.592993][T11187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.602258][T11187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.617496][T11187] veth1_macvtap: left promiscuous mode [ 341.623003][T11187] veth0_macvtap: left promiscuous mode [ 341.689643][T11187] team0 (unregistering): Port device team_slave_1 removed [ 341.702120][T11187] team0 (unregistering): Port device team_slave_0 removed [ 341.751392][T16807] pim6reg: entered allmulticast mode [ 341.762457][T16808] pim6reg: left allmulticast mode [ 341.799300][T16771] chnl_net:caif_netlink_parms(): no params data found [ 341.943312][T16771] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.951793][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.977437][T16771] bridge_slave_0: entered allmulticast mode [ 341.994335][T16771] bridge_slave_0: entered promiscuous mode [ 342.010333][T16778] chnl_net:caif_netlink_parms(): no params data found [ 342.031029][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.039235][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.067747][T16771] bridge_slave_1: entered allmulticast mode [ 342.074556][T16771] bridge_slave_1: entered promiscuous mode [ 342.169796][T16771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.213573][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.224645][T11187] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.247719][T16778] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.254831][T16778] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.275043][T16778] bridge_slave_0: entered allmulticast mode [ 342.290246][T16778] bridge_slave_0: entered promiscuous mode [ 342.313768][T11187] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.325046][T16778] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.332249][T16778] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.339997][T16778] bridge_slave_1: entered allmulticast mode [ 342.346782][T16778] bridge_slave_1: entered promiscuous mode [ 342.354917][T16828] netlink: 'syz.4.4357': attribute type 7 has an invalid length. [ 342.384097][T16771] team0: Port device team_slave_0 added [ 342.392648][T16778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.403418][T11187] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.416381][T16771] team0: Port device team_slave_1 added [ 342.429583][T16778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.453918][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.460950][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.487100][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.499010][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.505977][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.531961][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.569110][T11187] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.583978][T16778] team0: Port device team_slave_0 added [ 342.597641][T16778] team0: Port device team_slave_1 added [ 342.642338][T16771] hsr_slave_0: entered promiscuous mode [ 342.660464][T16771] hsr_slave_1: entered promiscuous mode [ 342.679807][T16771] debugfs: 'hsr0' already exists in 'hsr' [ 342.685594][T16771] Cannot create hsr debugfs directory [ 342.708364][T16778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.715528][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.741565][T16778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.763867][T16778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.770922][T16778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.796922][T16778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.978062][T16841] FAULT_INJECTION: forcing a failure. [ 342.978062][T16841] name failslab, interval 1, probability 0, space 0, times 0 [ 342.990801][T16841] CPU: 0 UID: 0 PID: 16841 Comm: syz.3.4362 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 342.990835][T16841] Tainted: [W]=WARN [ 342.990841][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 342.990855][T16841] Call Trace: [ 342.990864][T16841] [ 342.990872][T16841] __dump_stack+0x1d/0x30 [ 342.990960][T16841] dump_stack_lvl+0xe8/0x140 [ 342.990987][T16841] dump_stack+0x15/0x1b [ 342.991070][T16841] should_fail_ex+0x265/0x280 [ 342.991105][T16841] should_failslab+0x8c/0xb0 [ 342.991267][T16841] kmem_cache_alloc_noprof+0x50/0x480 [ 342.991298][T16841] ? alloc_empty_file+0x76/0x200 [ 342.991395][T16841] alloc_empty_file+0x76/0x200 [ 342.991432][T16841] path_openat+0x68/0x2170 [ 342.991451][T16841] ? try_charge_memcg+0x215/0xa10 [ 342.991519][T16841] ? css_rstat_updated+0xb7/0x240 [ 342.991625][T16841] ? css_rstat_updated+0xb7/0x240 [ 342.991646][T16841] ? mod_memcg_lruvec_state+0x1fc/0x2c0 [ 342.991678][T16841] ? css_rstat_updated+0xb7/0x240 [ 342.991706][T16841] do_filp_open+0x109/0x230 [ 342.991745][T16841] do_sys_openat2+0xa6/0x110 [ 342.991820][T16841] __x64_sys_openat+0xf2/0x120 [ 342.991840][T16841] x64_sys_call+0x2eab/0x3000 [ 342.991862][T16841] do_syscall_64+0xd2/0x200 [ 342.991930][T16841] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 342.992020][T16841] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 342.992134][T16841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.992226][T16841] RIP: 0033:0x7ffaeff7d810 [ 342.992241][T16841] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 342.992261][T16841] RSP: 002b:00007ffaee9e4ef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 342.992280][T16841] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ffaeff7d810 [ 342.992295][T16841] RDX: 0000000000000002 RSI: 00007ffaf0001c6c RDI: 00000000ffffff9c [ 342.992308][T16841] RBP: 00007ffaf0001c6c R08: 0000000000000000 R09: 0000000000000000 [ 342.992319][T16841] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 342.992407][T16841] R13: 0000000000000024 R14: 0000200000000180 R15: 00007ffdd4c4a128 [ 342.992433][T16841] [ 343.419432][T11187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.438702][T11187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.459043][T11187] bond0 (unregistering): Released all slaves [ 343.479444][T11187] bond1 (unregistering): Released all slaves [ 343.540912][T16778] hsr_slave_0: entered promiscuous mode [ 343.553087][T16778] hsr_slave_1: entered promiscuous mode [ 343.565723][T16778] debugfs: 'hsr0' already exists in 'hsr' [ 343.571529][T16778] Cannot create hsr debugfs directory [ 343.751454][T16771] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 343.779954][T16848] __nla_validate_parse: 16 callbacks suppressed [ 343.779974][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 343.797521][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 343.839322][T16842] lo speed is unknown, defaulting to 1000 [ 343.839764][T16771] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 343.874594][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 343.884717][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 343.905637][T16771] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 343.979605][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 343.990148][T16848] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4363'. [ 344.010937][T11187] hsr_slave_0: left promiscuous mode [ 344.017289][T11187] hsr_slave_1: left promiscuous mode [ 344.022974][T11187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.030447][T11187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.038343][T11187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.045752][T11187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.076159][T11187] veth1_macvtap: left promiscuous mode [ 344.082083][T11187] veth0_macvtap: left promiscuous mode [ 344.087751][T11187] veth1_vlan: left promiscuous mode [ 344.095564][T11187] veth0_vlan: left promiscuous mode [ 344.218721][T11187] team0 (unregistering): Port device team_slave_0 removed [ 344.248633][T11187] team0 (unregistering): Port device dummy0 removed [ 344.263170][T16771] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.344082][ T3404] lo speed is unknown, defaulting to 1000 [ 344.350014][ T3404] infiniband syz0: ib_query_port failed (-19) [ 344.431264][T16778] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.439248][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 344.439261][ T29] audit: type=1326 audit(1761317766.051:10545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16862 comm="syz.3.4366" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffaeff7efc9 code=0x0 [ 344.480673][T16778] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.491983][T16778] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.505130][T16778] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.539607][T16771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.591324][T16771] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.611174][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.618280][T11137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.640615][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.647732][T11137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.722452][T16771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.761978][T11187] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.784027][T16778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.809497][T16778] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.847110][T16891] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4368'. [ 344.868373][T11187] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.893646][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.899587][T16890] Process accounting resumed [ 344.900755][T11137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.924593][T11137] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.931758][T11137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.945389][T16771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.958777][T11187] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.981189][T16855] chnl_net:caif_netlink_parms(): no params data found [ 345.002944][T16778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.039018][T11187] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.094048][T16855] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.102377][T16855] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.111004][T16855] bridge_slave_0: entered allmulticast mode [ 345.118595][T16855] bridge_slave_0: entered promiscuous mode [ 345.130493][T16855] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.137634][T16855] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.145496][T16855] bridge_slave_1: entered allmulticast mode [ 345.157792][T16855] bridge_slave_1: entered promiscuous mode [ 345.209693][T16855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.209877][T16917] loop3: detected capacity change from 0 to 256 [ 345.227794][T16917] FAT-fs (loop3): bogus number of FAT sectors [ 345.233939][T16917] FAT-fs (loop3): Can't find a valid FAT filesystem [ 345.488928][T11187] bond0 (unregistering): Released all slaves [ 345.499922][T16855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.524734][T16778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.589991][T16855] team0: Port device team_slave_0 added [ 345.600957][T16855] team0: Port device team_slave_1 added [ 345.670300][T16855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.677416][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.703418][T16855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.730735][T16855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.737746][T16855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.763795][T16855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.820466][T11187] hsr_slave_0: left promiscuous mode [ 345.827283][T11187] hsr_slave_1: left promiscuous mode [ 345.832825][ T29] audit: type=1326 audit(1761317767.441:10546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 345.856482][ T29] audit: type=1326 audit(1761317767.441:10547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 345.880686][ T29] audit: type=1326 audit(1761317767.441:10548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 345.904328][ T29] audit: type=1326 audit(1761317767.441:10549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 345.928120][ T29] audit: type=1326 audit(1761317767.441:10550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 345.928577][T11187] veth1_macvtap: left promiscuous mode [ 345.951767][ T29] audit: type=1326 audit(1761317767.441:10551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 345.980877][ T29] audit: type=1326 audit(1761317767.441:10552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 345.997717][T11187] veth0_macvtap: left promiscuous mode [ 346.004651][ T29] audit: type=1326 audit(1761317767.441:10553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 346.033748][ T29] audit: type=1326 audit(1761317767.441:10554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16941 comm="syz.4.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 346.034620][T11187] veth1_vlan: left promiscuous mode [ 346.067929][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4378'. [ 346.077641][T16944] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4378'. [ 346.086691][T16944] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4378'. [ 346.097924][T11187] veth0_vlan: left promiscuous mode [ 346.265461][T16949] loop3: detected capacity change from 0 to 128 [ 346.295834][T16771] veth0_vlan: entered promiscuous mode [ 346.311528][T16855] hsr_slave_0: entered promiscuous mode [ 346.318753][T16855] hsr_slave_1: entered promiscuous mode [ 346.324796][T16855] debugfs: 'hsr0' already exists in 'hsr' [ 346.330604][T16855] Cannot create hsr debugfs directory [ 346.338910][T16771] veth1_vlan: entered promiscuous mode [ 346.370238][T16771] veth0_macvtap: entered promiscuous mode [ 346.395278][T16771] veth1_macvtap: entered promiscuous mode [ 346.425538][T16778] veth0_vlan: entered promiscuous mode [ 346.452193][T16771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.461216][T16778] veth1_vlan: entered promiscuous mode [ 346.489428][T16771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.513074][T11189] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.524319][T16778] veth0_macvtap: entered promiscuous mode [ 346.540795][T16778] veth1_macvtap: entered promiscuous mode [ 346.551079][T11189] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.569239][T11189] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.579078][T11189] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.587068][T16971] netlink: 'syz.4.4385': attribute type 2 has an invalid length. [ 346.594129][T16778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.605948][T16778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.630931][T16855] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 346.648189][T11189] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.660653][T11189] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.677227][T16855] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 346.691546][T11189] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.700440][T16855] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 346.713630][T16855] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 346.727958][T11189] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.739937][T16969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.761119][T16969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.779056][T16987] netlink: 'syz.4.4388': attribute type 7 has an invalid length. [ 346.782493][T16986] Process accounting resumed [ 346.827167][T16855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.838980][T16855] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.849759][T11189] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.856871][T11189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.880712][T11176] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.887825][T11176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.968566][T16855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.110565][T16855] veth0_vlan: entered promiscuous mode [ 347.120672][T16855] veth1_vlan: entered promiscuous mode [ 347.141749][T16855] veth0_macvtap: entered promiscuous mode [ 347.150483][T16855] veth1_macvtap: entered promiscuous mode [ 347.163466][T16855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.174646][T16855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.186241][T11186] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.203898][T11186] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.218767][T11186] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.228725][T11186] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.378923][T17043] netlink: 'syz.5.4400': attribute type 7 has an invalid length. [ 347.647456][T17067] SELinux: failed to load policy [ 347.653915][T17067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.663886][T17067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.808647][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.817891][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.207642][T17078] netlink: 'syz.7.4414': attribute type 7 has an invalid length. [ 348.436018][T17095] FAULT_INJECTION: forcing a failure. [ 348.436018][T17095] name failslab, interval 1, probability 0, space 0, times 0 [ 348.449881][T17095] CPU: 1 UID: 0 PID: 17095 Comm: syz.3.4422 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 348.449930][T17095] Tainted: [W]=WARN [ 348.449969][T17095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 348.449981][T17095] Call Trace: [ 348.449989][T17095] [ 348.449997][T17095] __dump_stack+0x1d/0x30 [ 348.450093][T17095] dump_stack_lvl+0xe8/0x140 [ 348.450118][T17095] dump_stack+0x15/0x1b [ 348.450203][T17095] should_fail_ex+0x265/0x280 [ 348.450238][T17095] should_failslab+0x8c/0xb0 [ 348.450273][T17095] kmem_cache_alloc_noprof+0x50/0x480 [ 348.450309][T17095] ? alloc_empty_file+0x76/0x200 [ 348.450361][T17095] alloc_empty_file+0x76/0x200 [ 348.450403][T17095] alloc_file_pseudo+0xc6/0x160 [ 348.450429][T17095] __shmem_file_setup+0x1de/0x210 [ 348.450514][T17095] shmem_file_setup+0x3b/0x50 [ 348.450531][T17095] __se_sys_memfd_create+0x2c3/0x590 [ 348.450651][T17095] __x64_sys_memfd_create+0x31/0x40 [ 348.450694][T17095] x64_sys_call+0x2ac2/0x3000 [ 348.450790][T17095] do_syscall_64+0xd2/0x200 [ 348.450839][T17095] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 348.450872][T17095] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 348.450907][T17095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.450984][T17095] RIP: 0033:0x7ffaeff7efc9 [ 348.451002][T17095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.451025][T17095] RSP: 002b:00007ffaee9e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 348.451048][T17095] RAX: ffffffffffffffda RBX: 0000000000000478 RCX: 00007ffaeff7efc9 [ 348.451064][T17095] RDX: 00007ffaee9e6ef0 RSI: 0000000000000000 RDI: 00007ffaf0002960 [ 348.451079][T17095] RBP: 0000200000000e00 R08: 00007ffaee9e6bb7 R09: 00007ffaee9e6e40 [ 348.451094][T17095] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000480 [ 348.451177][T17095] R13: 00007ffaee9e6ef0 R14: 00007ffaee9e6eb0 R15: 0000200000000640 [ 348.451204][T17095] [ 348.782941][T17108] Process accounting resumed [ 348.965660][T17122] Process accounting resumed [ 348.996995][T17128] __nla_validate_parse: 40 callbacks suppressed [ 348.997014][T17128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4436'. [ 349.012675][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4436'. [ 349.033718][T17126] loop3: detected capacity change from 0 to 512 [ 349.066875][T17126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.086206][T17126] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.193979][T15381] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.309631][T17153] loop3: detected capacity change from 0 to 1024 [ 349.329018][T17153] EXT4-fs (loop3): filesystem too large to mount safely on this system [ 349.333520][T17156] netlink: 54775 bytes leftover after parsing attributes in process `syz.6.4446'. [ 349.454528][T17153] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4445'. [ 349.479738][T17153] Process accounting resumed [ 349.528711][T17170] FAULT_INJECTION: forcing a failure. [ 349.528711][T17170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.541957][T17170] CPU: 0 UID: 0 PID: 17170 Comm: syz.3.4451 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 349.542052][T17170] Tainted: [W]=WARN [ 349.542061][T17170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 349.542077][T17170] Call Trace: [ 349.542086][T17170] [ 349.542096][T17170] __dump_stack+0x1d/0x30 [ 349.542123][T17170] dump_stack_lvl+0xe8/0x140 [ 349.542143][T17170] dump_stack+0x15/0x1b [ 349.542193][T17170] should_fail_ex+0x265/0x280 [ 349.542241][T17170] should_fail+0xb/0x20 [ 349.542256][T17170] should_fail_usercopy+0x1a/0x20 [ 349.542279][T17170] _copy_to_user+0x20/0xa0 [ 349.542335][T17170] ? __pfx_veth_get_sset_count+0x10/0x10 [ 349.542363][T17170] ethtool_get_sset_info+0x349/0x450 [ 349.542393][T17170] dev_ethtool+0x10b6/0x1670 [ 349.542417][T17170] ? full_name_hash+0x92/0xe0 [ 349.542523][T17170] dev_ioctl+0x2e0/0x960 [ 349.542545][T17170] sock_do_ioctl+0x197/0x220 [ 349.542575][T17170] sock_ioctl+0x41b/0x610 [ 349.542602][T17170] ? __pfx_sock_ioctl+0x10/0x10 [ 349.542630][T17170] __se_sys_ioctl+0xce/0x140 [ 349.542651][T17170] __x64_sys_ioctl+0x43/0x50 [ 349.542676][T17170] x64_sys_call+0x1816/0x3000 [ 349.542720][T17170] do_syscall_64+0xd2/0x200 [ 349.542743][T17170] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 349.542847][T17170] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 349.542878][T17170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.542902][T17170] RIP: 0033:0x7ffaeff7efc9 [ 349.542939][T17170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.542963][T17170] RSP: 002b:00007ffaee9e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.543015][T17170] RAX: ffffffffffffffda RBX: 00007ffaf01d5fa0 RCX: 00007ffaeff7efc9 [ 349.543031][T17170] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000009 [ 349.543061][T17170] RBP: 00007ffaee9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 349.543076][T17170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.543099][T17170] R13: 00007ffaf01d6038 R14: 00007ffaf01d5fa0 R15: 00007ffdd4c4a128 [ 349.543122][T17170] [ 349.753466][T17178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4454'. [ 349.811802][T17178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4454'. [ 349.820843][T17178] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4454'. [ 349.863229][T17183] Process accounting resumed [ 349.864152][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 349.864287][ T29] audit: type=1326 audit(1761317771.471:10736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17185 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625722efc9 code=0x7ffc0000 [ 349.898666][ T29] audit: type=1326 audit(1761317771.491:10737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17185 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f625722efc9 code=0x7ffc0000 [ 349.922393][ T29] audit: type=1326 audit(1761317771.491:10738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17185 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625722efc9 code=0x7ffc0000 [ 349.946328][ T29] audit: type=1326 audit(1761317771.491:10739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17185 comm="syz.5.4458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625722efc9 code=0x7ffc0000 [ 350.069152][T17192] Process accounting resumed [ 350.084743][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4462'. [ 350.087252][ T29] audit: type=1326 audit(1761317771.691:10740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.4.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 350.095072][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4462'. [ 350.117371][ T29] audit: type=1326 audit(1761317771.691:10741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.4.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 350.139728][ T29] audit: type=1326 audit(1761317771.741:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.4.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 350.174737][ T29] audit: type=1326 audit(1761317771.741:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.4.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 350.198639][ T29] audit: type=1326 audit(1761317771.741:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.4.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 350.222463][ T29] audit: type=1326 audit(1761317771.741:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17195 comm="syz.4.4463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 350.258755][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4462'. [ 350.437534][T17212] loop3: detected capacity change from 0 to 512 [ 350.471689][T17212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.487968][T17212] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 350.633388][T17224] Process accounting resumed [ 350.923861][T17254] 9pnet_fd: Insufficient options for proto=fd [ 350.935789][T17254] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.993434][T17254] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.051909][T17254] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.102142][T17254] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.168744][T17208] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.191747][T11137] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.211325][T11137] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.224584][T11137] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.237253][T11137] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.402908][T17264] Process accounting resumed [ 351.416396][T17266] FAULT_INJECTION: forcing a failure. [ 351.416396][T17266] name failslab, interval 1, probability 0, space 0, times 0 [ 351.429225][T17266] CPU: 1 UID: 0 PID: 17266 Comm: syz.7.4491 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 351.429257][T17266] Tainted: [W]=WARN [ 351.429264][T17266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 351.429278][T17266] Call Trace: [ 351.429285][T17266] [ 351.429294][T17266] __dump_stack+0x1d/0x30 [ 351.429318][T17266] dump_stack_lvl+0xe8/0x140 [ 351.429385][T17266] dump_stack+0x15/0x1b [ 351.429402][T17266] should_fail_ex+0x265/0x280 [ 351.429434][T17266] should_failslab+0x8c/0xb0 [ 351.429465][T17266] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 351.429610][T17266] ? __alloc_skb+0x101/0x320 [ 351.429658][T17266] __alloc_skb+0x101/0x320 [ 351.429689][T17266] netlink_alloc_large_skb+0xbf/0xf0 [ 351.429739][T17266] netlink_sendmsg+0x3cf/0x6b0 [ 351.429775][T17266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.429844][T17266] __sock_sendmsg+0x145/0x180 [ 351.429871][T17266] ____sys_sendmsg+0x31e/0x4e0 [ 351.429916][T17266] ___sys_sendmsg+0x17b/0x1d0 [ 351.429969][T17266] __x64_sys_sendmsg+0xd4/0x160 [ 351.430075][T17266] x64_sys_call+0x191e/0x3000 [ 351.430189][T17266] do_syscall_64+0xd2/0x200 [ 351.430215][T17266] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 351.430245][T17266] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 351.430278][T17266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.430363][T17266] RIP: 0033:0x7f616150efc9 [ 351.430382][T17266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.430403][T17266] RSP: 002b:00007f615ff77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.430423][T17266] RAX: ffffffffffffffda RBX: 00007f6161765fa0 RCX: 00007f616150efc9 [ 351.430437][T17266] RDX: 0000000004000084 RSI: 0000200000000000 RDI: 0000000000000003 [ 351.430449][T17266] RBP: 00007f615ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 351.430479][T17266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.430491][T17266] R13: 00007f6161766038 R14: 00007f6161765fa0 R15: 00007ffda1817fc8 [ 351.430510][T17266] [ 351.848591][T17284] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 351.959316][T17293] 9pnet_fd: Insufficient options for proto=fd [ 351.977000][T17293] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.028634][T17293] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.090515][T17293] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.162907][T17293] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.362582][T17355] C: renamed from team_slave_0 (while UP) [ 353.925617][T17384] SELinux: failed to load policy [ 353.932148][T17384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.940669][T17382] SELinux: failed to load policy [ 353.945929][T17384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.173808][T17411] Process accounting resumed [ 354.198836][T17400] syzkaller1: entered promiscuous mode [ 354.204370][T17400] syzkaller1: entered allmulticast mode [ 354.260630][T17422] __nla_validate_parse: 18 callbacks suppressed [ 354.260711][T17422] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4549'. [ 354.292256][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4550'. [ 354.337579][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4552'. [ 354.357194][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4552'. [ 354.377784][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4552'. [ 354.398474][T17428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4552'. [ 354.427816][T17435] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4551'. [ 354.630803][T17445] Process accounting resumed [ 354.690968][T17449] Process accounting resumed [ 354.713367][T17453] netlink: 'wÞ£ÿ': attribute type 13 has an invalid length. [ 354.763472][T17453] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.824940][T17464] block device autoloading is deprecated and will be removed. [ 354.833732][T17462] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4565'. [ 354.868811][ T3418] hid_parser_main: 19 callbacks suppressed [ 354.868881][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.882282][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.889834][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.912687][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.920370][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.927846][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.931574][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 354.931592][ T29] audit: type=1326 audit(1761317776.541:10964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17477 comm="syz.6.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3484efc9 code=0x7ffc0000 [ 354.935247][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.952995][ T29] audit: type=1326 audit(1761317776.561:10965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17477 comm="syz.6.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3484efc9 code=0x7ffc0000 [ 354.965141][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.965205][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.965252][ T3418] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 354.978496][ T3418] hid-generic 0000:0000:0000.000B: hidraw0: HID v8.00 Device [syz0] on syz0 [ 354.998828][ T29] audit: type=1326 audit(1761317776.561:10966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17477 comm="syz.6.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ffb3484efc9 code=0x7ffc0000 [ 355.056787][ T29] audit: type=1326 audit(1761317776.561:10967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17477 comm="syz.6.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3484efc9 code=0x7ffc0000 [ 355.081786][ T29] audit: type=1326 audit(1761317776.561:10968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17477 comm="syz.6.4571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb3484efc9 code=0x7ffc0000 [ 355.303170][T17500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4579'. [ 355.389855][ T29] audit: type=1326 audit(1761317777.001:10969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17509 comm="syz.3.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 355.413587][ T29] audit: type=1326 audit(1761317777.001:10970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17509 comm="syz.3.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 355.472677][ T29] audit: type=1326 audit(1761317777.001:10971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17509 comm="syz.3.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 355.496514][ T29] audit: type=1326 audit(1761317777.001:10972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17509 comm="syz.3.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 355.520299][ T29] audit: type=1326 audit(1761317777.001:10973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17509 comm="syz.3.4583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 355.545519][T17514] capability: warning: `syz.5.4585' uses 32-bit capabilities (legacy support in use) [ 355.574674][T11151] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.590047][T11151] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.599567][T11151] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.622238][T11151] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.741504][T17533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4592'. [ 355.886235][T17538] 9pnet_fd: Insufficient options for proto=fd [ 355.981082][T17545] SELinux: failed to load policy [ 356.021857][T17548] 9pnet_fd: Insufficient options for proto=fd [ 356.044367][T17548] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.110769][T17548] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.208206][T17548] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.323791][T17548] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.396824][T11186] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.422095][T11186] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.440553][T11186] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.464932][T11186] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.531207][T17588] loop7: detected capacity change from 0 to 512 [ 356.549564][T17588] EXT4-fs: Ignoring removed nobh option [ 356.570435][T17588] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm ,&#^%: corrupted inode contents [ 356.596352][T17588] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #3: comm ,&#^%: mark_inode_dirty error [ 356.645512][T17588] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #3: comm ,&#^%: corrupted inode contents [ 356.687954][T17588] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm ,&#^%: mark_inode_dirty error [ 356.733756][T17588] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm ,&#^%: Failed to acquire dquot type 0 [ 356.784234][T17588] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm ,&#^%: corrupted inode contents [ 356.816472][T17588] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #16: comm ,&#^%: mark_inode_dirty error [ 356.830323][T17588] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm ,&#^%: corrupted inode contents [ 356.843734][T17606] tipc: Started in network mode [ 356.849746][T17606] tipc: Node identity ac14140f, cluster identity 4711 [ 356.863049][T17588] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm ,&#^%: mark_inode_dirty error [ 356.884230][T17588] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm ,&#^%: corrupted inode contents [ 356.888681][T17606] tipc: New replicast peer: 255.255.255.255 [ 356.902852][T17606] tipc: Enabled bearer , priority 10 [ 356.906705][T17588] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 356.925769][T17588] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm ,&#^%: corrupted inode contents [ 356.943108][T17588] EXT4-fs error (device loop7): ext4_truncate:4637: inode #16: comm ,&#^%: mark_inode_dirty error [ 356.954166][T17588] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 356.965551][T17588] EXT4-fs (loop7): 1 truncate cleaned up [ 356.971851][T17588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.002197][T17588] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.060869][T16855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.317577][T17638] Process accounting resumed [ 357.842474][T17655] loop7: detected capacity change from 0 to 128 [ 358.017269][ T36] tipc: Node number set to 2886997007 [ 358.078763][T17686] Process accounting resumed [ 358.100701][T17688] loop7: detected capacity change from 0 to 2048 [ 358.117985][T17688] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.130494][T17688] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 358.208172][T17699] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4644: bg 0: block 345: padding at end of block bitmap is not set [ 358.223807][T17699] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1146 with error 117 [ 358.237832][T17699] EXT4-fs (loop7): This should not happen!! Data will be lost [ 358.237832][T17699] [ 358.264172][T11187] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 1162 with max blocks 2 with error 28 [ 358.276853][T11187] EXT4-fs (loop7): This should not happen!! Data will be lost [ 358.276853][T11187] [ 358.286586][T11187] EXT4-fs (loop7): Total free blocks count 0 [ 358.292650][T11187] EXT4-fs (loop7): Free/Dirty block details [ 358.298688][T11187] EXT4-fs (loop7): free_blocks=0 [ 358.303645][T11187] EXT4-fs (loop7): dirty_blocks=16 [ 358.308994][T11187] EXT4-fs (loop7): Block reservation details [ 358.622355][T17714] 9pnet_fd: Insufficient options for proto=fd [ 358.644254][T17714] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.689864][T17714] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.691718][T17718] Process accounting resumed [ 358.734829][T17714] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.760617][T17720] FAULT_INJECTION: forcing a failure. [ 358.760617][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 358.805694][T17720] CPU: 1 UID: 0 PID: 17720 Comm: syz.6.4657 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 358.805729][T17720] Tainted: [W]=WARN [ 358.805736][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 358.805749][T17720] Call Trace: [ 358.805756][T17720] [ 358.805763][T17720] __dump_stack+0x1d/0x30 [ 358.805806][T17720] dump_stack_lvl+0xe8/0x140 [ 358.805828][T17720] dump_stack+0x15/0x1b [ 358.805911][T17720] should_fail_ex+0x265/0x280 [ 358.805979][T17720] should_failslab+0x8c/0xb0 [ 358.806086][T17720] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 358.806117][T17720] ? dup_task_struct+0x70/0x6b0 [ 358.806171][T17720] dup_task_struct+0x70/0x6b0 [ 358.806208][T17720] copy_process+0x399/0x2000 [ 358.806244][T17720] ? copy_clone_args_from_user+0x3ce/0x490 [ 358.806287][T17720] kernel_clone+0x16c/0x5c0 [ 358.806343][T17720] __se_sys_clone3+0x1c2/0x200 [ 358.806388][T17720] __x64_sys_clone3+0x31/0x40 [ 358.806420][T17720] x64_sys_call+0x1fc9/0x3000 [ 358.806516][T17720] do_syscall_64+0xd2/0x200 [ 358.806558][T17720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 358.806602][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.806625][T17720] RIP: 0033:0x7ffb3484efc9 [ 358.806642][T17720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.806751][T17720] RSP: 002b:00007ffb332aef08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 358.806771][T17720] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ffb3484efc9 [ 358.806784][T17720] RDX: 00007ffb332aef20 RSI: 0000000000000058 RDI: 00007ffb332aef20 [ 358.806805][T17720] RBP: 00007ffb332af090 R08: 0000000000000000 R09: 0000000000000058 [ 358.806821][T17720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.806834][T17720] R13: 00007ffb34aa6038 R14: 00007ffb34aa5fa0 R15: 00007ffed3f86248 [ 358.806885][T17720] [ 359.255554][T17714] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.337391][T11186] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.389535][T11186] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.398845][T11186] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.432831][T11186] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.500257][T17744] __nla_validate_parse: 18 callbacks suppressed [ 359.500275][T17744] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4666'. [ 359.754085][T17752] Process accounting resumed [ 359.877044][T17763] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4671'. [ 360.007653][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4676'. [ 360.016847][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4676'. [ 360.041938][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4676'. [ 360.051096][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4676'. [ 360.064067][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4678'. [ 360.074314][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4678'. [ 360.088178][T17782] loop7: detected capacity change from 0 to 128 [ 360.107085][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4678'. [ 360.116143][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4678'. [ 360.202341][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 360.202357][ T29] audit: type=1400 audit(1761317781.811:11029): avc: denied { accept } for pid=17793 comm="syz.4.4683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 360.358490][T17804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 360.408080][T17811] team0: Mode changed to "loadbalance" [ 360.428750][ T29] audit: type=1400 audit(1761317782.031:11030): avc: denied { read write } for pid=16855 comm="syz-executor" name="loop7" dev="devtmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.452320][ T29] audit: type=1400 audit(1761317782.031:11031): avc: denied { open } for pid=16855 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.475727][ T29] audit: type=1400 audit(1761317782.031:11032): avc: denied { ioctl } for pid=16855 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=892 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.504921][ T29] audit: type=1400 audit(1761317782.111:11033): avc: denied { nlmsg_tty_audit } for pid=17818 comm=77DEA305FF07 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 360.582111][T17830] usb usb7: usbfs: process 17830 (syz.7.4696) did not claim interface 0 before use [ 360.591749][T17830] usb usb7: usbfs: process 17830 (syz.7.4696) did not claim interface 0 before use [ 360.668811][T17843] vlan2: entered allmulticast mode [ 361.016070][ T29] audit: type=1326 audit(1761317782.621:11034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.4.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 361.040017][ T29] audit: type=1326 audit(1761317782.621:11035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.4.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 361.064604][ T29] audit: type=1326 audit(1761317782.661:11036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.4.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 361.088239][ T29] audit: type=1326 audit(1761317782.661:11037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.4.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 361.112788][ T29] audit: type=1326 audit(1761317782.661:11038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17873 comm="syz.4.4709" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dc404efc9 code=0x7ffc0000 [ 361.940341][T17969] Process accounting resumed [ 362.344441][T18017] SELinux: failed to load policy [ 362.889521][T18051] Process accounting resumed [ 362.993014][T18065] FAULT_INJECTION: forcing a failure. [ 362.993014][T18065] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.006293][T18065] CPU: 0 UID: 0 PID: 18065 Comm: syz.7.4781 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 363.006332][T18065] Tainted: [W]=WARN [ 363.006359][T18065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 363.006433][T18065] Call Trace: [ 363.006442][T18065] [ 363.006449][T18065] __dump_stack+0x1d/0x30 [ 363.006476][T18065] dump_stack_lvl+0xe8/0x140 [ 363.006497][T18065] dump_stack+0x15/0x1b [ 363.006518][T18065] should_fail_ex+0x265/0x280 [ 363.006671][T18065] should_fail+0xb/0x20 [ 363.006690][T18065] should_fail_usercopy+0x1a/0x20 [ 363.006749][T18065] _copy_from_iter+0xd2/0xe80 [ 363.006773][T18065] ? __build_skb_around+0x1ab/0x200 [ 363.006840][T18065] ? __alloc_skb+0x223/0x320 [ 363.006873][T18065] netlink_sendmsg+0x471/0x6b0 [ 363.006897][T18065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.006968][T18065] __sock_sendmsg+0x145/0x180 [ 363.007004][T18065] ____sys_sendmsg+0x31e/0x4e0 [ 363.007055][T18065] ___sys_sendmsg+0x17b/0x1d0 [ 363.007193][T18065] __x64_sys_sendmsg+0xd4/0x160 [ 363.007300][T18065] x64_sys_call+0x191e/0x3000 [ 363.007326][T18065] do_syscall_64+0xd2/0x200 [ 363.007344][T18065] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 363.007434][T18065] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 363.007472][T18065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.007537][T18065] RIP: 0033:0x7f616150efc9 [ 363.007555][T18065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.007577][T18065] RSP: 002b:00007f615ff77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.007599][T18065] RAX: ffffffffffffffda RBX: 00007f6161765fa0 RCX: 00007f616150efc9 [ 363.007612][T18065] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 363.007678][T18065] RBP: 00007f615ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 363.007689][T18065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.007701][T18065] R13: 00007f6161766038 R14: 00007f6161765fa0 R15: 00007ffda1817fc8 [ 363.007722][T18065] [ 363.531814][T18107] Process accounting resumed [ 363.615305][T18120] loop7: detected capacity change from 0 to 512 [ 363.639386][T18120] EXT4-fs error (device loop7): ext4_init_orphan_info:581: comm syz.7.4797: inode #0: comm syz.7.4797: iget: illegal inode # [ 363.668405][T18120] EXT4-fs (loop7): get orphan inode failed [ 363.684903][T18120] EXT4-fs (loop7): mount failed [ 363.990140][T18144] netlink: 'syz.3.4811': attribute type 2 has an invalid length. [ 364.085744][T18151] Process accounting resumed [ 364.541198][T18190] FAULT_INJECTION: forcing a failure. [ 364.541198][T18190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.544214][T18189] netlink: 'syz.7.4831': attribute type 30 has an invalid length. [ 364.554406][T18190] CPU: 0 UID: 0 PID: 18190 Comm: syz.6.4832 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 364.554450][T18190] Tainted: [W]=WARN [ 364.554458][T18190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 364.554470][T18190] Call Trace: [ 364.554484][T18190] [ 364.554493][T18190] __dump_stack+0x1d/0x30 [ 364.554519][T18190] dump_stack_lvl+0xe8/0x140 [ 364.554544][T18190] dump_stack+0x15/0x1b [ 364.554567][T18190] should_fail_ex+0x265/0x280 [ 364.554626][T18190] should_fail+0xb/0x20 [ 364.554646][T18190] should_fail_usercopy+0x1a/0x20 [ 364.554686][T18190] _copy_to_user+0x20/0xa0 [ 364.554717][T18190] simple_read_from_buffer+0xb5/0x130 [ 364.554745][T18190] proc_fail_nth_read+0x10e/0x150 [ 364.554783][T18190] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 364.554896][T18190] vfs_read+0x1a8/0x770 [ 364.554919][T18190] ? __rcu_read_unlock+0x4f/0x70 [ 364.554951][T18190] ? __fget_files+0x184/0x1c0 [ 364.554988][T18190] ksys_read+0xda/0x1a0 [ 364.555046][T18190] __x64_sys_read+0x40/0x50 [ 364.555086][T18190] x64_sys_call+0x27c0/0x3000 [ 364.555115][T18190] do_syscall_64+0xd2/0x200 [ 364.555142][T18190] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 364.555174][T18190] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 364.555235][T18190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.555299][T18190] RIP: 0033:0x7ffb3484d9dc [ 364.555318][T18190] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 364.555340][T18190] RSP: 002b:00007ffb332af030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 364.555363][T18190] RAX: ffffffffffffffda RBX: 00007ffb34aa5fa0 RCX: 00007ffb3484d9dc [ 364.555377][T18190] RDX: 000000000000000f RSI: 00007ffb332af0a0 RDI: 0000000000000007 [ 364.555390][T18190] RBP: 00007ffb332af090 R08: 0000000000000000 R09: 0000000000000000 [ 364.555441][T18190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.555454][T18190] R13: 00007ffb34aa6038 R14: 00007ffb34aa5fa0 R15: 00007ffed3f86248 [ 364.555512][T18190] [ 364.618959][T18193] __nla_validate_parse: 85 callbacks suppressed [ 364.618979][T18193] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4833'. [ 365.004416][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4844'. [ 365.014797][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4844'. [ 365.025012][T18217] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4844'. [ 365.027267][T18223] Process accounting resumed [ 365.058384][T18221] 9pnet_fd: Insufficient options for proto=fd [ 365.075629][T18221] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.094425][T18229] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4850'. [ 365.119278][T18221] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.160994][T18239] binfmt_misc: register: failed to install interpreter file ./file0 [ 365.170652][T18221] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.234486][T18221] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.296283][T18252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4859'. [ 365.306565][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 365.306582][ T29] audit: type=1326 audit(1761317786.921:11285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18253 comm="syz.5.4858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625722efc9 code=0x0 [ 365.336595][T18252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4859'. [ 365.345701][T18252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4859'. [ 365.364795][T18249] Process accounting resumed [ 365.369731][ T29] audit: type=1400 audit(1761317786.971:11286): avc: denied { setopt } for pid=18243 comm=262EA9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.382903][T11187] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.429126][ T29] audit: type=1400 audit(1761317787.041:11287): avc: denied { create } for pid=18253 comm="syz.5.4858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 365.460530][T11187] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.470788][T11187] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.481913][T11187] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.501382][T18261] sd 0:0:1:0: device reset [ 365.502585][ T29] audit: type=1400 audit(1761317787.111:11288): avc: denied { ioctl } for pid=18253 comm="syz.5.4858" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 365.693116][T18269] v: renamed from ip6_vti0 (while UP) [ 365.764578][ T29] audit: type=1400 audit(1761317787.371:11289): avc: denied { compute_member } for pid=18280 comm="syz.7.4867" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 365.951757][T18295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4873'. [ 366.060168][T18309] FAULT_INJECTION: forcing a failure. [ 366.060168][T18309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.073384][T18309] CPU: 1 UID: 0 PID: 18309 Comm: syz.7.4880 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 366.073422][T18309] Tainted: [W]=WARN [ 366.073430][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 366.073444][T18309] Call Trace: [ 366.073452][T18309] [ 366.073460][T18309] __dump_stack+0x1d/0x30 [ 366.073554][T18309] dump_stack_lvl+0xe8/0x140 [ 366.073606][T18309] dump_stack+0x15/0x1b [ 366.073629][T18309] should_fail_ex+0x265/0x280 [ 366.073671][T18309] should_fail+0xb/0x20 [ 366.073687][T18309] should_fail_usercopy+0x1a/0x20 [ 366.073829][T18309] _copy_from_iter+0xd2/0xe80 [ 366.073935][T18309] ? file_tty_write+0x1d4/0x690 [ 366.073962][T18309] ? __traceiter_kfree+0x2e/0x50 [ 366.073991][T18309] ? file_tty_write+0x1d4/0x690 [ 366.074015][T18309] ? kfree+0x351/0x400 [ 366.074104][T18309] file_tty_write+0x322/0x690 [ 366.074131][T18309] ? __pfx_tty_write+0x10/0x10 [ 366.074150][T18309] tty_write+0x25/0x30 [ 366.074168][T18309] vfs_write+0x52a/0x960 [ 366.074269][T18309] ksys_write+0xda/0x1a0 [ 366.074302][T18309] __x64_sys_write+0x40/0x50 [ 366.074428][T18309] x64_sys_call+0x2802/0x3000 [ 366.074456][T18309] do_syscall_64+0xd2/0x200 [ 366.074525][T18309] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 366.074578][T18309] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 366.074616][T18309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.074643][T18309] RIP: 0033:0x7f616150efc9 [ 366.074658][T18309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.074687][T18309] RSP: 002b:00007f615ff77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 366.074705][T18309] RAX: ffffffffffffffda RBX: 00007f6161765fa0 RCX: 00007f616150efc9 [ 366.074718][T18309] RDX: 0000000000001006 RSI: 00002000000027c0 RDI: 0000000000000004 [ 366.074733][T18309] RBP: 00007f615ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 366.074749][T18309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.074764][T18309] R13: 00007f6161766038 R14: 00007f6161765fa0 R15: 00007ffda1817fc8 [ 366.074790][T18309] [ 366.357971][ T29] audit: type=1400 audit(1761317787.951:11290): avc: denied { sys_module } for pid=18300 comm="syz.6.4876" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 366.410624][T18322] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4885'. [ 366.423239][T18301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18301 comm=+}[@ [ 366.430581][ T29] audit: type=1400 audit(1761317788.041:11291): avc: denied { create } for pid=18300 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.464971][T18327] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 366.482444][ T29] audit: type=1400 audit(1761317788.071:11292): avc: denied { write } for pid=18326 comm="syz.3.4887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.503952][ T29] audit: type=1400 audit(1761317788.071:11293): avc: denied { nlmsg_write } for pid=18326 comm="syz.3.4887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 366.525737][ T29] audit: type=1400 audit(1761317788.091:11294): avc: denied { create } for pid=18328 comm="syz.5.4888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 366.616770][T18343] loop7: detected capacity change from 0 to 256 [ 366.623722][T18343] FAT-fs (loop7): bogus number of FAT sectors [ 366.629913][T18343] FAT-fs (loop7): Can't find a valid FAT filesystem [ 366.863086][T18378] loop7: detected capacity change from 0 to 1024 [ 366.879417][T18378] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.902988][T18378] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 366.924470][T18378] EXT4-fs (loop7): orphan cleanup on readonly fs [ 366.939648][T18378] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4907: Invalid inode table block 0 in block_group 0 [ 366.967321][T18378] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 366.988520][T18378] EXT4-fs error (device loop7): ext4_quota_write:7334: inode #3: comm syz.7.4907: mark_inode_dirty error [ 367.032327][T18390] block device autoloading is deprecated and will be removed. [ 367.047674][T18378] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4907: Failed to acquire dquot type 0 [ 367.090572][T18378] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4907: Invalid inode table block 0 in block_group 0 [ 367.154188][T18394] FAULT_INJECTION: forcing a failure. [ 367.154188][T18394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.168562][T18394] CPU: 1 UID: 0 PID: 18394 Comm: syz.4.4913 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 367.168632][T18394] Tainted: [W]=WARN [ 367.168641][T18394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.168656][T18394] Call Trace: [ 367.168665][T18394] [ 367.168729][T18394] __dump_stack+0x1d/0x30 [ 367.168817][T18394] dump_stack_lvl+0xe8/0x140 [ 367.168842][T18394] dump_stack+0x15/0x1b [ 367.168864][T18394] should_fail_ex+0x265/0x280 [ 367.169044][T18394] should_fail_alloc_page+0xf2/0x100 [ 367.169163][T18394] __alloc_frozen_pages_noprof+0xff/0x360 [ 367.169201][T18394] alloc_pages_mpol+0xb3/0x260 [ 367.169234][T18394] alloc_pages_noprof+0x90/0x130 [ 367.169257][T18394] __pmd_alloc+0x47/0x420 [ 367.169284][T18394] handle_mm_fault+0x19d4/0x2be0 [ 367.169308][T18394] ? __rcu_read_unlock+0x4f/0x70 [ 367.169335][T18394] ? mt_find+0x208/0x320 [ 367.169395][T18394] do_user_addr_fault+0x3fe/0x1080 [ 367.169428][T18394] exc_page_fault+0x62/0xa0 [ 367.169458][T18394] asm_exc_page_fault+0x26/0x30 [ 367.169477][T18394] RIP: 0010:__get_user_8+0x14/0x30 [ 367.169539][T18394] Code: ca e9 80 ec 01 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca e9 4f ec 01 00 90 90 90 90 90 90 90 90 90 [ 367.169557][T18394] RSP: 0018:ffffc90001fb3eb0 EFLAGS: 00050287 [ 367.169572][T18394] RAX: 0000200000000400 RBX: 0000200000000400 RCX: ffff8881036e5280 [ 367.169586][T18394] RDX: 00007ffffffff000 RSI: 0000200000000400 RDI: 0000000000000002 [ 367.169658][T18394] RBP: ffffc90001fb3f48 R08: 0001c90001fb3fc7 R09: 0000000000000000 [ 367.169718][T18394] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 367.169734][T18394] R13: 0000000000000000 R14: 0000000000000002 R15: ffff8881036e5280 [ 367.169761][T18394] __se_sys_io_setup+0x1d/0x1b0 [ 367.169827][T18394] __x64_sys_io_setup+0x31/0x40 [ 367.169863][T18394] x64_sys_call+0x2f0e/0x3000 [ 367.169892][T18394] do_syscall_64+0xd2/0x200 [ 367.169940][T18394] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 367.170042][T18394] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 367.170072][T18394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.170093][T18394] RIP: 0033:0x7f7dc404efc9 [ 367.170120][T18394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.170173][T18394] RSP: 002b:00007f7dc2aaf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 367.170191][T18394] RAX: ffffffffffffffda RBX: 00007f7dc42a5fa0 RCX: 00007f7dc404efc9 [ 367.170203][T18394] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000002 [ 367.170215][T18394] RBP: 00007f7dc2aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 367.170226][T18394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.170239][T18394] R13: 00007f7dc42a6038 R14: 00007f7dc42a5fa0 R15: 00007fff9e4c2b68 [ 367.170262][T18394] [ 367.276739][T18378] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 367.483395][T18378] EXT4-fs error (device loop7): ext4_ext_truncate:4475: inode #15: comm syz.7.4907: mark_inode_dirty error [ 367.505221][T18378] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4907: Invalid inode table block 0 in block_group 0 [ 367.537493][T18378] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 367.557718][T18378] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 367.567815][T18378] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4907: Invalid inode table block 0 in block_group 0 [ 367.586176][T18378] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 367.595894][T18378] EXT4-fs error (device loop7): ext4_truncate:4637: inode #15: comm syz.7.4907: mark_inode_dirty error [ 367.609460][T18378] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 367.619147][T18378] EXT4-fs (loop7): 1 truncate cleaned up [ 367.626235][T18378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.642750][T18378] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.650305][T18378] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.659857][T18378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.668479][T18378] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.758092][T18409] Process accounting resumed [ 367.782491][T18415] netlink: 'syz.3.4918': attribute type 1 has an invalid length. [ 367.809812][T16855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.847535][T18415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 367.907276][T18425] veth0: entered promiscuous mode [ 367.977303][T18425] veth0: left promiscuous mode [ 368.055208][T18440] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 368.154680][T18440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18440 comm=syz.7.4931 [ 368.523518][T18492] netlink: 'syz.4.4950': attribute type 7 has an invalid length. [ 368.744342][T18522] loop7: detected capacity change from 0 to 256 [ 368.751412][T18522] FAT-fs (loop7): bogus number of FAT sectors [ 368.757645][T18522] FAT-fs (loop7): Can't find a valid FAT filesystem [ 368.953406][T18542] netlink: 'syz.4.4970': attribute type 7 has an invalid length. [ 368.976363][T18541] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.037845][T18541] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.098606][T18541] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.170085][T18541] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.184111][T18553] loop7: detected capacity change from 0 to 1024 [ 369.210730][T18553] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 369.239049][T18553] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 369.255875][T18553] EXT4-fs (loop7): orphan cleanup on readonly fs [ 369.262333][T11187] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.281900][T18553] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4974: Invalid inode table block 0 in block_group 0 [ 369.289500][T11187] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.327855][T18553] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 369.339330][T11187] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.353057][T18553] EXT4-fs error (device loop7): ext4_quota_write:7334: inode #3: comm syz.7.4974: mark_inode_dirty error [ 369.353217][T11151] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.364568][T18553] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.4974: Failed to acquire dquot type 0 [ 369.364691][T18553] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4974: Invalid inode table block 0 in block_group 0 [ 369.364762][T18553] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 369.364854][T18553] EXT4-fs error (device loop7): ext4_ext_truncate:4475: inode #15: comm syz.7.4974: mark_inode_dirty error [ 369.364977][T18553] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4974: Invalid inode table block 0 in block_group 0 [ 369.365044][T18553] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 369.365127][T18553] EXT4-fs error (device loop7) in ext4_orphan_del:301: Corrupt filesystem [ 369.365191][T18553] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.4974: Invalid inode table block 0 in block_group 0 [ 369.365293][T18553] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 369.365355][T18553] EXT4-fs error (device loop7): ext4_truncate:4637: inode #15: comm syz.7.4974: mark_inode_dirty error [ 369.415101][T18553] EXT4-fs error (device loop7) in ext4_process_orphan:343: Corrupt filesystem [ 369.499150][T18553] EXT4-fs (loop7): 1 truncate cleaned up [ 369.505234][T18553] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.536947][T16855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.620351][T18575] __nla_validate_parse: 36 callbacks suppressed [ 369.620365][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4982'. [ 369.635773][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4982'. [ 369.644945][T18577] netlink: 'syz.6.4983': attribute type 7 has an invalid length. [ 369.652924][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4983'. [ 369.699704][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4982'. [ 369.709939][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4982'. [ 369.813942][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4988'. [ 369.827453][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4982'. [ 369.837637][T18575] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4982'. [ 369.850286][T18596] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4988'. [ 369.859351][T18596] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4988'. [ 369.895225][T18602] FAULT_INJECTION: forcing a failure. [ 369.895225][T18602] name failslab, interval 1, probability 0, space 0, times 0 [ 369.909204][T18602] CPU: 1 UID: 0 PID: 18602 Comm: syz.6.4991 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 369.909236][T18602] Tainted: [W]=WARN [ 369.909244][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 369.909260][T18602] Call Trace: [ 369.909267][T18602] [ 369.909277][T18602] __dump_stack+0x1d/0x30 [ 369.909323][T18602] dump_stack_lvl+0xe8/0x140 [ 369.909348][T18602] dump_stack+0x15/0x1b [ 369.909364][T18602] should_fail_ex+0x265/0x280 [ 369.909406][T18602] should_failslab+0x8c/0xb0 [ 369.909439][T18602] kmem_cache_alloc_noprof+0x50/0x480 [ 369.909473][T18602] ? security_file_alloc+0x32/0x100 [ 369.909506][T18602] security_file_alloc+0x32/0x100 [ 369.909558][T18602] init_file+0x5c/0x1d0 [ 369.909640][T18602] alloc_empty_file+0x8b/0x200 [ 369.909747][T18602] path_openat+0x68/0x2170 [ 369.909776][T18602] ? _parse_integer_limit+0x170/0x190 [ 369.909819][T18602] ? kstrtoull+0x111/0x140 [ 369.909883][T18602] ? kstrtouint+0x76/0xc0 [ 369.909952][T18602] do_filp_open+0x109/0x230 [ 369.909990][T18602] do_sys_openat2+0xa6/0x110 [ 369.910015][T18602] __x64_sys_openat+0xf2/0x120 [ 369.910039][T18602] x64_sys_call+0x2eab/0x3000 [ 369.910066][T18602] do_syscall_64+0xd2/0x200 [ 369.910110][T18602] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 369.910142][T18602] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 369.910182][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.910208][T18602] RIP: 0033:0x7ffb3484efc9 [ 369.910290][T18602] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.910309][T18602] RSP: 002b:00007ffb332af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 369.910353][T18602] RAX: ffffffffffffffda RBX: 00007ffb34aa5fa0 RCX: 00007ffb3484efc9 [ 369.910369][T18602] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 369.910385][T18602] RBP: 00007ffb332af090 R08: 0000000000000000 R09: 0000000000000000 [ 369.910400][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.910425][T18602] R13: 00007ffb34aa6038 R14: 00007ffb34aa5fa0 R15: 00007ffed3f86248 [ 369.910444][T18602] [ 370.135090][T18606] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.198668][T18617] netlink: 'syz.7.4997': attribute type 7 has an invalid length. [ 370.223956][T18606] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.278953][T18606] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.323736][T18635] loop7: detected capacity change from 0 to 256 [ 370.333182][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 370.333199][ T29] audit: type=1400 audit(1761317791.951:11563): avc: denied { mount } for pid=18634 comm="syz.7.5004" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 370.367362][ T29] audit: type=1400 audit(1761317791.961:11564): avc: denied { read write } for pid=18634 comm="syz.7.5004" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.378003][T18606] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.391185][ T29] audit: type=1400 audit(1761317791.961:11565): avc: denied { open } for pid=18634 comm="syz.7.5004" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.391232][ T29] audit: type=1400 audit(1761317791.961:11566): avc: denied { ioctl } for pid=18634 comm="syz.7.5004" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 370.461471][ T29] audit: type=1400 audit(1761317792.071:11567): avc: denied { name_bind } for pid=18632 comm="syz.6.5003" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 370.535194][T11186] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.548157][T11186] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.560845][T11137] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.573742][T11137] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.603345][ T29] audit: type=1400 audit(1761317792.211:11568): avc: denied { unmount } for pid=16855 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 370.675568][ T29] audit: type=1400 audit(1761317792.281:11569): avc: denied { bind } for pid=18651 comm="syz.7.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.699077][ T29] audit: type=1400 audit(1761317792.311:11570): avc: denied { setopt } for pid=18651 comm="syz.7.5010" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 370.722201][T18652] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.808587][T18652] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.841983][ T29] audit: type=1400 audit(1761317792.451:11571): avc: denied { read } for pid=18671 comm="syz.3.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 370.889047][T18652] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.929996][T18652] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.972585][ T29] audit: type=1326 audit(1761317792.581:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18676 comm="syz.5.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625722efc9 code=0x7ffc0000 [ 371.027199][T11153] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.045862][T11153] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.065908][T11153] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.075983][T11153] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.499214][T18724] FAULT_INJECTION: forcing a failure. [ 371.499214][T18724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.512391][T18724] CPU: 0 UID: 0 PID: 18724 Comm: syz.4.5039 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 371.512476][T18724] Tainted: [W]=WARN [ 371.512483][T18724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 371.512494][T18724] Call Trace: [ 371.512501][T18724] [ 371.512508][T18724] __dump_stack+0x1d/0x30 [ 371.512528][T18724] dump_stack_lvl+0xe8/0x140 [ 371.512547][T18724] dump_stack+0x15/0x1b [ 371.512562][T18724] should_fail_ex+0x265/0x280 [ 371.512663][T18724] should_fail+0xb/0x20 [ 371.512780][T18724] should_fail_usercopy+0x1a/0x20 [ 371.512846][T18724] _copy_from_user+0x1c/0xb0 [ 371.512868][T18724] ___sys_sendmsg+0xc1/0x1d0 [ 371.512958][T18724] __x64_sys_sendmsg+0xd4/0x160 [ 371.512991][T18724] x64_sys_call+0x191e/0x3000 [ 371.513011][T18724] do_syscall_64+0xd2/0x200 [ 371.513038][T18724] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 371.513062][T18724] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 371.513163][T18724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.513181][T18724] RIP: 0033:0x7f7dc404efc9 [ 371.513194][T18724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.513209][T18724] RSP: 002b:00007f7dc2aaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.513282][T18724] RAX: ffffffffffffffda RBX: 00007f7dc42a5fa0 RCX: 00007f7dc404efc9 [ 371.513293][T18724] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 371.513304][T18724] RBP: 00007f7dc2aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 371.513314][T18724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.513325][T18724] R13: 00007f7dc42a6038 R14: 00007f7dc42a5fa0 R15: 00007fff9e4c2b68 [ 371.513342][T18724] [ 372.130223][T18762] ip6t_srh: unknown srh match flags 4000 [ 372.197149][T18765] veth0: entered promiscuous mode [ 372.257531][T18763] veth0: left promiscuous mode [ 372.319022][T18777] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.352320][T18782] veth0: entered promiscuous mode [ 372.390060][T18777] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.427887][T18781] veth0: left promiscuous mode [ 372.449126][T18777] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.519209][T18777] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.906822][T18832] ip6t_srh: unknown srh match flags 4000 [ 373.217462][T18859] veth0: entered promiscuous mode [ 373.280280][T18858] veth0: left promiscuous mode [ 373.566612][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 373.593090][T18885] macvtap0: entered promiscuous mode [ 373.610856][T18885] macvtap0: left promiscuous mode [ 373.870542][T18892] SELinux: Context system_u:object is not valid (left unmapped). [ 374.380056][T18912] ip6t_srh: unknown srh match flags 4000 [ 374.601429][T11151] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.626508][T11151] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.645962][T11151] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.658782][T11151] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.672741][T18953] __nla_validate_parse: 41 callbacks suppressed [ 374.672755][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5130'. [ 374.690366][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5130'. [ 374.724518][T18958] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.745935][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5130'. [ 374.757188][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5130'. [ 374.819094][T18958] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.839415][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5130'. [ 374.848613][T18953] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5130'. [ 374.881290][T18958] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.958221][T18958] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.103127][T18991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5145'. [ 375.242307][T19003] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5149'. [ 375.265801][T19007] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5151'. [ 375.425456][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 375.425475][ T29] audit: type=1326 audit(1761317797.031:11697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.491215][ T29] audit: type=1326 audit(1761317797.031:11698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.514926][ T29] audit: type=1326 audit(1761317797.071:11699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.538915][ T29] audit: type=1326 audit(1761317797.071:11700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.563043][ T29] audit: type=1326 audit(1761317797.071:11701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=313 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.586651][ T29] audit: type=1326 audit(1761317797.071:11702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.610450][ T29] audit: type=1326 audit(1761317797.071:11703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.633969][ T29] audit: type=1326 audit(1761317797.071:11704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.657674][ T29] audit: type=1326 audit(1761317797.071:11705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.681268][ T29] audit: type=1326 audit(1761317797.071:11706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19014 comm="syz.3.5154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 375.708404][T19022] ip6t_srh: unknown srh match flags 4000 [ 375.715484][T19018] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.742026][T19024] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.771341][T19018] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.809006][T19024] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.840831][T19018] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.879138][T19024] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.912122][T19031] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5161'. [ 375.930643][T19018] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.968677][T19024] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.078077][T11151] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.098601][T11151] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.106964][T11151] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.115238][T11151] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.221299][T11137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.250154][T11137] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.281594][T11137] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.290196][T11137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.390475][T19060] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.464436][T19060] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.518320][T19060] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.544933][T19081] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.579994][T19060] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.601788][T19081] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.651377][T11151] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.664597][T11151] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.678886][T11151] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.690268][T19081] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.705558][T11151] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.748851][T19081] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.811423][T11151] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.842328][T11151] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.860225][T11151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.878690][T11151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.028864][T19136] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.081415][T19136] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.129437][T19136] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.179407][T19136] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.773649][T19200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.783651][T19200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.443216][T19259] block device autoloading is deprecated and will be removed. [ 379.512894][T11187] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.533801][T11187] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.542343][T11187] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.551347][T11187] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.970402][T11137] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.009198][T11137] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.040616][T11137] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.071941][T11137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.096487][T19382] __nla_validate_parse: 40 callbacks suppressed [ 380.096522][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5302'. [ 380.111896][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5302'. [ 380.170412][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5302'. [ 380.179511][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5302'. [ 380.205711][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5302'. [ 380.214918][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5302'. [ 380.381494][T19409] loop7: detected capacity change from 0 to 256 [ 380.398589][T19409] FAT-fs (loop7): bogus number of FAT sectors [ 380.404801][T19409] FAT-fs (loop7): Can't find a valid FAT filesystem [ 380.496692][T19423] block device autoloading is deprecated and will be removed. [ 380.507772][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 380.507791][ T29] audit: type=1326 audit(1761317802.121:11993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.570018][ T29] audit: type=1326 audit(1761317802.121:11994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.594798][ T29] audit: type=1326 audit(1761317802.121:11995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.619439][ T29] audit: type=1326 audit(1761317802.121:11996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.644661][ T29] audit: type=1326 audit(1761317802.121:11997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.669548][ T29] audit: type=1326 audit(1761317802.121:11998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.693148][ T29] audit: type=1326 audit(1761317802.121:11999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.718020][ T29] audit: type=1326 audit(1761317802.121:12000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.742740][ T29] audit: type=1326 audit(1761317802.121:12001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.766365][ T29] audit: type=1326 audit(1761317802.121:12002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19422 comm="syz.7.5319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f616150efc9 code=0x7ffc0000 [ 380.814863][T19437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5324'. [ 380.825210][T19437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5324'. [ 380.835313][T19437] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5324'. [ 381.048205][T19457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5334'. [ 381.582332][T19503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.603997][T19503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.917946][T19532] syzkaller1: entered promiscuous mode [ 381.923692][T19532] syzkaller1: entered allmulticast mode [ 382.337340][T19589] syzkaller1: entered promiscuous mode [ 382.342943][T19589] syzkaller1: entered allmulticast mode [ 382.574148][T19623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.614509][T19623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.907196][T19664] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.948564][T19664] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.034820][T19664] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.110547][T19664] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.181443][T11187] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.218494][T11187] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.233485][T11187] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.242328][T11187] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.840459][T19746] syzkaller1: entered promiscuous mode [ 383.846053][T19746] syzkaller1: entered allmulticast mode [ 384.351197][T19792] chnl_net:caif_netlink_parms(): no params data found [ 384.452648][T19792] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.460989][T19792] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.469367][T19792] bridge_slave_0: entered allmulticast mode [ 384.476037][T19792] bridge_slave_0: entered promiscuous mode [ 384.484179][T19834] bridge: RTM_NEWNEIGH with invalid ether address [ 384.490915][T19792] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.498169][T19792] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.505532][T19792] bridge_slave_1: entered allmulticast mode [ 384.512510][T19792] bridge_slave_1: entered promiscuous mode [ 384.531083][T19836] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.543827][T19792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.554772][T19792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.578598][T19792] team0: Port device team_slave_0 added [ 384.585479][T19792] team0: Port device team_slave_1 added [ 384.604659][T19836] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.618071][T19792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.625117][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.651074][T19792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.666359][T19792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.673375][T19792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.699618][T19792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.730638][T19792] hsr_slave_0: entered promiscuous mode [ 384.737955][T19792] hsr_slave_1: entered promiscuous mode [ 384.744118][T19792] debugfs: 'hsr0' already exists in 'hsr' [ 384.751079][T19792] Cannot create hsr debugfs directory [ 384.758772][T19836] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.809953][T19836] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.829796][T19850] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.860985][T19792] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.898816][T19850] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.937626][T19792] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.998787][T19850] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.048702][T19792] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.073392][T19856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.081972][T19856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.091080][T19850] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.118843][T19792] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.173595][T11151] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.186051][T11151] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.199476][T11151] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.211265][T11151] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.283184][T11151] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.294620][T11151] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.307139][T11151] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.320279][T11151] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.428278][T19866] syzkaller1: entered promiscuous mode [ 385.433813][T19866] syzkaller1: entered allmulticast mode [ 385.565378][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 385.565397][ T29] audit: type=1326 audit(1761317807.171:12606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.598284][ T29] audit: type=1326 audit(1761317807.171:12607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.623175][ T29] audit: type=1326 audit(1761317807.171:12608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.647804][ T29] audit: type=1326 audit(1761317807.191:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.671460][ T29] audit: type=1326 audit(1761317807.191:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.675887][T19889] __nla_validate_parse: 20 callbacks suppressed [ 385.675901][T19889] netlink: 72 bytes leftover after parsing attributes in process `syz.7.5517'. [ 385.696581][ T29] audit: type=1326 audit(1761317807.191:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.735899][ T29] audit: type=1326 audit(1761317807.191:12612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.760486][ T29] audit: type=1326 audit(1761317807.191:12613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.785028][ T29] audit: type=1326 audit(1761317807.191:12614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.809723][ T29] audit: type=1326 audit(1761317807.191:12615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19886 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaeff7efc9 code=0x7ffc0000 [ 385.953327][T19905] vhci_hcd: default hub control req: 8015 vff0c i0000 l0 [ 386.154184][T19919] FAULT_INJECTION: forcing a failure. [ 386.154184][T19919] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 386.167655][T19919] CPU: 0 UID: 0 PID: 19919 Comm: syz.7.5528 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 386.167746][T19919] Tainted: [W]=WARN [ 386.167753][T19919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 386.167764][T19919] Call Trace: [ 386.167770][T19919] [ 386.167777][T19919] __dump_stack+0x1d/0x30 [ 386.167797][T19919] dump_stack_lvl+0xe8/0x140 [ 386.167815][T19919] dump_stack+0x15/0x1b [ 386.167889][T19919] should_fail_ex+0x265/0x280 [ 386.167918][T19919] should_fail_alloc_page+0xf2/0x100 [ 386.167994][T19919] __alloc_frozen_pages_noprof+0xff/0x360 [ 386.168026][T19919] alloc_pages_mpol+0xb3/0x260 [ 386.168045][T19919] alloc_pages_noprof+0x90/0x130 [ 386.168063][T19919] __pud_alloc+0x47/0x470 [ 386.168124][T19919] handle_mm_fault+0x1882/0x2be0 [ 386.168212][T19919] ? __rcu_read_unlock+0x4f/0x70 [ 386.168235][T19919] ? mt_find+0x208/0x320 [ 386.168258][T19919] do_user_addr_fault+0x3fe/0x1080 [ 386.168280][T19919] exc_page_fault+0x62/0xa0 [ 386.168340][T19919] asm_exc_page_fault+0x26/0x30 [ 386.168357][T19919] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 386.168398][T19919] Code: f9 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f9 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 386.168488][T19919] RSP: 0018:ffffc90001f27db0 EFLAGS: 00050202 [ 386.168549][T19919] RAX: ffff88810c618aa0 RBX: 0000000000000078 RCX: 0000000000000078 [ 386.168632][T19919] RDX: 0000000000000000 RSI: ffffc90001f27e60 RDI: 0000200000000000 [ 386.168649][T19919] RBP: 0000000000000000 R08: 0000000000000303 R09: 0000000000000000 [ 386.168666][T19919] R10: 0001c90001f27e60 R11: 0001c90001f27ed7 R12: 0000200000000078 [ 386.168677][T19919] R13: 00007ffffffff000 R14: 0000200000000000 R15: ffffc90001f27e60 [ 386.168695][T19919] _copy_to_user+0x7c/0xa0 [ 386.168719][T19919] __x64_sys_fstatfs+0xe8/0x140 [ 386.168746][T19919] x64_sys_call+0x1ebd/0x3000 [ 386.168842][T19919] do_syscall_64+0xd2/0x200 [ 386.168858][T19919] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 386.168916][T19919] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 386.168944][T19919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.168963][T19919] RIP: 0033:0x7f616150efc9 [ 386.168976][T19919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.169047][T19919] RSP: 002b:00007f615ff77038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 386.169062][T19919] RAX: ffffffffffffffda RBX: 00007f6161765fa0 RCX: 00007f616150efc9 [ 386.169078][T19919] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 386.169093][T19919] RBP: 00007f615ff77090 R08: 0000000000000000 R09: 0000000000000000 [ 386.169152][T19919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.169164][T19919] R13: 00007f6161766038 R14: 00007f6161765fa0 R15: 00007ffda1817fc8 [ 386.169181][T19919] [ 386.729252][T19924] loop7: detected capacity change from 0 to 512 [ 386.747852][T19924] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 386.766640][T19924] EXT4-fs (loop7): orphan cleanup on readonly fs [ 386.774711][T19924] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #16: comm syz.7.5530: corrupted inode contents [ 386.787109][T19924] EXT4-fs (loop7): Remounting filesystem read-only [ 386.793776][T19924] EXT4-fs (loop7): 1 truncate cleaned up [ 386.800985][T11187] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 386.811562][T11187] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 386.822282][T11187] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 386.833088][T19924] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 386.902750][T16855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.026695][T19945] vhci_hcd: default hub control req: 8015 vff0c i0000 l0 [ 387.058066][T19945] loop7: detected capacity change from 0 to 512 [ 387.082846][T19945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.100007][T19945] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.184122][T19792] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 387.210489][T19792] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 387.237323][T19955] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5538'. [ 387.268203][T19957] netlink: 'syz.6.5539': attribute type 30 has an invalid length. [ 387.269683][T19792] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 387.288828][T16855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.300427][T19792] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 387.352177][T19968] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5541'. [ 387.369807][T19792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.382176][T19792] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.404670][T11186] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.411792][T11186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 387.451075][T11186] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.458353][T11186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.507648][T19974] bridge: RTM_NEWNEIGH with invalid ether address [ 387.790092][T19989] loop7: detected capacity change from 0 to 2048 [ 387.831446][T19989] Alternate GPT is invalid, using primary GPT. [ 387.838992][T19989] loop7: p1 p2 p3 [ 387.842723][T19989] loop7: partition table partially beyond EOD, truncated [ 387.934551][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5556'. [ 388.018459][T11137] bond0 (unregistering): Released all slaves [ 388.040980][T20015] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5562'. [ 388.067885][T11137] tipc: Disabling bearer [ 388.073193][T11137] tipc: Left network mode [ 388.084532][T19792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.209915][T11137] hsr_slave_0: left promiscuous mode [ 388.217750][T11137] hsr_slave_1: left promiscuous mode [ 388.227754][T11137] veth1_macvtap: left promiscuous mode [ 388.233261][T11137] veth0_macvtap: left promiscuous mode [ 388.264698][T20036] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5567'. [ 388.274422][T20036] netlink: 100 bytes leftover after parsing attributes in process `syz.6.5567'. [ 388.342806][T11189] smc: removing ib device syz! [ 388.508123][T19792] veth0_vlan: entered promiscuous mode [ 388.528628][T19792] veth1_vlan: entered promiscuous mode [ 388.550545][T19792] veth0_macvtap: entered promiscuous mode [ 388.563000][T19792] veth1_macvtap: entered promiscuous mode [ 388.574488][T19792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.586673][T20063] ipip0: entered promiscuous mode [ 388.595789][T19792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.633176][T11187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.672341][T11187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.683925][T20052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.697323][T11187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.724378][T20052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.727377][T11187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.752919][T20071] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5578'. [ 388.818364][T20075] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.882788][T20075] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.929157][T20075] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.965478][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5585'. [ 388.989439][T20075] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.033529][T11137] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.050806][T11137] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.059235][T11137] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.077178][T11189] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.303394][T20114] netlink: 'syz.7.5596': attribute type 30 has an invalid length. [ 389.320601][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5597'. [ 389.612043][T20134] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 389.612043][T20134] program syz.7.5604 not setting count and/or reply_len properly [ 389.637989][T20134] loop7: detected capacity change from 0 to 512 [ 389.658437][T20134] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5604: couldn't read orphan inode 26 (err -116) [ 389.681508][T20134] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.695390][T20134] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.709377][T20134] EXT4-fs error (device loop7): ext4_lookup:1787: inode #15: comm syz.7.5604: iget: bad i_size value: 360287970189639690 [ 389.818442][T16855] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.367962][T20173] xt_connbytes: Forcing CT accounting to be enabled [ 390.408397][T20173] Cannot find set identified by id 0 to match [ 390.674091][T20211] x_tables: ip_tables: osf match: only valid for protocol 6 [ 390.714925][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 390.714993][ T29] audit: type=1326 audit(1761317812.321:13034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.760105][ T29] audit: type=1326 audit(1761317812.341:13035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.783832][ T29] audit: type=1326 audit(1761317812.341:13036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.807685][ T29] audit: type=1326 audit(1761317812.341:13037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.831386][ T29] audit: type=1326 audit(1761317812.341:13038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.855079][ T29] audit: type=1326 audit(1761317812.341:13039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.878746][ T29] audit: type=1326 audit(1761317812.341:13040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.902434][ T29] audit: type=1326 audit(1761317812.341:13041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.926122][ T29] audit: type=1326 audit(1761317812.341:13042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 390.949724][ T29] audit: type=1326 audit(1761317812.341:13043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20202 comm="syz.4.5631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd63defc9 code=0x7ffc0000 [ 391.261772][T20263] __nla_validate_parse: 2 callbacks suppressed [ 391.261788][T20263] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5652'. [ 391.303620][T20264] SELinux: policydb version 1592500946 does not match my version range 15-35 [ 391.314584][T20264] SELinux: failed to load policy [ 391.357420][T20270] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5655'. [ 391.367816][T20270] netlink: 108 bytes leftover after parsing attributes in process `syz.7.5655'. [ 391.378006][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5655'. [ 391.481977][T20290] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5664'. [ 391.726424][T20325] netlink: 44 bytes leftover after parsing attributes in process `syz.7.5678'. [ 391.811792][T20314] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 391.895152][T20321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.928719][T20321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.078289][T20314] ================================================================== [ 392.086423][T20314] BUG: KCSAN: data-race in __set_task_comm / strlen [ 392.093012][T20314] [ 392.095339][T20314] write to 0xffff88810cc8a878 of 10 bytes by task 20353 on cpu 0: [ 392.103162][T20314] __set_task_comm+0x4d/0x140 [ 392.107839][T20314] __se_sys_prctl+0xb2f/0x12e0 [ 392.112610][T20314] __x64_sys_prctl+0x67/0x80 [ 392.117206][T20314] x64_sys_call+0x20cf/0x3000 [ 392.121897][T20314] do_syscall_64+0xd2/0x200 [ 392.126396][T20314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.132285][T20314] [ 392.134616][T20314] read to 0xffff88810cc8a881 of 1 bytes by task 20314 on cpu 1: [ 392.142237][T20314] strlen+0x19/0x40 [ 392.146038][T20314] perf_trace_sched_stat_runtime+0x3c/0x150 [ 392.151935][T20314] update_se+0x129/0x140 [ 392.156184][T20314] update_curr+0x2c/0x1b0 [ 392.160525][T20314] enqueue_task_fair+0x146/0x980 [ 392.165484][T20314] activate_task+0x59/0xb0 [ 392.169913][T20314] ttwu_do_activate+0x69/0x210 [ 392.174672][T20314] try_to_wake_up+0x37f/0x630 [ 392.179344][T20314] autoremove_wake_function+0x10/0x50 [ 392.184710][T20314] __wake_up_sync_key+0x52/0x80 [ 392.189568][T20314] __unix_dgram_recvmsg+0x3a7/0x810 [ 392.194786][T20314] unix_dgram_recvmsg+0x81/0x90 [ 392.199646][T20314] sock_recvmsg_nosec+0x107/0x130 [ 392.204673][T20314] ____sys_recvmsg+0x26f/0x280 [ 392.209429][T20314] ___sys_recvmsg+0x11f/0x370 [ 392.214098][T20314] do_recvmmsg+0x1ef/0x540 [ 392.218511][T20314] __x64_sys_recvmmsg+0xe5/0x170 [ 392.223444][T20314] x64_sys_call+0x27aa/0x3000 [ 392.228151][T20314] do_syscall_64+0xd2/0x200 [ 392.232657][T20314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.238548][T20314] [ 392.240864][T20314] value changed: 0x74 -> 0x39 [ 392.245531][T20314] [ 392.247844][T20314] Reported by Kernel Concurrency Sanitizer on: [ 392.253991][T20314] CPU: 1 UID: 0 PID: 20314 Comm: syz.3.5674 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 392.265466][T20314] Tainted: [W]=WARN [ 392.269262][T20314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 392.279399][T20314] ================================================================== [ 392.320404][T20355] xt_connbytes: Forcing CT accounting to be enabled [ 392.327301][T20355] set match dimension is over the limit! [ 392.805907][T20356] Process accounting paused