last executing test programs: 2.461473202s ago: executing program 2 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x110cc0, 0x91d, 0xf, 0x0, 0x6, 0x1, 0x8001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r2 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$GTP_CMD_NEWPDP(r4, 0x0, 0x20000000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="300038b7c405f4ffffffffffffff000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) 1.670675152s ago: executing program 4 (id=613): syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x100a, &(0x7f00000010c0)=""/4106, 0x0, 0x68}, 0x94) 1.57801997s ago: executing program 0 (id=614): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x178, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x118, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x64, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x80, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x50, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca040742993498287"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x4}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x200, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x546ea, 0x1e45}, [@IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008010) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.5752343s ago: executing program 0 (id=615): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x7, 0x5, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20000090) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0xfff2, 0x2}}}, 0x24}}, 0x4000080) 1.532047845s ago: executing program 4 (id=618): semtimedop(0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) semctl$GETZCNT(0x0, 0x4, 0xf, 0x0) 1.46763042s ago: executing program 0 (id=619): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x10000, 0x0, 0x338}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0x8, 0x2000, @fd_index=0x4, 0x0, 0x0, 0x0, 0x14}) bind$netlink(r1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone3(0x0, 0x0) sendmsg$nl_xfrm(r6, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB], 0x34}}, 0x6048800) r8 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r9, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e6c657276616c0000000000000000000000050003000389e50003000000e4fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.46737493s ago: executing program 4 (id=620): syz_open_dev$tty1(0xc, 0x4, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$incfs(r0, &(0x7f0000000040)='.pending_reads\x00', 0x4000, 0x9) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x101c) 1.411579735s ago: executing program 0 (id=622): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r6 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r6], 0x50) r8 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x20010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x1b68, &(0x7f0000000380)={0x0, 0x1040, 0x10, 0x1003, 0x101}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r11, 0x0, 0xfffffffffffffffd}, 0x18) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001400)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x101, 0x5c, 0x0, 0xb, 0x9}, 0x8, 0x7}, [{0x7, 0x8, 0xb6f8, 0x8, 0x101, 0x3}, {0x9, 0x6, 0x6, 0xfffffff7, 0xd, 0xed7}, {0xaabee86, 0x100, 0x4, 0x8, 0x8, 0xb6d}, {0x66, 0x80000000, 0xfffffffd, 0x2, 0x10000, 0x9}, {0x2, 0xfffffffc, 0x9, 0x1, 0x9}, {0x3, 0x8, 0x9, 0x400, 0xf, 0x939b}, {0xdc11, 0xfffffff9, 0x3ff, 0xfada, 0x401, 0x10000}, {0x15, 0xa6, 0x7, 0x81, 0x7, 0x1}, {0x5, 0x1, 0x2, 0x80000001, 0xfff, 0x8}, {0xb73, 0x5, 0x3, 0xfffffff7, 0x0, 0xd}, {0xffffff80, 0x3, 0x1, 0x80000001, 0x4, 0x4}, {0x519, 0xf0, 0x66, 0x3, 0x5, 0xfffffff7}, {0x400, 0x200, 0x1ff, 0x3, 0x5, 0x5}, {0x3, 0x5, 0x1, 0x101, 0x200}, {0x4, 0x7, 0x1, 0x9, 0xf, 0x1}, {0x401, 0x433, 0x7, 0xffffff7f, 0x9, 0x80000007}, {0x10, 0x6, 0x9, 0x0, 0x5, 0x2}, {0x5, 0x1, 0x8, 0x3, 0x3, 0xfffffffc}, {0x0, 0x80000000, 0x80000000, 0xce4, 0x1ff, 0x2}, {0x1400, 0x8, 0x6, 0x3ff, 0xfffffffe, 0x8}, {0xa177, 0x8, 0x1, 0x7, 0x1000, 0x8000}, {0xce0, 0x4, 0x1ff, 0xd7, 0x7, 0x6}, {0xffff4234, 0x4f9, 0xfffffff9, 0x1, 0xc, 0xffffffdd}, {0x81, 0x2c, 0xc13, 0x7d1, 0x4, 0x6}, {0x5, 0x7, 0x7, 0x1000, 0x2, 0x7f}, {0x400, 0x6, 0x7, 0x6, 0x120, 0x6}, {0x6, 0x3, 0x4, 0x7ff, 0x0, 0x3}, {0x6, 0x0, 0x3, 0x2, 0xfff, 0x2}, {0x8, 0x3, 0x6, 0x5c6a, 0x5, 0x9}, {0x8, 0x1, 0x8, 0x8, 0x8, 0x95}, {0xf80, 0x8, 0x10000, 0x8, 0xe, 0xfffeffff}, {0x4, 0x8000, 0x3, 0x8aa6, 0xfffffff7, 0x5}, {0x8, 0x7, 0xfffffff7, 0x3ff, 0xd7d, 0x5}, {0xd50, 0x2, 0x8, 0x1, 0x8, 0x3}, {0x2, 0x6, 0x7f, 0x9, 0xfffffff9, 0x1}, {0x162, 0x0, 0x4b3, 0xcb5, 0x5, 0x7fffffdf}, {0x80000000, 0x0, 0x1, 0x2, 0x100, 0x3}, {0x8, 0x8, 0x1, 0xffffffff, 0x3ff, 0x5d1}, {0x3, 0xd054, 0x9, 0x5, 0xfffff801, 0x1}, {0x7, 0x8, 0x983, 0x0, 0x6, 0x200}, {0x47, 0x200, 0x8, 0x9, 0x2, 0x9}, {0x1, 0xfffffff9, 0x2, 0x7, 0x7, 0x1000}, {0x10000, 0x24056a58, 0x8, 0x400001, 0x0, 0x8}, {0x2, 0x1ff, 0x3ff, 0x0, 0x2, 0x40000000}, {0x7ff, 0x7ff, 0x0, 0x3, 0x9ca, 0xffffffff}, {0x80000000, 0x9, 0x2, 0x4, 0xdd9f, 0x40}, {0xa, 0x9, 0x3, 0x0, 0xe00, 0x7fff}, {0x4, 0x7, 0x3, 0x0, 0x7f, 0x8}, {0x7, 0x8, 0x10, 0x4, 0x0, 0x80000000}, {0x7, 0x5, 0xfffff801, 0x1ff, 0x1, 0x10000}, {0x80000001, 0x2, 0x2, 0x3, 0x4}, {0x40, 0x0, 0x7, 0xc, 0x1, 0xffff0001}, {0x100006, 0x0, 0x2, 0x5, 0x742}, {0x4, 0x401, 0xc0, 0xffffffff, 0x8, 0x2}, {0x7, 0x6, 0x5, 0x4d2b, 0x4, 0x8001}, {0x6, 0xf731, 0x2b1, 0xfffffffa, 0x1, 0x101}, {0x5, 0x7, 0x101, 0x0, 0x7, 0x8}, {0x3, 0x7, 0x8, 0x8, 0x7, 0xa0}, {0x1a, 0xe, 0x3ff, 0x0, 0x3, 0xfe}, {0x2, 0x7, 0xcf0, 0x5, 0x7, 0x6}, {0xfff, 0x6, 0x0, 0x1000, 0x0, 0xf}, {0x9, 0xfffffbff, 0x2, 0x5}, {0x0, 0x22f, 0x2, 0xe7b, 0xba, 0x7ff}, {0x1, 0x7b7, 0x0, 0xcb2d, 0xe, 0x6}, {0x0, 0x30000, 0x50, 0x5, 0x5, 0x8000}, {0xf9, 0x5b, 0x8, 0x1000003, 0x3, 0x1}, {0x2de, 0x6, 0x5, 0xa4, 0x6, 0x7}, {0xe65a, 0x9, 0xd32, 0xd4, 0x100, 0x1d}, {0x4, 0xb, 0xec33, 0x52, 0x7, 0xe}, {0x80000000, 0x7f, 0x80, 0x4, 0x35b3, 0x5}, {0x8, 0x7, 0x44c9bfe0, 0x40, 0x4, 0x1}, {0xffff8001, 0xf7af, 0x1ff, 0x21, 0x81, 0xa}, {0x2, 0x4, 0x7fffffff, 0x2, 0x1ff, 0x800}, {0x9, 0x9, 0x8, 0x2, 0x9, 0x6}, {0x6, 0x9, 0xafb, 0x3, 0x9, 0x5}, {0x2b20, 0x9, 0x7fffffff, 0x7c82, 0x7f, 0x8}, {0x1ff, 0x0, 0x0, 0x6, 0x8, 0x2}, {0x3, 0x6, 0x1c97600f, 0x6, 0xd, 0x800}, {0x1, 0x0, 0x0, 0x9, 0x19, 0x2}, {0x3, 0x7, 0xd, 0x7fffffff, 0x4}, {0x7f, 0x3, 0x5, 0x1, 0x75, 0x100}, {0xfff, 0x1, 0x1d, 0x40, 0x472, 0x6}, {0xe, 0x48f, 0x7, 0xfffffffc, 0x6, 0x8}, {0x9, 0xd, 0x401, 0x6, 0x1ff, 0x1}, {0xdd4, 0x0, 0x9, 0x8, 0x7, 0x7e27a179}, {0x3131, 0xfffffff9, 0x7, 0x6, 0x2, 0x1ff}, {0x6, 0x9, 0x611, 0x3, 0x2, 0x1}, {0x9, 0x3, 0x2, 0x9e7, 0x6, 0x4}, {0x5, 0x7, 0x1, 0x10000, 0xa, 0x1}, {0x9, 0x8, 0x0, 0x5, 0x3, 0x80000001}, {0x8, 0x9, 0x2, 0x5, 0x6, 0xd888}, {0x1, 0xdc13, 0x8, 0x6, 0x5, 0x1}, {0xfffffff8, 0x7, 0xb12, 0x7f, 0x81, 0x2}, {0x2da, 0x0, 0x9, 0xa748, 0x4, 0x1}, {0x1, 0x5, 0x1, 0x6, 0x6, 0x4f}, {0x2a, 0x7, 0x1, 0x3000000, 0x2, 0x80000001}, {0x8, 0x2f, 0xfffffff9, 0x4, 0x200, 0x800}, {0x40, 0x6, 0xc, 0xa1f7, 0x9, 0x1000}, {0x4, 0x101, 0x3, 0x401, 0x0, 0xfff}, {0x1, 0x0, 0x9, 0xf, 0x1000, 0x40}, {0x3, 0x3, 0x1, 0x8, 0x600, 0x8}, {0x2, 0x1000, 0x5, 0x8, 0x200, 0x66d4}, {0x7, 0x2b914a38, 0xda3, 0x0, 0x2, 0x2000006}, {0x95, 0x9, 0x6, 0x3, 0x5, 0xfffffffb}, {0x3eb, 0x9, 0x4, 0x2, 0xfffff801, 0x9}, {0xf48, 0x80000000, 0x1000, 0x1, 0x9, 0x3}, {0x5, 0xffffffff, 0x3, 0xf, 0x8, 0x2}, {0x10000000, 0xbc9, 0x0, 0x6, 0x1}, {0x3ff, 0x0, 0x6, 0x3, 0x892, 0xffff5833}, {0x2, 0x5, 0x8, 0x8, 0xbcb7, 0x8}, {0x5, 0x3, 0xfffffffd, 0x7, 0x8, 0xfffffffb}, {0x6, 0x2, 0x8, 0x1, 0x9, 0x40}, {0x73d, 0x81, 0x4, 0x4c, 0x2, 0x10000}, {0x4, 0x1, 0x401, 0x4, 0x3}, {0x99, 0x1, 0xfffffffb, 0x2, 0xd, 0x4}, {0x100, 0xfffffffc, 0x5, 0xa, 0x7, 0x5cf4}, {0x8, 0x5, 0x9, 0x1000, 0x1ff, 0x80}, {0x1, 0x10000, 0x2, 0xd3, 0xe, 0xfffffffd}, {0x4, 0x3, 0x6, 0x727b, 0xc, 0x5}, {0x6, 0x2bf3, 0x3, 0x35, 0xd, 0xf24}, {0x9, 0x890c, 0xcf3, 0x87ee, 0x5, 0xfffffffc}, {0x49424b5d, 0x11, 0xfff, 0x7, 0x2d219f14, 0x1ff}, {0x3, 0x5, 0x9, 0x9, 0xffffffff, 0x4}, {0x6, 0x5, 0x4, 0x80, 0x7fffffff, 0x8000}, {0x5, 0xfffff404, 0x1, 0x8, 0x879, 0x3}, {0x5, 0xc, 0x6, 0xfffffffb, 0x8, 0x2}, {0x4, 0x600, 0x39846a8c, 0x1, 0x7fff, 0xb}, {0xfffffff1, 0x8, 0x3, 0x3, 0x2, 0x3}], [{0x5, 0x1}, {}, {0x5, 0x1}, {0x1}, {}, {0x1, 0x4fa8102eea1673da}, {0x4}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x4, 0x1}, {0x3}, {0x5}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1a2b73033141e383}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x7, 0x1}, {0x4}, {0x5, 0x3}, {0x2}, {0x4, 0x1}, {}, {0x2}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x3}, {0x2}, {0x1}, {0x8, 0x1}, {0x5}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0xbfb90171edaf7461}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x2}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {}, {0x3, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x5}, {0x3}, {0x3}, {0x4}, {}, {0x0, 0x1}, {0x2}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x50, 0x0, 0x7d, 0x2, 0x0, 0x127}) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r10, &(0x7f0000000180)=@IORING_OP_FILES_UPDATE={0x14, 0x45, 0x0, 0x0, 0x3, &(0x7f0000000040)=[r7, r6, r7, r7, r7, r7], 0x6, 0x0, 0x1, {0x0, r13}}) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_enter\x00', r14}, 0x18) 1.409972335s ago: executing program 4 (id=624): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f00000003c0)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYBLOB="850000005346000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000100)=0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r6, &(0x7f0000000140)={0x8, 0xffffffffffffffff, 0x81, 0x0, 0x4, 0x4, 0xffffffffffffffff, 0x20007, 0x9}) r7 = socket(0x10, 0x803, 0x0) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x12) bpf$MAP_CREATE(0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="07000000270000000802cbb2133cb707111e00005823a297acd2a74959028af1d61ab467efc908c239fecaf1e77f253a13cce0774864d782965723153d5d8bf207f5887be89815c35e41ab6848e753a41732fce97e54c142d5", @ANYRES32, @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000041000000000000000000000000fc5d997019ceed03d46829bbb53576009c6f10aa9a7e9cdce21019b28f85323877472e5d84ae91422c3734ef08f83674ad262cc1901a8dc40601e7f72f481692d65aa42ec37563760c33d555b7e314763512b431285b5888f01dd889d6d709a3b8c8c36e7e2da68ba23dd59e99658eb84547b5bc0618352ca5430a59924cbe2ab0da27c0d189a1a17187737db2c51b2be4aaf55a9ae220a04cd981ea27eb1b8bcddc1564c94603fb2128ed833abc1ab7d977bb10d374b23160a48604cb095622fa74dbe5570130bd6826637700392c0b94ead88cf9d5035619a478ce"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="000000000700000000b24752620b341aba120000", @ANYRESOCT=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) quotactl_fd$Q_GETFMT(r9, 0xffffffff80000401, r6, &(0x7f0000000240)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYBLOB="0000010000000000000000090000000000000000fd5d217948a910fe7220539d596d1753c32860d6119a3f21b0189a528cbf56815dd0c4d2492ded8282b1112ba3badcf53c0c010e442a5dbd185b558f7001bbd4edfb04b084709f42978e36e81a8d9a2d14022d511bc5d4daf9652ac13fef730dc16e359f42d51b6e0ef1635762bca215688f3b6f5bbb7fba80c4956d17e35728bd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x2000000000000034, &(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095", @ANYRES32=r11, @ANYRES32=r10], &(0x7f0000000380)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) r13 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2000) ioctl$SG_GET_VERSION_NUM(r13, 0x2284, &(0x7f0000000440)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r13, 0x40047211, &(0x7f0000000300)=0x4) r14 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x13, 0xffffffffffffffff, 0x28f45000) process_vm_writev(r14, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r9}, 0x18) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r15, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x268, 0xffffffff, 0xffffffff, 0x268, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff], 'veth1_vlan\x00', 'geneve1\x00', {}, {}, 0x29, 0x10, 0x0, 0x78}, 0x0, 0x110, 0x150, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {0xff}, 'syz_tun\x00', {}, 0xc, 0x18}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x5, {0xd457}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @empty, [0xff000000, 0xff000000, 0xffffff00, 0xffffffff], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'netdevsim0\x00', {0xff}, {0xff}, 0x3c, 0x1, 0x5, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'pim6reg0\x00', {0x400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r8, {0xa, 0x2}, {0x0, 0xffef}, {0xfff3, 0x19}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r1}, 0x4) 1.01061446s ago: executing program 1 (id=626): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x178, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x13c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x118, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x64, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x2d, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x80, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x50, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea927bcdffe4d3ec14fb6fca040742993498287"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x4}]}}]}, 0x178}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newlink={0x74, 0x10, 0x200, 0x70bd21, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x546ea, 0x1e45}, [@IFLA_XDP={0x4c, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_EXPECTED_FD={0x8}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000080}, 0x4008010) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 856.240764ms ago: executing program 3 (id=627): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095", @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) fchdir(r2) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x7d, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r8, &(0x7f0000002d00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x400000a0, 0x0) dup3(r8, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000f50f0003042a00005fb1097da141a9cf23784f000000000000000000", @ANYRES32=0x0, @ANYBLOB="adffa8882100000008000d0009000000"], 0x28}}, 0x8000) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0)={0x0, 0x0}) getresuid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)=0x0) r13 = getgid() setsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000600)={r11, r12, r13}, 0xc) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r14, 0xffffffffffffffff, 0x0) 792.8729ms ago: executing program 1 (id=628): syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x4, 0x100a, &(0x7f00000010c0)=""/4106, 0x0, 0x68}, 0x94) 764.962303ms ago: executing program 2 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0x200000}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 700.390348ms ago: executing program 3 (id=630): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0) 699.818028ms ago: executing program 3 (id=631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) readahead(r1, 0x4, 0xc) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r1) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, 0x0, &(0x7f0000000a00)) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='kfree\x00', r3, 0x0, 0xfffffffffffffffc}, 0x18) (async) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010101}, 0x10) set_tid_address(&(0x7f00000000c0)) (async) setsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f0000000140)="d0c2ae07a18fa4334a4dc64c788bbf27c99f82dedd3af4a03ef0a20a6b912e10c455ca6f113b2c9623fcf87f12a97d0c70b60e6e1ee3c349ac405003baf0e19ce1daf4b1350336ab9221845625f33fdb33b584af077f73a451a2022ff57e1a8d0a904f7ad4c415974bf3c3659a612e078cc9ffbd491d5eb017f133e1e3ac91a7670b2e149a1bffc5cc838c7ff33d2f6128e9c937fb95e1f3c7752c260859f53f871bd426e2f5323aaaf07d06351eb628f9b9b80bc61eb47f7f3113ac23271f9e79cee35419087ca205d2be6856ad49c0b58686410fbde5be2c0e511c036b87b33861891d57486b4b3a65775ea06b27d54f1b3a37", 0xf4) (async) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 674.919041ms ago: executing program 2 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0x7, 0x5, 0x9}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20000090) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0xfff2, 0x2}}}, 0x24}}, 0x4000080) 674.311411ms ago: executing program 1 (id=633): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) writev(r0, &(0x7f0000000600)=[{&(0x7f00000009c0)="2d3fa711af5ebff15316dd64cd5cd12e90937280653ebc936d2d70173fbb10d9bc73a22e21d87f99899685d9c3a7a1003229a6c3b620f3fd9d791600aeb63874ca1fb1bc57fb94f100b9849b146379c0e1c8b37405323f933d85e7fe2e4a13e6510d778a0d236447d558ce2518eecf709858d6049dba7c0321aed6928c7e8af737085a85daa3ca0ff9e5cd4057afb15a98e472e357eaaf232648bf94b26a22676868c72771df31b0da3002a485e13f5c80e38b8035114f771de0ead8a16845fbc78b1e933c5a92f57a141b873f7c0b94a95b0ab0be7421971b690530ad9c82ea38da9c0b03b8f13547aa82ff4d45b70295fbc2008020c6ef56dc6e91b4ec8f2bd09ef63441be7c6179de8583dcacb19fbe022ee9165a95525d83c44e3e91b9a34474965ebec4405a1aad5670b667137268ce558ccbff0f75bf0232f8b836759297f1f0669c37d3dfb8c6b2b2a8575c89f96ce1123b2e0dc452069389303003560de0ec6cdc6fe4fdb5cff281c3f397ecdc517024e3b9a02749f5eb27b617eba22c57a28d2efdaa372b1053eb4ef4ba4c1b6342653d707f1de6a40ad865827624d64d6a4ae5081e46186935ffbb8507dfcba3fbd79a830ef06f5737c4865a500818f9e843f6ca4e0fe507b408c5b8b74325b3b1d3aeb2a8a5cd6ae4c398425685bfa9b87ce53b9aeef84ae43d62ee1f86278ab9938085fedafe40c6ac18568ec2e2964caddd68169e57b8e05183b73141308318a62a2310394fc72d7ec6af7ea2d8edddea4465e7fd83f770896dbc6ba13b1cfe150f13290fa8cbf3def77bc9f13984384d989dc0ddc0110fa1e88bd91702b71ede2683c9a3b85675398c55ab89c9a17e9170fa2060da306a61e5025e94e97f6052ab9902512a26e7323dd4cc535f7f8091fd635229becfceaecf57181dccd21b59ad22fb48b0411001a18768846ccd209960d2627fd66b3f1e3cde4257ed89c26f7c249c5ccbff686349ce6b59ed422d08fbfecbe4493d7d50b256cbe861eefd86fd72cd70bebc9941874fafef4c7f388b7778c2a18b9baa3b72499cef6a328c0f67955ec136b7df97a7845687eeefb12a72b236d80a01e44c8d57b30ea56e1682bf2ddf347f429181b9c9b3f9cc4e175500bc188a4e6b4f6dfbd24427fee39e9b5f65fc026788271e26f0a6a47cd72802cd014871b92bca4123ae7d5fecfc84b86d5f8d17b92ea2c48e77b7a9b6f8ec5f9da2e443823dd952e53df4698bf88b94eb054c7de49f7fa9f39fa5a20880de1e17ebf41dff81969e9951463422b50b4c910dd9122bf0c786e544e9af0fbd38b7908101b40e62f3b959fd1062f14edf5bc86e96b5866af4704e3f355038d9f69fdf6022512cbe812c57e1bb48ab5d6711c19b2614d9346533679df9f740047c2c83a8aaf98111a7e735419ccb538ee576fcf695a94695730fbee86d723dd47d721885db772b6bb79a1caf64222beac74cae81a3a53041c66ba7de60cb078db10d4c0e3dc53b334b5639710cd9ad7e22c507a862e6f4322ee7af525804d0b65f84d7fa53f44d4bc68a0d4576ce2e356aa988ccdb47b280d7e298b27060f538aa622184fee5cf9980257cbfb8e72dce9e1682addc340bb0bca00263dfcd5768e3cffad303d0755429ec655e40e0bf0795ed3240fb9de9f2608d19634280b95a02a4ea51ea99233b92af12be5cec662d9b5e3b5a25ba0a849c7f0e0587da036fdf5056e9cf71e5f1cbda72add31ecf982ca239e2b24c7713f0bf0023351bc72bef657513c4e5e4a7e2348b7fbbc6c95b5e294e7ff05a3b9113496e9dc50899732846485e766c1486b4b0ee01405bfc0044f996b4e2a77793cf01698808526458f2c24b7965ece3ad9279c272c6c1ba0514af801a7efb81d475d2a5e9615959e50a993eca4aee819f6ea1314b42c2365dc6c61935bb8aac2ce36d0f63cc65bde060dc5bbea5e64997cc653a4bc116ce0bba699000b97d27611b3aef30b9853644239fd39b372aa05a1db772468bdeb0f5044235f6d66a599d724fdd0b02bdb7e70a63ee7bb1b5c8b433843c97c22e7c3d1370037868a3c8c6ff2027c96812e4538c3801209da8f7e4d681bd036e13d28f04cb56a366b310649abe7a1750dc9fadb7438e2d00b2ce0db18910475857d0d27880724e26f0d6ab2ec879742ecb830113eeab5033ffbd2e4b6c477fffb65779cff1b5df14fcd609f603f023517835f39f235ab8050e65f9bf26e225d0b3b0cc6ab35e728d3f2049e1f917bc6907c5363197572a13ff0d29bcaa1342b5b4e73e5c0790d4739083f5ae2c899fbd7f96b3cfde4cf5ade6f663c7ff1d7486f84f852c0e5eff64d6280f0273439a16c8a47f190778cec6f4b173b754acfb09660458092b4836812c5dcf41cc0aca4a5c941079db3c89eb23b61f27809453d930f22290922fcac36335a096cc36acf7b76727a034f4015e383d49eb7ce0e0b195e0836a0fe6dd55a858b484d9e59dd1c67cb55ffe9f5973db083a51001dbaf80fe4349bea8389cae9a52f9acbec52c711b1d37762d25de8492c695b4087d66195f81e604e49d00a3d8359ae5971ce5a032536ca25da8450f9eea1e468b0c44221116195d8050d057c2255b8c04a174097df9f31e0c7235772e7037e6c79d38233622360801647854e9120722b48d94b4f281085a5650640871637a69d2dc9faba80dbad66932f9c257ac564318725c6ea51", 0x781}, {0x0}], 0x2) 662.220132ms ago: executing program 4 (id=634): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, 0x0, 0x0) syz_genetlink_get_family_id$nfc(0x0, r3) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c002d000201aaaaaa9baaaa0c00050000000000000000000a0001007770616e3000000008002f000500000005002e001500000005002b000300"], 0x50}}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x48, r4, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8e}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000013c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELOBJ={0xf0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_USERDATA={0x30, 0x8, "f170910131732c0b710cba5b5a07e2f0b52f609b824277658a94a689614c2905440eafd4c9a9fc14855dc362"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_USERDATA={0x67, 0x8, "266cd0798b634ca23c0241f3130d45460d3c1e3ddf0b06f2fdfee33735b4c27e9e143e9328794082267c58d0d4b129efbf61f76434c6e6c43d5b850d0e1cbcc3b92869e0b0050a32519735f6dc2dcf7b772601d15b98b21e386ad22c72509ac1c269d3"}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x2c, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x180, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x70000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_USERDATA={0xf8, 0xc, "628b53f7de26547588a0ca102b6393d9bc3a66faf5cb08559d90cd5cce53e38f0fddbf00a558f5b971c9ac9d7ddc5457790b70b67cbc4c303b4ad48c30fe2649c59b64229baf7d80151a13daee48643ae8deaf9ff49d83d392b47acdc7e2bc865630dbcb2bb1bc4df06c0a47a0af5657ab278d9fade91c4883d2bfc5b50cd9048ce2e5df2c1fc210f505c98047ea9b9e49d01c4b0a39f2c53a3908225576a4d22ba964356e1ed11197c3906b84b28263d303c270ce81d731dfa88bd0085464abe1f900c54db01af5869adb786b6ecc34ce3e5cb35f0f160d9fcffc58158c076508af56821275043adae93fdc5cc85ac86dc0115e"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELSETELEM={0x201c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x258, 0x3, 0x0, 0x1, [{0x244, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xeb597fba39dcd7d0}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}]}}}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xc6, 0x6, 0x1, 0x0, "a0ee88969e8a8f8f32309b2d5a11d8f24e4bad10e4e7dcf8d6d875b7c13bd10a83542d8d2bb42bca41ef68e9c9f6f8ed9e04af2cc58409523e0f543d98d1a17b1eceb398d40b8c903545d9877f772cd4ac88e747f31e10450e551b4ceabcf506daa5768efc4e09cdc7417642425f3f161473fd9ad68bd05d022ae71c3fbd0d4566f91a8f8d8c82285b052c65c6dfb9cc5e940b05474ee94d686a3e5f41538d1e635bd81fbaea9fd9cb70292a877f0090fb2550e421749ae4305d60319377d78f9090"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_KEY={0x100, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf9, 0x1, "af4c5cdd4fbfb7efed81f872b885a496089c0c052349b575944d1f5365f2f0849e4befda3eeff0cf49bf97be3ed01967554b68ee6b9b7009373d479521ce301e6e9eb0b1657dd8966b840b09b0cc8fd21f40c45fb4a3da935fcbe79d07fdbc40a21df935fccc79974714105796a5d7ba4c33fe8549be5f1713e11f7eb1cd9ae0dea99d9d8cd37ad1e423589bc3370e9e4e2180fc4066bcb32747f54ff26424acb60d518dba8d7f4aa54a4504cf0d98eca5dd43625bd9b167d5c91640825af681eea1296805ed962839fba4229319dc74a2abd443a6ffd970cf460e98d5a0946895b209fac7fca1263896eb98de43daa10e3651a7bb"}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3b4, 0x3, 0x0, 0x1, [{0x4}, {0x94, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @lookup={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_FLAGS={0x8}]}}}, @NFTA_SET_ELEM_KEY_END={0x54, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x318, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x77, 0x6, 0x1, 0x0, "b95139e1c27d58fb7de8346e413df16d1147186a614cb49ae806a46e9bb7bba028aa1ac3adb5f83a336fb0b872d1f73fa2c4bc96c9e589b554f5bdba02039fb0450af6920113c78f3d18687af52aaff2b7d83be5c12204bea693338e8c3ad11ea07ebd12c86cb18195a7317aa437c76d2c6969"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_ELEM_EXPRESSIONS={0x3c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @lookup={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_OP={0x8}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100}, @NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_KEY={0x178, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4e, 0x1, "8bfa732d0068ca8fbfa635920fd81e57fbf096c0e6db64532a717e790509ac9dcd6ac9178fdfece19aff1d68cfd64a9c4ba395c5272349ac9f6a345b3ca2a9e6dba62b237caa31fb04b1"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xd8, 0x1, "64c07a626a211596dddbc477b71e2f0e51a4ec7133498ff7c717ccfcb7e4bcc9ebf8018aafbd72ba52cd9c73088db75a8716a79576f3689e64dd236c874fac6649af4b80a4e16a4cb76a1e71486edf328b3ea1316c903e2843070d17c1053f4eba676857e26b21f1642e8e46a15945b7cb36836a0bee8dd4b1c04ea06a4191cf016887c661bcb76a7981f4cbd96ac16407f2907ce10ff574d09a0c7282551009a5a9f1aacfe3ba16f7dacd21d8049ca5f22a756a9d7dde647f0ccc6ef10cbcc0f5ced5c8b2f804d38b592e39cbbfe44c76d8c3b0"}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x19bc, 0x3, 0x0, 0x1, [{0x16c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x168, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1e, 0x1, "ca351b0e6c3a1eb2208f924cfd24149fab35fe2a2fbeffb6ac98"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x8f, 0x1, "2409cde6829c978976fd1f83fa41d7dffbe88e4b28e88d696ed40feebca11294924a5713cf3e17e25c2326b6e12075233a2592a27a09dc896b6ae3ce6d3b60e39d6b1f9d81ea372b6dbc4d033420388cf991be5f552ff196c7378e098e73b6433d4e9a88c5064cf04102c81bc29392318fc149a4dd3b47676e8397bc9f7cb7e356a100a527addfdc778b6f"}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf9, 0x6, 0x1, 0x0, "073c747f0afc2ac530a993b50fd45a98bb5e584edcdee831a3e6cc7c37230842b50b7387dced8ab06d94981426bb913e4c0e7352047546a5b0fe34fee4c7778c217f36011a9a037a19ed626301059103988a9395839472d406487ebbd7fb21f7b1426efb5f715eeb3c51a08250286ff5994fc6d29aea031621657500d2261cde3f3405e4a78f2c58c66ed3b6a2bf7f853c1487fd682b0a08e52dd8e450938c317017c456d8f710afcc56d086476f2a3d86884a601077f2cc4c63bf8f4e0c3ca3d625a6f7d88887f5ecb2d5827dc7b67ce784f1ead670248ac596676187a60fb1af7fd863f24a26ee73eb39ddd9a648cc9c87a116ef"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", ""]}}}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x56}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0xe0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x93, 0x1, "0ba514e56f9943c71f01c89154b530757679fae6f7c38dd44aa44b761282dc1f6fcd22bee22bf71e589aaf5a1a63f592604d8e41dcf4d74b9889490f1813b2337a4d60d22d05ebf844468b6892d67a639771d3cd5062c54d0134f649dbbf146c1602664386ecc5361e484c6ecfe2e8b207419495ed668b84641a96de91c9994c1326e6449ec15fb8526dfa90cb07c7"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x1264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x148, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x91, 0x1, "837a3d659f2213c4436553f7618f1cdaee5834116fc040cb4f24a88cc4e9d789b811874d043e27d5e1e93e357958d10ccbfd6e5d392a8ef5d24001dfab5d632a703ee917b20a004f14a1d462b54c877a14b544403d9a3ce51dc72286ef8733e3fe1d3a36dae35ffe0b85beb914fc15929797cb1ec65e96167cdd3e83338eab11567e8576b7a32de8af7274473d"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_KEY={0x1058, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x48, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x35}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x34, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "c581463553c9780554c1690d9c945c66736a0580ec7b262a3532b7ac095e6355546a021fcb509a49c8"}]}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x63, 0x1, "f7dd02f92c95273a39e785edbc49349f5e14dab2c007458108103c34c0c1e7308de06cab85c67336d62b3b80dd2172c289871c2dc648a02b72b57b190fbabcdbe0ab1074004cce2fa60610bf1673da558ac78cfc7cb66a5e22d85bcbe10926"}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}]}, {0xfc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2c, 0x1, "deb945e8c9b8dee8f159fd1f12ec829a4e2e4fe4bc0d9cbfe452c84dc6828869581525ec41e152ce"}, @NFTA_DATA_VALUE={0x9e, 0x1, "f730aac181710989fa42543639b4bf632e1be33c8b9f641adcf28f2176a3b88d9285817f585d24d2ae3dec1553a1bd8b4111b7736acba0d58ac8e8a522dae3e3b585701932c728e364a7e80851d958459bda4f826a588c31dc7b6cbbcf04f88a3c2a737bf4e06e07d9125622784f73f763a37eebccdbaa1a2299e8a25695474420e2b1f4a51355c7c6473f75dc97d8b0211857f646f814c56bad"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}]}, {0x88, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0x134, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "42da095338fd3b15c1d15117aae3e15c0f8cbf09f256d25b969649c31ed50d4251a38437055fa7322117619007e06d4a5fef1b700cd872570ba26da60ce43a7197eba847856132896aab72159f905433d98316b7f778aa4b652f500962d9701af79bf3e53b997b25b0d7cfb55798a67166fe0f87955afdd46e6d25450b5cd18ed62d35af980ab5a46e873082ddcc2eaabf456ba09006a5603aa658985ff9652f4c8b41b795a986fdaa5df94c08323f5ce7"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xaa6}, @NFTA_SET_ELEM_DATA={0x64, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x52, 0x1, "4dbe82ebbef590805b061c9b0eb26edc7a6d85c4987a85bd61ba2f87787597d59ecfd06df6da2cd1318024c50d91327e930c95faf60c4182d5304d7af19187674d7fad6376e18de5f2322fd41ac8"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}]}]}], {0x14}}, 0x2388}, 0x1, 0x0, 0x0, 0x4000400}, 0x4000) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x46541, 0x59) pwrite64(r8, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) 600.554217ms ago: executing program 3 (id=635): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x961}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r9}, 0x10) r10 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[], [], 0x6b}}) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 580.521659ms ago: executing program 1 (id=636): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 554.325751ms ago: executing program 0 (id=637): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYBLOB="18000000000000000000000000f9000018110000", @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500010000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r2, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES16=r2], 0x68}}, 0x0) 518.372254ms ago: executing program 0 (id=638): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001340)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x2f36c1a0}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0xfffffffe, 0x8510}, {0xffff, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x1}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r14 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r15 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r14, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r15, @ANYRES32, @ANYBLOB="30000000eb4b1e", @ANYRES32=r16, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r16], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="190000001000000000000000", @ANYRES32, @ANYBLOB="3fa346a5980ee8b3f8dd3801b6023ffcce096de3687e6e1a1df3348a008274685e71ab6c88b21902dbcbe2d1660d2bcea443d9398b045258fd1394f1b3d87a79ad18450465a9ccb4f4b2bb811742140f59814c4e12f8fb36fcc26ef545af18452ce575033f8813b1a40aa0b818d3df9298eb7d7e7dea4f6c61248b2d258f4382571f4412adf0aad397a946a914549fe4ada5db7dcd5cc8ee1a1d9d8eb97674bc540a910b4f428829ea02616ba66b58d5f529d7fc", @ANYRES64=r16], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a40)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB="310000001400000000000000", @ANYRES32=r6, @ANYBLOB="e1138733281ae6af7246c023d0b72501724243d2222afd3d9185f19bc1867576b3eba9e94e8bd56cc4dc8f2295ba7c65d6f3658ecebfb81116199e40d97c34507d4753933d01c4ae4467783bc9d9ef87842c18566e5b6ebbfbb54371532f91f30c53036b588e2bc240f6de5e5f81fbfc64c51e86d66aef3439fa6997f04d2b7b4cc7a953add66d6928261a6250ce69077b6a080438927c86c78d10cc82d9791d0000", @ANYRES64=r16], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=r2, r4, 0x2e, 0x9, r1, @void, @value=r2, @void, @void, r16}, 0x20) r17 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f00000000c0)='(,\x00', 0x0}, 0x30) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@fallback=r17, r0, 0x30, 0x30, r0, @void, @void, @void, @value=r18, r16}, 0x20) 493.583597ms ago: executing program 2 (id=639): r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0x6}, 0x1c) socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0}, 0x28) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x8fdff, {0x0, 0x0, 0x0, r4, {0x0, 0xffed}, {0xf, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xe70, 0x6, 0x3, 0x7ca, 0x6960, 0xff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) 376.049417ms ago: executing program 2 (id=640): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200080001400100000004007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247635c86ee54bbab3eaf8956e2ca4260000", 0x9e}], 0x1}, 0x0) 313.864142ms ago: executing program 3 (id=641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xff}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098c1}, 0x40040c0) 298.630724ms ago: executing program 2 (id=642): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000002000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000deff8400000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000380000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) 260.669617ms ago: executing program 3 (id=643): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x25, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x1000000000000000, 0x4, 0x5, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x32) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000140)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000003c0)=ANY=[@ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x408c}, 0x20040850) (async) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES8=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) socket$kcm(0x1e, 0x8, 0x0) (async) socket(0xb, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r7) (async) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}, {&(0x7f0000000100)="8a3e52dba0d79e597058d5f4f521eaad7d6d26cc33833aa0b6cf44fa7275e4d0097ba7023a1ff4674fb7eb98833e45423ea1b372e7881ce18f4267dd3559d474518955f97331eddc1aec63e07184afdff8a90728d2f4772d1593f1fdbe7b31035412eaa85c9109b6", 0x68}, {&(0x7f0000000180)="ca8be024b7d3396913009eee085cbfd194f2635a89cac67dd9da7152c77aec7c36908c3b87098d0be7d6278b4f4d630082e4c4a36d9121245e", 0x39}], 0x3}, 0x20000880) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 137.722798ms ago: executing program 1 (id=644): syz_open_dev$loop(&(0x7f0000000100), 0xfffffffffffffffe, 0x2000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, 0x0, 0x4, 0x100a, &(0x7f00000010c0)=""/4106, 0x0, 0x68}, 0x94) 63.556644ms ago: executing program 1 (id=645): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r12}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r13 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r13, 0x2284, &(0x7f0000000080)) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) 0s ago: executing program 4 (id=646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x80004d4, 0x3c}, 0x20, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x0, 0x5, 0x2}]}]}, 0xfc}}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.18' (ED25519) to the list of known hosts. [ 33.258248][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.258264][ T29] audit: type=1400 audit(1767442347.331:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.287598][ T29] audit: type=1400 audit(1767442347.361:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.289879][ T3304] cgroup: Unknown subsys name 'net' [ 33.315476][ T29] audit: type=1400 audit(1767442347.391:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.449558][ T3304] cgroup: Unknown subsys name 'cpuset' [ 33.456031][ T3304] cgroup: Unknown subsys name 'rlimit' [ 33.607512][ T29] audit: type=1400 audit(1767442347.681:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.636078][ T29] audit: type=1400 audit(1767442347.691:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.656691][ T29] audit: type=1400 audit(1767442347.691:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.677109][ T29] audit: type=1400 audit(1767442347.691:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.695384][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.697531][ T29] audit: type=1400 audit(1767442347.711:77): avc: denied { read } for pid=3044 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.726878][ T29] audit: type=1400 audit(1767442347.711:78): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.747838][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.751782][ T29] audit: type=1400 audit(1767442347.711:79): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 35.773208][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.877397][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.884613][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.891983][ T3314] bridge_slave_0: entered allmulticast mode [ 35.898519][ T3314] bridge_slave_0: entered promiscuous mode [ 35.907150][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.914257][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.921572][ T3314] bridge_slave_1: entered allmulticast mode [ 35.928087][ T3314] bridge_slave_1: entered promiscuous mode [ 35.958455][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.973198][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.023375][ T3314] team0: Port device team_slave_0 added [ 36.031739][ T3314] team0: Port device team_slave_1 added [ 36.064786][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.071842][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.098054][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.111737][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.122764][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.129783][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.155995][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.206980][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 36.241483][ T3314] hsr_slave_0: entered promiscuous mode [ 36.247511][ T3314] hsr_slave_1: entered promiscuous mode [ 36.289097][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.296216][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.303850][ T3322] bridge_slave_0: entered allmulticast mode [ 36.310712][ T3322] bridge_slave_0: entered promiscuous mode [ 36.317495][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 36.327148][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.334360][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.341752][ T3322] bridge_slave_1: entered allmulticast mode [ 36.348192][ T3322] bridge_slave_1: entered promiscuous mode [ 36.395625][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.414603][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.421729][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.429317][ T3323] bridge_slave_0: entered allmulticast mode [ 36.435782][ T3323] bridge_slave_0: entered promiscuous mode [ 36.443578][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.461731][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.468899][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.476057][ T3323] bridge_slave_1: entered allmulticast mode [ 36.482776][ T3323] bridge_slave_1: entered promiscuous mode [ 36.494390][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.549059][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.559410][ T3322] team0: Port device team_slave_0 added [ 36.576331][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.586495][ T3322] team0: Port device team_slave_1 added [ 36.600772][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.607882][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.615123][ T3325] bridge_slave_0: entered allmulticast mode [ 36.621721][ T3325] bridge_slave_0: entered promiscuous mode [ 36.648753][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.655863][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.663369][ T3325] bridge_slave_1: entered allmulticast mode [ 36.669774][ T3325] bridge_slave_1: entered promiscuous mode [ 36.686611][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.693753][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.701092][ T3324] bridge_slave_0: entered allmulticast mode [ 36.707679][ T3324] bridge_slave_0: entered promiscuous mode [ 36.724041][ T3323] team0: Port device team_slave_0 added [ 36.730040][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.737009][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.763187][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.774066][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.781327][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.788462][ T3324] bridge_slave_1: entered allmulticast mode [ 36.795237][ T3324] bridge_slave_1: entered promiscuous mode [ 36.810313][ T3323] team0: Port device team_slave_1 added [ 36.816401][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.823403][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.849498][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.876625][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.902540][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.919025][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.934999][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.942026][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.968438][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.980481][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.007527][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.014583][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.041147][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.061427][ T3325] team0: Port device team_slave_0 added [ 37.068063][ T3324] team0: Port device team_slave_0 added [ 37.084171][ T3324] team0: Port device team_slave_1 added [ 37.090684][ T3325] team0: Port device team_slave_1 added [ 37.098350][ T3322] hsr_slave_0: entered promiscuous mode [ 37.104446][ T3322] hsr_slave_1: entered promiscuous mode [ 37.110389][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 37.116121][ T3322] Cannot create hsr debugfs directory [ 37.146367][ T3323] hsr_slave_0: entered promiscuous mode [ 37.152459][ T3323] hsr_slave_1: entered promiscuous mode [ 37.158326][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 37.164161][ T3323] Cannot create hsr debugfs directory [ 37.181025][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.188124][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.214175][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.225273][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.232368][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.258369][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.277520][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.284571][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.310630][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.321803][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.328810][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.354902][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.376767][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.403561][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.423384][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.446927][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.468112][ T3324] hsr_slave_0: entered promiscuous mode [ 37.474254][ T3324] hsr_slave_1: entered promiscuous mode [ 37.480362][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.486111][ T3324] Cannot create hsr debugfs directory [ 37.506684][ T3325] hsr_slave_0: entered promiscuous mode [ 37.512815][ T3325] hsr_slave_1: entered promiscuous mode [ 37.519032][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 37.524783][ T3325] Cannot create hsr debugfs directory [ 37.668529][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.680148][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.691795][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.703359][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.732750][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.743309][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.756205][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.765431][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.808658][ T3324] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.818171][ T3324] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.832424][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.848403][ T3324] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.865859][ T3324] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.880776][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.891742][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.901033][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.910832][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.932295][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.942426][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.959675][ T2738] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.966858][ T2738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.981736][ T2738] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.988934][ T2738] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.001759][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.024337][ T1683] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.031455][ T1683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.048540][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.055739][ T1683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.089607][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.105159][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.152604][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.165528][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.177569][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.184802][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.204099][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.211258][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.226712][ T1871] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.233864][ T1871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.253340][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.270789][ T1871] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.277895][ T1871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.309038][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.318946][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.332812][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.349898][ T1683] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.357284][ T1683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.402394][ T1683] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.409566][ T1683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.455163][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.472389][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.482836][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.588338][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.610321][ T3323] veth0_vlan: entered promiscuous mode [ 38.642750][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.652697][ T3323] veth1_vlan: entered promiscuous mode [ 38.671453][ T3314] veth0_vlan: entered promiscuous mode [ 38.689950][ T3314] veth1_vlan: entered promiscuous mode [ 38.696952][ T3322] veth0_vlan: entered promiscuous mode [ 38.712848][ T3322] veth1_vlan: entered promiscuous mode [ 38.736269][ T3323] veth0_macvtap: entered promiscuous mode [ 38.745730][ T3323] veth1_macvtap: entered promiscuous mode [ 38.766553][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.785473][ T3314] veth0_macvtap: entered promiscuous mode [ 38.802149][ T3324] veth0_vlan: entered promiscuous mode [ 38.810250][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.819396][ T3322] veth0_macvtap: entered promiscuous mode [ 38.833744][ T3314] veth1_macvtap: entered promiscuous mode [ 38.840615][ T55] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851788][ T55] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.861622][ T3322] veth1_macvtap: entered promiscuous mode [ 38.873220][ T55] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.884756][ T3324] veth1_vlan: entered promiscuous mode [ 38.891572][ T55] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.903392][ T3325] veth0_vlan: entered promiscuous mode [ 38.919194][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.927789][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.942122][ T3325] veth1_vlan: entered promiscuous mode [ 38.954232][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.961611][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 38.961627][ T29] audit: type=1400 audit(1767442353.031:90): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.iYVFj7/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.990342][ T3324] veth0_macvtap: entered promiscuous mode [ 38.992348][ T29] audit: type=1400 audit(1767442353.031:91): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.003043][ T3324] veth1_macvtap: entered promiscuous mode [ 39.019674][ T29] audit: type=1400 audit(1767442353.031:92): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.iYVFj7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.039436][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.050883][ T29] audit: type=1400 audit(1767442353.031:93): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.066447][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.084567][ T29] audit: type=1400 audit(1767442353.041:94): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.iYVFj7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.113658][ T29] audit: type=1400 audit(1767442353.041:95): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/root/syzkaller.iYVFj7/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4695 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.141215][ T29] audit: type=1400 audit(1767442353.041:96): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.162122][ T29] audit: type=1400 audit(1767442353.161:97): avc: denied { mounton } for pid=3323 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.178777][ T1683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.185124][ T29] audit: type=1400 audit(1767442353.161:98): avc: denied { mount } for pid=3323 comm="syz-executor" name="/" dev="gadgetfs" ino=4720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.196669][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.224578][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.247405][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.278068][ T3325] veth0_macvtap: entered promiscuous mode [ 39.286120][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.297635][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.307603][ T3325] veth1_macvtap: entered promiscuous mode [ 39.322170][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.333127][ T29] audit: type=1400 audit(1767442353.391:99): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.363779][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.373777][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.395206][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.405997][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.420577][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.452656][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.488278][ T3495] hub 1-0:1.0: USB hub found [ 39.495912][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.514685][ T3495] hub 1-0:1.0: 8 ports detected [ 39.532452][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.565703][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.612669][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.639084][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.651087][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.659969][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.761619][ T3521] loop0: detected capacity change from 0 to 512 [ 39.773930][ T3519] loop4: detected capacity change from 0 to 2048 [ 39.780943][ T3521] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.794421][ T3521] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.835266][ T3519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.847887][ T3519] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.864322][ T3519] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13: bg 0: block 345: padding at end of block bitmap is not set [ 39.879470][ T3519] EXT4-fs (loop4): Remounting filesystem read-only [ 39.897156][ T3521] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.14: inode has both inline data and extents flags [ 39.911611][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.923428][ T3521] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.14: couldn't read orphan inode 15 (err -117) [ 39.936261][ T3514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12'. [ 39.949135][ T3521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.993496][ T3514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3514 comm=syz.3.12 [ 40.027497][ T3528] netlink: 32 bytes leftover after parsing attributes in process `syz.2.15'. [ 40.050834][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 40.059832][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 40.062102][ T3533] sd 0:0:1:0: device reset [ 40.085050][ T3536] Cannot find add_set index 0 as target [ 40.111319][ T3536] EXT4-fs error (device loop0): ext4_lookup:1785: inode #15: comm syz.0.14: inode has both inline data and extents flags [ 40.182852][ T3544] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 40.197236][ T3546] loop2: detected capacity change from 0 to 256 [ 40.249135][ T3546] FAT-fs (loop2): Directory bread(block 64) failed [ 40.285272][ T3546] FAT-fs (loop2): Directory bread(block 65) failed [ 40.295030][ T3555] loop3: detected capacity change from 0 to 1024 [ 40.320251][ T3555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.342668][ T3546] FAT-fs (loop2): Directory bread(block 66) failed [ 40.375346][ T3546] FAT-fs (loop2): Directory bread(block 67) failed [ 40.383123][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 40.404488][ T3546] FAT-fs (loop2): Directory bread(block 68) failed [ 40.411515][ T3546] FAT-fs (loop2): Directory bread(block 69) failed [ 40.418188][ T3546] FAT-fs (loop2): Directory bread(block 70) failed [ 40.424977][ T3546] FAT-fs (loop2): Directory bread(block 71) failed [ 40.432476][ T3546] FAT-fs (loop2): Directory bread(block 72) failed [ 40.480579][ T3546] FAT-fs (loop2): Directory bread(block 73) failed [ 40.554147][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.574264][ T3579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 40.634384][ T3581] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. [ 40.652489][ T3581] netlink: 'syz.3.28': attribute type 13 has an invalid length. [ 40.697306][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.756230][ T3586] netlink: 'syz.0.30': attribute type 13 has an invalid length. [ 40.775986][ T3575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.785254][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.792500][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.805924][ T3575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.887927][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.910732][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.084174][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.091511][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.136660][ T3583] loop1: detected capacity change from 0 to 512 [ 41.149470][ T3583] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.29: inode has both inline data and extents flags [ 41.163397][ T3583] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.29: couldn't read orphan inode 15 (err -117) [ 41.175695][ T3583] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.215881][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.226675][ T3586] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.322971][ T3575] bridge0: entered promiscuous mode [ 41.345829][ T3575] bridge0: port 3(macvtap1) entered blocking state [ 41.352624][ T3575] bridge0: port 3(macvtap1) entered disabled state [ 41.370318][ T3601] netlink: 32 bytes leftover after parsing attributes in process `syz.2.36'. [ 41.380941][ T3575] macvtap1: entered allmulticast mode [ 41.386447][ T3575] bridge0: entered allmulticast mode [ 41.394848][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 41.406713][ T3575] macvtap1: left allmulticast mode [ 41.412293][ T3575] bridge0: left allmulticast mode [ 41.419689][ T3575] bridge0: left promiscuous mode [ 41.457024][ T413] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.470744][ T3601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 41.480984][ T413] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.499157][ T413] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.509310][ T413] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.522365][ T413] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.569506][ T413] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.587245][ T413] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.591312][ T3611] loop3: detected capacity change from 0 to 1024 [ 41.605229][ T413] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.625339][ T3609] loop0: detected capacity change from 0 to 512 [ 41.650224][ T3609] ======================================================= [ 41.650224][ T3609] WARNING: The mand mount option has been deprecated and [ 41.650224][ T3609] and is ignored by this kernel. Remove the mand [ 41.650224][ T3609] option from the mount to silence this warning. [ 41.650224][ T3609] ======================================================= [ 41.687949][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.715756][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.747085][ T3609] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.38: EA inode hash validation failed [ 41.747962][ C1] hrtimer: interrupt took 75243 ns [ 41.785326][ T3609] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.798826][ T3609] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.38: corrupted inode contents [ 41.811721][ T3609] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #15: comm syz.0.38: mark_inode_dirty error [ 41.829368][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.885085][ T3609] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #15: comm syz.0.38: corrupted inode contents [ 41.939077][ T3609] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #15: comm syz.0.38: mark_inode_dirty error [ 41.985939][ T3609] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #15: comm syz.0.38: mark inode dirty (error -117) [ 42.019090][ T3609] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 42.028310][ T3609] EXT4-fs (loop0): 1 orphan inode deleted [ 42.042032][ T3609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.061774][ T3629] loop1: detected capacity change from 0 to 256 [ 42.095324][ T3631] sg_write: data in/out 49276/1 bytes for SCSI command 0x1c-- guessing data in; [ 42.095324][ T3631] program syz.3.45 not setting count and/or reply_len properly [ 42.113338][ T3575] +}[@ (3575) used greatest stack depth: 10440 bytes left [ 42.143138][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.160319][ T3629] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 42.219534][ T3621] loop2: detected capacity change from 0 to 512 [ 42.278091][ T3621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.351470][ T3621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.377047][ T3621] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.402662][ T3621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.533219][ T3661] loop3: detected capacity change from 0 to 128 [ 42.562273][ T3661] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 42.700393][ T3661] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.804601][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.900800][ T3677] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.57: EA inode hash validation failed [ 42.921646][ T3677] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.57: corrupted inode contents [ 42.934853][ T3677] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.57: mark_inode_dirty error [ 42.959075][ T3677] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.57: corrupted inode contents [ 42.978962][ T3677] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.57: mark_inode_dirty error [ 43.000573][ T3677] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.57: mark inode dirty (error -117) [ 43.018953][ T3677] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 43.050377][ T3677] EXT4-fs (loop3): 1 orphan inode deleted [ 43.076439][ T3677] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.212875][ T3692] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.229410][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.244386][ T3682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.274939][ T3682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.342053][ T3701] netlink: 'syz.1.66': attribute type 10 has an invalid length. [ 43.396550][ T3682] bridge0: port 3(macvtap1) entered blocking state [ 43.403290][ T3682] bridge0: port 3(macvtap1) entered disabled state [ 43.496329][ T3682] macvtap1: entered allmulticast mode [ 43.502215][ T3682] bridge0: entered allmulticast mode [ 43.524789][ T3682] macvtap1: left allmulticast mode [ 43.531282][ T3682] bridge0: left allmulticast mode [ 43.643518][ T3701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.663923][ T3701] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 43.764773][ T3713] EXT4-fs: inline encryption not supported [ 43.770798][ T3713] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.811619][ T3713] EXT4-fs: inline encryption not supported [ 43.839511][ T3713] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.858928][ T3713] EXT4-fs error (device loop1): ext4_orphan_get:1391: comm syz.1.70: inode #13: comm syz.1.70: iget: illegal inode # [ 43.872165][ T3713] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.70: couldn't read orphan inode 13 (err -117) [ 43.884637][ T3713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 43.990796][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.132280][ T29] kauditd_printk_skb: 900 callbacks suppressed [ 44.132354][ T29] audit: type=1326 audit(1767442358.201:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.162208][ T29] audit: type=1326 audit(1767442358.211:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.218930][ T29] audit: type=1326 audit(1767442358.271:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.221512][ T3728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.243394][ T29] audit: type=1326 audit(1767442358.271:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.278216][ T29] audit: type=1326 audit(1767442358.271:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.301584][ T29] audit: type=1326 audit(1767442358.271:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.325118][ T29] audit: type=1326 audit(1767442358.291:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.349101][ T29] audit: type=1326 audit(1767442358.291:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.372666][ T29] audit: type=1326 audit(1767442358.291:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.396549][ T29] audit: type=1326 audit(1767442358.291:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3714 comm="syz.3.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 44.552670][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.898751][ T3753] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 44.935683][ T3759] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 44.935683][ T3759] The task syz.0.82 (3759) triggered the difference, watch for misbehavior. [ 44.961973][ T3760] set_capacity_and_notify: 5 callbacks suppressed [ 44.961988][ T3760] loop4: detected capacity change from 0 to 512 [ 45.502971][ T3786] tap0: tun_chr_ioctl cmd 1074025678 [ 45.508321][ T3786] tap0: group set to 0 [ 45.754353][ T3791] __nla_validate_parse: 16 callbacks suppressed [ 45.754445][ T3791] netlink: 32 bytes leftover after parsing attributes in process `syz.3.101'. [ 45.830356][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 45.850112][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 45.959471][ T3808] loop1: detected capacity change from 0 to 256 [ 45.999856][ T3806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'. [ 46.008853][ T3806] netlink: 28 bytes leftover after parsing attributes in process `syz.0.108'. [ 46.055967][ T3808] FAT-fs (loop1): Directory bread(block 64) failed [ 46.081234][ T3808] FAT-fs (loop1): Directory bread(block 65) failed [ 46.102603][ T3808] FAT-fs (loop1): Directory bread(block 66) failed [ 46.122813][ T3808] FAT-fs (loop1): Directory bread(block 67) failed [ 46.172675][ T3817] loop4: detected capacity change from 0 to 512 [ 46.273232][ T3808] FAT-fs (loop1): Directory bread(block 68) failed [ 46.288762][ T3808] FAT-fs (loop1): Directory bread(block 69) failed [ 46.308966][ T3808] FAT-fs (loop1): Directory bread(block 70) failed [ 46.318781][ T3808] FAT-fs (loop1): Directory bread(block 71) failed [ 46.335932][ T3808] FAT-fs (loop1): Directory bread(block 72) failed [ 46.346007][ T3813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.111'. [ 46.355344][ T3817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 46.365355][ T3817] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 46.368853][ T3808] FAT-fs (loop1): Directory bread(block 73) failed [ 46.440386][ T3814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 46.462501][ T3814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.111'. [ 46.464165][ T3813] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 46.515331][ T3818] loop3: detected capacity change from 0 to 512 [ 46.598248][ T3817] netlink: 176 bytes leftover after parsing attributes in process `syz.4.110'. [ 46.670709][ T3830] loop2: detected capacity change from 0 to 256 [ 46.697091][ T3834] loop0: detected capacity change from 0 to 512 [ 46.901542][ T3813] mmap: syz.3.111 (3813) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.019116][ T3830] FAT-fs (loop2): Directory bread(block 64) failed [ 47.025851][ T3830] FAT-fs (loop2): Directory bread(block 65) failed [ 47.144952][ T3830] FAT-fs (loop2): Directory bread(block 66) failed [ 47.189122][ T3830] FAT-fs (loop2): Directory bread(block 67) failed [ 47.195724][ T3830] FAT-fs (loop2): Directory bread(block 68) failed [ 47.311950][ T3852] Zero length message leads to an empty skb [ 47.340175][ T3830] FAT-fs (loop2): Directory bread(block 69) failed [ 47.346967][ T3830] FAT-fs (loop2): Directory bread(block 70) failed [ 47.489277][ T3830] FAT-fs (loop2): Directory bread(block 71) failed [ 47.516280][ T3860] loop3: detected capacity change from 0 to 2048 [ 47.522878][ T3830] FAT-fs (loop2): Directory bread(block 72) failed [ 47.588296][ T3830] FAT-fs (loop2): Directory bread(block 73) failed [ 47.679349][ T3860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.761911][ T3860] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.786826][ T3860] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.126: bg 0: block 345: padding at end of block bitmap is not set [ 47.801556][ T3860] EXT4-fs (loop3): Remounting filesystem read-only [ 47.823331][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.031795][ T3883] loop4: detected capacity change from 0 to 512 [ 48.288098][ T3904] loop1: detected capacity change from 0 to 2048 [ 48.369960][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.398847][ T3907] loop2: detected capacity change from 0 to 256 [ 48.488238][ T3904] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.510242][ T3904] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.144: bg 0: block 345: padding at end of block bitmap is not set [ 48.524662][ T3904] EXT4-fs (loop1): Remounting filesystem read-only [ 48.561606][ T3907] FAT-fs (loop2): Directory bread(block 64) failed [ 48.581395][ T3324] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.628811][ T3907] FAT-fs (loop2): Directory bread(block 65) failed [ 48.721762][ T3907] FAT-fs (loop2): Directory bread(block 66) failed [ 48.807681][ T3907] FAT-fs (loop2): Directory bread(block 67) failed [ 48.859052][ T3907] FAT-fs (loop2): Directory bread(block 68) failed [ 48.865628][ T3907] FAT-fs (loop2): Directory bread(block 69) failed [ 48.990309][ T3907] FAT-fs (loop2): Directory bread(block 70) failed [ 48.997096][ T3907] FAT-fs (loop2): Directory bread(block 71) failed [ 49.040538][ T3933] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 49.050661][ T3933] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 49.136718][ T3907] FAT-fs (loop2): Directory bread(block 72) failed [ 49.171124][ T3907] FAT-fs (loop2): Directory bread(block 73) failed [ 49.684403][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 49.684421][ T29] audit: type=1326 audit(1767442363.761:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.762486][ T29] audit: type=1326 audit(1767442363.791:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.786231][ T29] audit: type=1326 audit(1767442363.791:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.809630][ T29] audit: type=1326 audit(1767442363.801:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.833016][ T29] audit: type=1326 audit(1767442363.801:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.856442][ T29] audit: type=1326 audit(1767442363.801:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.879905][ T29] audit: type=1326 audit(1767442363.801:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.903551][ T29] audit: type=1326 audit(1767442363.801:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.926954][ T29] audit: type=1326 audit(1767442363.811:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.950518][ T29] audit: type=1326 audit(1767442363.811:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3958 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 49.977275][ T3983] hub 1-0:1.0: USB hub found [ 50.006323][ T3982] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.019977][ T3983] hub 1-0:1.0: 8 ports detected [ 50.224891][ T3991] set_capacity_and_notify: 2 callbacks suppressed [ 50.224911][ T3991] loop0: detected capacity change from 0 to 256 [ 50.383770][ T3991] FAT-fs (loop0): Directory bread(block 64) failed [ 50.537211][ T3991] FAT-fs (loop0): Directory bread(block 65) failed [ 50.596104][ T3991] FAT-fs (loop0): Directory bread(block 66) failed [ 50.643499][ T4008] loop2: detected capacity change from 0 to 512 [ 50.663886][ T3991] FAT-fs (loop0): Directory bread(block 67) failed [ 50.714796][ T4011] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.190' sets config #0 [ 50.747929][ T3991] FAT-fs (loop0): Directory bread(block 68) failed [ 50.765178][ T4011] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.190' sets config #1 [ 50.835407][ T3991] FAT-fs (loop0): Directory bread(block 69) failed [ 50.886010][ T3991] FAT-fs (loop0): Directory bread(block 70) failed [ 50.918811][ T3991] FAT-fs (loop0): Directory bread(block 71) failed [ 50.958836][ T3991] FAT-fs (loop0): Directory bread(block 72) failed [ 50.974353][ T4017] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 51.005557][ T3991] FAT-fs (loop0): Directory bread(block 73) failed [ 51.300979][ T4029] __nla_validate_parse: 32 callbacks suppressed [ 51.300994][ T4029] netlink: 32 bytes leftover after parsing attributes in process `syz.2.197'. [ 51.320881][ T4028] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 51.359812][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 51.397633][ T4032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 51.493909][ T4038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 51.516632][ T4027] bridge0: port 3(macvtap1) entered blocking state [ 51.523380][ T4027] bridge0: port 3(macvtap1) entered disabled state [ 51.544478][ T4027] macvtap1: entered allmulticast mode [ 51.550248][ T4027] bridge0: entered allmulticast mode [ 51.587187][ T4027] macvtap1: left allmulticast mode [ 51.592744][ T4027] bridge0: left allmulticast mode [ 51.611736][ T4046] loop2: detected capacity change from 0 to 512 [ 51.654798][ T4046] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.664816][ T4046] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 51.821235][ T4046] netlink: 176 bytes leftover after parsing attributes in process `syz.2.201'. [ 52.050763][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 52.060037][ T4061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.209'. [ 52.103645][ T4059] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 52.191974][ T4063] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.710116][ T4088] loop0: detected capacity change from 0 to 512 [ 52.903435][ T4098] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 53.001781][ T4103] netlink: 'syz.1.228': attribute type 5 has an invalid length. [ 53.009539][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.228'. [ 53.021313][ T4094] bridge0: port 3(macvtap1) entered blocking state [ 53.027952][ T4094] bridge0: port 3(macvtap1) entered disabled state [ 53.058472][ T4094] macvtap1: entered allmulticast mode [ 53.064509][ T4094] bridge0: entered allmulticast mode [ 53.071243][ T4107] loop4: detected capacity change from 0 to 128 [ 53.090268][ T4094] macvtap1: left allmulticast mode [ 53.095535][ T4094] bridge0: left allmulticast mode [ 53.111575][ T4107] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 53.249685][ T4107] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.348153][ T4121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 53.349210][ T4120] hub 1-0:1.0: USB hub found [ 53.357464][ T4121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 53.426909][ T4120] hub 1-0:1.0: 8 ports detected [ 53.479524][ T3314] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.583130][ T4129] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 53.637135][ T4135] netlink: 'syz.1.242': attribute type 5 has an invalid length. [ 53.839316][ T4151] hub 1-0:1.0: USB hub found [ 53.863923][ T4151] hub 1-0:1.0: 8 ports detected [ 53.937953][ T4160] loop4: detected capacity change from 0 to 512 [ 54.461892][ T4182] bridge0: entered promiscuous mode [ 54.469345][ T4182] bridge0: port 3(macvtap1) entered blocking state [ 54.476023][ T4182] bridge0: port 3(macvtap1) entered disabled state [ 54.527184][ T4182] macvtap1: entered allmulticast mode [ 54.532705][ T4182] bridge0: entered allmulticast mode [ 54.562004][ T4199] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 54.687481][ T4182] macvtap1: left allmulticast mode [ 54.692752][ T4182] bridge0: left allmulticast mode [ 54.749829][ T4182] bridge0: left promiscuous mode [ 54.855057][ T4222] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 54.935950][ T4228] loop3: detected capacity change from 0 to 512 [ 54.969182][ T4228] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.010227][ T4238] loop2: detected capacity change from 0 to 512 [ 55.018883][ T4228] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.113978][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.245051][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 55.245065][ T29] audit: type=1326 audit(1767442369.321:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.308708][ T29] audit: type=1326 audit(1767442369.361:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.393654][ T4266] RDS: rds_bind could not find a transport for fe80::20, load rds_tcp or rds_rdma? [ 55.429031][ T29] audit: type=1326 audit(1767442369.411:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.452490][ T29] audit: type=1326 audit(1767442369.411:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.475941][ T29] audit: type=1326 audit(1767442369.411:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.499286][ T29] audit: type=1326 audit(1767442369.411:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.522855][ T29] audit: type=1326 audit(1767442369.411:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.546281][ T29] audit: type=1326 audit(1767442369.411:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.569750][ T29] audit: type=1326 audit(1767442369.421:1325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.593607][ T29] audit: type=1326 audit(1767442369.421:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4235 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2eafd8f749 code=0x7ffc0000 [ 55.809450][ T4302] loop0: detected capacity change from 0 to 512 [ 55.930706][ T4311] loop4: detected capacity change from 0 to 1024 [ 55.953446][ T4314] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.314' sets config #0 [ 55.972998][ T4314] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.314' sets config #1 [ 55.989128][ T4311] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.029164][ T4311] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 56.047605][ T4311] EXT4-fs (loop4): orphan cleanup on readonly fs [ 56.058002][ T4311] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.312: Failed to acquire dquot type 0 [ 56.078325][ T4311] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.312: Failed to acquire dquot type 0 [ 56.085955][ T4321] netlink: 'syz.3.315': attribute type 1 has an invalid length. [ 56.099997][ T4311] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.312: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.119379][ T4311] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.312: Failed to acquire dquot type 0 [ 56.136489][ T4311] EXT4-fs (loop4): 1 orphan inode deleted [ 56.191774][ T4321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.210662][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.379967][ T4347] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.325' sets config #0 [ 56.418935][ T4347] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.325' sets config #1 [ 56.442573][ T4350] __nla_validate_parse: 26 callbacks suppressed [ 56.442590][ T4350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.326'. [ 56.492518][ T4310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.504354][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 56.549140][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 56.606243][ T4359] loop1: detected capacity change from 0 to 1024 [ 56.613518][ T4359] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 56.625595][ T4359] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.633860][ T4359] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.679278][ T4364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.331'. [ 56.718139][ T4359] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.329: Failed to acquire dquot type 0 [ 56.755509][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 56.785164][ T4359] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.329: Failed to acquire dquot type 0 [ 56.805682][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.3.331'. [ 56.832640][ T4359] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.329: Freeing blocks not in datazone - block = 0, count = 4096 [ 56.855719][ T4359] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.329: Failed to acquire dquot type 0 [ 56.877732][ T4359] EXT4-fs (loop1): 1 orphan inode deleted [ 56.952048][ T4359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.045179][ T4358] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.146000][ T4400] loop3: detected capacity change from 0 to 512 [ 57.178501][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 57.298445][ T4413] loop2: detected capacity change from 0 to 512 [ 57.305839][ T4413] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.315733][ T4413] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 57.580524][ T4401] bridge0: port 3(macvtap1) entered blocking state [ 57.587201][ T4401] bridge0: port 3(macvtap1) entered disabled state [ 57.614694][ T4413] netlink: 176 bytes leftover after parsing attributes in process `syz.2.343'. [ 57.688899][ T4401] macvtap1: entered allmulticast mode [ 57.694369][ T4401] bridge0: entered allmulticast mode [ 57.819298][ T4401] macvtap1: left allmulticast mode [ 57.824498][ T4401] bridge0: left allmulticast mode [ 58.229318][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 58.268789][ T4437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 58.483965][ T4464] sd 0:0:1:0: device reset [ 59.250789][ T4519] loop3: detected capacity change from 0 to 512 [ 60.107038][ T4593] loop3: detected capacity change from 0 to 512 [ 60.214427][ T4582] loop2: detected capacity change from 0 to 512 [ 60.239722][ T4582] FAULT_INJECTION: forcing a failure. [ 60.239722][ T4582] name failslab, interval 1, probability 0, space 0, times 0 [ 60.252502][ T4582] CPU: 0 UID: 0 PID: 4582 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.252536][ T4582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 60.252556][ T4582] Call Trace: [ 60.252569][ T4582] [ 60.252585][ T4582] __dump_stack+0x1d/0x30 [ 60.252682][ T4582] dump_stack_lvl+0x95/0xd0 [ 60.252710][ T4582] dump_stack+0x15/0x1b [ 60.252776][ T4582] should_fail_ex+0x265/0x280 [ 60.252805][ T4582] should_failslab+0x8c/0xb0 [ 60.252840][ T4582] __kmalloc_cache_noprof+0x65/0x4c0 [ 60.252871][ T4582] ? tty_open+0x81/0xaf0 [ 60.252903][ T4582] tty_open+0x81/0xaf0 [ 60.252933][ T4582] ? kobject_get_unless_zero+0xf5/0x160 [ 60.253007][ T4582] chrdev_open+0x2eb/0x3a0 [ 60.253097][ T4582] ? __pfx_chrdev_open+0x10/0x10 [ 60.253126][ T4582] do_dentry_open+0x54b/0xa60 [ 60.253156][ T4582] vfs_open+0x37/0x1e0 [ 60.253184][ T4582] path_openat+0x1ddd/0x23b0 [ 60.253225][ T4582] ? _parse_integer_limit+0x170/0x190 [ 60.253312][ T4582] do_filp_open+0x109/0x230 [ 60.253357][ T4582] do_sys_openat2+0xa6/0x150 [ 60.253401][ T4582] __x64_sys_openat+0xf2/0x120 [ 60.253626][ T4582] x64_sys_call+0x2b07/0x3000 [ 60.253652][ T4582] do_syscall_64+0xca/0x2b0 [ 60.253760][ T4582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.253787][ T4582] RIP: 0033:0x7f2eafd8df90 [ 60.253811][ T4582] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 60.253873][ T4582] RSP: 002b:00007f2eae7f6b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 60.253897][ T4582] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f2eafd8df90 [ 60.253913][ T4582] RDX: 0000000000000002 RSI: 00007f2eae7f6c10 RDI: 00000000ffffff9c [ 60.253929][ T4582] RBP: 00007f2eae7f6c10 R08: 0000000000000000 R09: 00007f2eae7f6987 [ 60.253946][ T4582] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 60.253979][ T4582] R13: 00007f2eaffe6038 R14: 00007f2eaffe5fa0 R15: 00007ffcd3e46c98 [ 60.254003][ T4582] [ 60.301260][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 60.301310][ T29] audit: type=1326 audit(1767442374.341:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.500981][ T29] audit: type=1326 audit(1767442374.501:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.561037][ T29] audit: type=1326 audit(1767442374.641:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.618735][ T29] audit: type=1326 audit(1767442374.661:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.642397][ T29] audit: type=1326 audit(1767442374.661:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.665772][ T29] audit: type=1326 audit(1767442374.661:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.689151][ T29] audit: type=1326 audit(1767442374.671:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.712684][ T29] audit: type=1326 audit(1767442374.671:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.736046][ T29] audit: type=1326 audit(1767442374.671:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 60.759512][ T29] audit: type=1326 audit(1767442374.671:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4592 comm="syz.3.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f20e513f749 code=0x7ffc0000 [ 61.101920][ T4647] loop3: detected capacity change from 0 to 128 [ 61.165484][ T4647] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 61.359121][ T4647] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.441440][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.504563][ T4663] IPv6: Can't replace route, no match found [ 61.858249][ T4677] loop2: detected capacity change from 0 to 128 [ 61.905542][ T4677] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 61.989966][ T4677] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.015557][ T4634] syz.1.436 (4634) used greatest stack depth: 9384 bytes left [ 62.061870][ T4683] __nla_validate_parse: 19 callbacks suppressed [ 62.061921][ T4683] netlink: 116 bytes leftover after parsing attributes in process `syz.4.462'. [ 62.132135][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 62.166005][ T4688] netlink: 20 bytes leftover after parsing attributes in process `syz.2.464'. [ 62.206226][ T4688] netlink: 32 bytes leftover after parsing attributes in process `syz.2.464'. [ 62.239340][ T4698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.469'. [ 62.244431][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 62.272421][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 62.427074][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 62.479110][ T4706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.474'. [ 62.509482][ T4712] netlink: 116 bytes leftover after parsing attributes in process `syz.4.476'. [ 62.533810][ T4713] loop2: detected capacity change from 0 to 128 [ 62.560147][ T4713] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 62.624275][ T4713] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.711751][ T4728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.483'. [ 62.720894][ T4728] netlink: 'syz.3.483': attribute type 7 has an invalid length. [ 62.728579][ T4728] netlink: 'syz.3.483': attribute type 8 has an invalid length. [ 62.767584][ T3325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.019021][ T4755] loop3: detected capacity change from 0 to 128 [ 63.051152][ T4755] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 63.086067][ T4763] netlink: 'syz.0.498': attribute type 7 has an invalid length. [ 63.093836][ T4763] netlink: 'syz.0.498': attribute type 8 has an invalid length. [ 63.136521][ T4755] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.204667][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.348010][ T4773] syz.2.504 uses obsolete (PF_INET,SOCK_PACKET) [ 63.683630][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.713098][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.756715][ T4808] can0: slcan on ttyS3. [ 63.788892][ T4808] can0 (unregistered): slcan off ttyS3. [ 63.799629][ T4815] FAULT_INJECTION: forcing a failure. [ 63.799629][ T4815] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.812828][ T4815] CPU: 1 UID: 0 PID: 4815 Comm: syz.3.520 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.812863][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.812884][ T4815] Call Trace: [ 63.812966][ T4815] [ 63.812975][ T4815] __dump_stack+0x1d/0x30 [ 63.813000][ T4815] dump_stack_lvl+0x95/0xd0 [ 63.813023][ T4815] dump_stack+0x15/0x1b [ 63.813048][ T4815] should_fail_ex+0x265/0x280 [ 63.813125][ T4815] should_fail+0xb/0x20 [ 63.813150][ T4815] should_fail_usercopy+0x1a/0x20 [ 63.813181][ T4815] _copy_to_user+0x20/0xa0 [ 63.813214][ T4815] simple_read_from_buffer+0xb5/0x130 [ 63.813319][ T4815] proc_fail_nth_read+0x10e/0x150 [ 63.813360][ T4815] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 63.813392][ T4815] vfs_read+0x1a8/0x770 [ 63.813414][ T4815] ? __rcu_read_unlock+0x4f/0x70 [ 63.813440][ T4815] ? __fget_files+0x184/0x1c0 [ 63.813483][ T4815] ? mutex_lock+0x58/0x90 [ 63.813517][ T4815] ksys_read+0xda/0x1a0 [ 63.813543][ T4815] __x64_sys_read+0x40/0x50 [ 63.813565][ T4815] x64_sys_call+0x2889/0x3000 [ 63.813603][ T4815] do_syscall_64+0xca/0x2b0 [ 63.813648][ T4815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.813675][ T4815] RIP: 0033:0x7f20e513e15c [ 63.813699][ T4815] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 63.813719][ T4815] RSP: 002b:00007f20e3b9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 63.813737][ T4815] RAX: ffffffffffffffda RBX: 00007f20e5395fa0 RCX: 00007f20e513e15c [ 63.813749][ T4815] RDX: 000000000000000f RSI: 00007f20e3b9f0a0 RDI: 0000000000000004 [ 63.813761][ T4815] RBP: 00007f20e3b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 63.813772][ T4815] R10: 00000000000000a6 R11: 0000000000000246 R12: 0000000000000001 [ 63.813785][ T4815] R13: 00007f20e5396038 R14: 00007f20e5395fa0 R15: 00007ffea9eb8848 [ 63.813806][ T4815] [ 64.814710][ T4855] netlink: 'syz.0.537': attribute type 7 has an invalid length. [ 64.822707][ T4855] netlink: 'syz.0.537': attribute type 8 has an invalid length. [ 64.918142][ T4864] loop3: detected capacity change from 0 to 512 [ 64.956206][ T4864] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.004209][ T4864] EXT4-fs (loop3): 1 truncate cleaned up [ 65.086517][ T4864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.238268][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.292549][ T4888] netlink: 'syz.1.553': attribute type 7 has an invalid length. [ 65.300380][ T4888] netlink: 'syz.1.553': attribute type 8 has an invalid length. [ 65.419806][ T29] kauditd_printk_skb: 630 callbacks suppressed [ 65.419824][ T29] audit: type=1400 audit(1767442379.501:2061): avc: denied { module_request } for pid=4891 comm="syz.3.551" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 65.607983][ T29] audit: type=1400 audit(1767442379.621:2062): avc: denied { mount } for pid=4909 comm="syz.1.560" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 65.630380][ T29] audit: type=1326 audit(1767442379.621:2063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 65.653839][ T29] audit: type=1326 audit(1767442379.621:2064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 65.677291][ T29] audit: type=1326 audit(1767442379.621:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 65.700795][ T29] audit: type=1326 audit(1767442379.621:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 65.724217][ T29] audit: type=1326 audit(1767442379.621:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 65.747645][ T29] audit: type=1326 audit(1767442379.621:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 65.771195][ T29] audit: type=1326 audit(1767442379.621:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 65.794724][ T29] audit: type=1326 audit(1767442379.631:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4909 comm="syz.1.560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8f3f9ff749 code=0x7ffc0000 [ 66.269887][ T4944] netlink: 'syz.1.575': attribute type 7 has an invalid length. [ 66.277596][ T4944] netlink: 'syz.1.575': attribute type 8 has an invalid length. [ 66.457526][ T4966] loop3: detected capacity change from 0 to 128 [ 66.506140][ T4966] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 66.523660][ T4978] lo speed is unknown, defaulting to 1000 [ 66.529856][ T4978] lo speed is unknown, defaulting to 1000 [ 66.535879][ T4978] lo speed is unknown, defaulting to 1000 [ 66.542226][ T4966] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.574165][ T4978] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 66.621602][ T4978] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 66.682953][ T4978] lo speed is unknown, defaulting to 1000 [ 66.705290][ T3322] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 66.710354][ T4978] lo speed is unknown, defaulting to 1000 [ 66.740632][ T4978] lo speed is unknown, defaulting to 1000 [ 66.773702][ T4978] lo speed is unknown, defaulting to 1000 [ 66.799283][ T4978] lo speed is unknown, defaulting to 1000 [ 66.829804][ T4995] bond2: entered promiscuous mode [ 66.835096][ T4995] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.928409][ T5004] FAULT_INJECTION: forcing a failure. [ 66.928409][ T5004] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 66.941641][ T5004] CPU: 0 UID: 0 PID: 5004 Comm: syz.0.596 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.941674][ T5004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 66.941690][ T5004] Call Trace: [ 66.941697][ T5004] [ 66.941705][ T5004] __dump_stack+0x1d/0x30 [ 66.941790][ T5004] dump_stack_lvl+0x95/0xd0 [ 66.941829][ T5004] dump_stack+0x15/0x1b [ 66.941852][ T5004] should_fail_ex+0x265/0x280 [ 66.941881][ T5004] should_fail+0xb/0x20 [ 66.941906][ T5004] should_fail_usercopy+0x1a/0x20 [ 66.941957][ T5004] _copy_to_user+0x20/0xa0 [ 66.941989][ T5004] simple_read_from_buffer+0xb5/0x130 [ 66.942011][ T5004] proc_fail_nth_read+0x10e/0x150 [ 66.942044][ T5004] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 66.942157][ T5004] vfs_read+0x1a8/0x770 [ 66.942240][ T5004] ? __rcu_read_unlock+0x4f/0x70 [ 66.942266][ T5004] ? __fget_files+0x184/0x1c0 [ 66.942295][ T5004] ? mutex_lock+0x58/0x90 [ 66.942408][ T5004] ksys_read+0xda/0x1a0 [ 66.942433][ T5004] __x64_sys_read+0x40/0x50 [ 66.942552][ T5004] x64_sys_call+0x2889/0x3000 [ 66.942582][ T5004] do_syscall_64+0xca/0x2b0 [ 66.942661][ T5004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.942688][ T5004] RIP: 0033:0x7f55004be15c [ 66.942703][ T5004] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 66.942724][ T5004] RSP: 002b:00007f54fef1f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 66.942815][ T5004] RAX: ffffffffffffffda RBX: 00007f5500715fa0 RCX: 00007f55004be15c [ 66.942828][ T5004] RDX: 000000000000000f RSI: 00007f54fef1f0a0 RDI: 0000000000000003 [ 66.942843][ T5004] RBP: 00007f54fef1f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.942859][ T5004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.942874][ T5004] R13: 00007f5500716038 R14: 00007f5500715fa0 R15: 00007fff8acefe18 [ 66.942947][ T5004] [ 66.943804][ T4995] bridge3: entered promiscuous mode [ 67.181573][ T5012] __nla_validate_parse: 44 callbacks suppressed [ 67.181593][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 67.214107][ T5014] netlink: 20 bytes leftover after parsing attributes in process `syz.4.600'. [ 67.223863][ T5012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 67.240064][ T5014] netlink: 32 bytes leftover after parsing attributes in process `syz.4.600'. [ 67.275379][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 67.296246][ T5014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.600'. [ 67.379754][ T5024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.604'. [ 67.390190][ T5002] bridge0: entered promiscuous mode [ 67.396850][ T5002] bridge0: port 3(macvtap0) entered blocking state [ 67.403460][ T5002] bridge0: port 3(macvtap0) entered disabled state [ 67.553540][ T5002] macvtap0: entered allmulticast mode [ 67.559045][ T5002] bridge0: entered allmulticast mode [ 67.653928][ T5002] macvtap0: left allmulticast mode [ 67.659164][ T5002] bridge0: left allmulticast mode [ 67.698800][ T5002] bridge0: left promiscuous mode [ 67.711250][ T5024] netlink: 16 bytes leftover after parsing attributes in process `syz.3.604'. [ 67.840776][ T5051] netlink: 20 bytes leftover after parsing attributes in process `syz.1.616'. [ 67.887075][ T5059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 67.951422][ T5066] FAULT_INJECTION: forcing a failure. [ 67.951422][ T5066] name failslab, interval 1, probability 0, space 0, times 0 [ 67.964164][ T5066] CPU: 0 UID: 0 PID: 5066 Comm: syz.3.621 Not tainted syzkaller #0 PREEMPT(voluntary) [ 67.964193][ T5066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 67.964206][ T5066] Call Trace: [ 67.964213][ T5066] [ 67.964221][ T5066] __dump_stack+0x1d/0x30 [ 67.964276][ T5066] dump_stack_lvl+0x95/0xd0 [ 67.964304][ T5066] dump_stack+0x15/0x1b [ 67.964350][ T5066] should_fail_ex+0x265/0x280 [ 67.964374][ T5066] should_failslab+0x8c/0xb0 [ 67.964396][ T5066] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 67.964421][ T5066] ? __alloc_skb+0x2ff/0x4b0 [ 67.964520][ T5066] __alloc_skb+0x2ff/0x4b0 [ 67.964547][ T5066] ? __alloc_skb+0x228/0x4b0 [ 67.964577][ T5066] netlink_alloc_large_skb+0xbf/0xf0 [ 67.964648][ T5066] netlink_sendmsg+0x3cf/0x6b0 [ 67.964780][ T5066] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.964815][ T5066] __sock_sendmsg+0x145/0x180 [ 67.964838][ T5066] ____sys_sendmsg+0x31e/0x4a0 [ 67.964906][ T5066] ___sys_sendmsg+0x17b/0x1d0 [ 67.965044][ T5066] __x64_sys_sendmsg+0xd4/0x160 [ 67.965109][ T5066] x64_sys_call+0x17ba/0x3000 [ 67.965194][ T5066] do_syscall_64+0xca/0x2b0 [ 67.965304][ T5066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.965361][ T5066] RIP: 0033:0x7f20e513f749 [ 67.965425][ T5066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.965442][ T5066] RSP: 002b:00007f20e3b9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.965465][ T5066] RAX: ffffffffffffffda RBX: 00007f20e5395fa0 RCX: 00007f20e513f749 [ 67.965557][ T5066] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 67.965573][ T5066] RBP: 00007f20e3b9f090 R08: 0000000000000000 R09: 0000000000000000 [ 67.965647][ T5066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.965659][ T5066] R13: 00007f20e5396038 R14: 00007f20e5395fa0 R15: 00007ffea9eb8848 [ 67.965679][ T5066] [ 69.303374][ T5112] ================================================================== [ 69.311520][ T5112] BUG: KCSAN: data-race in memcpy_and_pad / rcu_tasks_trace_pregp_step [ 69.319815][ T5112] [ 69.322173][ T5112] write to 0xffff8881039fb5dc of 4 bytes by task 28 on cpu 0: [ 69.329712][ T5112] rcu_tasks_trace_pregp_step+0x1ac/0x8f0 [ 69.335471][ T5112] rcu_tasks_wait_gp+0x8b/0x530 [ 69.340351][ T5112] rcu_tasks_one_gp+0x7f6/0x8e0 [ 69.345236][ T5112] rcu_tasks_kthread+0xf7/0x110 [ 69.350122][ T5112] kthread+0x489/0x510 [ 69.354246][ T5112] ret_from_fork+0x149/0x290 [ 69.358980][ T5112] ret_from_fork_asm+0x1a/0x30 [ 69.363798][ T5112] [ 69.366157][ T5112] read to 0xffff8881039fb180 of 3264 bytes by task 5112 on cpu 1: [ 69.374084][ T5112] memcpy_and_pad+0x48/0x80 [ 69.378666][ T5112] arch_dup_task_struct+0x2c/0x40 [ 69.383846][ T5112] dup_task_struct+0x6e/0x950 [ 69.388566][ T5112] copy_process+0x37d/0x1ef0 [ 69.393193][ T5112] kernel_clone+0x16c/0x5c0 [ 69.397733][ T5112] __se_sys_clone3+0x1c2/0x200 [ 69.402541][ T5112] __x64_sys_clone3+0x31/0x40 [ 69.407261][ T5112] x64_sys_call+0x2c0f/0x3000 [ 69.411992][ T5112] do_syscall_64+0xca/0x2b0 [ 69.416556][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.422485][ T5112] [ 69.424829][ T5112] Reported by Kernel Concurrency Sanitizer on: [ 69.431056][ T5112] CPU: 1 UID: 0 PID: 5112 Comm: syz.3.643 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.440752][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.450841][ T5112] ================================================================== [ 69.767822][ T5127] infiniband !yz!: set down [ 69.772616][ T5127] infiniband !yz!: added team_slave_0 [ 69.811760][ T5127] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 69.812079][ T5127] infiniband !yz!: Couldn't open port 1 [ 69.892219][ T5127] RDS/IB: !yz!: added [ 69.909649][ T5127] smc: adding ib device !yz! with port count 1 [ 69.939874][ T5127] smc: ib device !yz! port 1 has no pnetid [ 70.197475][ T5104] Set syz1 is full, maxelem 65536 reached