last executing test programs: 1m38.031647956s ago: executing program 3 (id=302): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000954edba3abfb0f481f4441fba1a0b7d20b898168562307b8259033c3e7fecac8ddfe72406a1746ee3edf12cef86f2197ac85ad2bcdb468621c9a11cc83f5767dc5ea8872a1348cb72b5451de31ca4ce6b8dfa8658fef47aa73908b75853838f49d1b7c478f8bf3bba3363f9b0e6ce101a60d2edad33e36f16a03"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x97}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) io_setup(0x8, &(0x7f0000004200)) syz_open_dev$vcsa(0x0, 0x9, 0x2c000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x18) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000170000000d0001007564703a73"], 0x54}}, 0x0) 1m37.056464719s ago: executing program 3 (id=316): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r0, &(0x7f0000000b40), 0x0, 0x20000000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@min_batch_time={'min_batch_time', 0x3d, 0xca}}, {}, {@sysvgroups}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = creat(&(0x7f0000000000)='./file1\x00', 0x14c) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = dup2(r2, r2) sendto$inet6(r3, &(0x7f0000000280)="79f849cd63b74c9e9f5df6c7071c806f83d28c0d93d9adfd0da54a3e77892766ee67883baf82a115883cabd5d25d33626e81b2645665c00c3207ea8f795c2a7ec1d4149b42cf5c786bd3d847a50d3b8f580cb6bbd8bb24c10af0e8fafb87f34dc2e564ce9d0dd64ef949b016fcdd2925df", 0x71, 0x840, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a1ab0000000000000e003200000008001701"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) fallocate(r1, 0x0, 0x9, 0x2000403) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x64) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x4000, 0x10000, 0x4, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000300)='dns_resolver\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f0000000200)="75a1d70300", 0x5, 0xfffffffffffffffe) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x40305829, &(0x7f0000000140)={0x17c04, r5, 0xc000, 0x973f, 0x81, 0x1}) 1m36.730719283s ago: executing program 3 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m36.609492558s ago: executing program 3 (id=326): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@oldalloc}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$packet(0x11, 0x3, 0x300) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x1, r4, 0x0}]) r5 = socket$nl_route(0x10, 0x3, 0x0) semctl$IPC_INFO(0x0, 0x4, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=@delchain={0x40, 0x2c, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x6, 0x1, {0x0, 0xfff3}}]}}]}, 0x40}}, 0x4010) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) semget$private(0x0, 0x4, 0xa) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r8, 0x0) 1m36.459578744s ago: executing program 3 (id=333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x9, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc, 0x5}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) process_madvise(r7, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000000)="cd", 0x1}], 0x2, 0x13, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv4_delroute={0x54, 0x19, 0x0, 0x70bd29, 0x25dfdc00, {0x2, 0x0, 0x20, 0xa9, 0xfc, 0x4, 0xfd, 0x2, 0x2200}, [@RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6}, @RTA_NH_ID={0x8, 0x1e, 0x3}, @RTA_OIF={0x8, 0x4, r4}, @RTA_ENCAP_TYPE={0x6, 0x15, 0xa}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_SPORT={0x6, 0x1c, 0x4e21}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60}, 0x48) 1m36.078261481s ago: executing program 3 (id=337): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1a00404, &(0x7f0000000200)={[{@usrjquota}, {@nodiscard}]}, 0x1, 0xbca, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000022c0)="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", 0x5f4}], 0x1}, 0x20000044) 1m35.993842775s ago: executing program 32 (id=337): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x1a00404, &(0x7f0000000200)={[{@usrjquota}, {@nodiscard}]}, 0x1, 0xbca, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b0050000000000002900000036"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000022c0)="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", 0x5f4}], 0x1}, 0x20000044) 4.150374748s ago: executing program 1 (id=2051): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 3.516548286s ago: executing program 1 (id=2055): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) 3.273127977s ago: executing program 1 (id=2061): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xbb) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250700000008000500ffffffff08000500ffffffff0c0017000200aeaaaaaaaaaa080005000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00170000000000000000000a0004007770616e33000000"], 0x58}, 0x1, 0x0, 0x0, 0x20048080}, 0x4090) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x199e, 0x4) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x40, &(0x7f0000000140)={0x36, 0xfff, 0x7}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 3.225886499s ago: executing program 2 (id=2062): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r5, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004"], 0x18}}, 0x8000) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380), 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 3.031370487s ago: executing program 2 (id=2066): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000140)=0x4, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x8000, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffb, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7db, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) r4 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8, 0xa0}, &(0x7f0000010080), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r6 = socket$caif_stream(0x25, 0x1, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002080)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x6}, 0x2}, [{}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6}, {0x1000}, {0x1}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x3, 0xfffffffe}, {}, {0x0, 0x0, 0x7}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0xfffffffe}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x1000000}, {}, {}, {}, {0xfffffffc, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x9f6}, {}, {}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x23}, {0x0, 0x0, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {}, {}, {}, {0x0, 0x0, 0x9f, 0x0, 0x0, 0x1}, {0x20000, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x100000}, {0xfffffffd}, {}, {}, {}, {}, {0xfffffffd, 0x0, 0x0, 0x800}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffd, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x140d, 0x0, 0x401, 0x3e}, {}, {0x0, 0x78}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004640)=[{{&(0x7f0000000880)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x8000}}, {{&(0x7f0000003a80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003b00)="1eccf6acf51ce3f5059f6a100437c8698454b978d6d49e68ce6a894b75fea009038992f1b9c6b41dddfcfeac38a9c4ae6eeb556dd443c01341d2daa8aa96cbd106125248ffc55e6b9e1e9d47afb5844df9d311857ae42fdea74455e2be4dcddc2ae21ee3781364be669b977bad952ef6e9b35bdc3248e45834903c5dcb7d6f374efc", 0x82}, {&(0x7f0000003bc0)="49df1aa6bf043b3f6d7a600956af9c3cef9deb7996382895432205749842846110770733c425108089ee8b1350cda7425ecd403c4f971aa0e421913ab2bbbdd8e0e9550e98f773ca9f2fdc865df02384cd3bd200c7b482c96687ef6f6bccd3da27505661055d253f261527f1d13b030580f3dc6228790193ee4b4fbeb7c596b1aa2ceb4ee0bacd63e4d0b7ee485aba04f467fe9c676eb90bfa02458ce025eafead2fabeebc6d6418c660680891a9889f", 0xb0}, {&(0x7f0000003c80)="ad8c6e7b970cefe461a27305f0100d6c56199798936383e81babb568b521f39d40e356e432b8e55a711ccb6b9b0bbb558a30cae3c187f8cc03b7293e20520b369f997cd4a7200d3bc70f4c471f21e228d82f9661034644cf03513b597ab443412757b3600c26c014489c6f0b18d1e30d094ab5fd96115fac5c29fd1ad5fcf56e5afc833f670c0d5048396d25b87bf64fd00e48ab5e104ea02ccd953fd26619a8b8bbdc4a2cad51dc688df4d5c4d53e691a4581ff913d7de89a8dadfbd04b8a0daadef3665a934ca0", 0xc8}, {&(0x7f0000000c40)="095bc6829f02c7e246a3046af626cf18df99493df6be3bfa9390f1821bb5f319086910e4515c0bdcff31181f05a7c3c2e06213cb0a", 0x35}, {0x0}, {&(0x7f0000003dc0)="30cf70bdd46e249dad0e51e4e8c1be86a405ac7cd8ad0ca7790be3598f167afbb6e55eda1d4e32742a289e8d010022e38b7eb9d588524ec5c8bc0b879208517ca2d3", 0x42}, {&(0x7f0000000140)="35fa2be9b694bff1c5c7ee4576ec3c45f0c6851cae736332a9db59f158f4048858d1a1a2e1dc74f7496b1bc5a9a574b474060a1aee63521d1589df9948f5482816b6e5a859c75c17c3cb2abd88335663000000000000000000", 0x59}], 0x7, 0x0, 0x0, 0x804}}, {{&(0x7f0000003f40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1c0000000000000001000000", @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c010000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001eaff00511342ca02000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES16, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000010000000000ffffffffffffff0000000000", @ANYRES32=r5, @ANYRES8, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x110, 0x811}}], 0x3, 0x40001) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000780)={{{@in=@rand_addr=0x64010102, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x7, 0x4e24, 0x3, 0xa, 0x90, 0x80, 0x2b, r1}, {0x7, 0x7fff, 0xf, 0x3, 0x0, 0x3, 0x9, 0x9}, {0x6, 0x1aa, 0x5, 0x2}, 0x40, 0x6e6bb7, 0x2, 0x1, 0x1, 0x2}, {{@in6=@local, 0x4d2, 0x6c}, 0x2, @in=@rand_addr=0x64010102, 0x3501, 0x0, 0x1, 0x80, 0xc, 0x7f, 0x2}}, 0xe8) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffff8f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x7fff}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r2}) sendto$packet(r10, &(0x7f0000000180)="8cee80bd114009d5e1", 0x9, 0x8000, &(0x7f0000000200)={0x11, 0xf5, r1, 0x1, 0x4, 0x6, @broadcast}, 0x14) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, 0xfffffffffffffffd, 0x0) 2.938050761s ago: executing program 5 (id=2068): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000042c0)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008891}, 0xc000) process_vm_readv(r0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000b40)=""/148, 0x94}, {0x0}], 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) chown(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x5, 0x0, 0xfff6}) 2.937146911s ago: executing program 2 (id=2069): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITE={0x17, 0x0, 0x4000, @fd_index, 0x2, &(0x7f0000001480)="2b010ed9a2708e87eed9561f0432352e1295f4c90b262fae", 0x18}) io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e2100000008f503400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) remap_file_pages(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000002, 0xf, 0x4000000) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20004014) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x200, {0x0, 0x0, 0x0, r6, {0xfff2, 0x9}, {0x10}, {0x9, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.783849218s ago: executing program 2 (id=2071): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x40086602, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0xffffffff, @loopback, 0x2}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0x20000054) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40800) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x48080, 0x0) 2.530033939s ago: executing program 2 (id=2073): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@empty, @random="81f5d5388730", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20010814) close(r3) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340), 0x4) 2.51917827s ago: executing program 4 (id=2074): r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r4 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x40) getdents(r4, 0x0, 0x0) getdents(r4, &(0x7f00000003c0)=""/200, 0xc8) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000001000)={'\x00', 0x9f4, 0x1ff, 0x8, 0x9, 0x3, r0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r6, 0x29, 0x4e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc20}, 0x0, 0x10, 0xffffffffffffffff, 0x0) unshare(0x64000600) 2.386432486s ago: executing program 1 (id=2077): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r5, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r5, 0x7f, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000003a00350200000000fcdbdf250a00000004"], 0x18}}, 0x8000) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xffffffff}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {{}, {}, {0x20, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'veth0_macvtap\x00'}}}}}, 0x3c}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x1, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)='%', 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 1.896668607s ago: executing program 5 (id=2078): r0 = syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xfe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = geteuid() quotactl_fd$Q_GETFMT(r0, 0xffffffff80000401, r2, &(0x7f0000001a00)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001a40)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8304050000000000300012800b000100697036746e6c00002000028014000300ff010000000000000800000000000001d24f46ff223dacc7293672fcdece6d678a0800080017000000"], 0x50}, 0x1, 0x0, 0x0, 0x9005}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000001740)={0x0, 0x94, &(0x7f0000001900)=[@in6={0xa, 0x4e23, 0x10001, @mcast2, 0x33c76331}, @in={0x2, 0x4e22, @private=0xa010100}, @in6={0xa, 0x4e21, 0x9, @empty, 0x40}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}, 0x9}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x31}}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000019c0)=0x10) 1.748312724s ago: executing program 5 (id=2079): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 1.735195874s ago: executing program 5 (id=2080): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf6, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x8b, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f00000042c0)={0x28, 0x2, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008891}, 0xc000) process_vm_readv(r0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000140)=""/111, 0x6f}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f0000000a80)=""/159, 0x9f}, {&(0x7f0000000b40)=""/148, 0x94}, {0x0}], 0x6, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(&(0x7f0000000040)='./bus\x00', 0x0) chown(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000000180)={0x5, 0x0, 0xfff6}) 1.61311465s ago: executing program 4 (id=2082): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007900000000000000630000ff0000000095007400000000003dc8d6c8dd1984bd5bc41ee245cfe2c6beac902a55821690cc8df52e3f1057aed03882f9de29826a207c3b3e6bbb682be5722408214e70ca202308d8f22fc31aaf097c04348340e20f5eb2c3e82c67721a19639b0fa8cc94ee83b3ee0998070c0000000018d43c2a44c3"], 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x10) r9 = dup2(r7, r7) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r9, 0x1276, 0x0) 1.518618103s ago: executing program 1 (id=2083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() setrlimit(0x0, &(0x7f0000000040)={0x9}) sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x7) r2 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x3}) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100060c100000000000224e0000", 0x58}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r7, @ANYBLOB="08000300", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x24000080) 1.414383288s ago: executing program 2 (id=2084): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x2}, &(0x7f0000000000)=0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_settime(r0, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}}, &(0x7f0000000100)) 747.869477ms ago: executing program 4 (id=2085): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket(0xa, 0x3, 0x3a) syz_io_uring_setup(0x6023, &(0x7f0000000300)={0x0, 0x4f5b, 0x40, 0x1, 0x116}, &(0x7f0000000100), &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x1000, 0x2, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4a0, &(0x7f0000000b80)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x4c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x24000000) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x4, 0x9, 0x20000000000008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="cd1cff00000031db6446778986dd6000002300142f0020010000000000000000000000000001ff01000000000000000000000000000100008902", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040000090780000536b66dac1ed6ac3158919533957763fe4c5df49746fc98648e453efba"], 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair(0x24, 0x0, 0xffffffff, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 641.874052ms ago: executing program 4 (id=2086): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {@quota}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") syz_mount_image$vfat(&(0x7f0000000cc0), &(0x7f0000000c80)='./file1\x00', 0x2200018, &(0x7f0000000d00)=ANY=[], 0x1, 0x364, &(0x7f0000000900)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000010850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="050000000000000069116f00000000008510000002000000850000000a00000095000000000000009500a5050000000060dc2b0c171e4329c82370ff6d4775b022caa300005f2179cc3c4488fb07ad9bcb81b292fe9c579bce5786bfe60f447dca7996f8e56dd7c61cf1afaf0114ece2dbce"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x300000e, 0x7fff, 0xa81a411452c37bf6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="000000000002d7aabe7b0000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='neigh_create\x00', r4}, 0x18) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) 532.998537ms ago: executing program 1 (id=2087): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x300, 0x300, 0x8, 0x300}}) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xbb) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/cgroup\x00') sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fddbdf250700000008000500ffffffff08000500ffffffff0c0017000200aeaaaaaaaaaa080005000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00170000000000000000000a0004007770616e33000000"], 0x58}, 0x1, 0x0, 0x0, 0x20048080}, 0x4090) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x199e, 0x4) recvmmsg(r3, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x800002}], 0x1, 0x0, 0x0) rt_tgsigqueueinfo(r1, r1, 0x40, &(0x7f0000000140)={0x36, 0xfff, 0x7}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) 334.661795ms ago: executing program 0 (id=2090): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 333.838205ms ago: executing program 5 (id=2091): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_io_uring_setup(0x121d, &(0x7f0000000500)={0x0, 0x7d10, 0x80, 0x3, 0x1000034e}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x23457}) io_uring_enter(r1, 0x498d, 0x3, 0x20, 0x0, 0x0) 296.613997ms ago: executing program 0 (id=2092): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) 274.107498ms ago: executing program 0 (id=2093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x12, 0x14, 0x63, 0x0, 0xf, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @local}}}}}, 0x0) 188.719212ms ago: executing program 0 (id=2094): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd3, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x4, 0x100004, 0x0, 0x2, 0x6, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x11, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x52, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x1c, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 186.287872ms ago: executing program 5 (id=2095): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007900000000000000630000ff0000000095007400000000003dc8d6c8dd1984bd5bc41ee245cfe2c6beac902a55821690cc8df52e3f1057aed03882f9de29826a207c3b3e6bbb682be5722408214e70ca202308d8f22fc31aaf097c04348340e20f5eb2c3e82c67721a19639b0fa8cc94ee83b3ee0998070c0000000018d43c2a44c3"], 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r5, &(0x7f0000000000)="fa", 0xfffffdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r8}, 0x10) r9 = dup2(r7, r7) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r9, 0x1276, 0x0) 152.347173ms ago: executing program 0 (id=2096): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000"], 0xf0}}, 0x0) 151.413544ms ago: executing program 4 (id=2097): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r2, 0x35, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000014c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\v\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="5f244287688c22e131016000bfdaaf37b58877444db4a7a2081f0a1073342669aa7ae8b5c32f903408e8b56d6f31947dc04c010001000000000090f94f1f2ec4d03d40da8e8ca33a6c32f199cd65ec41a3d8fec0acd747437ae8e7663b02c77980d170d60fd88dbf570cc9f7ab33cc43247c2778c436959e2f1bdd251d552b59ab", @ANYRES32, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r4, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), 0x0, 0x4f, &(0x7f0000000380), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000740), 0x8, 0xd1, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000009c0)={0x2}, 0x8) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f00000004c0)=0x0, &(0x7f0000000a40)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a00)={@ifindex=r7, 0xffffffffffffffff, 0x21, 0x8, 0x0, @void, @value=r1, @void, @void, r6}, 0x20) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@deltclass={0x3c, 0x29, 0x20, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x10}, {0xfff2, 0xd}, {0xa, 0x2}}, [@tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_mq={0xfffffd27}, @TCA_RATE={0x6, 0x5, {0x0, 0x20}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@ifindex=r9, 0xffffffffffffffff, 0x33, 0x8, 0x0, @void, @value, @void, @void, r6}, 0x20) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r10, r0, 0x5, 0x0, r0, @void, @value=r0, @void, @void, r6}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) getpriority(0x1, 0x0) r11 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$LOOP_CTL_GET_FREE(r11, 0x4c82) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r13, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xe52}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x433}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000000}, 0x800) ioctl$LOOP_CTL_REMOVE(r11, 0x4c81, r12) 96.880886ms ago: executing program 0 (id=2098): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x800009, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x444, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x10, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xf8c800, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x4, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x3, 0x1, 0x9, 0xe, 0x1, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0xffffffff, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x5a, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10401, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r7, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@ipv6_deladdrlabel={0x40, 0x49, 0x1, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, 0x0, 0xf98}, [@IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x40400a0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='fib_table_lookup\x00', r12, 0x0, 0x417}, 0x18) r14 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r14, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x4000080) 0s ago: executing program 4 (id=2099): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, 0x0, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): mpat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 82.011221][ T29] audit: type=1326 audit(1765321468.071:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5756 comm="syz.4.786" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 82.583916][ T5788] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 82.712919][ T5802] block device autoloading is deprecated and will be removed. [ 82.893319][ T5811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 83.020050][ T5822] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 83.192960][ T5827] tipc: Enabling of bearer rejected, already enabled [ 83.528364][ T5833] hub 9-0:1.0: USB hub found [ 83.533098][ T5833] hub 9-0:1.0: 8 ports detected [ 83.541902][ T5833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5833 comm=syz.4.813 [ 83.570155][ T5833] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5833 comm=syz.4.813 [ 83.602044][ T5837] __nla_validate_parse: 3 callbacks suppressed [ 83.602058][ T5837] netlink: 16 bytes leftover after parsing attributes in process `syz.4.814'. [ 83.649124][ T5841] netlink: 'syz.4.816': attribute type 1 has an invalid length. [ 83.663372][ T5841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.678802][ T5841] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.686332][ T5841] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 83.697752][ T5841] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 83.729262][ T5847] gretap1: entered promiscuous mode [ 83.736829][ T5847] bond1: (slave gretap1): making interface the new active one [ 83.745448][ T5847] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 83.761873][ T5841] macvlan2: entered promiscuous mode [ 83.767363][ T5841] macvlan2: entered allmulticast mode [ 83.773483][ T5841] bond1: entered promiscuous mode [ 83.778934][ T5841] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.788833][ T5841] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 83.801088][ T5841] bond1: left promiscuous mode [ 83.931725][ T5856] hub 9-0:1.0: USB hub found [ 83.942045][ T5856] hub 9-0:1.0: 8 ports detected [ 83.966270][ T5856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5856 comm=syz.2.822 [ 84.009579][ T5856] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5856 comm=syz.2.822 [ 84.045243][ T5863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.825'. [ 84.057925][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.823'. [ 84.099673][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.823'. [ 84.124775][ T5870] netlink: 16 bytes leftover after parsing attributes in process `syz.5.824'. [ 84.139476][ T5870] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 84.154718][ T5872] xt_check_target: 4 callbacks suppressed [ 84.154735][ T5872] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 84.221760][ T5874] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 84.228338][ T5874] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 84.236059][ T5874] vhci_hcd vhci_hcd.0: Device attached [ 84.248463][ T5875] SELinux: failed to load policy [ 84.335093][ T5879] vhci_hcd: connection closed [ 84.335395][ T31] vhci_hcd vhci_hcd.5: stop threads [ 84.345389][ T31] vhci_hcd vhci_hcd.5: release socket [ 84.350785][ T31] vhci_hcd vhci_hcd.5: disconnect device [ 84.352222][ T5891] 9p: Bad value for 'rfdno' [ 84.420820][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.836'. [ 84.490305][ T5906] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 84.757103][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.847'. [ 84.815793][ T5930] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 84.866568][ T5938] program syz.1.853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.991725][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.858'. [ 85.496210][ T5952] lo speed is unknown, defaulting to 1000 [ 85.633724][ T5958] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 85.804594][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.5.869'. [ 85.828721][ T5982] hub 9-0:1.0: USB hub found [ 85.833615][ T5982] hub 9-0:1.0: 8 ports detected [ 85.841034][ T5982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5982 comm=syz.1.870 [ 85.892480][ T5982] xt_TCPMSS: Only works on TCP SYN packets [ 85.911688][ T5982] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=5982 comm=syz.1.870 [ 85.947442][ T5992] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 86.064122][ T6010] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 86.095241][ T6014] 9p: Bad value for 'rfdno' [ 86.160412][ T6019] hub 9-0:1.0: USB hub found [ 86.174300][ T6019] hub 9-0:1.0: 8 ports detected [ 86.196668][ T6019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6019 comm=syz.5.887 [ 86.219497][ T6021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.260494][ T6019] xt_TCPMSS: Only works on TCP SYN packets [ 86.270980][ T6019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6019 comm=syz.5.887 [ 86.333101][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.1.890'. [ 86.414134][ T6039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.432598][ T6039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.543697][ T6048] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 86.657319][ T6060] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6060 comm=syz.0.900 [ 86.739193][ T6054] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.767862][ T6052] hub 9-0:1.0: USB hub found [ 86.782451][ T5841] syz.4.816 (5841) used greatest stack depth: 9824 bytes left [ 86.798889][ T6052] hub 9-0:1.0: 8 ports detected [ 86.850077][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 86.850090][ T29] audit: type=1326 audit(1765321472.981:3479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 86.886734][ T6052] xt_TCPMSS: Only works on TCP SYN packets [ 86.911858][ T6064] siw: device registration error -23 [ 86.941711][ T6066] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6066 comm=syz.0.900 [ 86.969210][ T6064] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 87.043170][ T29] audit: type=1326 audit(1765321473.021:3480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 87.066707][ T29] audit: type=1326 audit(1765321473.061:3481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 87.089954][ T29] audit: type=1326 audit(1765321473.061:3482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 87.113526][ T29] audit: type=1326 audit(1765321473.061:3483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 87.137016][ T29] audit: type=1326 audit(1765321473.061:3484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 87.160358][ T29] audit: type=1326 audit(1765321473.061:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f048b50f783 code=0x7ffc0000 [ 87.183829][ T29] audit: type=1326 audit(1765321473.071:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.5.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f048b50e1ff code=0x7ffc0000 [ 87.207097][ T29] audit: type=1326 audit(1765321473.071:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 87.230521][ T29] audit: type=1326 audit(1765321473.071:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6051 comm="syz.0.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 87.287611][ T6068] tipc: Enabling of bearer rejected, already enabled [ 87.371857][ T6081] tipc: Resetting bearer [ 87.509353][ T6081] tipc: Disabling bearer [ 87.529177][ T6078] tipc: Enabling of bearer rejected, failed to enable media [ 88.014671][ T6088] lo speed is unknown, defaulting to 1000 [ 88.159437][ T6094] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 88.188364][ T6098] siw: device registration error -23 [ 88.205816][ T6098] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 88.319649][ T6110] netlink: 'syz.0.921': attribute type 10 has an invalid length. [ 88.429733][ T6115] tipc: Enabling of bearer rejected, failed to enable media [ 88.742373][ T6137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 88.794230][ T6142] netlink: 'syz.0.933': attribute type 10 has an invalid length. [ 88.861165][ T6151] __nla_validate_parse: 5 callbacks suppressed [ 88.861186][ T6151] netlink: 9 bytes leftover after parsing attributes in process `syz.4.937'. [ 88.877035][ T6151] netlink: 9 bytes leftover after parsing attributes in process `syz.4.937'. [ 88.962403][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.938'. [ 88.994578][ T6157] tipc: Enabling of bearer rejected, failed to enable media [ 89.032586][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.938'. [ 89.197448][ T6172] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6172 comm=syz.5.945 [ 89.227751][ T6172] xt_TCPMSS: Only works on TCP SYN packets [ 89.235426][ T6172] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6172 comm=syz.5.945 [ 89.271377][ T6176] siw: device registration error -23 [ 89.277250][ T6176] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 89.305181][ T6182] netlink: 9 bytes leftover after parsing attributes in process `syz.5.948'. [ 89.314525][ T6182] netlink: 9 bytes leftover after parsing attributes in process `syz.5.948'. [ 89.343334][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.952'. [ 89.393383][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.5.952'. [ 89.432194][ T6196] tipc: Enabling of bearer rejected, failed to enable media [ 89.590481][ T6203] tipc: Enabling of bearer rejected, failed to enable media [ 89.744676][ T6207] lo speed is unknown, defaulting to 1000 [ 90.057037][ T6212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.195649][ T6221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 90.258030][ T6221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.965'. [ 90.293314][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.393210][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.070252][ T6229] lo speed is unknown, defaulting to 1000 [ 92.227832][ T6237] lo speed is unknown, defaulting to 1000 [ 92.399616][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 92.399630][ T29] audit: type=1400 audit(1765321478.531:3601): avc: denied { ioctl } for pid=6255 comm="syz.2.976" path="socket:[17093]" dev="sockfs" ino=17093 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 92.586826][ T6267] tipc: Enabling of bearer rejected, failed to enable media [ 92.640100][ T6262] 9p: Bad value for 'rfdno' [ 92.686757][ T6272] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 92.745977][ T29] audit: type=1400 audit(1765321478.881:3602): avc: denied { prog_load } for pid=6275 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.798198][ T29] audit: type=1400 audit(1765321478.881:3603): avc: denied { bpf } for pid=6275 comm="syz.5.983" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.818766][ T29] audit: type=1400 audit(1765321478.921:3604): avc: denied { map_create } for pid=6275 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.837889][ T29] audit: type=1400 audit(1765321478.921:3605): avc: denied { map_read map_write } for pid=6275 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.857720][ T29] audit: type=1400 audit(1765321478.921:3606): avc: denied { perfmon } for pid=6275 comm="syz.5.983" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 92.878569][ T29] audit: type=1400 audit(1765321478.921:3607): avc: denied { prog_run } for pid=6275 comm="syz.5.983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 92.898185][ T29] audit: type=1326 audit(1765321478.981:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 92.921581][ T29] audit: type=1326 audit(1765321478.981:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 92.945236][ T29] audit: type=1326 audit(1765321478.981:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6280 comm="syz.5.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f048b50df90 code=0x7ffc0000 [ 93.103318][ T6301] tipc: Enabling of bearer rejected, failed to enable media [ 93.146238][ T6302] tipc: Enabling of bearer rejected, failed to enable media [ 93.250822][ T6296] 9p: Bad value for 'rfdno' [ 93.393429][ T6313] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 93.456178][ T6323] netlink: '+}[@': attribute type 7 has an invalid length. [ 93.595952][ T6345] tipc: Enabling of bearer rejected, failed to enable media [ 93.617860][ T6347] tipc: Enabling of bearer rejected, failed to enable media [ 93.620836][ T6349] block device autoloading is deprecated and will be removed. [ 94.060555][ T6370] __nla_validate_parse: 11 callbacks suppressed [ 94.060570][ T6370] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1016'. [ 94.087521][ T6370] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1016'. [ 94.189414][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.226719][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.588368][ T6382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.621618][ T6372] 9p: Bad value for 'rfdno' [ 94.627871][ T6384] siw: device registration error -23 [ 94.873912][ T6388] netlink: 'syz.5.1020': attribute type 10 has an invalid length. [ 94.888993][ T6388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.897902][ T6388] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 94.933127][ T6399] siw: device registration error -23 [ 94.939714][ T6399] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 95.018344][ T6407] tipc: Enabling of bearer rejected, failed to enable media [ 95.032812][ T6409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6409 comm=syz.5.1030 [ 95.062470][ T6409] xt_TCPMSS: Only works on TCP SYN packets [ 95.069530][ T6409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6409 comm=syz.5.1030 [ 95.160701][ T6419] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1034'. [ 95.169926][ T6419] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1034'. [ 95.223737][ T6421] netlink: 'syz.5.1036': attribute type 10 has an invalid length. [ 95.280870][ T6426] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.296545][ T6428] siw: device registration error -23 [ 95.302802][ T6428] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 95.344133][ T6426] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.384442][ T6426] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.434132][ T6426] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.504317][ T2519] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.515972][ T2519] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.527155][ T2519] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.537940][ T2519] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.686404][ T6440] lo speed is unknown, defaulting to 1000 [ 95.853776][ T6442] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 95.956168][ T6444] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 96.045420][ T6449] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1046'. [ 96.054875][ T6449] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1046'. [ 96.103043][ T6453] tipc: Enabling of bearer rejected, failed to enable media [ 96.273021][ T6459] siw: device registration error -23 [ 96.278856][ T6459] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 96.456793][ T6471] netlink: '+}[@': attribute type 7 has an invalid length. [ 96.480134][ T6473] siw: device registration error -23 [ 96.521112][ T6480] siw: device registration error -23 [ 96.530059][ T6480] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 96.624891][ T6489] siw: device registration error -23 [ 96.635000][ T6488] tipc: Enabling of bearer rejected, failed to enable media [ 96.644876][ T6489] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 96.855987][ T6496] lo speed is unknown, defaulting to 1000 [ 97.173621][ T6499] hub 9-0:1.0: USB hub found [ 97.178540][ T6499] hub 9-0:1.0: 8 ports detected [ 97.210016][ T6499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6499 comm=syz.2.1067 [ 97.279794][ T6499] xt_TCPMSS: Only works on TCP SYN packets [ 97.296047][ T6499] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6499 comm=syz.2.1067 [ 97.377986][ T6517] siw: device registration error -23 [ 97.390827][ T6517] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 97.422148][ T6515] hub 9-0:1.0: USB hub found [ 97.429210][ T6507] tipc: Enabling of bearer rejected, already enabled [ 97.438651][ T6515] hub 9-0:1.0: 8 ports detected [ 97.452011][ T6515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6515 comm=syz.1.1074 [ 97.490577][ T6522] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 97.519867][ T6515] xt_TCPMSS: Only works on TCP SYN packets [ 97.539663][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 97.539675][ T29] audit: type=1326 audit(1765321483.671:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.572388][ T6515] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6515 comm=syz.1.1074 [ 97.612011][ T29] audit: type=1326 audit(1765321483.701:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.635497][ T29] audit: type=1326 audit(1765321483.701:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.658888][ T29] audit: type=1326 audit(1765321483.711:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.682216][ T29] audit: type=1326 audit(1765321483.741:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.705613][ T29] audit: type=1326 audit(1765321483.741:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.729088][ T29] audit: type=1326 audit(1765321483.741:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.752730][ T29] audit: type=1326 audit(1765321483.741:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.776126][ T29] audit: type=1326 audit(1765321483.741:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 97.799646][ T29] audit: type=1326 audit(1765321483.741:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6514 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f528f531667 code=0x7ffc0000 [ 97.852378][ T6533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1080'. [ 97.888230][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1080'. [ 98.103855][ T6556] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 98.349284][ T6562] lo speed is unknown, defaulting to 1000 [ 98.545881][ T6559] tipc: Enabling of bearer rejected, already enabled [ 99.003782][ T6567] loop1: detected capacity change from 0 to 2048 [ 99.047508][ T6567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 99.047677][ T6572] hub 9-0:1.0: USB hub found [ 99.113518][ T6572] hub 9-0:1.0: 8 ports detected [ 99.130917][ T6580] !yz!: rxe_newlink: already configured on team_slave_0 [ 99.140687][ T6583] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.164275][ T6572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6572 comm=syz.0.1094 [ 99.213513][ T6583] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1926 with error 28 [ 99.226055][ T6583] EXT4-fs (loop1): This should not happen!! Data will be lost [ 99.226055][ T6583] [ 99.235811][ T6583] EXT4-fs (loop1): Total free blocks count 0 [ 99.241832][ T6583] EXT4-fs (loop1): Free/Dirty block details [ 99.247833][ T6583] EXT4-fs (loop1): free_blocks=2415919104 [ 99.253625][ T6583] EXT4-fs (loop1): dirty_blocks=2544 [ 99.258949][ T6583] EXT4-fs (loop1): Block reservation details [ 99.265012][ T6583] EXT4-fs (loop1): i_reserved_data_blocks=176 [ 99.292489][ T6590] xt_TCPMSS: Only works on TCP SYN packets [ 99.300144][ T6590] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6590 comm=syz.0.1094 [ 99.499064][ T6567] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1926 with max blocks 2048 with error 28 [ 99.939964][ T6605] tipc: Enabling of bearer rejected, already enabled [ 100.037584][ T6611] lo speed is unknown, defaulting to 1000 [ 100.244900][ T6610] tipc: New replicast peer: 255.255.255.255 [ 100.251423][ T6610] tipc: Enabled bearer , priority 10 [ 100.286536][ T6614] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 100.562577][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1112'. [ 100.727748][ T6641] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 100.745784][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1112'. [ 100.825259][ T6643] loop1: detected capacity change from 0 to 2048 [ 100.863975][ T6627] 9p: Bad value for 'rfdno' [ 100.895582][ T6643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 100.922732][ T6654] netlink: 'syz.5.1119': attribute type 1 has an invalid length. [ 100.948474][ T6654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.980978][ T6654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.998295][ T6654] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 101.019118][ T6654] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 101.054683][ T6660] gretap1: entered promiscuous mode [ 101.063074][ T6660] bond1: (slave gretap1): making interface the new active one [ 101.070962][ T6660] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 101.087716][ T6660] macvlan2: entered promiscuous mode [ 101.093078][ T6660] macvlan2: entered allmulticast mode [ 101.099033][ T6660] bond1: entered promiscuous mode [ 101.104895][ T6660] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.114770][ T6660] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 101.133760][ T6660] bond1: left promiscuous mode [ 101.163291][ T6662] hub 9-0:1.0: USB hub found [ 101.168057][ T6662] hub 9-0:1.0: 8 ports detected [ 101.183958][ T6662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6662 comm=syz.4.1121 [ 101.199774][ T6657] tipc: Enabling of bearer rejected, already enabled [ 101.214104][ T6662] xt_TCPMSS: Only works on TCP SYN packets [ 101.221524][ T6662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6662 comm=syz.4.1121 [ 101.323107][ T6668] tipc: Enabling of bearer rejected, failed to enable media [ 101.374570][ T6643] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 101.389434][ T6643] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 101.401947][ T6643] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.401947][ T6643] [ 101.411672][ T6643] EXT4-fs (loop1): Total free blocks count 0 [ 101.417692][ T6643] EXT4-fs (loop1): Free/Dirty block details [ 101.423619][ T6643] EXT4-fs (loop1): free_blocks=2415919104 [ 101.429378][ T6643] EXT4-fs (loop1): dirty_blocks=8192 [ 101.434704][ T6643] EXT4-fs (loop1): Block reservation details [ 101.440694][ T6643] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 101.481233][ T2229] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 101.578807][ T6672] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1125'. [ 101.592197][ T6676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1124'. [ 101.602711][ T6676] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 101.649934][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1125'. [ 101.670805][ T6684] netlink: '+}[@': attribute type 7 has an invalid length. [ 101.679527][ T6684] loop1: detected capacity change from 0 to 128 [ 101.690269][ T6684] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 101.701452][ T6686] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1128'. [ 101.719284][ T6684] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.761780][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 101.818423][ T6686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 101.866234][ T6698] loop1: detected capacity change from 0 to 2048 [ 101.893444][ T6698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.918651][ T6698] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.934844][ T6704] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1134'. [ 101.946234][ T6688] 9p: Bad value for 'rfdno' [ 101.957792][ T6704] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1134'. [ 102.022141][ T6705] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1133: bg 0: block 345: padding at end of block bitmap is not set [ 102.042288][ T6705] EXT4-fs (loop1): Remounting filesystem read-only [ 102.052144][ T37] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 102.058832][ T6710] tipc: Enabling of bearer rejected, failed to enable media [ 102.125384][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.129647][ T6709] lo speed is unknown, defaulting to 1000 [ 102.171490][ T6713] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 102.216184][ T6707] tipc: Enabling of bearer rejected, already enabled [ 102.231911][ T6717] loop1: detected capacity change from 0 to 2048 [ 102.251883][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 102.362423][ T6723] tipc: Enabling of bearer rejected, failed to enable media [ 102.469186][ T6722] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 102.485142][ T6722] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 102.486107][ T6726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 102.497733][ T6722] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.497733][ T6722] [ 102.516438][ T6722] EXT4-fs (loop1): Total free blocks count 0 [ 102.522495][ T6722] EXT4-fs (loop1): Free/Dirty block details [ 102.528511][ T6722] EXT4-fs (loop1): free_blocks=2415919104 [ 102.534323][ T6722] EXT4-fs (loop1): dirty_blocks=4032 [ 102.539653][ T6722] EXT4-fs (loop1): Block reservation details [ 102.545773][ T6722] EXT4-fs (loop1): i_reserved_data_blocks=252 [ 102.552787][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 102.552803][ T29] audit: type=1326 audit(1765321488.691:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f528f5265e7 code=0x7ffc0000 [ 102.588135][ T6731] netlink: '+}[@': attribute type 7 has an invalid length. [ 102.633820][ T29] audit: type=1326 audit(1765321488.741:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f528f4cb829 code=0x7ffc0000 [ 102.657240][ T29] audit: type=1326 audit(1765321488.741:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f528f5265e7 code=0x7ffc0000 [ 102.680677][ T29] audit: type=1326 audit(1765321488.741:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f528f4cb829 code=0x7ffc0000 [ 102.704268][ T29] audit: type=1326 audit(1765321488.741:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 102.727767][ T29] audit: type=1326 audit(1765321488.771:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f528f5265e7 code=0x7ffc0000 [ 102.751146][ T29] audit: type=1326 audit(1765321488.771:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f528f4cb829 code=0x7ffc0000 [ 102.774575][ T29] audit: type=1326 audit(1765321488.771:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 102.798003][ T29] audit: type=1326 audit(1765321488.771:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 102.822020][ T29] audit: type=1326 audit(1765321488.801:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6716 comm="syz.1.1138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f528f5265e7 code=0x7ffc0000 [ 102.910548][ T2264] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 102.975628][ T6747] loop1: detected capacity change from 0 to 2048 [ 102.993809][ T6747] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 103.063907][ T6750] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 103.075869][ T6745] 9p: Bad value for 'rfdno' [ 103.079075][ T6750] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1468 with error 28 [ 103.095750][ T6750] EXT4-fs (loop1): This should not happen!! Data will be lost [ 103.095750][ T6750] [ 103.105404][ T6750] EXT4-fs (loop1): Total free blocks count 0 [ 103.111400][ T6750] EXT4-fs (loop1): Free/Dirty block details [ 103.117318][ T6750] EXT4-fs (loop1): free_blocks=2415919104 [ 103.123184][ T6750] EXT4-fs (loop1): dirty_blocks=2480 [ 103.128473][ T6750] EXT4-fs (loop1): Block reservation details [ 103.134588][ T6750] EXT4-fs (loop1): i_reserved_data_blocks=173 [ 103.268589][ T6758] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 103.283904][ T6758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.305418][ T6758] 8021q: adding VLAN 0 to HW filter on device bond2 [ 103.312871][ T6758] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.324964][ T6758] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 103.351581][ T6747] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 1468 with max blocks 2048 with error 28 [ 103.509582][ T6768] tipc: Enabling of bearer rejected, failed to enable media [ 103.513798][ T6770] netlink: '+}[@': attribute type 7 has an invalid length. [ 103.649201][ T6776] hub 9-0:1.0: USB hub found [ 103.658253][ T6776] hub 9-0:1.0: 8 ports detected [ 103.688300][ T6765] tipc: Enabling of bearer rejected, already enabled [ 103.689183][ T6776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6776 comm=syz.4.1157 [ 103.758455][ T6776] xt_TCPMSS: Only works on TCP SYN packets [ 103.766155][ T6776] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6776 comm=syz.4.1157 [ 103.954390][ T6795] FAULT_INJECTION: forcing a failure. [ 103.954390][ T6795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.967486][ T6795] CPU: 0 UID: 0 PID: 6795 Comm: syz.1.1162 Not tainted syzkaller #0 PREEMPT(voluntary) [ 103.967640][ T6795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.967693][ T6795] Call Trace: [ 103.967701][ T6795] [ 103.967709][ T6795] __dump_stack+0x1d/0x30 [ 103.967738][ T6795] dump_stack_lvl+0xe8/0x140 [ 103.967822][ T6795] dump_stack+0x15/0x1b [ 103.967840][ T6795] should_fail_ex+0x265/0x280 [ 103.967907][ T6795] should_fail+0xb/0x20 [ 103.967930][ T6795] should_fail_usercopy+0x1a/0x20 [ 103.967960][ T6795] _copy_from_user+0x1c/0xb0 [ 103.967990][ T6795] __copy_msghdr+0x244/0x300 [ 103.968028][ T6795] ___sys_sendmsg+0x109/0x1d0 [ 103.968073][ T6795] __sys_sendmmsg+0x178/0x300 [ 103.968145][ T6795] __x64_sys_sendmmsg+0x57/0x70 [ 103.968180][ T6795] x64_sys_call+0x1e28/0x3000 [ 103.968210][ T6795] do_syscall_64+0xd8/0x2a0 [ 103.968292][ T6795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.968401][ T6795] RIP: 0033:0x7f528f52f749 [ 103.968419][ T6795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.968517][ T6795] RSP: 002b:00007f528df97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 103.968541][ T6795] RAX: ffffffffffffffda RBX: 00007f528f785fa0 RCX: 00007f528f52f749 [ 103.968557][ T6795] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 103.968572][ T6795] RBP: 00007f528df97090 R08: 0000000000000000 R09: 0000000000000000 [ 103.968593][ T6795] R10: 0000000004004040 R11: 0000000000000246 R12: 0000000000000001 [ 103.968621][ T6795] R13: 00007f528f786038 R14: 00007f528f785fa0 R15: 00007ffcb291c248 [ 103.968640][ T6795] [ 104.199418][ T6802] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.265733][ T6802] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.314723][ T6802] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.364699][ T6802] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.392305][ T6806] siw: device registration error -23 [ 104.427026][ T2264] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.440589][ T2264] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.453068][ T2264] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.465959][ T2264] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.623196][ T6820] hub 9-0:1.0: USB hub found [ 104.628162][ T6820] hub 9-0:1.0: 8 ports detected [ 104.637648][ T6820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6820 comm=syz.4.1172 [ 104.668678][ T6820] xt_TCPMSS: Only works on TCP SYN packets [ 104.675968][ T6820] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6820 comm=syz.4.1172 [ 104.756425][ T6827] lo speed is unknown, defaulting to 1000 [ 104.822844][ T6838] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.844325][ T6834] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 104.894418][ T6838] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.926654][ T6838] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.969172][ T6859] netlink: '+}[@': attribute type 7 has an invalid length. [ 104.985895][ T6838] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.088086][ T2519] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.102823][ T2519] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.118495][ T2519] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.134435][ T2519] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.142792][ T6870] tipc: Enabling of bearer rejected, failed to enable media [ 105.237906][ T6890] siw: device registration error -23 [ 105.316183][ T6899] netlink: '+}[@': attribute type 7 has an invalid length. [ 105.374966][ T6903] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.540616][ T6903] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.722405][ T6920] lo speed is unknown, defaulting to 1000 [ 105.803049][ T6917] 9p: Bad value for 'rfdno' [ 105.845432][ T6903] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.323209][ T6924] lo speed is unknown, defaulting to 1000 [ 106.560810][ T6928] siw: device registration error -23 [ 106.603538][ T6903] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.797456][ T6943] tipc: Enabling of bearer rejected, failed to enable media [ 106.867401][ T6946] __nla_validate_parse: 10 callbacks suppressed [ 106.867495][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1219'. [ 106.885720][ T6946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 106.956084][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1219'. [ 107.352924][ T6960] lo speed is unknown, defaulting to 1000 [ 107.694628][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1228'. [ 107.704632][ T6972] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 107.729963][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 107.729975][ T29] audit: type=1326 audit(1765321493.861:4181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 107.760534][ T29] audit: type=1326 audit(1765321493.881:4182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 107.784058][ T29] audit: type=1326 audit(1765321493.881:4183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f048b50df90 code=0x7ffc0000 [ 107.807535][ T29] audit: type=1326 audit(1765321493.881:4184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 107.830996][ T29] audit: type=1326 audit(1765321493.881:4185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6973 comm="syz.5.1229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 107.873185][ T29] audit: type=1326 audit(1765321494.011:4186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 107.891450][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1232'. [ 107.915746][ T29] audit: type=1326 audit(1765321494.051:4187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f178c08df90 code=0x7ffc0000 [ 107.939329][ T29] audit: type=1326 audit(1765321494.051:4188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f178c090f77 code=0x7ffc0000 [ 107.962757][ T29] audit: type=1326 audit(1765321494.051:4189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 107.986143][ T29] audit: type=1326 audit(1765321494.051:4190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6981 comm="syz.4.1233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f178c090f77 code=0x7ffc0000 [ 108.011929][ T6983] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1232'. [ 108.094065][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 108.196600][ T6998] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 108.209015][ T6999] tipc: Enabling of bearer rejected, failed to enable media [ 108.344321][ T6993] tipc: Enabling of bearer rejected, already enabled [ 108.429249][ T7001] 9p: Bad value for 'rfdno' [ 108.480706][ T7010] IPv6: sit1: Disabled Multicast RS [ 108.564450][ T7018] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1247'. [ 108.577195][ T7018] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 108.715981][ T7030] netlink: 'syz.0.1251': attribute type 10 has an invalid length. [ 108.829673][ T7033] lo speed is unknown, defaulting to 1000 [ 109.101913][ T7041] netlink: 'syz.0.1256': attribute type 10 has an invalid length. [ 109.185677][ T7045] 9p: Bad value for 'rfdno' [ 109.477005][ T7061] netlink: 'syz.2.1263': attribute type 10 has an invalid length. [ 109.489092][ T7061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.498933][ T7061] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 109.523345][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.530874][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.538749][ T7061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.546221][ T7061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.558333][ T7061] bond0: (slave batadv0): Releasing backup interface [ 109.654637][ T7072] 9p: Bad value for 'rfdno' [ 109.663935][ T7074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1270'. [ 109.697160][ T7078] netlink: 'syz.5.1272': attribute type 1 has an invalid length. [ 109.706017][ T7080] siw: device registration error -23 [ 109.711936][ T7078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.732658][ T7078] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.739794][ T7078] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 109.751372][ T7078] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 109.781896][ T7083] macvlan2: entered promiscuous mode [ 109.787306][ T7083] macvlan2: entered allmulticast mode [ 109.793309][ T7083] bond2: entered promiscuous mode [ 109.798580][ T7083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.807024][ T7083] bond2: left promiscuous mode [ 109.967306][ T2519] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.978573][ T2519] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.992641][ T2229] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.026048][ T2229] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.116110][ T7087] lo speed is unknown, defaulting to 1000 [ 110.339253][ T7095] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 110.580617][ T7110] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 110.625195][ T7112] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.801232][ T7129] block device autoloading is deprecated and will be removed. [ 110.860383][ T7128] loop1: detected capacity change from 0 to 2048 [ 110.873677][ T7128] /dev/loop1: Can't open blockdev [ 110.958104][ T7131] tipc: Enabling of bearer rejected, failed to enable media [ 111.089637][ T7135] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1295'. [ 111.130192][ T7137] siw: device registration error -23 [ 111.150675][ T7137] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 111.349067][ T7149] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.434148][ T7149] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.535357][ T7149] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.631543][ T7158] 9p: Bad value for 'rfdno' [ 111.639726][ T7149] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.673025][ T7162] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 111.712424][ T7168] siw: device registration error -23 [ 111.714218][ T7167] loop1: detected capacity change from 0 to 512 [ 111.724989][ T7168] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 111.726909][ T7167] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 111.747581][ T7167] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 111.764068][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.783524][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.792378][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.812091][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.832923][ T7167] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1310: bg 0: block 255: padding at end of block bitmap is not set [ 111.857186][ T7167] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 111.904792][ T7167] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1310: invalid indirect mapped block 1 (level 1) [ 111.932884][ T7181] tipc: Enabling of bearer rejected, failed to enable media [ 112.004915][ T7167] EXT4-fs (loop1): 1 truncate cleaned up [ 112.011180][ T7167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.040210][ T7167] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 112.070993][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.181196][ T7196] __nla_validate_parse: 3 callbacks suppressed [ 112.181216][ T7196] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1320'. [ 112.196707][ T7196] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1320'. [ 112.305100][ T7202] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.354915][ T3491] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 112.362682][ T3491] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 112.371651][ T3491] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x3 [ 112.380126][ T3491] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 112.395913][ T7202] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.407570][ T7212] fido_id[7212]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 112.453737][ T7202] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.503616][ T7202] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.557829][ T7224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1331'. [ 112.569024][ T7224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'. [ 112.592294][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1331'. [ 112.616174][ T7228] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1332'. [ 112.625550][ T7228] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1332'. [ 112.667854][ T7232] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 112.737853][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 112.737866][ T29] audit: type=1326 audit(1765321498.871:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.788539][ T29] audit: type=1326 audit(1765321498.911:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.812080][ T29] audit: type=1326 audit(1765321498.911:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.835594][ T29] audit: type=1326 audit(1765321498.911:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.835628][ T29] audit: type=1326 audit(1765321498.911:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.835736][ T29] audit: type=1326 audit(1765321498.911:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.905996][ T29] audit: type=1326 audit(1765321498.911:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.929561][ T29] audit: type=1326 audit(1765321498.911:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.953032][ T29] audit: type=1326 audit(1765321498.911:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.976469][ T29] audit: type=1326 audit(1765321498.911:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7235 comm="syz.5.1336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f048b50f749 code=0x7ffc0000 [ 112.994405][ T7238] hub 9-0:1.0: USB hub found [ 113.012708][ T7238] hub 9-0:1.0: 8 ports detected [ 113.022097][ T7238] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7238 comm=syz.0.1337 [ 113.053065][ T7238] xt_TCPMSS: Only works on TCP SYN packets [ 113.059726][ T7238] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7238 comm=syz.0.1337 [ 113.076136][ T7242] 9p: Bad value for 'rfdno' [ 113.148437][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1342'. [ 113.179839][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 113.223293][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1342'. [ 113.255096][ T7271] siw: device registration error -23 [ 113.261185][ T7271] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 113.389778][ T7289] block device autoloading is deprecated and will be removed. [ 113.471752][ T7291] tipc: Enabling of bearer rejected, failed to enable media [ 113.823788][ T7303] netlink: 'syz.0.1358': attribute type 1 has an invalid length. [ 113.839761][ T7303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.864557][ T7303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.871741][ T7303] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.886964][ T7303] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 113.900807][ T7306] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 113.915500][ T7307] gretap1: entered promiscuous mode [ 113.931233][ T7307] bond1: (slave gretap1): making interface the new active one [ 113.940886][ T7309] siw: device registration error -23 [ 113.946853][ T7309] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 113.977102][ T7307] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 114.000043][ T7303] macvlan2: entered promiscuous mode [ 114.005507][ T7303] macvlan2: entered allmulticast mode [ 114.011561][ T7303] bond1: entered promiscuous mode [ 114.017572][ T7303] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.027898][ T7303] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 114.039864][ T7303] bond1: left promiscuous mode [ 114.099601][ T7317] netlink: 'syz.5.1363': attribute type 10 has an invalid length. [ 114.129976][ T7317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.137510][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.174712][ T7317] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.182247][ T7317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.192172][ T7317] bond0: (slave batadv0): Releasing backup interface [ 114.276350][ T7324] tipc: Enabling of bearer rejected, failed to enable media [ 114.344931][ T7319] tipc: Enabling of bearer rejected, already enabled [ 114.441499][ T7332] hub 9-0:1.0: USB hub found [ 114.446572][ T7332] hub 9-0:1.0: 8 ports detected [ 114.454909][ T7332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7332 comm=syz.2.1369 [ 114.486431][ T7332] xt_TCPMSS: Only works on TCP SYN packets [ 114.492783][ T7332] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7332 comm=syz.2.1369 [ 114.514084][ T7337] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 114.544460][ T7343] netlink: 'syz.1.1372': attribute type 1 has an invalid length. [ 114.559199][ T7343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.575910][ T7343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 114.583466][ T7343] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 114.595158][ T7348] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 114.595329][ T7343] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 114.623960][ T7349] macvlan2: entered promiscuous mode [ 114.629276][ T7349] macvlan2: entered allmulticast mode [ 114.635866][ T7349] bond4: entered promiscuous mode [ 114.641193][ T7349] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.649725][ T7349] bond4: left promiscuous mode [ 114.778851][ T7358] tipc: Enabling of bearer rejected, failed to enable media [ 115.013198][ T7365] hub 9-0:1.0: USB hub found [ 115.018012][ T7365] hub 9-0:1.0: 8 ports detected [ 115.026416][ T7365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7365 comm=syz.2.1381 [ 115.054449][ T7365] xt_TCPMSS: Only works on TCP SYN packets [ 115.060998][ T7365] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=7365 comm=syz.2.1381 [ 115.127950][ T7373] !yz!: rxe_newlink: already configured on team_slave_0 [ 115.229140][ T7385] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 115.374116][ T7393] can0: slcan on ttyS3. [ 115.431575][ T7400] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7400 comm=syz.5.1393 [ 115.452216][ T7392] can0 (unregistered): slcan off ttyS3. [ 115.462884][ T7400] xt_TCPMSS: Only works on TCP SYN packets [ 115.517780][ T7415] !yz!: rxe_newlink: already configured on team_slave_0 [ 115.631171][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.673409][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.674766][ T7441] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 115.707527][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.716691][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.741406][ T7445] siw: device registration error -23 [ 115.788785][ T7450] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7450 comm=syz.5.1404 [ 115.854075][ T7453] xt_TCPMSS: Only works on TCP SYN packets [ 115.918658][ T7458] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 116.390490][ T7465] lo speed is unknown, defaulting to 1000 [ 116.427819][ T7466] netlink: 'syz.4.1409': attribute type 1 has an invalid length. [ 116.674171][ T7469] 9p: Bad value for 'rfdno' [ 116.707167][ T7473] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.744621][ T7473] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.794386][ T7480] hub 9-0:1.0: USB hub found [ 116.799506][ T7480] hub 9-0:1.0: 8 ports detected [ 116.806876][ T7480] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7480 comm=syz.2.1415 [ 116.824234][ T7473] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.836643][ T7480] xt_TCPMSS: Only works on TCP SYN packets [ 116.859699][ T7484] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 116.875419][ T7486] !yz!: rxe_newlink: already configured on team_slave_0 [ 116.904287][ T7490] siw: device registration error -23 [ 116.910807][ T7490] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 116.922735][ T7473] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.981557][ T873] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.014101][ T873] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.023153][ T873] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.053279][ T7495] syz.2.1420 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 117.063814][ T873] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.110343][ T7499] 9p: Bad value for 'rfdno' [ 117.116937][ T7502] siw: device registration error -23 [ 117.124613][ T7502] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 117.207923][ T7507] __nla_validate_parse: 23 callbacks suppressed [ 117.207953][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1426'. [ 117.254324][ T7512] tipc: Enabling of bearer rejected, failed to enable media [ 117.282113][ T7514] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1428'. [ 117.306613][ T7514] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1428'. [ 117.321336][ T7517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1429'. [ 117.332575][ T7517] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 117.367203][ T7521] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1431'. [ 117.415806][ T7521] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1431'. [ 117.493126][ T7525] netlink: 'syz.4.1433': attribute type 1 has an invalid length. [ 117.507028][ T7529] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.521708][ T7531] 9p: Bad value for 'rfdno' [ 117.523308][ T7533] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1437'. [ 117.542542][ T7533] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1437'. [ 117.573924][ T7529] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.600587][ T7541] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1441'. [ 117.609881][ T7541] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1441'. [ 117.620748][ T7529] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.673724][ T7529] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.723046][ T7544] tipc: Enabling of bearer rejected, failed to enable media [ 117.746413][ T7540] tipc: Enabling of bearer rejected, already enabled [ 117.769882][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.782356][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.794422][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.804609][ T7547] serio: Serial port ptm0 [ 117.815251][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.924300][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 117.924318][ T29] audit: type=1400 audit(1765321504.061:4727): avc: denied { read write } for pid=7548 comm="syz.2.1443" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.954542][ T29] audit: type=1400 audit(1765321504.061:4728): avc: denied { open } for pid=7548 comm="syz.2.1443" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 117.978200][ T29] audit: type=1400 audit(1765321504.061:4729): avc: denied { ioctl } for pid=7548 comm="syz.2.1443" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 118.053029][ T29] audit: type=1400 audit(1765321504.191:4730): avc: denied { create } for pid=7555 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.123231][ T7569] 9p: Bad value for 'rfdno' [ 118.125205][ T29] audit: type=1400 audit(1765321504.211:4731): avc: denied { write } for pid=7555 comm="syz.2.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 118.211943][ T29] audit: type=1326 audit(1765321504.341:4732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 118.260208][ T29] audit: type=1326 audit(1765321504.371:4733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 118.283828][ T29] audit: type=1326 audit(1765321504.371:4734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 118.307523][ T29] audit: type=1326 audit(1765321504.371:4735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 118.331013][ T29] audit: type=1326 audit(1765321504.371:4736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7576 comm="syz.4.1453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c08f749 code=0x7ffc0000 [ 118.358303][ T7584] siw: device registration error -23 [ 118.368458][ T7584] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 118.413962][ T7590] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 118.425781][ T7591] tipc: Enabling of bearer rejected, failed to enable media [ 118.514107][ T7598] 9p: Bad value for 'rfdno' [ 119.052699][ T7636] block device autoloading is deprecated and will be removed. [ 119.375903][ T7596] syz.2.1461 (7596) used greatest stack depth: 7288 bytes left [ 119.422389][ T7643] lo speed is unknown, defaulting to 1000 [ 119.831464][ T7657] !yz!: rxe_newlink: already configured on team_slave_0 [ 120.285564][ T7679] siw: device registration error -23 [ 120.296342][ T7679] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 120.772430][ T7695] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.837227][ T7706] siw: device registration error -23 [ 121.238153][ T7736] netlink: 'syz.4.1506': attribute type 10 has an invalid length. [ 121.267440][ T7738] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 121.319217][ T7746] siw: device registration error -23 [ 121.424111][ T7750] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.626322][ T7763] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 121.667881][ T7767] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 121.951787][ T7780] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.089656][ T7783] lo speed is unknown, defaulting to 1000 [ 122.407535][ T7790] __nla_validate_parse: 15 callbacks suppressed [ 122.407552][ T7790] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 122.448018][ T7792] hub 9-0:1.0: USB hub found [ 122.470212][ T7792] hub 9-0:1.0: 8 ports detected [ 122.498441][ T7793] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7793 comm=syz.4.1528 [ 122.537441][ T7795] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 122.549693][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1526'. [ 122.569522][ T7792] xt_TCPMSS: Only works on TCP SYN packets [ 122.622118][ T7804] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1530'. [ 122.631429][ T7804] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1530'. [ 122.833251][ T7815] 9p: Bad value for 'rfdno' [ 122.877586][ T7819] hub 9-0:1.0: USB hub found [ 122.882649][ T7819] hub 9-0:1.0: 8 ports detected [ 122.895474][ T7819] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7819 comm=syz.2.1538 [ 122.925705][ T7819] xt_TCPMSS: Only works on TCP SYN packets [ 122.933735][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 122.933749][ T29] audit: type=1326 audit(1765321509.071:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 122.973133][ T7826] tipc: Enabling of bearer rejected, failed to enable media [ 122.988994][ T29] audit: type=1326 audit(1765321509.071:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 122.992402][ T7828] hub 9-0:1.0: USB hub found [ 123.012451][ T29] audit: type=1326 audit(1765321509.071:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 123.017322][ T7828] hub 9-0:1.0: 8 ports detected [ 123.040406][ T29] audit: type=1326 audit(1765321509.071:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 123.040441][ T29] audit: type=1326 audit(1765321509.071:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 123.046236][ T7829] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7829 comm=syz.2.1541 [ 123.068928][ T29] audit: type=1326 audit(1765321509.071:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 123.128326][ T29] audit: type=1326 audit(1765321509.071:4957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 123.151751][ T29] audit: type=1326 audit(1765321509.071:4958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 123.175126][ T29] audit: type=1326 audit(1765321509.071:4959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f078f749 code=0x7ffc0000 [ 123.197921][ T7834] xt_TCPMSS: Only works on TCP SYN packets [ 123.198617][ T29] audit: type=1326 audit(1765321509.071:4960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7818 comm="syz.2.1538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10f0791667 code=0x7ffc0000 [ 123.334631][ T7841] netlink: 'syz.5.1544': attribute type 10 has an invalid length. [ 123.376804][ T7845] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1546'. [ 123.402425][ T7845] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1546'. [ 123.482905][ T7856] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1551'. [ 123.513156][ T7856] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 123.526660][ T7864] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.566942][ T7868] 9p: Bad value for 'rfdno' [ 123.573845][ T7864] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.617058][ T7870] tipc: Enabling of bearer rejected, failed to enable media [ 123.630808][ T7864] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.653160][ T7843] tap0: tun_chr_ioctl cmd 1074025681 [ 123.666320][ T7843] netlink: 'syz.0.1545': attribute type 12 has an invalid length. [ 123.684550][ T7864] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.734478][ T7879] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1561'. [ 123.747255][ T7879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1561'. [ 123.786947][ T7879] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1561'. [ 123.799383][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.814319][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.822799][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.835187][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.963241][ T7902] siw: device registration error -23 [ 124.031235][ T7904] tipc: Enabling of bearer rejected, failed to enable media [ 124.043084][ T7905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.051899][ T7905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.087731][ T7908] netlink: 'syz.1.1572': attribute type 10 has an invalid length. [ 124.203621][ T7915] tipc: Enabling of bearer rejected, failed to enable media [ 124.598838][ T7949] netlink: 'syz.1.1589': attribute type 1 has an invalid length. [ 124.623512][ T7949] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.694045][ T7949] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.776360][ T7949] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.813949][ T7949] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.861530][ T7968] siw: device registration error -23 [ 124.864378][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.875962][ T7968] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 124.887464][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.910957][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.919631][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.006137][ T7982] block device autoloading is deprecated and will be removed. [ 125.245022][ T7989] netlink: 'syz.5.1603': attribute type 10 has an invalid length. [ 125.443000][ T7951] tipc: Enabling of bearer rejected, failed to enable media [ 125.806135][ T8000] lo speed is unknown, defaulting to 1000 [ 126.783202][ T8017] netlink: 'syz.1.1614': attribute type 10 has an invalid length. [ 126.932350][ T8025] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 127.095780][ T8031] tipc: Enabling of bearer rejected, failed to enable media [ 127.106093][ T8037] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 127.137224][ T8039] siw: device registration error -23 [ 127.444770][ T8062] __nla_validate_parse: 14 callbacks suppressed [ 127.444785][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 127.538958][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1629'. [ 127.732274][ T8069] netlink: 'syz.4.1632': attribute type 10 has an invalid length. [ 128.045960][ T8079] siw: device registration error -23 [ 128.237367][ T8086] 9p: Bad value for 'rfdno' [ 128.417637][ T8098] netlink: 'syz.0.1645': attribute type 1 has an invalid length. [ 128.562088][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 128.562105][ T29] audit: type=1400 audit(1765321514.681:5219): avc: denied { ioctl } for pid=8097 comm="syz.0.1645" path="socket:[25969]" dev="sockfs" ino=25969 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.744024][ T29] audit: type=1400 audit(1765321514.791:5220): avc: denied { write } for pid=8097 comm="syz.0.1645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.315581][ T8098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.449249][ T8101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 129.456873][ T8101] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 129.468835][ T8101] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 129.488089][ T8103] macvlan2: entered promiscuous mode [ 129.493428][ T8103] macvlan2: entered allmulticast mode [ 129.499814][ T8103] bond2: entered promiscuous mode [ 129.505282][ T8103] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 129.517085][ T8103] bond2: left promiscuous mode [ 129.585563][ T8100] lo speed is unknown, defaulting to 1000 [ 129.595106][ T8122] siw: device registration error -23 [ 129.878450][ T8138] block device autoloading is deprecated and will be removed. [ 130.007230][ T8141] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.041767][ T8143] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1656'. [ 130.053982][ T8143] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1656'. [ 130.084777][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1656'. [ 130.765782][ T8157] lo speed is unknown, defaulting to 1000 [ 130.872498][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.883408][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.540250][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1669'. [ 131.605230][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 131.711063][ T8198] block device autoloading is deprecated and will be removed. [ 131.789409][ T29] audit: type=1400 audit(1765321517.921:5221): avc: denied { name_bind } for pid=8196 comm="syz.5.1676" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 131.860025][ T29] audit: type=1400 audit(1765321517.951:5222): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.884307][ T29] audit: type=1400 audit(1765321517.951:5223): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=715 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 131.908900][ T29] audit: type=1400 audit(1765321517.951:5224): avc: denied { ioctl } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=715 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 132.162703][ T8222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1686'. [ 132.190371][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1686'. [ 132.252307][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1686'. [ 132.631927][ T8251] tipc: Enabling of bearer rejected, failed to enable media [ 132.726299][ T8255] __nla_validate_parse: 2 callbacks suppressed [ 132.726314][ T8255] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1698'. [ 132.754989][ T8255] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1698'. [ 132.799521][ T8255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 132.876522][ T8266] loop1: detected capacity change from 0 to 1024 [ 132.891206][ T8266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.916853][ T8266] EXT4-fs: Ignoring removed nomblk_io_submit option [ 132.927682][ T8266] /dev/loop1: Can't open blockdev [ 132.969629][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1700'. [ 133.040407][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 133.667225][ T8283] lo speed is unknown, defaulting to 1000 [ 133.821089][ T8285] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1705'. [ 133.830705][ T8285] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1705'. [ 133.875960][ T8287] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 133.941828][ T8296] netlink: 'syz.4.1710': attribute type 1 has an invalid length. [ 133.988903][ T8300] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1712'. [ 134.000473][ T8300] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1712'. [ 134.018292][ T8296] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.039964][ T8302] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.062727][ T8302] bond2: (slave vxcan7): The slave device specified does not support setting the MAC address [ 134.074497][ T8302] bond2: (slave vxcan7): Error -95 calling set_mac_address [ 134.088988][ T8306] netlink: 'syz.2.1713': attribute type 10 has an invalid length. [ 134.089253][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1712'. [ 134.142351][ T8312] hub 9-0:1.0: USB hub found [ 134.173128][ T8312] hub 9-0:1.0: 8 ports detected [ 134.192658][ T8307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8307 comm=syz.1.1714 [ 134.264467][ T8307] xt_TCPMSS: Only works on TCP SYN packets [ 134.271358][ T8307] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8307 comm=syz.1.1714 [ 134.273407][ T29] audit: type=1326 audit(1765321520.401:5225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.307502][ T29] audit: type=1326 audit(1765321520.401:5226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.331017][ T29] audit: type=1326 audit(1765321520.401:5227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.354461][ T29] audit: type=1326 audit(1765321520.401:5228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.378221][ T29] audit: type=1326 audit(1765321520.431:5229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.401676][ T29] audit: type=1326 audit(1765321520.431:5230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.425170][ T29] audit: type=1326 audit(1765321520.431:5231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.448615][ T29] audit: type=1326 audit(1765321520.431:5232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.472199][ T29] audit: type=1326 audit(1765321520.431:5233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 134.495701][ T29] audit: type=1326 audit(1765321520.431:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8305 comm="syz.1.1714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f528f531667 code=0x7ffc0000 [ 134.588187][ T8338] siw: device registration error -23 [ 134.618947][ T8319] tap0: tun_chr_ioctl cmd 1074025681 [ 134.629879][ T8319] netlink: 'syz.0.1717': attribute type 12 has an invalid length. [ 134.671598][ T8341] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.796460][ T8350] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.834456][ T8350] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.872500][ T8356] siw: device registration error -23 [ 134.904825][ T8350] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.954483][ T8350] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.005250][ T1942] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.020838][ T1942] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.052164][ T1942] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.060408][ T1942] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.073854][ T8362] tap0: tun_chr_ioctl cmd 1074025681 [ 135.117281][ T8368] netlink: 'syz.2.1739': attribute type 10 has an invalid length. [ 135.216765][ T8388] siw: device registration error -23 [ 135.268984][ T8399] hub 9-0:1.0: USB hub found [ 135.277791][ T8399] hub 9-0:1.0: 8 ports detected [ 135.286938][ T8399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8399 comm=syz.4.1752 [ 135.320986][ T8399] xt_TCPMSS: Only works on TCP SYN packets [ 135.342970][ T8399] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8399 comm=syz.4.1752 [ 135.354532][ T8413] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 135.366587][ T8410] bridge0: entered promiscuous mode [ 135.371906][ T8410] macsec0: entered promiscuous mode [ 135.422705][ T8422] FAULT_INJECTION: forcing a failure. [ 135.422705][ T8422] name failslab, interval 1, probability 0, space 0, times 0 [ 135.435393][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz.4.1763 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.435418][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.435444][ T8422] Call Trace: [ 135.435453][ T8422] [ 135.435461][ T8422] __dump_stack+0x1d/0x30 [ 135.435526][ T8422] dump_stack_lvl+0xe8/0x140 [ 135.435621][ T8422] dump_stack+0x15/0x1b [ 135.435710][ T8422] should_fail_ex+0x265/0x280 [ 135.435736][ T8422] should_failslab+0x8c/0xb0 [ 135.435841][ T8422] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 135.435866][ T8422] ? sidtab_sid2str_get+0xa0/0x130 [ 135.435893][ T8422] kmemdup_noprof+0x2b/0x70 [ 135.435953][ T8422] sidtab_sid2str_get+0xa0/0x130 [ 135.435983][ T8422] security_sid_to_context_core+0x1eb/0x2e0 [ 135.436009][ T8422] security_sid_to_context+0x27/0x40 [ 135.436110][ T8422] selinux_lsmprop_to_secctx+0x67/0xf0 [ 135.436144][ T8422] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 135.436168][ T8422] audit_log_subj_ctx+0xa4/0x3e0 [ 135.436186][ T8422] ? skb_put+0xa9/0xf0 [ 135.436213][ T8422] audit_log_task_context+0x48/0x70 [ 135.436304][ T8422] audit_log_task+0xf4/0x250 [ 135.436396][ T8422] ? kstrtouint+0x76/0xc0 [ 135.436469][ T8422] audit_seccomp+0x61/0x100 [ 135.436504][ T8422] ? __seccomp_filter+0x832/0x1260 [ 135.436553][ T8422] __seccomp_filter+0x843/0x1260 [ 135.436586][ T8422] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 135.436619][ T8422] ? vfs_write+0x7e8/0x960 [ 135.436656][ T8422] ? __cond_resched+0x4e/0x90 [ 135.436685][ T8422] __secure_computing+0x82/0x150 [ 135.436714][ T8422] syscall_trace_enter+0xcf/0x1e0 [ 135.436736][ T8422] do_syscall_64+0xb2/0x2a0 [ 135.436796][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.436819][ T8422] RIP: 0033:0x7f178c08f749 [ 135.436835][ T8422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.436855][ T8422] RSP: 002b:00007f178aaef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 135.436948][ T8422] RAX: ffffffffffffffda RBX: 00007f178c2e5fa0 RCX: 00007f178c08f749 [ 135.436958][ T8422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000fffffffb [ 135.436969][ T8422] RBP: 00007f178aaef090 R08: 0000000000000000 R09: 0000000000000000 [ 135.436979][ T8422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.436999][ T8422] R13: 00007f178c2e6038 R14: 00007f178c2e5fa0 R15: 00007ffe3042bc78 [ 135.437020][ T8422] [ 135.439059][ T8423] netlink: 'syz.0.1762': attribute type 1 has an invalid length. [ 135.692792][ T8421] bond3 (unregistering): Released all slaves [ 135.712132][ T8432] bond3 (unregistering): Released all slaves [ 135.724260][ T8442] siw: device registration error -23 [ 135.736071][ T8423] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 135.818456][ T8452] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 135.824806][ T8450] netlink: 'syz.4.1773': attribute type 10 has an invalid length. [ 135.834984][ T8452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.859017][ T8452] 8021q: adding VLAN 0 to HW filter on device bond5 [ 135.866216][ T8452] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 135.877536][ T8452] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 135.911884][ T8456] macvlan2: entered promiscuous mode [ 135.917340][ T8456] macvlan2: entered allmulticast mode [ 135.924657][ T8456] bond5: entered promiscuous mode [ 135.930042][ T8456] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.939401][ T8456] bond5: left promiscuous mode [ 135.953720][ T8458] hub 9-0:1.0: USB hub found [ 135.958552][ T8458] hub 9-0:1.0: 8 ports detected [ 135.968744][ T8458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8458 comm=syz.4.1775 [ 136.001282][ T8458] xt_TCPMSS: Only works on TCP SYN packets [ 136.009041][ T8458] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8458 comm=syz.4.1775 [ 136.014902][ T8464] netlink: 'syz.0.1777': attribute type 1 has an invalid length. [ 136.035972][ T8464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.058414][ T8464] 8021q: adding VLAN 0 to HW filter on device bond3 [ 136.066522][ T8464] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 136.078408][ T8464] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 136.108170][ T8468] macvlan2: entered promiscuous mode [ 136.113612][ T8468] macvlan2: entered allmulticast mode [ 136.136010][ T8468] bond3: entered promiscuous mode [ 136.142260][ T8468] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.150434][ T8468] bond3: left promiscuous mode [ 136.733299][ T8495] 9p: Bad value for 'rfdno' [ 136.795110][ T8500] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.834024][ T8500] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.874629][ T8500] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.924146][ T8500] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.990529][ T2264] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.003206][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.015208][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.026922][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.044925][ T8511] block device autoloading is deprecated and will be removed. [ 137.194467][ T8519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8519 comm=syz.5.1797 [ 137.223883][ T8519] xt_TCPMSS: Only works on TCP SYN packets [ 137.230750][ T8519] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8519 comm=syz.5.1797 [ 137.959273][ T8555] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 138.270696][ T8564] siw: device registration error -23 [ 138.277934][ T8564] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 138.804785][ T8579] tipc: Enabling of bearer rejected, already enabled [ 138.843608][ T8583] 9p: Bad value for 'rfdno' [ 139.066242][ T8592] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 139.072213][ T8592] syzkaller1: Linktype set failed because interface is up [ 139.081671][ T8590] FAULT_INJECTION: forcing a failure. [ 139.081671][ T8590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.094867][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz.2.1825 Not tainted syzkaller #0 PREEMPT(voluntary) [ 139.094887][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 139.094896][ T8590] Call Trace: [ 139.094901][ T8590] [ 139.094906][ T8590] __dump_stack+0x1d/0x30 [ 139.094972][ T8590] dump_stack_lvl+0xe8/0x140 [ 139.094989][ T8590] dump_stack+0x15/0x1b [ 139.095005][ T8590] should_fail_ex+0x265/0x280 [ 139.095023][ T8590] should_fail+0xb/0x20 [ 139.095037][ T8590] should_fail_usercopy+0x1a/0x20 [ 139.095084][ T8590] _copy_from_user+0x1c/0xb0 [ 139.095105][ T8590] ___sys_sendmsg+0xc1/0x1d0 [ 139.095213][ T8590] __x64_sys_sendmsg+0xd4/0x160 [ 139.095238][ T8590] x64_sys_call+0x17ba/0x3000 [ 139.095257][ T8590] do_syscall_64+0xd8/0x2a0 [ 139.095282][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.095371][ T8590] RIP: 0033:0x7f10f078f749 [ 139.095383][ T8590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.095398][ T8590] RSP: 002b:00007f10ef1f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.095414][ T8590] RAX: ffffffffffffffda RBX: 00007f10f09e5fa0 RCX: 00007f10f078f749 [ 139.095424][ T8590] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 000000000000000a [ 139.095433][ T8590] RBP: 00007f10ef1f7090 R08: 0000000000000000 R09: 0000000000000000 [ 139.095481][ T8590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.095491][ T8590] R13: 00007f10f09e6038 R14: 00007f10f09e5fa0 R15: 00007ffd5c360a78 [ 139.095507][ T8590] [ 139.269618][ T8597] siw: device registration error -23 [ 139.275731][ T8597] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 139.315325][ T8600] __nla_validate_parse: 24 callbacks suppressed [ 139.315342][ T8600] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1829'. [ 139.331196][ T8600] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1829'. [ 139.356125][ T8603] hub 9-0:1.0: USB hub found [ 139.369544][ T8603] hub 9-0:1.0: 8 ports detected [ 139.385666][ T8607] netlink: 'syz.4.1832': attribute type 1 has an invalid length. [ 139.396245][ T8605] tipc: Enabling of bearer rejected, failed to enable media [ 139.412301][ T8603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8603 comm=syz.1.1830 [ 139.416177][ T8607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.442221][ T8607] 8021q: adding VLAN 0 to HW filter on device bond3 [ 139.449654][ T8607] bond3: (slave vxcan7): The slave device specified does not support setting the MAC address [ 139.461896][ T8607] bond3: (slave vxcan7): Error -95 calling set_mac_address [ 139.477378][ T8603] xt_TCPMSS: Only works on TCP SYN packets [ 139.485530][ T8603] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8603 comm=syz.1.1830 [ 139.498805][ T8610] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.511177][ T8616] macvlan2: entered promiscuous mode [ 139.516605][ T8616] macvlan2: entered allmulticast mode [ 139.524829][ T29] kauditd_printk_skb: 199 callbacks suppressed [ 139.524841][ T29] audit: type=1326 audit(1765321525.631:5433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 139.554546][ T29] audit: type=1326 audit(1765321525.631:5434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 139.578031][ T29] audit: type=1326 audit(1765321525.631:5435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 139.582498][ T8616] bond3: entered promiscuous mode [ 139.601605][ T29] audit: type=1326 audit(1765321525.631:5436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 139.629908][ T29] audit: type=1400 audit(1765321525.651:5437): avc: denied { create } for pid=8604 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.649669][ T29] audit: type=1400 audit(1765321525.651:5438): avc: denied { ioctl } for pid=8604 comm="syz.4.1832" path="socket:[27188]" dev="sockfs" ino=27188 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 139.675243][ T8616] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 139.684002][ T29] audit: type=1326 audit(1765321525.771:5439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 139.707525][ T29] audit: type=1326 audit(1765321525.771:5440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8602 comm="syz.1.1830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 139.743071][ T8616] bond3: left promiscuous mode [ 139.883614][ T8629] block device autoloading is deprecated and will be removed. [ 139.908120][ T29] audit: type=1400 audit(1765321525.871:5441): avc: denied { create } for pid=8604 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 139.927856][ T29] audit: type=1400 audit(1765321525.871:5442): avc: denied { write } for pid=8604 comm="syz.4.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 140.063487][ T8645] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1843'. [ 140.073711][ T8645] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1843'. [ 140.100305][ T8648] siw: device registration error -23 [ 140.280855][ T8651] netlink: 'syz.5.1845': attribute type 12 has an invalid length. [ 140.448759][ T8658] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.707602][ T8677] siw: device registration error -23 [ 140.768796][ T8687] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.813240][ T8691] SELinux: failed to load policy [ 140.824258][ T8691] 9p: Bad value for 'wfdno' [ 140.855961][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1863'. [ 140.889665][ T8697] netlink: 'syz.1.1864': attribute type 10 has an invalid length. [ 141.061177][ T8704] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1866'. [ 141.144190][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1866'. [ 141.184706][ T8708] 9p: Bad value for 'rfdno' [ 141.236017][ T8712] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.254109][ T8716] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1871'. [ 141.263926][ T8716] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1871'. [ 141.282431][ T8718] siw: device registration error -23 [ 141.354377][ T8731] siw: device registration error -23 [ 141.360301][ T8731] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 141.386584][ T8733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8733 comm=syz.5.1879 [ 141.415671][ T8733] xt_TCPMSS: Only works on TCP SYN packets [ 141.423306][ T8733] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8733 comm=syz.5.1879 [ 141.465577][ T8741] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.487307][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.495934][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.622518][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1885'. [ 141.924060][ T8767] hub 9-0:1.0: USB hub found [ 141.949292][ T8767] hub 9-0:1.0: 8 ports detected [ 141.976462][ T8770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8770 comm=syz.0.1892 [ 142.094812][ T8770] xt_TCPMSS: Only works on TCP SYN packets [ 142.109324][ T8770] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=8770 comm=syz.0.1892 [ 142.209701][ T8781] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 142.231081][ T8775] bridge_slave_0: left allmulticast mode [ 142.236872][ T8775] bridge_slave_0: left promiscuous mode [ 142.242634][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.253945][ T8775] bridge_slave_1: left allmulticast mode [ 142.259605][ T8775] bridge_slave_1: left promiscuous mode [ 142.265568][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.275474][ T8775] bond0: (slave bond_slave_0): Releasing backup interface [ 142.287047][ T8775] bond0: (slave bond_slave_1): Releasing backup interface [ 142.304788][ T8775] team0: Port device team_slave_0 removed [ 142.315570][ T8775] team0: Port device team_slave_1 removed [ 142.327075][ T8775] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 142.383649][ T8781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.416347][ T8783] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.435322][ T8783] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 142.476980][ T8783] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 142.523568][ T9] !yz!: Port: 1 Link DOWN [ 142.767705][ T8798] netlink: 'syz.4.1903': attribute type 1 has an invalid length. [ 142.788703][ T8798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.825291][ T8798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 142.832569][ T8798] bond4: (slave vxcan7): The slave device specified does not support setting the MAC address [ 142.846024][ T8798] bond4: (slave vxcan7): Error -95 calling set_mac_address [ 143.175123][ T8820] netlink: 'syz.0.1909': attribute type 1 has an invalid length. [ 143.196297][ T8820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.216209][ T8820] 8021q: adding VLAN 0 to HW filter on device bond5 [ 143.224637][ T8820] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 143.253602][ T8820] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 143.283015][ T8827] macvlan2: entered promiscuous mode [ 143.288430][ T8827] macvlan2: entered allmulticast mode [ 143.294533][ T8827] bond5: entered promiscuous mode [ 143.299946][ T8827] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.308608][ T8827] bond5: left promiscuous mode [ 143.518632][ T8837] siw: device registration error -23 [ 143.599701][ T8848] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 143.694254][ T8854] tipc: Enabling of bearer rejected, failed to enable media [ 143.859103][ T8863] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.904520][ T8863] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.964300][ T8863] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.014895][ T8863] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.060319][ T8868] tipc: Enabling of bearer rejected, already enabled [ 144.076652][ T346] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.087749][ T346] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.106999][ T346] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.123444][ T346] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.308405][ T8898] netlink: 'syz.5.1938': attribute type 10 has an invalid length. [ 144.711420][ T8903] lo speed is unknown, defaulting to 1000 [ 144.779649][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 144.779735][ T29] audit: type=1400 audit(1765321530.491:5540): avc: denied { setopt } for pid=8899 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.805975][ T29] audit: type=1400 audit(1765321530.491:5541): avc: denied { read } for pid=8899 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 144.869906][ T29] audit: type=1400 audit(1765321530.991:5542): avc: denied { read } for pid=8899 comm="syz.0.1939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 144.908777][ T8909] __nla_validate_parse: 19 callbacks suppressed [ 144.908790][ T8909] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1941'. [ 144.923371][ T8911] 9p: Bad value for 'rfdno' [ 144.925354][ T8909] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 144.947359][ T29] audit: type=1400 audit(1765321531.081:5543): avc: denied { read } for pid=8912 comm="syz.5.1943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 145.087136][ T8915] tipc: Enabling of bearer rejected, already enabled [ 145.277063][ T8939] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1954'. [ 145.287205][ T8939] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 145.318724][ T8941] netlink: 'syz.5.1955': attribute type 29 has an invalid length. [ 145.322010][ T29] audit: type=1400 audit(1765321531.451:5544): avc: denied { create } for pid=8940 comm="syz.5.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 145.426754][ T29] audit: type=1326 audit(1765321531.561:5545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8942 comm="syz.1.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 145.472644][ T29] audit: type=1326 audit(1765321531.561:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8942 comm="syz.1.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 145.496360][ T29] audit: type=1326 audit(1765321531.561:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8942 comm="syz.1.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 145.519826][ T29] audit: type=1326 audit(1765321531.561:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8942 comm="syz.1.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 145.543305][ T29] audit: type=1326 audit(1765321531.561:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8942 comm="syz.1.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f528f52f749 code=0x7ffc0000 [ 145.581185][ T8949] siw: device registration error -23 [ 145.746416][ T8941] cgroup: fork rejected by pids controller in /syz5 [ 145.906075][ T9097] tipc: Enabling of bearer rejected, already enabled [ 145.935021][ T9066] SELinux: failed to load policy [ 146.223133][ T9464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 146.235933][ T9462] tipc: Enabling of bearer rejected, failed to enable media [ 146.248538][ T9466] siw: device registration error -23 [ 146.345414][ T9472] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1974'. [ 146.588522][ T9476] lo speed is unknown, defaulting to 1000 [ 146.684056][ T9483] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 146.701290][ T9483] SELinux: failed to load policy [ 146.794680][ T9491] SELinux: failed to load policy [ 147.016190][ T9497] tap0: tun_chr_ioctl cmd 1074025681 [ 147.023937][ T9497] netlink: 'syz.2.1983': attribute type 12 has an invalid length. [ 147.133451][ T9524] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1991'. [ 147.146338][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1995'. [ 147.189961][ T9526] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1995'. [ 147.242570][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 147.342424][ T9538] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1998'. [ 148.148825][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2002'. [ 148.162142][ T9548] bridge_slave_1: left allmulticast mode [ 148.167800][ T9548] bridge_slave_1: left promiscuous mode [ 148.173513][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.201410][ T9548] bridge_slave_0: left allmulticast mode [ 148.207255][ T9548] bridge_slave_0: left promiscuous mode [ 148.212980][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.214226][ T9559] 9p: Bad value for 'rfdno' [ 148.398416][ T9570] block device autoloading is deprecated and will be removed. [ 148.398729][ T9561] tap0: tun_chr_ioctl cmd 1074025681 [ 148.479175][ T9576] netlink: 'syz.4.2012': attribute type 1 has an invalid length. [ 148.489673][ T9550] netlink: 'syz.2.2003': attribute type 12 has an invalid length. [ 148.539659][ T9576] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.621224][ T9582] 8021q: adding VLAN 0 to HW filter on device bond5 [ 148.643165][ T9582] bond5: (slave vxcan7): The slave device specified does not support setting the MAC address [ 148.695181][ T9582] bond5: (slave vxcan7): Error -95 calling set_mac_address [ 148.858795][ T9590] serio: Serial port ptm0 [ 149.154103][ T9605] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 149.168750][ T9605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.185022][ T9605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 149.192492][ T9605] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 149.204152][ T9605] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 149.236845][ T9613] bond7: entered promiscuous mode [ 149.243152][ T9613] 8021q: adding VLAN 0 to HW filter on device bond7 [ 149.252175][ T9613] bond6: (slave bond7): Enslaving as an active interface with a down link [ 149.398575][ T9612] netlink: 'syz.5.2026': attribute type 12 has an invalid length. [ 149.415145][ T9626] tipc: Enabling of bearer rejected, failed to enable media [ 149.460129][ T9630] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9630 comm=syz.5.2031 [ 149.631982][ T9645] sd 0:0:1:0: device reset [ 149.654208][ T9647] sd 0:0:1:0: device reset [ 149.686251][ T9649] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 149.706197][ T9653] 9p: Bad value for 'rfdno' [ 149.737201][ T9657] hub 9-0:1.0: USB hub found [ 149.742221][ T9657] hub 9-0:1.0: 8 ports detected [ 149.751071][ T9657] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9657 comm=syz.0.2042 [ 149.805056][ T9657] xt_TCPMSS: Only works on TCP SYN packets [ 149.810510][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 149.810527][ T29] audit: type=1400 audit(1765321535.941:5636): avc: denied { bind } for pid=9665 comm="syz.5.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.836344][ T29] audit: type=1400 audit(1765321535.941:5637): avc: denied { name_bind } for pid=9665 comm="syz.5.2045" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 149.858135][ T29] audit: type=1400 audit(1765321535.941:5638): avc: denied { node_bind } for pid=9665 comm="syz.5.2045" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 149.882550][ T29] audit: type=1326 audit(1765321535.961:5639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 149.906207][ T29] audit: type=1326 audit(1765321535.961:5640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 149.929838][ T29] audit: type=1326 audit(1765321535.961:5641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 149.953287][ T29] audit: type=1326 audit(1765321535.961:5642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 149.976814][ T29] audit: type=1326 audit(1765321535.961:5643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 150.000169][ T29] audit: type=1326 audit(1765321535.961:5644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 150.023800][ T29] audit: type=1326 audit(1765321535.961:5645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9655 comm="syz.0.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fcc4bfcf749 code=0x7ffc0000 [ 150.129679][ T9680] __nla_validate_parse: 3 callbacks suppressed [ 150.129694][ T9680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2049'. [ 150.148149][ T9680] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2049'. [ 150.157264][ T9681] tipc: Enabling of bearer rejected, failed to enable media [ 150.173321][ T9685] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.187794][ T9680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2049'. [ 150.214419][ T9689] 9p: Bad value for 'rfdno' [ 150.335193][ T9685] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.371286][ T9695] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 150.791064][ T9696] lo speed is unknown, defaulting to 1000 [ 150.834932][ T9685] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.910158][ T9707] hub 9-0:1.0: USB hub found [ 150.917613][ T9707] hub 9-0:1.0: 8 ports detected [ 150.938866][ T9699] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9699 comm=syz.2.2056 [ 150.958383][ T9685] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.986061][ T9699] xt_TCPMSS: Only works on TCP SYN packets [ 151.012625][ T1942] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.026612][ T1942] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.050637][ T1942] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.062716][ T1942] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.226731][ T9728] tipc: Enabling of bearer rejected, failed to enable media [ 151.245275][ T9729] tipc: Enabling of bearer rejected, failed to enable media [ 151.313504][ T9731] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2067'. [ 151.367655][ T9733] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 151.404764][ T9737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2069'. [ 151.415281][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2069'. [ 151.504494][ T9742] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.518946][ T9743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2069'. [ 151.604044][ T9742] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.648646][ T9749] Driver unsupported XDP return value 0 on prog (id 1304) dev N/A, expect packet loss! [ 151.694328][ T9742] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.776120][ T9742] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.817170][ T9753] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.872076][ T2126] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.886533][ T2126] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.897912][ T9753] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.922358][ T2126] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.930797][ T2126] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.964727][ T9753] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.452457][ T9767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2078'. [ 152.476813][ T9765] lo speed is unknown, defaulting to 1000 [ 152.485321][ T9768] tipc: Enabling of bearer rejected, failed to enable media [ 152.627002][ T9753] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.693494][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.765912][ T2448] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.794322][ T2448] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.844953][ T2448] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.894397][ T9776] block device autoloading is deprecated and will be removed. [ 152.979507][ T9787] netlink: 'syz.0.2081': attribute type 1 has an invalid length. [ 153.001325][ T9787] 8021q: adding VLAN 0 to HW filter on device bond8 [ 153.033021][ T9787] 8021q: adding VLAN 0 to HW filter on device bond8 [ 153.050650][ T9787] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.063273][ T9787] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 153.133154][ T9790] macvlan2: entered promiscuous mode [ 153.138534][ T9790] macvlan2: entered allmulticast mode [ 153.155771][ T9790] bond8: entered promiscuous mode [ 153.166900][ T9790] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.194581][ T9790] bond8: left promiscuous mode [ 153.645785][ T9794] netlink: 'syz.4.2085': attribute type 10 has an invalid length. [ 153.833689][ T9798] serio: Serial port ptm0 [ 154.007916][ T9806] netlink: 'syz.4.2086': attribute type 12 has an invalid length. [ 154.191147][ T9830] siw: device registration error -23 [ 154.213799][ T9831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 154.246589][ T9834] netlink: 'syz.0.2098': attribute type 1 has an invalid length. [ 154.306561][ T9834] 8021q: adding VLAN 0 to HW filter on device bond9 [ 154.353945][ T9837] 8021q: adding VLAN 0 to HW filter on device bond9 [ 154.362181][ T9839] netlink: 'syz.4.2099': attribute type 1 has an invalid length. [ 154.373366][ T9837] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.402958][ T9837] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 154.429856][ T9839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.445271][ T9834] macvlan2: entered promiscuous mode [ 154.450592][ T9834] macvlan2: entered allmulticast mode [ 154.457231][ T9834] bond9: entered promiscuous mode [ 154.463057][ T9834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 154.471866][ T9834] bond9: left promiscuous mode [ 154.488158][ T9839] 8021q: adding VLAN 0 to HW filter on device bond6 [ 154.524431][ T9839] bond6: (slave vxcan7): The slave device specified does not support setting the MAC address [ 154.542746][ T9839] bond6: (slave vxcan7): Error -95 calling set_mac_address [ 154.552218][ T5090] ================================================================== [ 154.560313][ T5090] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 154.567345][ T5090] [ 154.569652][ T5090] read-write to 0xffff888237d2a524 of 4 bytes by task 3481 on cpu 1: [ 154.577702][ T5090] wq_worker_running+0x95/0x120 [ 154.582554][ T5090] schedule_timeout+0xb7/0x170 [ 154.587305][ T5090] msleep+0x50/0x90 [ 154.591109][ T5090] nsim_fib_event_work+0x42e6/0x4790 [ 154.596401][ T5090] process_scheduled_works+0x4ce/0x9d0 [ 154.601858][ T5090] worker_thread+0x582/0x770 [ 154.606440][ T5090] kthread+0x489/0x510 [ 154.610508][ T5090] ret_from_fork+0x149/0x290 [ 154.615111][ T5090] ret_from_fork_asm+0x1a/0x30 [ 154.619877][ T5090] [ 154.622192][ T5090] read to 0xffff888237d2a524 of 4 bytes by task 5090 on cpu 0: [ 154.629714][ T5090] kick_pool+0x49/0x2d0 [ 154.633863][ T5090] __queue_work+0x897/0xae0 [ 154.638359][ T5090] queue_work_on+0xd1/0x160 [ 154.642855][ T5090] wg_packet_encrypt_worker+0xc0a/0xe10 [ 154.648389][ T5090] process_scheduled_works+0x4ce/0x9d0 [ 154.653854][ T5090] worker_thread+0x582/0x770 [ 154.658436][ T5090] kthread+0x489/0x510 [ 154.662500][ T5090] ret_from_fork+0x149/0x290 [ 154.667082][ T5090] ret_from_fork_asm+0x1a/0x30 [ 154.671865][ T5090] [ 154.674171][ T5090] value changed: 0x00000000 -> 0x00000001 [ 154.679868][ T5090] [ 154.682178][ T5090] Reported by Kernel Concurrency Sanitizer on: [ 154.688312][ T5090] CPU: 0 UID: 0 PID: 5090 Comm: kworker/0:10 Not tainted syzkaller #0 PREEMPT(voluntary) [ 154.698220][ T5090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 154.708267][ T5090] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 154.714756][ T5090] ==================================================================