last executing test programs: 3.118851463s ago: executing program 1 (id=3031): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SET_NAME(0xf, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r4, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMBIC(r5, 0x5415, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xe03, 0x5, 0x2, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.828819129s ago: executing program 1 (id=3037): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SET_NAME(0xf, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[], 0x1, 0x2a4, &(0x7f0000000480)="$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") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0xc4142, 0x12) writev(r4, &(0x7f0000001000)=[{&(0x7f0000000880)="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", 0x107}, {&(0x7f0000000300)="f720545dd3b03efebdc5e0fccd4ebd5a12deb78fb2c5b13465656b6d7bbd6359c662bc2d12228e8af99d9f1012e0d43912798e5d1291ed84aeef6e", 0x3b}, {&(0x7f0000000cc0)="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", 0x2be}], 0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMBIC(r5, 0x5415, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xe03, 0x5, 0x2, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) 2.47956873s ago: executing program 1 (id=3046): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210026bd7000fddbdf2503000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020020000400feff0700000080000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) rmdir(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = gettid() bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0x1) r5 = socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x10007ffffffff}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c31274cff0101d8a42c103bad1b8b57362446f2c2ed8a69daf3d7306ef3fa2015e4ee1ef3392120b82671d73b07f3082ea69ffa0ebc7b53c78862a3e1ece518c1f0abbe4053b4dfafe815c1fe4b0d079446e80d13af972e00644a0188605d7309812e24cd1158677f94a16a5eb0c5d48b60329fc522026efa596ac913540f2a9b0345f279329bfba29a7dfc8894e6a08eeee3dd974c3de9e0602cfd1e3e584b10dd26cd13f7fb432e72ea85fd1d3a872061bc967d7a67a3a7f09f34cc825db5d9ef3ce0ff9873f8eff342eb30fa970007e2f591f07dc9bc5141a9679a2f7c69aa50894353a7830a0f7cf766aff6e81d7c3b88d730946ce3f327716ef6fd270d5bf467aef288db903f740b6ac27b962a3c6462372e63f8da8505f05d17b364dd8c6b5d449accd01b4c6da297669f098bee986b95e389a2d003539ca9dec8c26b9f6bbb5f7fe6f0b764d99bc0dafcad4121ed6a749ac71fc5deeee54d0e8a2d9dccc87df818258d73c8816b78c1be3670fb14dded879caf925e0f8abf63f55ffee02bbffb465f0303338bd12e22fe94fdaa3f033127ecaf41649232c38e83850fd3ebc890ea5db2763a8389ac49bd9b7f6b81f381d3eeb90d0f596e2b7f7dfa2a0e9453c1f5f359b56aae9e97a51f6c092d25a031843e351f5733a25c5905706618ab569359bdca4932f6471f4f2d152f84cfc0c563885b0d93fd015095a8eb9422e3d17ddaf3f20dde5eeea415f76c0617964198c824b98f4d53ab0d4d734dcd6d07dddd5b77c1bd71208632941973bd5b5aca981137ec21dcd86ba518b3d4979b68f704a2a7d7cfeb9be3edf4b4b3560e930d9dba0bc358cba36a129748c1fa73483a69759ba0c4f2ee2a936899e163c213bb3fe5a28e68669fb2da6bbcdf4c55e933d127a8bc68b8d0e6c6c757fe8ea47f26ceb7c1b3ca8b962eb31a081756ed56fe4385dccc5e2a7a53300e9c8a1a55bcf8db3f828cb3db8485110da631a50199a5c1932b5538a2b1c3cddb4451868a413418e3f761530fd477b2ebb449070c73171964203ad7bad4302af13fa6fe55fb88ede096a7aba95ef3665da778250daa9dd4bd5ecb8a807d83fe6dcf2f0cf5de7a4ef742979afd7d93bb2672ad45f6537640313b1ca8838f3fdc08e57455af6398ce5b253312fe1a88206210831e0de59d1e3f9442fb9dd43f1b9c00d151d3234028990f8bcaf65c0ad9ea1bc20e4b7641ff26969b02ccd60d2d8d2d72fe5fd58068cd6d7525c9e24c4246cd776ecf1f57550bb6bddad5093618797547cde5c07e165bc979bfbb5479c58e89c29efa5fdfa5b4a87917a4275609afc849384458ca980ba5a2aa4d10c761bb3b3a57e3d3b41001cdf6", 0x541}], 0x1}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, 0x1}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x200000000000000, 0x0) 1.992062813s ago: executing program 0 (id=3019): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_uring_enter(0xffffffffffffffff, 0x71a, 0x20000000, 0x0, 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@dev, @in=@loopback}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000000)=0xe8) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="796104000000000000007e"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0xb34, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x100000c1) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00'}) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000008c0)={0x84, @rand_addr=0x64010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10001, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'none\x00', 0x9, 0x821}, 0x2c) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_ADDRFORM(r9, 0x29, 0x1, &(0x7f0000000240), 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r11}, 0x18) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000002f80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xffffff81, @mcast1, 0x1}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="0bf7ae9c0300801e50c63eee1cc0f8f9d0c0d0eecbe406ad5a6549a4677cf40cdd0a824dc7427af5779fb0a953be6f935cb1ec427af2158c7ae8", 0x3a}, {&(0x7f0000000280)="06ba36b639af17955597d234efea4f150cc5b766d3b2c50e7fb148da621d2d47024451a99fe29f6303f71e5e622e67070fb0a6abd78e7a93e317965f71af8a1951270dd885d4789e51e603dcb4723432d8d18815a1faf19110d94e998ef2fea78a385c8b98e5dda16499fc296e7508e58db16dbcc71c90e31a8ddd232a37b9b09d50c2f6", 0x84}, {&(0x7f0000000100)="a6f1881847c72bfcd62b678788fc1c8055ba75c1d475ff1475f7847aad491faf0ba56582d793758513bb1de75f542e9892b8bd8323fef0bf9b02b5eb8c7635ced20dafb99b5f9f1cbf7d729b83d1aa347bc17778feec45", 0x57}], 0x4, &(0x7f00000003c0)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast1, r12}}}, @hopopts={{0xe8, 0x29, 0x36, {0x2c, 0x19, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x5, [0x5]}}, @hao={0xc9, 0x10, @remote}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @remote}, @pad1, @generic={0x7c, 0x72, "3175a6338f50700ad6b614e10ef3853a856a8e436a42314acc5cc8d4751bdef62c7dc42e779ab422765c2eeef33a94d2e887c734d582620e8197a2cb9353b663f0403d9629a36c612abb399818b5bfdc33c7f3e09058325a69f36198c5ca32a47be04cd16f5affe209e09f22da5a3dac9b03"}, @jumbo={0xc2, 0x4, 0xffff}, @ra={0x5, 0x2, 0x9347}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x73, 0xe, 0x2, 0x8, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1b}, @mcast2, @ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @loopback, @remote]}}}, @dstopts={{0x80, 0x29, 0x37, {0x2e, 0xc, '\x00', [@generic={0x7, 0x60, "ba51f62fd953222ca4281ccf27d0a67136accbae3ec12d74c115d50f3588915a86969942e11ffbd306adc80014721aa512c54ab1002b6e9af1cfc689432838b0f92fea3094cb87c7ab641af6446d7afbc0eb141699f19a406c5af2579df88ed7"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @hoplimit={{0x14, 0x29, 0x34, 0x4e}}], 0x260}}, {{&(0x7f0000000640)={0xa, 0x40, 0xfffff001, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}, 0xffffffff}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000680)="7618ed443ad6a4863c2fc1d5fdd6782e253ce12e943273df47dfd35aa7318625b60fb0e1cddc45d98bd899e436ec575717fcfc1134fe7660955040ce002088c6ef7ae7fdc5185e25c7dac5ba3fae8fcf5ecb2b00f2ead3334556441fe15ccf2bf3f17538ba35b841a417740c08f4d356352f510aa5d1d79ddaed48ccdacd352848ca2151c1f9de15d316446da1ee45157e848658dde4d5e7607ce296d22122d440716467717d9d0a1ec379fb05049fb1aee6758778a6f5", 0xb7}, {&(0x7f0000000740)}, {&(0x7f0000000840)="52cac7d4548e23d5e74723b2bd4ee16763660ac5349d8962146aa387ffbc273bb482fec312f54de8116a567c1a138b", 0x2f}, {&(0x7f0000000880)="2e6c6aa38ab1cc6f313543ce9e47dd7dd9dee0e749366bd2d158dc1804146fcd243cb19d57d27e40e7b886fc1d9dd24b940d1b695ff3c2a90d936a5630889525c1ba89f837a902b1c83b995a30870280aa0d7aec3c4fca271acd", 0x5a}, {&(0x7f0000000a00)="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", 0xfc}, {&(0x7f0000000900)="e948db17ee60e10b247fd0b3f95c1bf708bb3850b0577310e886952be5e719f7428f94079996e331da3ec0a3a10d078206564529ed3a19815a55f3e337c9797cf33de168893e5c5af0c3c00a71df39994d25446b83bb833b6ec65e9fcccb83b8b286fe6388b134c7b9beb08378", 0x6d}], 0x6, &(0x7f0000000b80)=[@hopopts={{0x50, 0x29, 0x36, {0x6, 0x6, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @jumbo={0xc2, 0x4, 0x6}, @enc_lim={0x4, 0x1, 0xe7}, @calipso={0x7, 0x18, {0x4, 0x4, 0x8, 0x7, [0x400, 0x8000000000000000]}}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x1, 0x4, 0x0, 0x4, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @local]}}}, @hopopts={{0x78, 0x29, 0x36, {0x3b, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @ra={0x5, 0x2, 0xa9f}, @enc_lim={0x4, 0x1, 0x27}, @pad1, @calipso={0x7, 0x30, {0x1, 0xa, 0x40, 0x7fff, [0x8, 0x0, 0x1, 0xfe0000000, 0x8a]}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x1}, @jumbo={0xc2, 0x4, 0xffff}, @hao={0xc9, 0x10, @local}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x2c, 0x8, 0x0, 0x9, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private1, @private2, @loopback]}}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x1d, 0xf, '\x00', [@ra={0x5, 0x2, 0x5}, @pad1, @jumbo={0xc2, 0x4, 0xffff}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @generic={0x5, 0x62, "4bd58c2741901a6e4fe24618f866fc423178d4c7d8340e19994a7542f13dccb4d62d925564019d95170337fb94a496276871a581c5b7c00748185b972f600dd0c37496539742c0aedfa15122b9afb2e4041ab6cac63e29d7fb4d9521fbcfc38b2de6"}]}}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x3b, 0x3, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2000}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x10}, @enc_lim={0x4, 0x1, 0x3}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x2e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x1d, 0xa, '\x00', [@calipso={0x7, 0x40, {0x3, 0xe, 0xff, 0x9, [0x4, 0x9, 0x8, 0x3, 0xa0, 0x4, 0x1]}}, @pad1, @ra={0x5, 0x2, 0xea4}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@pad1, @pad1, @pad1]}}}], 0x2e0}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000e80)="cc689194ee49bdd27fd421baecbe2365e24cc6cf1392e2236256fd882bc5527f6422f9a3acac3d37dbb9716d216a1221ec1ca091d41c85e3094fdd987f5ae544dc626526464ccaf0ba45270e25cfb93d2c73", 0x52}, {&(0x7f0000000f00)="dcce6b3ca2cc4ba09b2b15fcc3315b3833500e426be85f6cc73845459e3c36a3903f59e8bee7f3aaabdc377346a215c176225536249cbc4af713d95b53cfed8a667b47", 0x43}], 0x2}}, {{&(0x7f0000000f80)={0xa, 0x4e22, 0x400, @local, 0x80000000}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000000fc0)="ff9230e6079a8d4985a645815dc96669fceef6362899d6efb8cf1e928b3f644f0aa046746168b1a5b246c457d6b68281e47ded58c76c23c75ef3d3b794027a348250df6b1b7abbac136bda7a36c571ce3044b9803d23c1e0477a66a790a549ee8ce26f68a258c550f62d015f53aa4646e30c7f69121d594e6f567521af70a7d845e6f2c69449d67ca0b3094b9f92e13d4fb1f77865d4868f96b9cfd7bacab23d8dde6ed323deaf845bc1da0e4c41e20de931858d0417212dc26ca61632813d7f4c49743ead1ad8408e107a54b8d5", 0xce}, {&(0x7f00000010c0)="3097b472bd203c00413810dbba18f972b7f9cc4b042def79d8911c5a1705e6feaba70302e71560e2bd8167397eea1fd1b216584a243b0de35c118ea9fa992ceffa61f472358156491c3b1dd1ac34673da2446993ecc5dd584f757016c94575d225621e1f504f46f0e90811e9b2d1d549ff1244afc4e08dc7596972bb0eec40fde7631afce9d2c6d7311b97584bc667397bf9754f95de4206eb8baebd520e8008b27a3427528875161187f42945c96770016cc95cec8c985b623582cd9cc8b6285f6060abcb3d35df918d415a79f8428f087337", 0xd3}, {&(0x7f00000011c0)="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", 0x1000}, {&(0x7f00000021c0)="bdb922b530fa0771de25bd11690ef10a7296c2a5e3abbce5c08145b4da31e8e5b22657397dfcdf82546f7a4ce9cfeb9c60a18d02939dd18b6b38a165868f75b8d629f8cc8c490ac70fd6e0d1ff0608e81e4847709ab14984acb7ce5dea8ff3df2ade9daa240f6111519da743cd31d953f8a8a73db8b5266f6b816505761ccf093a51c5c3a4baf9b6", 0x88}, {&(0x7f0000002280)="46c885db95273a6fe33d77c38f8735e21a54f402c303b9b97513679c5f8b5847eb3ed7e65e300466aa1067afa3e1fe0188b19069492d9ddd0917e9c23c41", 0x3e}, {&(0x7f00000022c0)="5face2268dbe9bbc0cafb561c21433a6962b26901ea9fc731004c02ece2a579a143e972be9101f3e42f753860ec743647bb69b7c03746116b26ff1448819a1c057ee833791143a1de6028cf69c4652daa7422a9ea56b411ded4303383910765210a933d5085cf22f46ab89d506987f50cb9a0519f405d05faa371fcbe005f273b7784e6d1d042e670069030cadab7a26fbc985df58b503b7", 0x98}, {&(0x7f0000002380)="ccb9615c2b4621816965501dfa9f4cafc94e3beecc035337b8a4fb98a5a2f205a5b31f8b437c9be44c994faf165fd046c77e70a89428e2b44c06bb0627f174aaafe22d498558dc0d3e8e14e5dd21865f71c3ede8e3048f2c516fcefce066a8a9fd7f206c9ffa2307b6e0189b0c2c3917e06abe8d914bfa6904a3d7b8ce9a53ea247e7564ad9bf36a4df1bc0163adfbba0346cf68faf0e8919035c8fb2843f5a5e9f6537a78e79877633146805b943de982c31617f670cff9bda7bbf7d8a48d780f1a069bb91999e8f5c7", 0xca}, {&(0x7f0000002480)="101ac7be5aae7415c10a04ba86d37473184595f030e3cec0dda1b023b7f54e028f9742ab4d330ffc", 0x28}, {&(0x7f00000024c0)}], 0x9, &(0x7f00000025c0)=[@hopopts={{0x100, 0x29, 0x36, {0x73, 0x1c, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x4}, @calipso={0x7, 0x18, {0x2, 0x4, 0x1, 0xfffa, [0xffffffffffffffff, 0xffffffffffffffff]}}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @private0}, @pad1, @ra={0x5, 0x2, 0x933f}, @pad1, @generic={0x0, 0x9b, "31cbd2944e2ba0d83bf85667b18a34144bbb381c2cbe09ed8398b00e6a30b614dee324f9160cb4968c17147ee426e2bcc92c4107a5dc3fc625eff463a9045616268f903f13bbf5455de2715a608fb9a29db66e07aa3214cb495a465b8ebaa6d1d747c2949b730b8ff29987e8f7dc2c0951e2a5000f50974557792bbcfcaf77a352f5877b437803885aef3a244dac32e44029079fc478ec2dd14996"}, @pad1]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0xbd, 0xc, 0x1, 0x5, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast1}, @remote, @dev={0xfe, 0x80, '\x00', 0x3d}, @dev={0xfe, 0x80, '\x00', 0x26}, @dev={0xfe, 0x80, '\x00', 0xa}, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf4}}, @rthdr={{0x68, 0x29, 0x39, {0x2, 0xa, 0x2, 0x8e, 0x0, [@empty, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x15}]}}}, @dstopts_2292={{0x40, 0x29, 0x4, {0x3a, 0x4, '\x00', [@jumbo={0xc2, 0x4, 0x88d}, @enc_lim={0x4, 0x1, 0x2}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffff7}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x32a}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @tclass={{0x14}}, @dstopts={{0x60, 0x29, 0x37, {0x73, 0x8, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0xcf5f}, @calipso={0x7, 0x30, {0x3, 0xa, 0xf0, 0x2, [0x7, 0xf55c, 0x6, 0x4, 0x6]}}, @enc_lim={0x4, 0x1, 0x9}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xfff0}]}}}], 0x2e0}}, {{&(0x7f00000028c0)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x9}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002900)="e5e00b4d1739022dd9fe187dc53d5efd0e54527f3ee04a63f125a60611da1330e54b8ae305f50315da7186b86a78f7f522c4c0d9eb", 0x35}, {&(0x7f0000002940)="a50e8d9186cd68698a2d86b278025c247f47a7afbdfcb82a4518863fe37d6895f72e56b1cefb3a005dca44dd11d31ede25a085af73d4d322f9e3f1b81ebefe2325", 0x41}, {&(0x7f00000029c0)="b91afb96d35b8c57acf31ca5a8648acca7b3d95e059d07e477e612e86247747729", 0x21}], 0x3, &(0x7f0000002a40)=[@dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @hopopts={{0x110, 0x29, 0x36, {0x16, 0x1e, '\x00', [@jumbo={0xc2, 0x4, 0xffffff1e}, @calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0xa32a, [0x8001, 0x7, 0x7, 0xfffffffffffff7ac, 0x95]}}, @hao={0xc9, 0x10, @private2}, @generic={0x6, 0x7e, "0729d25d4746973db9d35ef680c593dd5e4bb0b9f8b887c09b905489b62b6c5c4fc51bc25d1c1422652af8229e2616f316f82a0e1bac870e584f9a2e6c67d31730f5bc606fe17e29fa00b4ee7013d65dd9e6ed9fa21d70d37c85edb98ccd1b4de70f18634b22f7702bf4212217b5bf7b3e792ba7cee14fca1b03f4dcca05"}, @calipso={0x7, 0x28, {0x1, 0x8, 0xf6, 0x9, [0x5, 0x0, 0x30000000, 0xffb]}}, @pad1]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0xc3, 0x2, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x28, 0x29, 0x36, {0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x1000}, @jumbo={0xc2, 0x4, 0x9}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x62, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x1}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x11, 0x6, 0x2, 0x4, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1d}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0]}}}, @dstopts={{0xd0, 0x29, 0x37, {0x3a, 0x16, '\x00', [@generic={0xff, 0x8b, "c6960dc4cb9061d77235dd8ac4aa60721d712c42d9943e1e12f6f03ced6005890c1556d38adefe4a6970c4a3755be72f97dd4d62d1754d872cfaa6bd52b062e8229e6dd969652112453d493b753669521e316c083fb91ec38e98f48755dbf51724c116905060bdccf6f411bab3a6b6c1bd6939ebb76c496908c76ff0140baf52602e497df89334acec18c8"}, @pad1, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0x1, [0x1000, 0x6, 0x765f]}}, @ra={0x5, 0x2, 0xffde}]}}}], 0x2d8}}, {{&(0x7f0000002d40)={0xa, 0x4e22, 0x10000, @private0}, 0x1c, &(0x7f0000002f40)=[{&(0x7f0000002d80)="b0f58ef175ad56ae5a2835b8938076c52084f8f5e7c86f137d499e5d3ed657966851e4a65c0fc9a3492a5998f0ec545c6b4267cb2a60aaceacc834a470e5bab847ac1ab65904ecfe57fa2ec008cf49328e542621590d59849bc6bdd5dab4b05c92af08025d48baddb05c702ac01c25077fe5816759e205eb9f4d0bca292f80e36f62526ba09f2e8cf045475f1f37e42cde3b2002dfa57624848b952dc0461c1d3cd8723ab5b35ba532d04096c49d59e80c2638436c99f868df2e4a976508ab98f80f0f38ed9145c121c42a8e34e235c4217108af62c8c1115900f9b5f418641e56b26bf0e79401e207e6da3442a22895e9d197418aa232373d", 0xf9}, {&(0x7f0000002e80)="75e95852c29682b9bd4c427f9eeb08343b675c84afa10a8e2ac9a8843f429aa6ea2b20c2d9449ebebca76073e4b2eae012c722454500e8661d81827f97006c3c5f15c3404dfa711e72f67d833e41601e8257ad4e00c3ab9e340d2cc44b181c6e4257199a4fb9b48996e7", 0x6a}, {&(0x7f0000002f00)}], 0x3}}], 0x6, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={{0x14, 0x453, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x3fa}}, 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 1.91803052s ago: executing program 0 (id=3054): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1276, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210026bd7000fddbdf2503000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020020000400feff0700000080000000", @ANYRES32, @ANYBLOB='\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000050000000100"/28], 0x50) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) rmdir(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r4 = gettid() bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x2000}, 0x1) r5 = socket(0x2, 0x80805, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x10007ffffffff}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendmmsg$inet(r5, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4c21, @private=0xa01fdff}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000ac0)="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", 0x541}], 0x1}}], 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6, 0x1}) mq_timedsend(r8, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r8, 0x0, 0x0, 0x200000000000000, 0x0) 1.517537365s ago: executing program 1 (id=3056): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x0) 1.487037498s ago: executing program 1 (id=3058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = fcntl$dupfd(r0, 0x406, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000680)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008040000b703000007000000850000001100000095"], &(0x7f00000009c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.418223594s ago: executing program 1 (id=3062): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x522, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x0, 0x8fd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) unshare(0x22020600) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001180)='net/packet\x00') fsetxattr$trusted_overlay_upper(r3, &(0x7f00000011c0), &(0x7f0000001200)={0x0, 0xfb, 0x43, 0x0, 0x6, "a34e579ff38d59c929895bc090804785", "937d4d55a165298ff967e3de7a075444dabdf56fdb881fd4b0b080bcba8329565fc8518ec4d78b0b789eb85bcb32"}, 0x43, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x1}}) readv(r6, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) syz_clone(0x40000080, 0x0, 0x0, 0x0, 0x0, 0x0) 1.35819291s ago: executing program 2 (id=3064): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x8, 0x3, 0x4a0, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3d0, 0xffffffff, 0xffffffff, 0x3d0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0xff, 0xff, 0xff], [0xff000000, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0x1a0, 0x1e8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0x7a3, 0x6, 'snmp_trap\x00', {0x369bc443}}}}, {{@ipv6={@remote, @local, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1c8, 0x1e8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x29, 0x1, 0x1, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x1c}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) socket(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) writev(r4, &(0x7f0000000040)=[{&(0x7f0000002500)='\x00\x00', 0x2}, {0x0}], 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_sctp(0x2, 0x1, 0x84) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x851, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@cache_loose}]}}) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x10c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x401}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 1.195570184s ago: executing program 2 (id=3066): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000004c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'dvmrp0\x00', 0xc00}) 1.136462059s ago: executing program 2 (id=3068): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c"], 0xfc}}, 0x0) 1.053708747s ago: executing program 2 (id=3069): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000002039000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x3]}, 0x8, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000000c0)=0xe4b197828e8dcfb9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x20) openat(r4, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664f26) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09f5000004000000de0000000a000000000000003dad444d18c073ed610fbf8c3a727a895a5f7b9295153ed2f395ac79eb5da86141ea86988329af77e8082fa4137c30047758b350ada28a352f3be8942493c5184d486f57c08cb6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r10, 0x0, 0x4}, 0x18) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r12}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x18) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x14, r7, 0x60b}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000540)) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"/332], 0x14c}}, 0x0) 998.892461ms ago: executing program 0 (id=3071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r2}, 0x18) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x20, 0x2, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x288}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x4004010) 900.32555ms ago: executing program 0 (id=3073): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 839.744576ms ago: executing program 2 (id=3074): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r4}, 0x10) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = dup2(r4, r2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r3, 0x0, '\x00', 0x0, r6, 0x0, 0xfffffffe}, 0x50) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x2d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffffb) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x3ec0) close(0x3) 839.292135ms ago: executing program 0 (id=3075): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f00000004c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'dvmrp0\x00', 0xc00}) 838.020676ms ago: executing program 4 (id=3077): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SET_NAME(0xf, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r4, 0x5415, 0x0) syslog(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffeff9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xe03, 0x5, 0x2, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 663.226691ms ago: executing program 0 (id=3079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='xprtrdma_reply\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) fsmount(r1, 0x1, 0xf5) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r3 = inotify_init() close(0xffffffffffffffff) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x400008bf) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='kfree\x00', r2, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x29, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x40040) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="700100001b00010000000000000000007f000001000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000800000000000000000000000000000000000000000003000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000a30008"], 0x170}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 630.156444ms ago: executing program 3 (id=3080): creat(&(0x7f00000001c0)='./file0\x00', 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 514.479844ms ago: executing program 3 (id=3081): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd37, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0xa}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x31, 0xb, 0xffffffff}]}}]}, 0x3c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) getresgid(&(0x7f00000000c0), &(0x7f0000000140), &(0x7f0000000180)) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x6, @private=0xa010102}, 0x2, 0x0, 0x1}}, 0x26) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 477.006248ms ago: executing program 4 (id=3082): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x80) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x203, 0x402) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000400)={0x23, 0x1, 0x2, 0x2, 0x0, 0x5, 0x0}) pwritev(r0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000100)="4085c513", 0x4}], 0x2, 0xffffff01, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x9001, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x401, 0x20004, 0x572, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r4, 0x8008551c, &(0x7f0000000180)={0x1, 0x18, 0xff81, 0x1, 0x0, 0x0, 0x0}) r5 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r0, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000780)=[{}, {}], 0x10, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xc1, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000a00)={@rand_addr, @multicast1, 0x0}, &(0x7f0000000a40)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r9, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x80) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000ac0)=0x0, &(0x7f0000000b00)=0x4) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000b40)={@broadcast, @remote, 0x0}, &(0x7f0000000c40)=0xc) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000f00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x184, 0x0, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000000) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r5, 0x40089413, &(0x7f00000001c0)=0x7d1) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r14}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 454.34205ms ago: executing program 3 (id=3083): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecf5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r3, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}, {{&(0x7f0000000700)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, 0x0}}], 0x400000000000297, 0x48094) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 422.710553ms ago: executing program 4 (id=3084): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x8) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$getflags(r1, 0x401) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRESOCT=r0, @ANYBLOB="00fcff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x8, &(0x7f0000000840)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback=0x9, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff79, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r4, 0x0, 0x4804}, 0x18) pipe2$9p(&(0x7f00000001c0), 0x0) syz_io_uring_setup(0x2e43, &(0x7f0000000000)={0x0, 0x2003, 0x20, 0x1, 0x10c}, &(0x7f0000000180), &(0x7f0000000640)) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000040)='./file7\x00', 0x200000, &(0x7f0000000140)=ANY=[], 0xfc, 0x2b0, &(0x7f0000000280)="$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") socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000040)='./bus\x00', 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r8, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {0x5}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x20040050) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x81, 0xfffffff9, @vifc_lcl_ifindex=r8, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 323.293951ms ago: executing program 3 (id=3085): r0 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x38fbcbbd, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r3}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) (async) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xd0}}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) r8 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f0000000980), &(0x7f00000009c0)=0x4) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x5, {0x0, 0x0, 0x0, r9, {0xe, 0x1}, {0x0, 0x3}, {0x0, 0xffe0}}}, 0x24}}, 0x800) 312.432252ms ago: executing program 4 (id=3086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) 252.708668ms ago: executing program 2 (id=3087): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) prctl$PR_SET_NAME(0xf, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCMBIC(r4, 0x5415, 0x0) syslog(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7fffeff9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0xe03, 0x5, 0x2, 0x1}]}) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 210.398981ms ago: executing program 4 (id=3088): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x3a, 0x1000, 0x5, 0x0, 0x2, 0x5}, 0x1c) socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="500000001000030400000000000000", @ANYRES32=0x0, @ANYBLOB="05a00200000000002800128009000100766c616e00000000180002800c000200540a000018000000060001000100000008000500", @ANYRES32=r3], 0x50}, 0x1, 0xba01}, 0x0) r4 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7e, 0x1, @perf_config_ext={0x10000d07, 0x40}, 0xee2b, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fadvise64(0xffffffffffffffff, 0x8000000000000000, 0x9, 0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000240)={r5, 0xa4, 0x110c, 0x3a82}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881) write$sndseq(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000001140)={0x80, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x800000000006}, 0x18) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000000000", 0x1b) 157.702306ms ago: executing program 3 (id=3090): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x5}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x20040050) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x1, 0x0, 0x81, 0xfffffff9, @vifc_lcl_ifindex=r3, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) 20.935828ms ago: executing program 3 (id=3091): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x4, 0x0) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) 0s ago: executing program 4 (id=3092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x2003, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x2}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') kernel console output (not intermixed with test programs): [ 157.202152][ T29] audit: type=1326 audit(1767555306.062:19297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 157.202183][ T29] audit: type=1326 audit(1767555306.062:19298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 157.202251][ T29] audit: type=1326 audit(1767555306.062:19299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 157.202283][ T29] audit: type=1326 audit(1767555306.062:19300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 157.202317][ T29] audit: type=1326 audit(1767555306.062:19301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 157.202346][ T29] audit: type=1326 audit(1767555306.062:19302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9667 comm="syz.2.2085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 157.690597][ T9712] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 158.665723][ T9741] __nla_validate_parse: 26 callbacks suppressed [ 158.665742][ T9741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2108'. [ 158.688103][ T9744] can0: slcan on ttyS3. [ 158.752720][ T9745] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 158.788312][ T9744] can0 (unregistered): slcan off ttyS3. [ 159.063756][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2118'. [ 159.389287][ T9771] program syz.0.2120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.480764][ T9774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 159.809929][ T9781] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2124'. [ 159.850250][ T9781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2124'. [ 160.065662][ T9791] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2129'. [ 160.079013][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 160.088606][ T9795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2130'. [ 160.194204][ T9803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2134'. [ 160.227907][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2136'. [ 160.421956][ T9819] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 160.622043][ T9842] lo speed is unknown, defaulting to 1000 [ 160.630269][ T9842] lo speed is unknown, defaulting to 1000 [ 161.178514][ T9868] lo speed is unknown, defaulting to 1000 [ 161.210264][ T9868] lo speed is unknown, defaulting to 1000 [ 161.250687][ T1662] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.369373][ T9852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.405367][ T9852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.096403][ T29] kauditd_printk_skb: 514 callbacks suppressed [ 162.096417][ T29] audit: type=1326 audit(1767555311.102:19817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.168994][ T29] audit: type=1326 audit(1767555311.142:19818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.194088][ T29] audit: type=1326 audit(1767555311.142:19819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.219058][ T29] audit: type=1326 audit(1767555311.142:19820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.242834][ T29] audit: type=1326 audit(1767555311.142:19821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.268038][ T29] audit: type=1326 audit(1767555311.142:19822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.291795][ T29] audit: type=1326 audit(1767555311.142:19823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.318196][ T29] audit: type=1326 audit(1767555311.142:19824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.342754][ T29] audit: type=1326 audit(1767555311.142:19825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.367815][ T29] audit: type=1326 audit(1767555311.152:19826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9894 comm="syz.4.2160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 162.665938][ T9914] can0: slcan on ttyS3. [ 162.717202][ T9914] can0 (unregistered): slcan off ttyS3. [ 162.727266][ T9914] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.064240][ T9946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.176537][ T9951] lo speed is unknown, defaulting to 1000 [ 163.287658][ T9951] lo speed is unknown, defaulting to 1000 [ 163.293577][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 163.316737][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.409556][ T9955] can0: slcan on ttyS3. [ 163.516934][ T9955] can0 (unregistered): slcan off ttyS3. [ 163.564480][ T9955] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 163.859534][ T9982] __nla_validate_parse: 17 callbacks suppressed [ 163.859556][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2188'. [ 163.988272][ T9997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2192'. [ 164.128990][T10009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2193'. [ 164.209533][T10012] can0: slcan on ttyS3. [ 164.223316][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 164.232294][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 164.287081][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 164.290171][T10012] can0 (unregistered): slcan off ttyS3. [ 164.303037][T10020] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.369648][T10026] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2202'. [ 164.522318][T10040] lo speed is unknown, defaulting to 1000 [ 164.552775][T10040] lo speed is unknown, defaulting to 1000 [ 164.621574][T10059] netlink: 488 bytes leftover after parsing attributes in process `syz.1.2205'. [ 164.652219][ T44] Bluetooth: hci0: sending frame failed (-49) [ 164.660578][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 165.493915][T10092] can0: slcan on ttyS3. [ 165.536873][T10092] can0 (unregistered): slcan off ttyS3. [ 165.546029][T10092] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 165.581017][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 165.590075][T10095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 165.762008][T10122] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 165.834058][T10103] Cannot find del_set index 2 as target [ 165.840147][T10115] tipc: Enabling of bearer rejected, failed to enable media [ 166.076248][T10149] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 166.115022][T10152] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 166.239351][T10173] program syz.1.2236 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.077497][T10201] program syz.4.2249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.138268][T10203] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.151099][ T29] kauditd_printk_skb: 795 callbacks suppressed [ 167.151113][ T29] audit: type=1326 audit(1767555316.162:20622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 167.238716][T10210] program syz.2.2253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.243192][ T29] audit: type=1326 audit(1767555316.202:20623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc49900f783 code=0x7ffc0000 [ 167.273063][ T29] audit: type=1326 audit(1767555316.202:20624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc49900f807 code=0x7ffc0000 [ 167.298080][ T29] audit: type=1326 audit(1767555316.202:20625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc498fc6bdd code=0x7ffc0000 [ 167.321664][ T29] audit: type=1326 audit(1767555316.202:20626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fc499043e89 code=0x7ffc0000 [ 167.346909][ T29] audit: type=1326 audit(1767555316.202:20627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc498fc6c47 code=0x7ffc0000 [ 167.355325][T10208] Cannot find add_set index 0 as target [ 167.372108][ T29] audit: type=1326 audit(1767555316.202:20628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 167.401417][ T29] audit: type=1326 audit(1767555316.212:20629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 167.425089][ T29] audit: type=1326 audit(1767555316.212:20630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fc498fc6357 code=0x7ffc0000 [ 167.451793][ T29] audit: type=1326 audit(1767555316.212:20631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10196 comm="syz.0.2247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc498fc63b6 code=0x7ffc0000 [ 167.488354][T10208] tipc: Enabling of bearer rejected, failed to enable media [ 167.556146][T10218] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 167.655297][T10228] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 168.744096][T10269] lo speed is unknown, defaulting to 1000 [ 168.790644][T10269] lo speed is unknown, defaulting to 1000 [ 168.870339][T10281] __nla_validate_parse: 14 callbacks suppressed [ 168.870360][T10281] netlink: 488 bytes leftover after parsing attributes in process `syz.4.2277'. [ 168.924070][T10283] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 169.692303][T10301] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2287'. [ 169.835146][ T3328] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 169.846113][ T3328] CPU: 1 UID: 0 PID: 3328 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.846212][ T3328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 169.846288][ T3328] Call Trace: [ 169.846297][ T3328] [ 169.846359][ T3328] __dump_stack+0x1d/0x30 [ 169.846391][ T3328] dump_stack_lvl+0x95/0xd0 [ 169.846420][ T3328] dump_stack+0x15/0x1b [ 169.846443][ T3328] dump_header+0x81/0x240 [ 169.846478][ T3328] oom_kill_process+0x295/0x350 [ 169.846501][ T3328] out_of_memory+0x97b/0xb80 [ 169.846596][ T3328] try_charge_memcg+0x610/0xa10 [ 169.846676][ T3328] charge_memcg+0x51/0xc0 [ 169.846748][ T3328] __mem_cgroup_charge+0x28/0xb0 [ 169.846825][ T3328] filemap_add_folio+0x111/0x360 [ 169.846882][ T3328] __filemap_get_folio_mpol+0x326/0x650 [ 169.846918][ T3328] filemap_fault+0x44d/0xb70 [ 169.846955][ T3328] __do_fault+0xbc/0x200 [ 169.847031][ T3328] handle_mm_fault+0xfab/0x2c60 [ 169.847079][ T3328] do_user_addr_fault+0x630/0x1080 [ 169.847129][ T3328] exc_page_fault+0x62/0xa0 [ 169.847195][ T3328] asm_exc_page_fault+0x26/0x30 [ 169.847219][ T3328] RIP: 0033:0x7f72da505fd4 [ 169.847236][ T3328] Code: 85 ed 09 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 c8 f7 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d d9 f6 ea 00 48 01 d1 [ 169.847329][ T3328] RSP: 002b:00007ffde748f080 EFLAGS: 00010206 [ 169.847347][ T3328] RAX: 0000001b33f24000 RBX: 0000000000000492 RCX: 0000000000029428 [ 169.847363][ T3328] RDX: 000000000c767de1 RSI: 00007ffde748f110 RDI: 0000000000000001 [ 169.847423][ T3328] RBP: 00007ffde748f0bc R08: 000000002f8ac291 R09: 7fffffffffffffff [ 169.847603][ T3328] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 169.847619][ T3328] R13: 00000000000927c0 R14: 0000000000029510 R15: 00007ffde748f110 [ 169.847668][ T3328] [ 170.028733][ T3328] memory: usage 307200kB, limit 307200kB, failcnt 545 [ 170.035545][ T3328] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 170.043590][ T3328] kmem: usage 295520kB, limit 9007199254740988kB, failcnt 0 [ 170.050995][ T3328] Memory cgroup stats for /syz1: [ 170.060410][ T3328] cache 11759616 [ 170.069036][ T3328] rss 200704 [ 170.072277][ T3328] shmem 11759616 [ 170.075897][ T3328] mapped_file 11755520 [ 170.080079][ T3328] dirty 0 [ 170.083109][ T3328] writeback 0 [ 170.086409][ T3328] workingset_refault_anon 109 [ 170.092780][ T3328] workingset_refault_file 1955 [ 170.097595][ T3328] swap 0 [ 170.100476][ T3328] swapcached 0 [ 170.103881][ T3328] pgpgin 165089 [ 170.107389][ T3328] pgpgout 162169 [ 170.110950][ T3328] pgfault 208475 [ 170.114511][ T3328] pgmajfault 107 [ 170.119462][ T3328] inactive_anon 8192 [ 170.123479][ T3328] active_anon 11952128 [ 170.127606][ T3328] inactive_file 0 [ 170.131264][ T3328] active_file 0 [ 170.134743][ T3328] unevictable 0 [ 170.138275][ T3328] hierarchical_memory_limit 314572800 [ 170.143666][ T3328] hierarchical_memsw_limit 9223372036854771712 [ 170.151396][ T3328] total_cache 11759616 [ 170.155536][ T3328] total_rss 200704 [ 170.159307][ T3328] total_shmem 11759616 [ 170.163402][ T3328] total_mapped_file 11755520 [ 170.168084][ T3328] total_dirty 0 [ 170.171593][ T3328] total_writeback 0 [ 170.175435][ T3328] total_workingset_refault_anon 109 [ 170.182104][ T3328] total_workingset_refault_file 1955 [ 170.182119][ T3328] total_swap 0 [ 170.182127][ T3328] total_swapcached 0 [ 170.182135][ T3328] total_pgpgin 165089 [ 170.182145][ T3328] total_pgpgout 162169 [ 170.182155][ T3328] total_pgfault 208475 [ 170.182165][ T3328] total_pgmajfault 107 [ 170.182175][ T3328] total_inactive_anon 8192 [ 170.182226][ T3328] total_active_anon 11952128 [ 170.182237][ T3328] total_inactive_file 0 [ 170.182247][ T3328] total_active_file 0 [ 170.182258][ T3328] total_unevictable 0 [ 170.182268][ T3328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2284,pid=10289,uid=0 [ 170.182419][ T3328] Memory cgroup out of memory: Killed process 10289 (syz.1.2284) total-vm:96016kB, anon-rss:1136kB, file-rss:22604kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 170.265871][T10324] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2295'. [ 170.290239][T10326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2296'. [ 170.514349][T10334] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 170.729083][T10343] can0: slcan on ttyS3. [ 170.777509][T10343] can0 (unregistered): slcan off ttyS3. [ 170.814848][T10355] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 170.891875][T10368] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2307'. [ 170.961466][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 170.967644][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 171.004856][T10381] program syz.0.2310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 171.067336][T10386] lo speed is unknown, defaulting to 1000 [ 171.074033][T10386] lo speed is unknown, defaulting to 1000 [ 171.222029][T10386] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2311'. [ 171.237437][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 171.382037][T10397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2312'. [ 171.596166][T10364] syz.1.2306 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 171.611286][T10364] CPU: 0 UID: 0 PID: 10364 Comm: syz.1.2306 Not tainted syzkaller #0 PREEMPT(voluntary) [ 171.611317][T10364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 171.611333][T10364] Call Trace: [ 171.611416][T10364] [ 171.611427][T10364] __dump_stack+0x1d/0x30 [ 171.611506][T10364] dump_stack_lvl+0x95/0xd0 [ 171.611535][T10364] dump_stack+0x15/0x1b [ 171.611641][T10364] dump_header+0x81/0x240 [ 171.611670][T10364] oom_kill_process+0x295/0x350 [ 171.611702][T10364] out_of_memory+0x97b/0xb80 [ 171.611735][T10364] try_charge_memcg+0x610/0xa10 [ 171.611795][T10364] obj_cgroup_charge_pages+0xa6/0x150 [ 171.611877][T10364] __memcg_kmem_charge_page+0x9f/0x170 [ 171.611942][T10364] __alloc_frozen_pages_noprof+0x18f/0x360 [ 171.611991][T10364] alloc_pages_mpol+0xb3/0x260 [ 171.612098][T10364] alloc_pages_noprof+0x90/0x130 [ 171.612134][T10364] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 171.612188][T10364] __kvmalloc_node_noprof+0x492/0x6b0 [ 171.612224][T10364] ? ip_set_alloc+0x24/0x30 [ 171.612297][T10364] ? ip_set_alloc+0x24/0x30 [ 171.612340][T10364] ip_set_alloc+0x24/0x30 [ 171.612372][T10364] hash_netiface_create+0x282/0x740 [ 171.612482][T10364] ? __pfx_hash_netiface_create+0x10/0x10 [ 171.612526][T10364] ip_set_create+0x3cc/0x970 [ 171.612616][T10364] ? __nla_parse+0x40/0x60 [ 171.612653][T10364] nfnetlink_rcv_msg+0x4c6/0x590 [ 171.612714][T10364] netlink_rcv_skb+0x123/0x220 [ 171.612797][T10364] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 171.612833][T10364] nfnetlink_rcv+0x167/0x16c0 [ 171.612904][T10364] ? trace_event_reg+0xe0/0x190 [ 171.612964][T10364] ? __list_add_valid_or_report+0x38/0xe0 [ 171.613007][T10364] ? merge_sched_in+0x605/0xa30 [ 171.613073][T10364] ? rb_next+0x5c/0x80 [ 171.613110][T10364] ? visit_groups_merge+0xf7e/0xfd0 [ 171.613143][T10364] ? should_fail_ex+0x30/0x280 [ 171.613174][T10364] ? selinux_nlmsg_lookup+0x99/0x890 [ 171.613209][T10364] ? __rcu_read_unlock+0x34/0x70 [ 171.613282][T10364] ? __netlink_lookup+0x266/0x2a0 [ 171.613318][T10364] netlink_unicast+0x5c0/0x690 [ 171.613374][T10364] netlink_sendmsg+0x58b/0x6b0 [ 171.613422][T10364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.613542][T10364] __sock_sendmsg+0x145/0x180 [ 171.613568][T10364] ____sys_sendmsg+0x31e/0x4a0 [ 171.613610][T10364] ___sys_sendmsg+0x17b/0x1d0 [ 171.613745][T10364] __x64_sys_sendmsg+0xd4/0x160 [ 171.613791][T10364] x64_sys_call+0x17ba/0x3000 [ 171.613826][T10364] do_syscall_64+0xca/0x2b0 [ 171.613880][T10364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.613904][T10364] RIP: 0033:0x7f72da62f749 [ 171.613925][T10364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.613946][T10364] RSP: 002b:00007f72d9097038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.614039][T10364] RAX: ffffffffffffffda RBX: 00007f72da885fa0 RCX: 00007f72da62f749 [ 171.614057][T10364] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000c [ 171.614145][T10364] RBP: 00007f72da6b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 171.614162][T10364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.614178][T10364] R13: 00007f72da886038 R14: 00007f72da885fa0 R15: 00007ffde748ecf8 [ 171.614205][T10364] [ 171.614213][T10364] memory: usage 307200kB, limit 307200kB, failcnt 762 [ 171.923069][T10402] can0: slcan on ttyS3. [ 171.962972][T10364] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 171.971024][T10364] kmem: usage 295520kB, limit 9007199254740988kB, failcnt 0 [ 171.979736][T10364] Memory cgroup stats for /syz1: [ 171.985802][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 172.018528][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 172.048323][T10402] can0 (unregistered): slcan off ttyS3. [ 172.073522][T10408] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2316'. [ 172.084004][T10364] cache 11759616 [ 172.087714][T10364] rss 200704 [ 172.090941][T10364] shmem 11759616 [ 172.094514][T10364] mapped_file 11755520 [ 172.100169][T10364] dirty 0 [ 172.103192][T10364] writeback 0 [ 172.106492][T10364] workingset_refault_anon 109 [ 172.111237][T10364] workingset_refault_file 2301 [ 172.116044][T10364] swap 0 [ 172.118959][T10364] swapcached 0 [ 172.122362][T10364] pgpgin 168454 [ 172.125842][T10364] pgpgout 165534 [ 172.130883][T10364] pgfault 211748 [ 172.131969][T10402] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 172.134492][T10364] pgmajfault 112 [ 172.134504][T10364] inactive_anon 45056 [ 172.134514][T10364] active_anon 11915264 [ 172.134524][T10364] inactive_file 0 [ 172.162223][T10364] active_file 0 [ 172.165718][T10364] unevictable 0 [ 172.169328][T10364] hierarchical_memory_limit 314572800 [ 172.174808][T10364] hierarchical_memsw_limit 9223372036854771712 [ 172.181109][T10364] total_cache 11759616 [ 172.185202][T10364] total_rss 200704 [ 172.190396][T10364] total_shmem 11759616 [ 172.194506][T10364] total_mapped_file 11755520 [ 172.199165][T10364] total_dirty 0 [ 172.202668][T10364] total_writeback 0 [ 172.206580][T10364] total_workingset_refault_anon 109 [ 172.211841][T10364] total_workingset_refault_file 2301 [ 172.218607][T10364] total_swap 0 [ 172.222014][T10364] total_swapcached 0 [ 172.225942][T10364] total_pgpgin 168454 [ 172.230089][T10364] total_pgpgout 165534 [ 172.234187][T10364] total_pgfault 211748 [ 172.238309][T10364] total_pgmajfault 112 [ 172.242449][T10364] total_inactive_anon 45056 [ 172.248416][T10364] total_active_anon 11915264 [ 172.253088][T10364] total_inactive_file 0 [ 172.257347][T10364] total_active_file 0 [ 172.261365][T10364] total_unevictable 0 [ 172.265379][T10364] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.2306,pid=10363,uid=0 [ 172.281611][T10364] Memory cgroup out of memory: Killed process 10363 (syz.1.2306) total-vm:96016kB, anon-rss:1264kB, file-rss:22600kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 172.847753][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 172.847790][ T29] audit: type=1326 audit(1767555321.852:21108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 172.998946][ T29] audit: type=1326 audit(1767555321.892:21109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.024149][ T29] audit: type=1326 audit(1767555321.892:21110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.049333][ T29] audit: type=1326 audit(1767555321.892:21111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.072935][ T29] audit: type=1326 audit(1767555321.912:21112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.097972][ T29] audit: type=1326 audit(1767555321.922:21113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.121730][ T29] audit: type=1326 audit(1767555321.922:21114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.146809][ T29] audit: type=1326 audit(1767555321.922:21115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.363840][ T29] audit: type=1326 audit(1767555322.242:21116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 173.388905][ T29] audit: type=1326 audit(1767555322.242:21117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10427 comm="syz.2.2322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4db789f783 code=0x7ffc0000 [ 173.402070][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 173.420252][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 173.691787][T10454] can0: slcan on ttyS3. [ 173.748364][T10454] can0 (unregistered): slcan off ttyS3. [ 173.756559][T10456] lo speed is unknown, defaulting to 1000 [ 173.763342][T10456] lo speed is unknown, defaulting to 1000 [ 173.768302][T10454] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 173.944869][T10465] __nla_validate_parse: 3 callbacks suppressed [ 173.944887][T10465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2333'. [ 173.961565][T10463] lo speed is unknown, defaulting to 1000 [ 173.962876][T10463] lo speed is unknown, defaulting to 1000 [ 173.968596][T10456] netlink: 488 bytes leftover after parsing attributes in process `syz.4.2331'. [ 174.075530][T10468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 174.321545][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2337'. [ 174.331410][T10476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2337'. [ 174.913593][T10487] program syz.2.2340 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.118108][T10500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2346'. [ 175.608452][T10525] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 176.172434][T10540] program syz.0.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.233024][T10516] syz.4.2353 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 176.248788][T10516] CPU: 1 UID: 0 PID: 10516 Comm: syz.4.2353 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.248900][T10516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.248919][T10516] Call Trace: [ 176.248927][T10516] [ 176.248938][T10516] __dump_stack+0x1d/0x30 [ 176.248973][T10516] dump_stack_lvl+0x95/0xd0 [ 176.249006][T10516] dump_stack+0x15/0x1b [ 176.249033][T10516] dump_header+0x81/0x240 [ 176.249062][T10516] oom_kill_process+0x295/0x350 [ 176.249089][T10516] out_of_memory+0x97b/0xb80 [ 176.249119][T10516] try_charge_memcg+0x610/0xa10 [ 176.249244][T10516] obj_cgroup_charge_pages+0xa6/0x150 [ 176.249417][T10516] __memcg_kmem_charge_page+0x9f/0x170 [ 176.249448][T10516] __alloc_frozen_pages_noprof+0x18f/0x360 [ 176.249633][T10516] alloc_pages_mpol+0xb3/0x260 [ 176.249664][T10516] alloc_pages_noprof+0x90/0x130 [ 176.249694][T10516] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 176.249742][T10516] __kvmalloc_node_noprof+0x492/0x6b0 [ 176.249830][T10516] ? ip_set_alloc+0x24/0x30 [ 176.249947][T10516] ? ip_set_alloc+0x24/0x30 [ 176.249985][T10516] ? __slab_alloc+0x25/0x50 [ 176.250021][T10516] ip_set_alloc+0x24/0x30 [ 176.250116][T10516] hash_netiface_create+0x282/0x740 [ 176.250180][T10516] ? __pfx_hash_netiface_create+0x10/0x10 [ 176.250219][T10516] ip_set_create+0x3cc/0x970 [ 176.250289][T10516] ? __nla_parse+0x40/0x60 [ 176.250325][T10516] nfnetlink_rcv_msg+0x4c6/0x590 [ 176.250385][T10516] netlink_rcv_skb+0x123/0x220 [ 176.250482][T10516] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 176.250521][T10516] nfnetlink_rcv+0x167/0x16c0 [ 176.250545][T10516] ? kmem_cache_free+0xe3/0x3a0 [ 176.250579][T10516] ? __kfree_skb+0x109/0x150 [ 176.250619][T10516] ? nlmon_xmit+0x4f/0x60 [ 176.250644][T10516] ? consume_skb+0x49/0x150 [ 176.250671][T10516] ? nlmon_xmit+0x4f/0x60 [ 176.250694][T10516] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 176.250794][T10516] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 176.250827][T10516] ? __dev_queue_xmit+0x148/0x1ee0 [ 176.250855][T10516] ? ref_tracker_free+0x37d/0x3e0 [ 176.250883][T10516] ? __netlink_deliver_tap+0x4dc/0x500 [ 176.251014][T10516] netlink_unicast+0x5c0/0x690 [ 176.251052][T10516] netlink_sendmsg+0x58b/0x6b0 [ 176.251099][T10516] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.251196][T10516] __sock_sendmsg+0x145/0x180 [ 176.251223][T10516] ____sys_sendmsg+0x31e/0x4a0 [ 176.251357][T10516] ___sys_sendmsg+0x17b/0x1d0 [ 176.251458][T10516] __x64_sys_sendmsg+0xd4/0x160 [ 176.251576][T10516] x64_sys_call+0x17ba/0x3000 [ 176.251610][T10516] do_syscall_64+0xca/0x2b0 [ 176.251657][T10516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.251688][T10516] RIP: 0033:0x7ff556daf749 [ 176.251705][T10516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.251729][T10516] RSP: 002b:00007ff555817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.251754][T10516] RAX: ffffffffffffffda RBX: 00007ff557005fa0 RCX: 00007ff556daf749 [ 176.251776][T10516] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000c [ 176.251793][T10516] RBP: 00007ff556e33f91 R08: 0000000000000000 R09: 0000000000000000 [ 176.251810][T10516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.251827][T10516] R13: 00007ff557006038 R14: 00007ff557005fa0 R15: 00007ffc4248da38 [ 176.251872][T10516] [ 176.251882][T10516] memory: usage 307200kB, limit 307200kB, failcnt 231 [ 176.278515][T10547] FAULT_INJECTION: forcing a failure. [ 176.278515][T10547] name failslab, interval 1, probability 0, space 0, times 0 [ 176.278547][T10547] CPU: 0 UID: 0 PID: 10547 Comm: syz.0.2365 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.278579][T10547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.278661][T10547] Call Trace: [ 176.278669][T10547] [ 176.278679][T10547] __dump_stack+0x1d/0x30 [ 176.278711][T10547] dump_stack_lvl+0x95/0xd0 [ 176.278738][T10547] dump_stack+0x15/0x1b [ 176.278759][T10547] should_fail_ex+0x265/0x280 [ 176.278893][T10547] should_failslab+0x8c/0xb0 [ 176.278933][T10547] kmem_cache_alloc_noprof+0x69/0x4b0 [ 176.278959][T10547] ? getname_flags+0x80/0x3b0 [ 176.278991][T10547] getname_flags+0x80/0x3b0 [ 176.279022][T10547] __se_sys_newlstat+0x4b/0x280 [ 176.279078][T10547] ? mutex_unlock+0x4f/0x90 [ 176.279150][T10547] ? fput+0x8f/0xc0 [ 176.279182][T10547] ? ksys_write+0x192/0x1a0 [ 176.279203][T10547] __x64_sys_newlstat+0x31/0x40 [ 176.279296][T10547] x64_sys_call+0x1f49/0x3000 [ 176.279329][T10547] do_syscall_64+0xca/0x2b0 [ 176.279371][T10547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.279396][T10547] RIP: 0033:0x7fc49900f749 [ 176.279434][T10547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.279457][T10547] RSP: 002b:00007fc497a56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 176.279481][T10547] RAX: ffffffffffffffda RBX: 00007fc499266090 RCX: 00007fc49900f749 [ 176.279498][T10547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.279512][T10547] RBP: 00007fc497a56090 R08: 0000000000000000 R09: 0000000000000000 [ 176.279528][T10547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.279570][T10547] R13: 00007fc499266128 R14: 00007fc499266090 R15: 00007ffc5f549998 [ 176.279595][T10547] [ 176.803313][T10516] memory+swap: usage 346668kB, limit 9007199254740988kB, failcnt 0 [ 176.812805][T10516] kmem: usage 269392kB, limit 9007199254740988kB, failcnt 0 [ 176.820164][T10516] Memory cgroup stats for /syz4: [ 176.820596][T10516] cache 38502400 [ 176.829172][T10516] rss 196608 [ 176.832397][T10516] shmem 38502400 [ 176.835966][T10516] mapped_file 11755520 [ 176.841497][T10516] dirty 0 [ 176.844463][T10516] writeback 0 [ 176.847808][T10516] workingset_refault_anon 1767 [ 176.852631][T10516] workingset_refault_file 918 [ 176.857366][T10516] swap 40415232 [ 176.860855][T10516] swapcached 16384 [ 176.864588][T10516] pgpgin 160340 [ 176.869518][T10516] pgpgout 150888 [ 176.873099][T10516] pgfault 174681 [ 176.876713][T10516] pgmajfault 258 [ 176.880280][T10516] inactive_anon 26353664 [ 176.884553][T10516] active_anon 12361728 [ 176.888703][T10516] inactive_file 0 [ 176.892355][T10516] active_file 0 [ 176.895904][T10516] unevictable 0 [ 176.900967][T10516] hierarchical_memory_limit 314572800 [ 176.906376][T10516] hierarchical_memsw_limit 9223372036854771712 [ 176.912663][T10516] total_cache 38502400 [ 176.916782][T10516] total_rss 196608 [ 176.920526][T10516] total_shmem 38502400 [ 176.924640][T10516] total_mapped_file 11755520 [ 176.930672][T10516] total_dirty 0 [ 176.934156][T10516] total_writeback 0 [ 176.938015][T10516] total_workingset_refault_anon 1767 [ 176.943580][T10516] total_workingset_refault_file 918 [ 176.949021][T10516] total_swap 40415232 [ 176.953032][T10516] total_swapcached 16384 [ 176.958870][T10516] total_pgpgin 160340 [ 176.962893][T10516] total_pgpgout 150888 [ 176.967073][T10516] total_pgfault 174681 [ 176.971197][T10516] total_pgmajfault 258 [ 176.975285][T10516] total_inactive_anon 26353664 [ 176.980110][T10516] total_active_anon 12361728 [ 176.984719][T10516] total_inactive_file 0 [ 176.990306][T10516] total_active_file 0 [ 176.994409][T10516] total_unevictable 0 [ 176.998441][T10516] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2353,pid=10515,uid=0 [ 177.013283][T10516] Memory cgroup out of memory: Killed process 10515 (syz.4.2353) total-vm:96016kB, anon-rss:1264kB, file-rss:22540kB, shmem-rss:11392kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 177.431282][T10577] program syz.0.2375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.979171][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2385'. [ 178.009339][ T29] kauditd_printk_skb: 311 callbacks suppressed [ 178.009356][ T29] audit: type=1326 audit(1767555327.022:21429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.119884][ T29] audit: type=1326 audit(1767555327.022:21430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.121808][T10607] program syz.1.2387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.145212][ T29] audit: type=1326 audit(1767555327.022:21431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.145248][ T29] audit: type=1326 audit(1767555327.022:21432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.145338][ T29] audit: type=1326 audit(1767555327.022:21433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.228399][ T29] audit: type=1326 audit(1767555327.022:21434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.252164][ T29] audit: type=1326 audit(1767555327.022:21435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.277518][ T29] audit: type=1326 audit(1767555327.022:21436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.301179][ T29] audit: type=1326 audit(1767555327.022:21437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.326283][ T29] audit: type=1326 audit(1767555327.022:21438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.1.2385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 178.371292][T10609] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.625044][T10624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2395'. [ 179.395325][T10641] program syz.4.2401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.423118][T10643] can0: slcan on ttyS3. [ 179.508435][T10643] can0 (unregistered): slcan off ttyS3. [ 179.531181][T10643] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.745509][T10666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2407'. [ 180.119331][T10692] can0: slcan on ttyS3. [ 180.196381][T10700] program syz.0.2413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 180.248630][T10701] can0 (unregistered): slcan off ttyS3. [ 180.264002][T10704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 180.279421][T10692] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.344015][ T23] IPVS: starting estimator thread 0... [ 180.436786][T10715] IPVS: using max 1728 ests per chain, 86400 per kthread [ 180.463783][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2419'. [ 180.532432][T10735] lo speed is unknown, defaulting to 1000 [ 180.541849][T10735] lo speed is unknown, defaulting to 1000 [ 180.766882][T10745] lo speed is unknown, defaulting to 1000 [ 180.773506][T10745] lo speed is unknown, defaulting to 1000 [ 181.718612][T10752] can0: slcan on ttyS3. [ 181.837942][T10738] netlink: 488 bytes leftover after parsing attributes in process `syz.4.2422'. [ 181.922905][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 182.068476][T10754] can0 (unregistered): slcan off ttyS3. [ 182.328683][T10779] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 182.348733][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 182.358196][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2433'. [ 182.626819][T10797] can0: slcan on ttyS3. [ 182.676836][T10797] can0 (unregistered): slcan off ttyS3. [ 182.733100][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2441'. [ 182.837708][T10818] lo speed is unknown, defaulting to 1000 [ 182.862091][T10818] lo speed is unknown, defaulting to 1000 [ 183.004918][T10832] can0: slcan on ttyS3. [ 183.068336][T10832] can0 (unregistered): slcan off ttyS3. [ 183.078009][T10847] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.088723][ T29] kauditd_printk_skb: 341 callbacks suppressed [ 183.088741][ T29] audit: type=1326 audit(1767555332.092:21780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 183.119958][ T29] audit: type=1326 audit(1767555332.092:21781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 183.143873][ T29] audit: type=1326 audit(1767555332.092:21782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 183.169246][ T29] audit: type=1326 audit(1767555332.092:21783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 183.196435][ T29] audit: type=1326 audit(1767555332.112:21784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc49900f783 code=0x7ffc0000 [ 183.221489][ T29] audit: type=1400 audit(1767555332.112:21785): avc: denied { map } for pid=10844 comm="syz.0.2447" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 183.245970][ T29] audit: type=1400 audit(1767555332.112:21786): avc: denied { read write } for pid=10844 comm="syz.0.2447" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 183.272249][ T29] audit: type=1326 audit(1767555332.112:21787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc49900f783 code=0x7ffc0000 [ 183.296514][ T29] audit: type=1326 audit(1767555332.122:21788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 183.321764][ T29] audit: type=1326 audit(1767555332.122:21789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10844 comm="syz.0.2447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc49900f749 code=0x7ffc0000 [ 183.820978][T10877] can0: slcan on ttyS3. [ 183.876846][T10877] can0 (unregistered): slcan off ttyS3. [ 183.896999][T10877] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 183.996812][ T3670] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 184.159494][T10897] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 184.469594][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2468'. [ 184.591081][T10937] can0: slcan on ttyS3. [ 184.606351][ T9] IPVS: starting estimator thread 0... [ 184.626864][T10937] can0 (unregistered): slcan off ttyS3. [ 184.640418][T10937] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.698468][T10940] IPVS: using max 2208 ests per chain, 110400 per kthread [ 184.880457][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2486'. [ 184.901538][T10972] can0: slcan on ttyS3. [ 184.962255][T10979] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 184.976342][T10972] can0 (unregistered): slcan off ttyS3. [ 185.203852][T11011] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 185.241019][T11013] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2498'. [ 185.367281][T11030] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 185.498561][T11044] can0: slcan on ttyS3. [ 185.555517][T11045] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 185.566356][T11044] can0 (unregistered): slcan off ttyS3. [ 185.724107][T11051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2506'. [ 186.011593][T11057] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2509'. [ 186.106331][T11063] net_ratelimit: 24 callbacks suppressed [ 186.106359][T11063] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 36:ed:9c:5e:40:48 [ 186.270882][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2517'. [ 186.320369][T11083] can0: slcan on ttyS3. [ 186.388148][T11083] can0 (unregistered): slcan off ttyS3. [ 186.411515][T11089] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 186.513665][T11095] lo speed is unknown, defaulting to 1000 [ 186.521762][T11095] lo speed is unknown, defaulting to 1000 [ 186.628972][T11113] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 186.670677][T11111] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 36:ed:9c:5e:40:48 [ 186.931780][T11141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2532'. [ 186.955454][T11143] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 187.269723][T11157] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 36:ed:9c:5e:40:48 [ 187.354724][T11166] FAULT_INJECTION: forcing a failure. [ 187.354724][T11166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.369430][T11166] CPU: 1 UID: 0 PID: 11166 Comm: syz.4.2542 Not tainted syzkaller #0 PREEMPT(voluntary) [ 187.369454][T11166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 187.369466][T11166] Call Trace: [ 187.369471][T11166] [ 187.369479][T11166] __dump_stack+0x1d/0x30 [ 187.369561][T11166] dump_stack_lvl+0x95/0xd0 [ 187.369580][T11166] dump_stack+0x15/0x1b [ 187.369597][T11166] should_fail_ex+0x265/0x280 [ 187.369749][T11166] should_fail+0xb/0x20 [ 187.369770][T11166] should_fail_usercopy+0x1a/0x20 [ 187.369814][T11166] _copy_from_user+0x1c/0xb0 [ 187.369837][T11166] io_submit_one+0x52/0x1210 [ 187.369932][T11166] __se_sys_io_submit+0xfb/0x280 [ 187.369965][T11166] __x64_sys_io_submit+0x43/0x50 [ 187.369987][T11166] x64_sys_call+0x2e40/0x3000 [ 187.370008][T11166] do_syscall_64+0xca/0x2b0 [ 187.370164][T11166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.370184][T11166] RIP: 0033:0x7ff556daf749 [ 187.370203][T11166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.370219][T11166] RSP: 002b:00007ff555817038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 187.370292][T11166] RAX: ffffffffffffffda RBX: 00007ff557005fa0 RCX: 00007ff556daf749 [ 187.370304][T11166] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 00007ff557b40000 [ 187.370315][T11166] RBP: 00007ff555817090 R08: 0000000000000000 R09: 0000000000000000 [ 187.370326][T11166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.370412][T11166] R13: 00007ff557006038 R14: 00007ff557005fa0 R15: 00007ffc4248da38 [ 187.370429][T11166] [ 187.561940][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 187.729368][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2549'. [ 187.936101][T11203] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2554'. [ 187.993965][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2554'. [ 188.009011][T11207] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 188.103813][ T29] kauditd_printk_skb: 1167 callbacks suppressed [ 188.103828][ T29] audit: type=1400 audit(1767555337.112:22957): avc: denied { create } for pid=11215 comm="syz.0.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.153918][ T29] audit: type=1400 audit(1767555337.152:22958): avc: denied { write } for pid=11215 comm="syz.0.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 188.185544][T11219] vlan3: entered allmulticast mode [ 188.190837][T11219] bridge_slave_0: entered allmulticast mode [ 188.205259][ T29] audit: type=1400 audit(1767555337.212:22959): avc: denied { mounton } for pid=11220 comm="syz.2.2560" path="/472/file0" dev="tmpfs" ino=2460 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 188.252504][ T29] audit: type=1400 audit(1767555337.262:22960): avc: denied { bind } for pid=11222 comm="syz.2.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.276096][ T29] audit: type=1400 audit(1767555337.292:22961): avc: denied { write } for pid=11222 comm="syz.2.2561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 188.346546][ T29] audit: type=1326 audit(1767555337.352:22962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 188.375111][ T29] audit: type=1326 audit(1767555337.382:22963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11227 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 188.399096][T11229] lo speed is unknown, defaulting to 1000 [ 188.399861][T11229] lo speed is unknown, defaulting to 1000 [ 188.411851][ T29] audit: type=1400 audit(1767555337.382:22964): avc: denied { write } for pid=11218 comm="syz.0.2559" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.436483][ T29] audit: type=1400 audit(1767555337.382:22965): avc: denied { open } for pid=11218 comm="syz.0.2559" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.468498][T11228] FAULT_INJECTION: forcing a failure. [ 188.468498][T11228] name failslab, interval 1, probability 0, space 0, times 0 [ 188.481310][T11228] CPU: 1 UID: 0 PID: 11228 Comm: syz.2.2563 Not tainted syzkaller #0 PREEMPT(voluntary) [ 188.481343][T11228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 188.481360][T11228] Call Trace: [ 188.481369][T11228] [ 188.481378][T11228] __dump_stack+0x1d/0x30 [ 188.481485][T11228] dump_stack_lvl+0x95/0xd0 [ 188.481510][T11228] dump_stack+0x15/0x1b [ 188.481549][T11228] should_fail_ex+0x265/0x280 [ 188.481575][T11228] should_failslab+0x8c/0xb0 [ 188.481599][T11228] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 188.481627][T11228] ? sidtab_sid2str_get+0xa0/0x130 [ 188.481701][T11228] kmemdup_noprof+0x2b/0x70 [ 188.481738][T11228] sidtab_sid2str_get+0xa0/0x130 [ 188.481816][T11228] security_sid_to_context_core+0x1eb/0x2e0 [ 188.481854][T11228] security_sid_to_context+0x27/0x40 [ 188.481885][T11228] selinux_lsmprop_to_secctx+0x67/0xf0 [ 188.481920][T11228] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 188.481954][T11228] audit_log_subj_ctx+0xa4/0x3e0 [ 188.481978][T11228] ? skb_put+0xa9/0xf0 [ 188.482005][T11228] audit_log_task_context+0x48/0x70 [ 188.482111][T11228] audit_log_task+0xf4/0x250 [ 188.482190][T11228] audit_seccomp+0x61/0x100 [ 188.482235][T11228] ? __seccomp_filter+0x832/0x1260 [ 188.482266][T11228] __seccomp_filter+0x843/0x1260 [ 188.482297][T11228] ? getname_flags+0x2be/0x3b0 [ 188.482371][T11228] ? __traceiter_kmem_cache_free+0x38/0x60 [ 188.482406][T11228] ? kmem_cache_free+0xe3/0x3a0 [ 188.482441][T11228] __secure_computing+0x82/0x150 [ 188.482520][T11228] syscall_trace_enter+0xcf/0x1e0 [ 188.482550][T11228] do_syscall_64+0xa4/0x2b0 [ 188.482620][T11228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.482680][T11228] RIP: 0033:0x7f4db789e15c [ 188.482698][T11228] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 188.482720][T11228] RSP: 002b:00007f4db6307030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 188.482742][T11228] RAX: ffffffffffffffda RBX: 00007f4db7af5fa0 RCX: 00007f4db789e15c [ 188.482757][T11228] RDX: 000000000000000f RSI: 00007f4db63070a0 RDI: 0000000000000006 [ 188.482770][T11228] RBP: 00007f4db6307090 R08: 0000000000000000 R09: 0000000000000000 [ 188.482784][T11228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.482823][T11228] R13: 00007f4db7af6038 R14: 00007f4db7af5fa0 R15: 00007fff2583ea78 [ 188.482845][T11228] [ 188.482856][T11228] audit: error in audit_log_subj_ctx [ 188.759693][T11232] netlink: 'syz.0.2564': attribute type 30 has an invalid length. [ 189.075017][T11257] program syz.2.2573 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.156342][T11264] FAULT_INJECTION: forcing a failure. [ 189.156342][T11264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.171063][T11264] CPU: 0 UID: 0 PID: 11264 Comm: syz.2.2576 Not tainted syzkaller #0 PREEMPT(voluntary) [ 189.171215][T11264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 189.171230][T11264] Call Trace: [ 189.171237][T11264] [ 189.171245][T11264] __dump_stack+0x1d/0x30 [ 189.171269][T11264] dump_stack_lvl+0x95/0xd0 [ 189.171291][T11264] dump_stack+0x15/0x1b [ 189.171311][T11264] should_fail_ex+0x265/0x280 [ 189.171364][T11264] should_fail+0xb/0x20 [ 189.171386][T11264] should_fail_usercopy+0x1a/0x20 [ 189.171416][T11264] _copy_from_iter+0xcf/0xe70 [ 189.171489][T11264] ? alloc_pages_mpol+0x217/0x260 [ 189.171584][T11264] ip_generic_getfrag+0x90/0x1b0 [ 189.171686][T11264] __ip_append_data+0x1351/0x2440 [ 189.171722][T11264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 189.171766][T11264] ip_append_data+0xd6/0x130 [ 189.171793][T11264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 189.171904][T11264] udp_sendmsg+0x36e/0x13c0 [ 189.171939][T11264] ? __rcu_read_unlock+0x4f/0x70 [ 189.171964][T11264] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 189.171999][T11264] ? avc_has_perm+0xf7/0x180 [ 189.172081][T11264] ? __pfx_udp_sendmsg+0x10/0x10 [ 189.172109][T11264] inet_sendmsg+0xac/0xd0 [ 189.172137][T11264] __sock_sendmsg+0x102/0x180 [ 189.172181][T11264] __sys_sendto+0x268/0x330 [ 189.172221][T11264] __x64_sys_sendto+0x76/0x90 [ 189.172245][T11264] x64_sys_call+0x29a7/0x3000 [ 189.172274][T11264] do_syscall_64+0xca/0x2b0 [ 189.172395][T11264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.172431][T11264] RIP: 0033:0x7f4db789f749 [ 189.172448][T11264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.172470][T11264] RSP: 002b:00007f4db6307038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 189.172493][T11264] RAX: ffffffffffffffda RBX: 00007f4db7af5fa0 RCX: 00007f4db789f749 [ 189.172586][T11264] RDX: 000000000000ffe3 RSI: 00002000000000c0 RDI: 0000000000000006 [ 189.172613][T11264] RBP: 00007f4db6307090 R08: 0000000000000000 R09: 0000000000000000 [ 189.172629][T11264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.172644][T11264] R13: 00007f4db7af6038 R14: 00007f4db7af5fa0 R15: 00007fff2583ea78 [ 189.172655][T11262] can0: slcan on ttyS3. [ 189.172699][T11264] [ 189.429653][T11274] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 189.447439][T11266] can0 (unregistered): slcan off ttyS3. [ 189.635099][T11294] program syz.1.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.998121][T11308] FAULT_INJECTION: forcing a failure. [ 189.998121][T11308] name failslab, interval 1, probability 0, space 0, times 0 [ 190.012672][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.4.2590 Not tainted syzkaller #0 PREEMPT(voluntary) [ 190.012706][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 190.012726][T11308] Call Trace: [ 190.012732][T11308] [ 190.012740][T11308] __dump_stack+0x1d/0x30 [ 190.012847][T11308] dump_stack_lvl+0x95/0xd0 [ 190.012875][T11308] dump_stack+0x15/0x1b [ 190.012901][T11308] should_fail_ex+0x265/0x280 [ 190.012934][T11308] should_failslab+0x8c/0xb0 [ 190.012963][T11308] __kmalloc_cache_noprof+0x65/0x4c0 [ 190.012992][T11308] ? resv_map_alloc+0x32/0x190 [ 190.013020][T11308] ? vfs_write+0x7e8/0x960 [ 190.013114][T11308] resv_map_alloc+0x32/0x190 [ 190.013146][T11308] hugetlbfs_get_inode+0x67/0x370 [ 190.013191][T11308] ? mutex_unlock+0x4f/0x90 [ 190.013222][T11308] hugetlb_file_setup+0x192/0x3d0 [ 190.013260][T11308] ksys_mmap_pgoff+0x157/0x310 [ 190.013296][T11308] x64_sys_call+0x16bb/0x3000 [ 190.013366][T11308] do_syscall_64+0xca/0x2b0 [ 190.013470][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.013494][T11308] RIP: 0033:0x7ff556daf749 [ 190.013511][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.013580][T11308] RSP: 002b:00007ff555817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 190.013606][T11308] RAX: ffffffffffffffda RBX: 00007ff557005fa0 RCX: 00007ff556daf749 [ 190.013623][T11308] RDX: 000000000000000b RSI: 0000000000c00000 RDI: 0000200000400000 [ 190.013663][T11308] RBP: 00007ff555817090 R08: ffffffffffffffff R09: 0000000000000000 [ 190.013680][T11308] R10: 0000000000059032 R11: 0000000000000246 R12: 0000000000000001 [ 190.013696][T11308] R13: 00007ff557006038 R14: 00007ff557005fa0 R15: 00007ffc4248da38 [ 190.013715][T11308] [ 190.249981][T11314] can0: slcan on ttyS3. [ 190.309599][T11314] can0 (unregistered): slcan off ttyS3. [ 190.454481][T11335] program syz.4.2597 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.521535][T11342] __nla_validate_parse: 4 callbacks suppressed [ 190.521551][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2600'. [ 190.650561][T11350] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 190.700814][T11352] lo speed is unknown, defaulting to 1000 [ 190.733990][T11352] lo speed is unknown, defaulting to 1000 [ 190.839304][T11365] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2604'. [ 190.894109][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 190.905897][T11371] can0: slcan on ttyS3. [ 190.973286][T11371] can0 (unregistered): slcan off ttyS3. [ 191.218314][T11401] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2614'. [ 191.262853][T11406] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2616'. [ 191.286619][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2616'. [ 191.343436][T11412] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2619'. [ 191.359090][T11410] can0: slcan on ttyS3. [ 191.420876][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'. [ 191.469931][T11417] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 191.500136][T11410] can0 (unregistered): slcan off ttyS3. [ 191.629906][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2624'. [ 191.853724][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2628'. [ 191.980678][T11460] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 191.991172][T11461] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2629'. [ 192.284895][ T23] IPVS: starting estimator thread 0... [ 192.386849][T11493] IPVS: using max 1776 ests per chain, 88800 per kthread [ 192.433212][T11507] netlink: 'syz.1.2645': attribute type 30 has an invalid length. [ 192.956741][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 193.126271][ T29] kauditd_printk_skb: 1136 callbacks suppressed [ 193.126290][ T29] audit: type=1326 audit(1767555342.132:24102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.159117][ T29] audit: type=1326 audit(1767555342.132:24103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.182752][ T29] audit: type=1326 audit(1767555342.132:24104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.208066][ T29] audit: type=1326 audit(1767555342.132:24105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.231823][ T29] audit: type=1326 audit(1767555342.132:24106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.256832][ T29] audit: type=1326 audit(1767555342.132:24107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.281127][ T29] audit: type=1326 audit(1767555342.132:24108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.305299][ T29] audit: type=1326 audit(1767555342.132:24109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.330571][ T29] audit: type=1326 audit(1767555342.132:24110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.354265][ T29] audit: type=1326 audit(1767555342.132:24111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.2.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 193.406797][T11540] gretap1: entered promiscuous mode [ 193.550684][ T10] IPVS: starting estimator thread 0... [ 193.617023][T11556] program syz.4.2665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.659292][T11552] IPVS: using max 2064 ests per chain, 103200 per kthread [ 194.018659][T11582] can0: slcan on ttyS3. [ 194.082444][T11591] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 194.107413][T11589] can0 (unregistered): slcan off ttyS3. [ 194.157185][T11600] program syz.1.2681 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.385959][T11620] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 194.560836][T11596] lo speed is unknown, defaulting to 1000 [ 194.568182][T11596] lo speed is unknown, defaulting to 1000 [ 194.670156][T11630] netlink: 'syz.2.2685': attribute type 30 has an invalid length. [ 194.785209][T11596] chnl_net:caif_netlink_parms(): no params data found [ 194.836523][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.972792][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.052964][T11658] can0: slcan on ttyS3. [ 195.078959][T11596] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.086122][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.127379][T11662] can0 (unregistered): slcan off ttyS3. [ 195.132872][T11596] bridge_slave_0: entered allmulticast mode [ 195.173598][T11596] bridge_slave_0: entered promiscuous mode [ 195.229972][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.258273][T11596] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.265416][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.289553][T11596] bridge_slave_1: entered allmulticast mode [ 195.298324][T11596] bridge_slave_1: entered promiscuous mode [ 195.312435][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.468522][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.488922][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.520846][T11596] team0: Port device team_slave_0 added [ 195.528438][T11596] team0: Port device team_slave_1 added [ 195.538161][T11682] __nla_validate_parse: 16 callbacks suppressed [ 195.538178][T11682] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2700'. [ 195.570419][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.578858][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.604894][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.620763][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.627834][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.655122][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.732977][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 195.750035][ T12] bond0 (unregistering): Released all slaves [ 195.765179][T11596] hsr_slave_0: entered promiscuous mode [ 195.771264][T11596] hsr_slave_1: entered promiscuous mode [ 195.778746][T11596] debugfs: 'hsr0' already exists in 'hsr' [ 195.784490][T11596] Cannot create hsr debugfs directory [ 195.794488][T11687] can0: slcan on ttyS3. [ 195.808512][ T10] IPVS: starting estimator thread 0... [ 195.827696][ T12] hsr_slave_0: left promiscuous mode [ 195.833470][ T12] hsr_slave_1: left promiscuous mode [ 195.843702][ T12] veth1_macvtap: left promiscuous mode [ 195.852780][ T12] veth0_macvtap: left promiscuous mode [ 195.858836][T11690] can0 (unregistered): slcan off ttyS3. [ 195.908300][T11693] IPVS: using max 2208 ests per chain, 110400 per kthread [ 196.058652][T11704] loop0: detected capacity change from 0 to 1024 [ 196.078274][T11704] EXT4-fs: inline encryption not supported [ 196.170287][T11704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.315601][T11728] can0: slcan on ttyS3. [ 196.351011][T11726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 196.380140][T11704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11704 comm=wÞ£ÿ [ 196.397970][T11728] can0 (unregistered): slcan off ttyS3. [ 196.432062][T11733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2713'. [ 196.518488][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 196.566514][T11596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 196.571387][T11742] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 196.587995][T11596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 196.597920][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.647861][T11596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 196.723964][T11596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 196.755491][T11767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2718'. [ 196.783219][ T12] IPVS: stop unused estimator thread 0... [ 196.851789][T11596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.881386][T11596] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.917112][ T1910] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.924287][ T1910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.946302][T11596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.958098][T11596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.972042][ T1910] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.979217][ T1910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.050738][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.132604][T11596] veth0_vlan: entered promiscuous mode [ 197.141224][T11596] veth1_vlan: entered promiscuous mode [ 197.202275][T11596] veth0_macvtap: entered promiscuous mode [ 197.222211][T11596] veth1_macvtap: entered promiscuous mode [ 197.255786][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.280168][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.371462][T11793] can0: slcan on ttyS3. [ 197.477749][T11792] can0 (unregistered): slcan off ttyS3. [ 197.554245][ T358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.573472][ T358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.582777][ T358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.593228][ T358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.616722][T11799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2726'. [ 197.640859][T11805] program syz.3.2677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 197.703624][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2728'. [ 197.992104][T11822] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 198.037916][T11825] can0: slcan on ttyS3. [ 198.176872][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 198.176888][ T29] audit: type=1400 audit(1767555347.172:24685): avc: denied { read open } for pid=11830 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.210179][ T29] audit: type=1400 audit(1767555347.172:24686): avc: denied { getattr } for pid=11830 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.235973][ T29] audit: type=1400 audit(1767555347.182:24687): avc: denied { ioctl } for pid=11821 comm="syz.2.2735" path="socket:[31964]" dev="sockfs" ino=31964 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 198.276791][T11824] can0 (unregistered): slcan off ttyS3. [ 198.344255][ T29] audit: type=1400 audit(1767555347.302:24688): avc: denied { map_read map_write } for pid=11835 comm="syz.4.2737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 198.365338][ T29] audit: type=1326 audit(1767555347.312:24689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72da62f749 code=0x7ffc0000 [ 198.391356][ T29] audit: type=1326 audit(1767555347.312:24690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f72da62f783 code=0x7ffc0000 [ 198.414926][ T29] audit: type=1326 audit(1767555347.312:24691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f72da62f807 code=0x7ffc0000 [ 198.440859][ T29] audit: type=1326 audit(1767555347.312:24692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f72da5e6bdd code=0x7ffc0000 [ 198.464469][ T29] audit: type=1326 audit(1767555347.312:24693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f72da663e89 code=0x7ffc0000 [ 198.489685][ T29] audit: type=1326 audit(1767555347.312:24694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11811 comm="syz.1.2730" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f72da5e6c47 code=0x7ffc0000 [ 198.894492][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2740'. [ 199.128113][T11879] program syz.2.2745 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.152511][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2744'. [ 199.266570][ T3428] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 199.274449][ T3428] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 199.285847][ T3428] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 199.296504][ T3428] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 199.509773][T11892] fido_id[11892]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.518552][T11897] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 199.541667][T11898] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 199.835451][T11905] lo speed is unknown, defaulting to 1000 [ 199.843655][T11905] lo speed is unknown, defaulting to 1000 [ 200.385685][T11928] program syz.0.2757 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 200.543515][T11934] netlink: 'syz.3.2759': attribute type 30 has an invalid length. [ 200.584964][ T52] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.605672][ T52] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.687479][ T52] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.696253][ T52] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 200.710749][T11942] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 200.758151][T11945] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 200.937629][T11953] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 201.640785][T11957] __nla_validate_parse: 3 callbacks suppressed [ 201.640805][T11957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2767'. [ 201.657056][T11957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2767'. [ 201.670328][T11967] program syz.3.2768 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.708058][T11921] syz.4.2755 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 201.722447][T11921] CPU: 1 UID: 0 PID: 11921 Comm: syz.4.2755 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.722475][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.722488][T11921] Call Trace: [ 201.722496][T11921] [ 201.722508][T11921] __dump_stack+0x1d/0x30 [ 201.722671][T11921] dump_stack_lvl+0x95/0xd0 [ 201.722706][T11921] dump_stack+0x15/0x1b [ 201.722734][T11921] dump_header+0x81/0x240 [ 201.722841][T11921] oom_kill_process+0x295/0x350 [ 201.722871][T11921] out_of_memory+0x97b/0xb80 [ 201.722948][T11921] try_charge_memcg+0x610/0xa10 [ 201.722991][T11921] obj_cgroup_charge_pages+0xa6/0x150 [ 201.723022][T11921] __memcg_kmem_charge_page+0x9f/0x170 [ 201.723137][T11921] __alloc_frozen_pages_noprof+0x18f/0x360 [ 201.723178][T11921] alloc_pages_mpol+0xb3/0x260 [ 201.723264][T11921] alloc_pages_noprof+0x90/0x130 [ 201.723308][T11921] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 201.723417][T11921] __kvmalloc_node_noprof+0x492/0x6b0 [ 201.723444][T11921] ? ip_set_alloc+0x24/0x30 [ 201.723482][T11921] ? ip_set_alloc+0x24/0x30 [ 201.723621][T11921] ip_set_alloc+0x24/0x30 [ 201.723657][T11921] hash_netiface_create+0x282/0x740 [ 201.723692][T11921] ? __pfx_hash_netiface_create+0x10/0x10 [ 201.723732][T11921] ip_set_create+0x3cc/0x970 [ 201.723839][T11921] ? __nla_parse+0x40/0x60 [ 201.723864][T11921] nfnetlink_rcv_msg+0x4c6/0x590 [ 201.723920][T11921] netlink_rcv_skb+0x123/0x220 [ 201.724000][T11921] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 201.724042][T11921] nfnetlink_rcv+0x167/0x16c0 [ 201.724072][T11921] ? kmem_cache_free+0xe3/0x3a0 [ 201.724105][T11921] ? __kfree_skb+0x109/0x150 [ 201.724177][T11921] ? nlmon_xmit+0x4f/0x60 [ 201.724201][T11921] ? consume_skb+0x49/0x150 [ 201.724232][T11921] ? nlmon_xmit+0x4f/0x60 [ 201.724255][T11921] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 201.724300][T11921] ? __dev_queue_xmit+0x13a6/0x1ee0 [ 201.724337][T11921] ? __dev_queue_xmit+0x148/0x1ee0 [ 201.724374][T11921] ? ref_tracker_free+0x37d/0x3e0 [ 201.724446][T11921] ? __netlink_deliver_tap+0x4dc/0x500 [ 201.724490][T11921] netlink_unicast+0x5c0/0x690 [ 201.724519][T11921] netlink_sendmsg+0x58b/0x6b0 [ 201.724556][T11921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.724639][T11921] __sock_sendmsg+0x145/0x180 [ 201.724659][T11921] ____sys_sendmsg+0x31e/0x4a0 [ 201.724787][T11921] ___sys_sendmsg+0x17b/0x1d0 [ 201.724911][T11921] __x64_sys_sendmsg+0xd4/0x160 [ 201.724964][T11921] x64_sys_call+0x17ba/0x3000 [ 201.724997][T11921] do_syscall_64+0xca/0x2b0 [ 201.725032][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.725063][T11921] RIP: 0033:0x7ff556daf749 [ 201.725081][T11921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.725101][T11921] RSP: 002b:00007ff555817038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.725159][T11921] RAX: ffffffffffffffda RBX: 00007ff557005fa0 RCX: 00007ff556daf749 [ 201.725177][T11921] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 201.725248][T11921] RBP: 00007ff556e33f91 R08: 0000000000000000 R09: 0000000000000000 [ 201.725312][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.725324][T11921] R13: 00007ff557006038 R14: 00007ff557005fa0 R15: 00007ffc4248da38 [ 201.725349][T11921] [ 201.725359][T11921] memory: usage 307200kB, limit 307200kB, failcnt 541 [ 202.074177][T11921] memory+swap: usage 372996kB, limit 9007199254740988kB, failcnt 0 [ 202.083116][T11921] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 202.090679][T11921] Memory cgroup stats for /syz4: [ 202.091217][T11921] cache 0 [ 202.100007][T11921] rss 0 [ 202.102814][T11921] shmem 0 [ 202.105779][T11921] mapped_file 0 [ 202.110076][T11921] dirty 0 [ 202.113035][T11921] writeback 0 [ 202.116347][T11921] workingset_refault_anon 1798 [ 202.121165][T11921] workingset_refault_file 1593 [ 202.125957][T11921] swap 67375104 [ 202.130163][T11921] swapcached 4096 [ 202.133823][T11921] pgpgin 187707 [ 202.138020][T11921] pgpgout 187706 [ 202.141642][T11921] pgfault 207480 [ 202.145350][T11921] pgmajfault 276 [ 202.148987][T11921] inactive_anon 0 [ 202.152638][T11921] active_anon 4096 [ 202.153774][T11975] lo speed is unknown, defaulting to 1000 [ 202.156382][T11921] inactive_file 0 [ 202.156393][T11921] active_file 0 [ 202.163872][T11975] lo speed is unknown, defaulting to 1000 [ 202.166532][T11921] unevictable 0 [ 202.179992][T11921] hierarchical_memory_limit 314572800 [ 202.185408][T11921] hierarchical_memsw_limit 9223372036854771712 [ 202.192334][T11921] total_cache 0 [ 202.195816][T11921] total_rss 0 [ 202.199885][T11921] total_shmem 0 [ 202.203395][T11921] total_mapped_file 0 [ 202.207518][T11921] total_dirty 0 [ 202.210998][T11921] total_writeback 0 [ 202.214826][T11921] total_workingset_refault_anon 1798 [ 202.220837][T11921] total_workingset_refault_file 1593 [ 202.226149][T11921] total_swap 67375104 [ 202.230943][T11921] total_swapcached 4096 [ 202.235336][T11921] total_pgpgin 187707 [ 202.239551][T11921] total_pgpgout 187706 [ 202.243979][T11921] total_pgfault 207480 [ 202.248823][T11921] total_pgmajfault 276 [ 202.252906][T11921] total_inactive_anon 0 [ 202.257873][T11921] total_active_anon 4096 [ 202.258247][T11980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2773'. [ 202.262138][T11921] total_inactive_file 0 [ 202.262248][T11921] total_active_file 0 [ 202.278282][T11981] netlink: 488 bytes leftover after parsing attributes in process `syz.0.2772'. [ 202.281257][T11921] total_unevictable 0 [ 202.293336][T11921] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.2755,pid=11920,uid=0 [ 202.308947][T11921] Memory cgroup out of memory: Killed process 11920 (syz.4.2755) total-vm:96016kB, anon-rss:1264kB, file-rss:22608kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 202.367642][T11921] syz.4.2755 (11921) used greatest stack depth: 6008 bytes left [ 202.403838][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 202.487031][T11983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2775'. [ 202.599280][T12005] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2782'. [ 202.819534][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2788'. [ 203.039670][T12028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2794'. [ 203.050326][T12028] netlink: 'syz.1.2794': attribute type 30 has an invalid length. [ 203.067942][T12020] netlink: 'syz.2.2784': attribute type 14 has an invalid length. [ 203.095236][ T52] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.119651][T12030] FAULT_INJECTION: forcing a failure. [ 203.119651][T12030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.132806][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.4.2795 Not tainted syzkaller #0 PREEMPT(voluntary) [ 203.132841][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.132858][T12030] Call Trace: [ 203.132865][T12030] [ 203.132872][T12030] __dump_stack+0x1d/0x30 [ 203.132935][T12030] dump_stack_lvl+0x95/0xd0 [ 203.132961][T12030] dump_stack+0x15/0x1b [ 203.132987][T12030] should_fail_ex+0x265/0x280 [ 203.133017][T12030] should_fail+0xb/0x20 [ 203.133057][T12030] should_fail_usercopy+0x1a/0x20 [ 203.133089][T12030] strncpy_from_user+0x27/0x260 [ 203.133133][T12030] getname_flags+0xae/0x3b0 [ 203.133166][T12030] do_sys_openat2+0x60/0x150 [ 203.133248][T12030] __x64_sys_openat+0xf2/0x120 [ 203.133286][T12030] x64_sys_call+0x2b07/0x3000 [ 203.133320][T12030] do_syscall_64+0xca/0x2b0 [ 203.133424][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.133453][T12030] RIP: 0033:0x7ff556daf749 [ 203.133473][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.133497][T12030] RSP: 002b:00007ff555817038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.133523][T12030] RAX: ffffffffffffffda RBX: 00007ff557005fa0 RCX: 00007ff556daf749 [ 203.133540][T12030] RDX: 0000000000002c41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 203.133580][T12030] RBP: 00007ff555817090 R08: 0000000000000000 R09: 0000000000000000 [ 203.133597][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.133613][T12030] R13: 00007ff557006038 R14: 00007ff557005fa0 R15: 00007ffc4248da38 [ 203.133650][T12030] [ 203.135268][ T52] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.294547][ T29] kauditd_printk_skb: 567 callbacks suppressed [ 203.294704][ T29] audit: type=1400 audit(1767555352.262:25262): avc: denied { unmount } for pid=3325 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 203.304183][ T52] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.304230][ T52] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.373527][ T29] audit: type=1400 audit(1767555352.382:25263): avc: denied { create } for pid=12033 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.402772][T12035] 9p: Bad value for 'version' [ 203.415081][ T29] audit: type=1400 audit(1767555352.412:25264): avc: denied { setopt } for pid=12033 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.436308][ T29] audit: type=1400 audit(1767555352.412:25265): avc: denied { write } for pid=12033 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.458343][ T29] audit: type=1400 audit(1767555352.412:25266): avc: denied { nlmsg_write } for pid=12033 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 203.479291][ T29] audit: type=1400 audit(1767555352.412:25267): avc: denied { write } for pid=12033 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.501731][ T29] audit: type=1400 audit(1767555352.412:25268): avc: denied { connect } for pid=12033 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 203.521597][ T29] audit: type=1400 audit(1767555352.412:25269): avc: denied { name_connect } for pid=12033 comm="syz.4.2797" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 203.545400][ T29] audit: type=1400 audit(1767555352.412:25270): avc: denied { read } for pid=12033 comm="syz.4.2797" dev="nsfs" ino=4026532645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 203.568202][ T29] audit: type=1400 audit(1767555352.412:25271): avc: denied { open } for pid=12033 comm="syz.4.2797" path="net:[4026532645]" dev="nsfs" ino=4026532645 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 203.598893][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2798'. [ 203.681301][T12047] FAULT_INJECTION: forcing a failure. [ 203.681301][T12047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.696150][T12047] CPU: 0 UID: 0 PID: 12047 Comm: syz.3.2802 Not tainted syzkaller #0 PREEMPT(voluntary) [ 203.696185][T12047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.696320][T12047] Call Trace: [ 203.696328][T12047] [ 203.696337][T12047] __dump_stack+0x1d/0x30 [ 203.696364][T12047] dump_stack_lvl+0x95/0xd0 [ 203.696435][T12047] dump_stack+0x15/0x1b [ 203.696491][T12047] should_fail_ex+0x265/0x280 [ 203.696519][T12047] should_fail+0xb/0x20 [ 203.696542][T12047] should_fail_usercopy+0x1a/0x20 [ 203.696652][T12047] _copy_from_user+0x1c/0xb0 [ 203.696788][T12047] ___sys_sendmsg+0xc1/0x1d0 [ 203.696839][T12047] __x64_sys_sendmsg+0xd4/0x160 [ 203.696873][T12047] x64_sys_call+0x17ba/0x3000 [ 203.696960][T12047] do_syscall_64+0xca/0x2b0 [ 203.697059][T12047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.697088][T12047] RIP: 0033:0x7fe5f4a8f749 [ 203.697107][T12047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.697131][T12047] RSP: 002b:00007fe5f34ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.697156][T12047] RAX: ffffffffffffffda RBX: 00007fe5f4ce5fa0 RCX: 00007fe5f4a8f749 [ 203.697207][T12047] RDX: 0000000004040004 RSI: 0000200000000000 RDI: 0000000000000003 [ 203.697223][T12047] RBP: 00007fe5f34ef090 R08: 0000000000000000 R09: 0000000000000000 [ 203.697239][T12047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.697254][T12047] R13: 00007fe5f4ce6038 R14: 00007fe5f4ce5fa0 R15: 00007ffc0a769a88 [ 203.697278][T12047] [ 203.920416][T12059] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.035683][T12059] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.144918][T12069] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 204.198593][T12059] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.268822][T12059] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.378581][ T52] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.392825][ T52] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.441598][ T52] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.451417][T12079] lo speed is unknown, defaulting to 1000 [ 204.465096][T12079] lo speed is unknown, defaulting to 1000 [ 204.468720][ T52] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.562333][T12081] netlink: 'syz.0.2814': attribute type 30 has an invalid length. [ 204.832516][T12103] program syz.0.2822 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.006299][T12109] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 205.375094][T12137] program syz.4.2835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.379192][T12132] FAULT_INJECTION: forcing a failure. [ 205.379192][T12132] name failslab, interval 1, probability 0, space 0, times 0 [ 205.397745][T12132] CPU: 1 UID: 0 PID: 12132 Comm: syz.1.2833 Not tainted syzkaller #0 PREEMPT(voluntary) [ 205.397775][T12132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 205.397824][T12132] Call Trace: [ 205.397831][T12132] [ 205.397841][T12132] __dump_stack+0x1d/0x30 [ 205.397872][T12132] dump_stack_lvl+0x95/0xd0 [ 205.397956][T12132] dump_stack+0x15/0x1b [ 205.397982][T12132] should_fail_ex+0x265/0x280 [ 205.398010][T12132] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 205.398047][T12132] should_failslab+0x8c/0xb0 [ 205.398119][T12132] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 205.398142][T12132] ? shmem_alloc_inode+0x34/0x50 [ 205.398170][T12132] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 205.398272][T12132] shmem_alloc_inode+0x34/0x50 [ 205.398308][T12132] alloc_inode+0x40/0x170 [ 205.398391][T12132] new_inode+0x1d/0xe0 [ 205.398417][T12132] shmem_get_inode+0x246/0x750 [ 205.398516][T12132] shmem_mknod+0x44/0x170 [ 205.398556][T12132] shmem_create+0x34/0x50 [ 205.398585][T12132] ? __pfx_shmem_create+0x10/0x10 [ 205.398679][T12132] path_openat+0x1115/0x23b0 [ 205.398780][T12132] do_filp_open+0x109/0x230 [ 205.398833][T12132] do_sys_openat2+0xa6/0x150 [ 205.398923][T12132] __x64_sys_openat+0xf2/0x120 [ 205.398960][T12132] x64_sys_call+0x2b07/0x3000 [ 205.398988][T12132] do_syscall_64+0xca/0x2b0 [ 205.399098][T12132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.399138][T12132] RIP: 0033:0x7f72da62f749 [ 205.399153][T12132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.399171][T12132] RSP: 002b:00007f72d9097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.399237][T12132] RAX: ffffffffffffffda RBX: 00007f72da885fa0 RCX: 00007f72da62f749 [ 205.399253][T12132] RDX: 00000000000a0242 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 205.399269][T12132] RBP: 00007f72d9097090 R08: 0000000000000000 R09: 0000000000000000 [ 205.399285][T12132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.399298][T12132] R13: 00007f72da886038 R14: 00007f72da885fa0 R15: 00007ffde748ecf8 [ 205.399316][T12132] [ 205.700333][T12142] netlink: 'syz.2.2837': attribute type 30 has an invalid length. [ 205.744521][T12140] loop0: detected capacity change from 0 to 2048 [ 205.781894][T12140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 206.432449][ T1662] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.528889][ T1662] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.598047][ T1662] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.654073][T12183] lo speed is unknown, defaulting to 1000 [ 206.670658][T12183] lo speed is unknown, defaulting to 1000 [ 206.712067][T12199] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 36:ed:9c:5e:40:48 [ 206.748778][ T1662] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.767538][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 206.831557][T12196] __nla_validate_parse: 11 callbacks suppressed [ 206.831576][T12196] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2856'. [ 206.996438][T12183] chnl_net:caif_netlink_parms(): no params data found [ 207.012798][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'. [ 207.041965][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'. [ 207.122432][ T1662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.133171][ T1662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.142589][ T1662] bond0 (unregistering): Released all slaves [ 207.231937][ T1662] hsr_slave_0: left promiscuous mode [ 207.240324][ T1662] hsr_slave_1: left promiscuous mode [ 207.248911][ T1662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.256619][ T1662] batman_adv: batadv0: Removing interface: vlan0 [ 207.264714][ T1662] batman_adv: batadv0: Removing interface: dummy0 [ 207.302090][ T1662] team0 (unregistering): Port device team_slave_1 removed [ 207.314523][ T1662] team0 (unregistering): Port device team_slave_0 removed [ 207.370916][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2869'. [ 207.425104][T12183] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.433045][T12183] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.466760][T12183] bridge_slave_0: entered allmulticast mode [ 207.482805][T12183] bridge_slave_0: entered promiscuous mode [ 207.490544][T12183] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.497837][T12183] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.511313][T12183] bridge_slave_1: entered allmulticast mode [ 207.519494][T12183] bridge_slave_1: entered promiscuous mode [ 207.718695][T12183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.735476][T12183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.769629][T12183] team0: Port device team_slave_0 added [ 207.785977][T12183] team0: Port device team_slave_1 added [ 207.854359][T12282] program syz.0.2881 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 207.873466][T12183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.881327][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 207.908807][T12183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.921000][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 207.930266][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2879'. [ 207.986880][T12183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.993913][T12183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.021401][T12183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.110565][T12183] hsr_slave_0: entered promiscuous mode [ 208.118202][T12183] hsr_slave_1: entered promiscuous mode [ 208.124251][T12183] debugfs: 'hsr0' already exists in 'hsr' [ 208.130090][T12183] Cannot create hsr debugfs directory [ 208.155071][ T1662] IPVS: stop unused estimator thread 0... [ 208.197765][T12297] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 208.308543][ T29] kauditd_printk_skb: 1370 callbacks suppressed [ 208.308562][ T29] audit: type=1326 audit(208.247:26621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff556d4b829 code=0x7ffc0000 [ 208.341093][ T29] audit: type=1400 audit(208.327:26622): avc: denied { ioctl } for pid=12296 comm="syz.0.2886" path="socket:[35035]" dev="sockfs" ino=35035 ioctlcmd=0x4b72 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.554362][ T29] audit: type=1326 audit(208.357:26623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff556da65e7 code=0x7ffc0000 [ 208.581620][ T29] audit: type=1326 audit(208.567:26624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff556d4b829 code=0x7ffc0000 [ 208.680874][ T29] audit: type=1326 audit(208.587:26625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 208.703974][ T29] audit: type=1326 audit(208.587:26626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff556da65e7 code=0x7ffc0000 [ 208.727612][ T29] audit: type=1326 audit(208.597:26627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff556d4b829 code=0x7ffc0000 [ 208.750672][ T29] audit: type=1326 audit(208.597:26628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff556daf749 code=0x7ffc0000 [ 208.774342][ T29] audit: type=1326 audit(208.597:26629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff556da65e7 code=0x7ffc0000 [ 208.798107][ T29] audit: type=1326 audit(208.597:26630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12284 comm="syz.4.2882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff556d4b829 code=0x7ffc0000 [ 208.957424][T12315] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 209.106833][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 209.127898][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2893'. [ 209.268020][T12332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2896'. [ 209.277066][T12332] netlink: 'syz.4.2896': attribute type 30 has an invalid length. [ 209.304328][ T827] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.312804][ T827] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.328478][ T827] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.337595][ T827] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.454427][T12298] lo speed is unknown, defaulting to 1000 [ 209.469757][T12337] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 209.618224][T12183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 209.630995][T12183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 209.645005][T12183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 209.654177][T12183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.739691][T12183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.755995][T12183] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.768846][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.775980][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.791103][ T2120] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.798421][ T2120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.850196][T12364] lo speed is unknown, defaulting to 1000 [ 209.913898][T12372] netlink: 488 bytes leftover after parsing attributes in process `syz.3.2905'. [ 209.990875][ T3670] Bluetooth: hci0: sending frame failed (-49) [ 210.002897][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 210.025154][T12369] loop0: detected capacity change from 0 to 256 [ 210.056300][T12183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.223119][T12381] lo speed is unknown, defaulting to 1000 [ 210.360075][T12389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.373243][T12389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.508774][T12183] veth0_vlan: entered promiscuous mode [ 210.529695][T12183] veth1_vlan: entered promiscuous mode [ 210.561842][T12183] veth0_macvtap: entered promiscuous mode [ 210.573033][T12183] veth1_macvtap: entered promiscuous mode [ 210.581431][ T3414] Process accounting resumed [ 210.628868][T12183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.668610][T12183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.708536][ T1662] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.723151][T12402] gretap1: entered promiscuous mode [ 210.732187][ T1662] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.744606][ T1662] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.754872][ T1662] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.941496][T12406] loop0: detected capacity change from 0 to 256 [ 211.020002][T12413] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 211.144363][T12421] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 211.153794][T12423] program syz.2.2919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 211.187076][T12425] netlink: 'syz.2.2920': attribute type 30 has an invalid length. [ 211.201149][ T2120] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.211253][ T2120] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.221086][ T2120] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.243364][ T2120] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 crond[3111]: time disparity of -29459251 minutes detected [ 211.302264][T12433] xt_CT: No such helper "pptp" [ 211.311120][T12433] Driver unsupported XDP return value 0 on prog (id 1687) dev N/A, expect packet loss! [ 211.385496][T12439] gretap1: entered promiscuous mode [ 211.645423][T12465] gretap1: entered promiscuous mode [ 211.671832][T12467] netlink: 'syz.4.2937': attribute type 13 has an invalid length. [ 211.742725][T12467] batman_adv: batadv0: Interface deactivated: dummy0 [ 211.793796][T12467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.805912][T12467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.890808][T12467] bond3: left allmulticast mode [ 211.895774][T12467] bond3: left promiscuous mode [ 211.913397][T12479] __nla_validate_parse: 7 callbacks suppressed [ 211.913416][T12479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2942'. [ 211.941757][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2941'. [ 211.952218][T12480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2941'. [ 211.969526][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2942'. [ 211.980237][ T1910] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.988640][ T1910] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.008525][ T1910] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.018209][ T1910] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.028179][ T1910] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.036711][ T1910] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.076385][ T1910] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 212.085572][ T1910] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.366793][T12500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 212.375740][T12500] netlink: 'syz.1.2950': attribute type 30 has an invalid length. [ 212.392969][T12503] loop0: detected capacity change from 0 to 2048 [ 212.413422][ T2120] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.422780][ T2120] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.423575][T12505] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 212.441542][ T1910] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.450636][T12503] loop0: p1 p3 p4 [ 212.450713][ T1910] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.469981][T12503] loop0: p4 size 589824 extends beyond EOD, truncated [ 212.519138][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 212.529057][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2955'. [ 212.617229][T12523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'. [ 212.661737][ T23] IPVS: starting estimator thread 0... [ 212.735728][T12526] tmpfs: Unknown parameter '€' [ 212.756704][T12524] IPVS: using max 1728 ests per chain, 86400 per kthread [ 212.893962][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2968'. [ 212.905252][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2968'. [ 212.934983][T12545] random: crng reseeded on system resumption [ 212.947983][T12545] Restarting kernel threads ... [ 212.953190][T12545] Done restarting kernel threads. [ 213.003354][ T23] IPVS: starting estimator thread 0... [ 213.123640][T12551] IPVS: using max 2208 ests per chain, 110400 per kthread [ 213.144418][T12564] ip6t_srh: unknown srh match flags 4000 [ 213.217901][T12572] vlan2: entered allmulticast mode [ 213.231873][T12577] program syz.2.2982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.317955][T12580] loop0: detected capacity change from 0 to 256 [ 213.328768][ T29] kauditd_printk_skb: 1220 callbacks suppressed [ 213.328785][ T29] audit: type=1400 audit(213.317:27849): avc: denied { mounton } for pid=12579 comm="syz.0.2984" path="/591/file0" dev="tmpfs" ino=3066 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 213.385737][ T29] audit: type=1400 audit(213.367:27850): avc: denied { mount } for pid=12579 comm="syz.0.2984" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 213.423044][T12589] lo speed is unknown, defaulting to 1000 [ 213.462032][ T29] audit: type=1326 audit(213.397:27851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 213.485999][ T29] audit: type=1326 audit(213.397:27852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 213.509867][ T29] audit: type=1326 audit(213.397:27853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 213.532968][ T29] audit: type=1326 audit(213.397:27854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 213.556751][ T29] audit: type=1400 audit(213.397:27855): avc: denied { execute } for pid=12588 comm="syz.3.2987" path="/45/file0" dev="tmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 213.578926][ T29] audit: type=1326 audit(213.397:27856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4db789f783 code=0x7ffc0000 [ 213.603094][ T29] audit: type=1326 audit(213.397:27857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4db789f783 code=0x7ffc0000 [ 213.626023][ T29] audit: type=1326 audit(213.397:27858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12590 comm="syz.2.2988" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 213.916302][T12609] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 214.547827][T12630] lo speed is unknown, defaulting to 1000 [ 215.076568][T12635] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 215.347888][T12639] SELinux: Context system_u:object_r:hald_exec_t:s0 is not valid (left unmapped). [ 215.505796][T12658] Restarting kernel threads ... [ 215.510911][T12658] Done restarting kernel threads. [ 215.523342][T12662] ip6t_srh: unknown srh match flags 4000 [ 215.759398][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 215.870233][T12702] vlan2: entered allmulticast mode [ 215.911617][T12690] lo speed is unknown, defaulting to 1000 [ 215.934423][ T1910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.971531][ T1910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.985108][T12710] random: crng reseeded on system resumption [ 216.000743][T12710] Restarting kernel threads ... [ 216.005818][T12710] Done restarting kernel threads. [ 216.021551][ T1910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.037596][T12690] chnl_net:caif_netlink_parms(): no params data found [ 216.082911][ T1910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.094083][T12690] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.101855][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.109902][T12690] bridge_slave_0: entered allmulticast mode [ 216.116548][T12690] bridge_slave_0: entered promiscuous mode [ 216.123638][T12690] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.131542][T12690] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.139576][T12690] bridge_slave_1: entered allmulticast mode [ 216.146225][T12690] bridge_slave_1: entered promiscuous mode [ 216.170325][T12690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.181132][T12690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.187777][T12721] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 216.211445][T12690] team0: Port device team_slave_0 added [ 216.221136][T12690] team0: Port device team_slave_1 added [ 216.241453][T12690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.249089][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.275642][T12690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.290186][T12690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.297916][T12690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.324058][T12690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.383829][ T1910] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.398839][ T1910] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.409665][ T1910] bond0 (unregistering): Released all slaves [ 216.416020][T12727] FAULT_INJECTION: forcing a failure. [ 216.416020][T12727] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.424019][ T1910] bond1 (unregistering): Released all slaves [ 216.431200][T12727] CPU: 0 UID: 0 PID: 12727 Comm: syz.3.3029 Not tainted syzkaller #0 PREEMPT(voluntary) [ 216.431295][T12727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 216.431338][T12727] Call Trace: [ 216.431358][T12727] [ 216.431381][T12727] __dump_stack+0x1d/0x30 [ 216.431475][T12727] dump_stack_lvl+0x95/0xd0 [ 216.431541][T12727] dump_stack+0x15/0x1b [ 216.431623][T12727] should_fail_ex+0x265/0x280 [ 216.431698][T12727] should_fail_alloc_page+0xf2/0x100 [ 216.431844][T12727] __alloc_frozen_pages_noprof+0x109/0x360 [ 216.431948][T12727] alloc_pages_mpol+0xb3/0x260 [ 216.432098][T12727] vma_alloc_folio_noprof+0x1aa/0x300 [ 216.432210][T12727] handle_mm_fault+0xef5/0x2c60 [ 216.432374][T12727] do_user_addr_fault+0x630/0x1080 [ 216.432491][T12727] exc_page_fault+0x62/0xa0 [ 216.432586][T12727] asm_exc_page_fault+0x26/0x30 [ 216.432651][T12727] RIP: 0033:0x7fe5f4960616 [ 216.432688][T12727] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 6c 4e 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 4c d9 fe ff 4d 85 f6 0f 84 46 0a 00 [ 216.432707][T12727] RSP: 002b:00007fe5f34ecf70 EFLAGS: 00010202 [ 216.432822][T12727] RAX: 0000000000000000 RBX: 00007fe5f4ce5fa0 RCX: 0000000000000000 [ 216.432857][T12727] RDX: 0000200000000740 RSI: 0000200000000740 RDI: 00007fe5f4b15479 [ 216.432898][T12727] RBP: 00007fe5f34ef090 R08: 00007fe5f494e2f0 R09: 0000000000000000 [ 216.432939][T12727] R10: 0000000000000002 R11: 0000200000000740 R12: 0000000000000002 [ 216.432982][T12727] R13: 0000000000000024 R14: 0000200000000740 R15: 00007ffc0a769a88 [ 216.433045][T12727] [ 216.433157][T12727] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 216.605876][T12727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.614568][T12727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.638158][T12690] hsr_slave_0: entered promiscuous mode [ 216.644440][T12690] hsr_slave_1: entered promiscuous mode [ 216.650528][T12690] debugfs: 'hsr0' already exists in 'hsr' [ 216.656340][T12690] Cannot create hsr debugfs directory [ 216.715450][ T1910] hsr_slave_0: left promiscuous mode [ 216.723471][ T1910] hsr_slave_1: left promiscuous mode [ 216.729631][ T1910] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.737088][ T1910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.748873][ T1910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.756348][ T1910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.764136][ T1910] batman_adv: batadv0: Removing interface: vlan2 [ 216.773026][ T1910] veth1_macvtap: left promiscuous mode [ 216.779459][ T1910] veth0_macvtap: left promiscuous mode [ 216.785171][ T1910] veth1_vlan: left promiscuous mode [ 216.790646][ T1910] veth0_vlan: left promiscuous mode [ 216.870975][ T1910] team0 (unregistering): Port device team_slave_1 removed [ 216.883963][ T1910] team0 (unregistering): Port device team_slave_0 removed [ 216.970527][T12734] lo speed is unknown, defaulting to 1000 [ 217.253999][T12741] __nla_validate_parse: 15 callbacks suppressed [ 217.254013][T12741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3033'. [ 217.282977][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 217.292618][T12750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3036'. [ 217.387649][T12690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 217.398094][T12690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 217.428889][T12690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 217.455170][T12690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.529692][T12766] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3042'. [ 217.578776][T12690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.597226][ T1910] IPVS: stop unused estimator thread 0... [ 217.598150][T12690] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.628071][T11801] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.635196][T11801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.648528][T12772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3043'. [ 217.695319][T12777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3046'. [ 217.712274][T11801] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.719417][T11801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.755657][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 217.766005][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3047'. [ 217.857863][T12690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.977842][T12690] veth0_vlan: entered promiscuous mode [ 217.993480][T12690] veth1_vlan: entered promiscuous mode [ 218.018475][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.031360][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.041360][T12690] veth0_macvtap: entered promiscuous mode [ 218.050133][T12690] veth1_macvtap: entered promiscuous mode [ 218.064717][T12690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.078503][T12690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.090801][T11801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.107449][T11801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.117630][T11801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.131434][T11801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.185930][T12808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'. [ 218.221574][ T3485] IPVS: starting estimator thread 0... [ 218.258532][T12812] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3054'. [ 218.337370][T12810] IPVS: using max 2160 ests per chain, 108000 per kthread [ 218.344893][ T29] kauditd_printk_skb: 1241 callbacks suppressed [ 218.344907][ T29] audit: type=1326 audit(218.327:29100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4db78965e7 code=0x7ffc0000 [ 218.375345][ T29] audit: type=1326 audit(218.357:29101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4db783b829 code=0x7ffc0000 [ 218.399173][ T29] audit: type=1326 audit(218.357:29102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4db78965e7 code=0x7ffc0000 [ 218.422389][ T29] audit: type=1326 audit(218.357:29103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4db783b829 code=0x7ffc0000 [ 218.445974][ T29] audit: type=1326 audit(218.357:29104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 218.469617][ T29] audit: type=1326 audit(218.357:29105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4db78965e7 code=0x7ffc0000 [ 218.492597][ T29] audit: type=1326 audit(218.357:29106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4db783b829 code=0x7ffc0000 [ 218.516235][ T29] audit: type=1326 audit(218.357:29107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12773 comm="syz.2.3044" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f4db789f749 code=0x7ffc0000 [ 218.539993][ T29] audit: type=1326 audit(218.357:29108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.1.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f69258765e7 code=0x7ffc0000 [ 218.563120][ T29] audit: type=1326 audit(218.357:29109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12776 comm="syz.1.3046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f692581b829 code=0x7ffc0000 [ 218.815872][T12832] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 218.915576][T12835] veth0: entered promiscuous mode [ 218.984515][T12834] veth0: left promiscuous mode [ 219.277547][T12848] lo speed is unknown, defaulting to 1000 [ 219.522372][T12887] loop0: detected capacity change from 0 to 128 [ 219.597739][T12887] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.622511][T12887] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 219.638392][T12887] IPv6: NLM_F_CREATE should be specified when creating new route [ 220.203780][T12887] ================================================================== [ 220.211966][T12887] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 220.220103][T12887] [ 220.222470][T12887] write to 0xffff888100580e14 of 4 bytes by task 12896 on cpu 1: [ 220.230207][T12887] xas_set_mark+0x12b/0x140 [ 220.234750][T12887] tag_pages_for_writeback+0xc2/0x290 [ 220.240157][T12887] writeback_iter+0x340/0x820 [ 220.244872][T12887] mpage_writepages+0x87/0x1250 [ 220.249757][T12887] fat_writepages+0x24/0x30 [ 220.254289][T12887] do_writepages+0x1c6/0x310 [ 220.258911][T12887] file_write_and_wait_range+0x156/0x2c0 [ 220.264571][T12887] __generic_file_fsync+0x46/0x160 [ 220.269795][T12887] fat_file_fsync+0x49/0x100 [ 220.274418][T12887] vfs_fsync_range+0x10d/0x130 [ 220.279215][T12887] generic_file_write_iter+0x1b8/0x2f0 [ 220.284708][T12887] iter_file_splice_write+0x66b/0xa20 [ 220.290112][T12887] direct_splice_actor+0x156/0x2a0 [ 220.295249][T12887] splice_direct_to_actor+0x312/0x680 [ 220.300671][T12887] do_splice_direct+0xda/0x150 [ 220.305558][T12887] do_sendfile+0x380/0x650 [ 220.310008][T12887] __x64_sys_sendfile64+0x105/0x150 [ 220.315237][T12887] x64_sys_call+0x2db1/0x3000 [ 220.319943][T12887] do_syscall_64+0xca/0x2b0 [ 220.324483][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.330402][T12887] [ 220.332744][T12887] read to 0xffff888100580e14 of 4 bytes by task 12887 on cpu 0: [ 220.340519][T12887] file_write_and_wait_range+0x10e/0x2c0 [ 220.346180][T12887] __generic_file_fsync+0x46/0x160 [ 220.351315][T12887] fat_file_fsync+0x49/0x100 [ 220.355927][T12887] vfs_fsync_range+0x10d/0x130 [ 220.360720][T12887] generic_file_write_iter+0x1b8/0x2f0 [ 220.366206][T12887] iter_file_splice_write+0x66b/0xa20 [ 220.371596][T12887] direct_splice_actor+0x156/0x2a0 [ 220.376729][T12887] splice_direct_to_actor+0x312/0x680 [ 220.382127][T12887] do_splice_direct+0xda/0x150 [ 220.386920][T12887] do_sendfile+0x380/0x650 [ 220.391364][T12887] __x64_sys_sendfile64+0x105/0x150 [ 220.396596][T12887] x64_sys_call+0x2db1/0x3000 [ 220.401360][T12887] do_syscall_64+0xca/0x2b0 [ 220.405906][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.411822][T12887] [ 220.414158][T12887] value changed: 0x02000021 -> 0x04000021 [ 220.419891][T12887] [ 220.422231][T12887] Reported by Kernel Concurrency Sanitizer on: [ 220.428406][T12887] CPU: 0 UID: 0 PID: 12887 Comm: syz.0.3079 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.438243][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 220.448328][T12887] ================================================================== [ 221.059519][ T2596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.069219][ T2596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.078855][ T2596] bond0 (unregistering): Released all slaves [ 221.087810][ T2596] bond1 (unregistering): Released all slaves [ 221.096066][ T2596] bond2 (unregistering): Released all slaves [ 221.105349][ T2596] team0: Port device macvlan2 removed [ 221.112460][ T2596] bond3 (unregistering): Released all slaves [ 221.160449][ T2596] IPVS: stopping master sync thread 9388 ... [ 221.169096][ T2596] hsr_slave_0: left promiscuous mode [ 221.174781][ T2596] hsr_slave_1: left promiscuous mode [ 221.180551][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.188289][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.195876][ T2596] batman_adv: batadv0: Removing interface: dummy0 [ 221.203133][ T2596] batman_adv: batadv0: Removing interface: vlan2 [ 221.241617][ T2596] team0 (unregistering): Port device team_slave_1 removed [ 221.252298][ T2596] team0 (unregistering): Port device team_slave_0 removed [ 221.770066][ T2596] IPVS: stop unused estimator thread 0... [ 221.851749][ T2596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.862894][ T2596] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.899205][T12854] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 221.909715][ T2596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.920973][ T2596] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.959275][ T2596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.969858][ T2596] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.999975][ T2596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.010891][ T2596] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.074145][ T2596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.084512][ T2596] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.119757][ T2596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.130261][ T2596] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.199904][ T2596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.210392][ T2596] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.249602][ T2596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.260668][ T2596] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.323579][ T2596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.333913][ T2596] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.359829][ T2596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.370268][ T2596] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.410873][ T2596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.421320][ T2596] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.469763][ T2596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.480423][ T2596] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.543501][ T2596] bridge_slave_1: left allmulticast mode [ 222.549237][ T2596] bridge_slave_1: left promiscuous mode [ 222.554980][ T2596] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.563156][ T2596] bridge_slave_0: left promiscuous mode [ 222.569096][ T2596] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.577553][ T2596] bridge_slave_1: left allmulticast mode [ 222.583200][ T2596] bridge_slave_1: left promiscuous mode [ 222.589012][ T2596] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.597597][ T2596] bridge_slave_0: left promiscuous mode [ 222.603316][ T2596] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.704117][ T2596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.714044][ T2596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.726132][ T2596] bond0 (unregistering): Released all slaves [ 222.789927][ T2596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.800189][ T2596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.810218][ T2596] bond0 (unregistering): Released all slaves [ 222.869506][ T2596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.879519][ T2596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.889026][ T2596] bond0 (unregistering): Released all slaves [ 222.964830][ T2596] hsr_slave_0: left promiscuous mode [ 222.970778][ T2596] hsr_slave_1: left promiscuous mode [ 222.976367][ T2596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.983796][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.991396][ T2596] batman_adv: batadv0: Removing interface: vlan2 [ 223.000139][ T2596] hsr_slave_0: left promiscuous mode [ 223.005936][ T2596] hsr_slave_1: left promiscuous mode [ 223.011876][ T2596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.019335][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.027053][ T2596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.034436][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.043914][ T2596] hsr_slave_0: left promiscuous mode [ 223.049712][ T2596] hsr_slave_1: left promiscuous mode [ 223.055329][ T2596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.062798][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.070333][ T2596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.077785][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.091556][ T2596] veth1_macvtap: left promiscuous mode [ 223.097103][ T2596] veth0_macvtap: left promiscuous mode [ 223.102645][ T2596] veth1_vlan: left promiscuous mode [ 223.107974][ T2596] veth0_vlan: left promiscuous mode [ 223.113717][ T2596] veth1_macvtap: left promiscuous mode [ 223.119809][ T2596] veth0_macvtap: left promiscuous mode [ 223.125373][ T2596] veth1_vlan: left promiscuous mode [ 223.130894][ T2596] veth0_vlan: left promiscuous mode [ 223.136810][ T2596] veth1_macvtap: left promiscuous mode [ 223.142428][ T2596] veth0_macvtap: left promiscuous mode [ 223.148063][ T2596] veth1_vlan: left promiscuous mode [ 223.153290][ T2596] veth0_vlan: left promiscuous mode [ 223.293482][ T2596] team0 (unregistering): Port device team_slave_1 removed [ 223.303994][ T2596] team0 (unregistering): Port device team_slave_0 removed [ 223.360582][ T2596] team0 (unregistering): Port device team_slave_1 removed [ 223.370507][ T2596] team0 (unregistering): Port device team_slave_0 removed [ 223.427910][ T2596] team0 (unregistering): Port device team_slave_1 removed [ 223.437525][ T2596] team0 (unregistering): Port device team_slave_0 removed [ 223.472713][ T3485] lo speed is unknown, defaulting to 1000 [ 223.478571][ T3485] infiniband syz0: ib_query_port failed (-19) [ 224.184722][ T2596] IPVS: stop unused estimator thread 0... [ 224.191184][ T2596] IPVS: stop unused estimator thread 0... [ 224.197230][ T2596] IPVS: stop unused estimator thread 0... [ 224.240967][ T2596] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.289958][ T2596] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.349942][ T2596] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.400335][ T2596] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.492766][ T2596] bridge_slave_1: left allmulticast mode [ 224.498497][ T2596] bridge_slave_1: left promiscuous mode [ 224.504113][ T2596] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.512164][ T2596] bridge_slave_0: left allmulticast mode [ 224.517865][ T2596] bridge_slave_0: left promiscuous mode [ 224.523667][ T2596] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.599108][ T2596] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.608963][ T2596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.618451][ T2596] bond0 (unregistering): Released all slaves [ 224.680683][ T2596] hsr_slave_0: left promiscuous mode [ 224.686459][ T2596] hsr_slave_1: left promiscuous mode [ 224.692128][ T2596] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.699587][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.707232][ T2596] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.714700][ T2596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.724824][ T2596] veth1_macvtap: left promiscuous mode [ 224.730371][ T2596] veth0_macvtap: left promiscuous mode [ 224.735860][ T2596] veth1_vlan: left promiscuous mode [ 224.741344][ T2596] veth0_vlan: left promiscuous mode [ 224.808427][ T2596] team0 (unregistering): Port device team_slave_1 removed [ 224.818245][ T2596] team0 (unregistering): Port device team_slave_0 removed [ 225.230479][ T2596] IPVS: stop unused estimator thread 0...