last executing test programs: 3.281047127s ago: executing program 4 (id=1166): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000480)={[], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_gt}, {@euid_lt}, {@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0xd3}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x414e1, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x75b}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r4}, 0x38) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r5, &(0x7f0000000140), 0x0, 0x20080058) 3.232627382s ago: executing program 4 (id=1167): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x800) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)={0x1000000c}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x8000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000fc85e3469ceb81db00"/28], 0x48) getpid() process_madvise(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)='e', 0x1}], 0x2, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x2, 0x6, 0x0, 0x7ffc0001}]}) 2.348312838s ago: executing program 1 (id=1179): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0x4}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x123, 0x0, 0x0, 0x0, 0xc3}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffe}, @map_val={0x18, 0xb, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}]}, &(0x7f0000000240)='syzkaller\x00', 0x6, 0xbe, &(0x7f0000000380)=""/190, 0x41000, 0x0, '\x00', r2, 0x25, r1, 0x8, &(0x7f0000000440)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x7, 0xfffff9ac, 0x7ff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xc}, 0x18) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) sendmsg$kcm(r4, 0x0, 0x8040) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0xd) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000005c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.483028774s ago: executing program 1 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) 1.460653866s ago: executing program 1 (id=1189): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000840)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(0x0, 0x7) 1.349007407s ago: executing program 2 (id=1190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x5400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) chown(0x0, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES64, @ANYRES16=r4, @ANYRES32=r7, @ANYBLOB="030000000200000001000000090000000000002000000000", @ANYRES8=r5, @ANYRES64=r6], 0x50) r10 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYRES32=0x1, @ANYBLOB="056ee9b63ec433f882ad7743ab3d198e15000000000000000000000544ef4585b4129c35352f93befb73710332509e2d0fb13e25e69e4837e89be999f90815b6e45e9e6820ec05764f", @ANYRES32, @ANYBLOB="0100"/27], 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c80)={0x0, 0x8, 0x8}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000014c0)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000003000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001800000006000000000000000100000085000000b000000000000001000000ff18200000", @ANYRES32=r10, @ANYBLOB="0000000008000000950000000000000000e1ee1100000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x1, 0x90, &(0x7f0000000680)=""/144, 0x40f00, 0x40, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000980)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[0xffffffffffffffff, r9, r9, r11, 0x1], 0x0, 0x10, 0x9}, 0x94) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x1, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)='%', 0x0, 0x300, 0x0, 0x0, 0x0}) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r5) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) 1.301803832s ago: executing program 3 (id=1192): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0xc189, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={r1, 0xb, 0x1, [0x3, 0x800, 0x1, 0x80000000, 0x116a], [0x3ff, 0x1, 0x0, 0x8c9, 0x96, 0xffffffffffffffff, 0x1, 0x7fffffff, 0x2, 0x5, 0x3, 0x0, 0x4, 0xfa03, 0x7, 0x2, 0x3732, 0xd3be, 0x10710664, 0x3, 0xfffffffffffffc00, 0x9, 0x2, 0x400, 0x9, 0x8, 0x6, 0x848, 0x5, 0xffff, 0xea, 0xfffffffffffff4cc, 0x100, 0x0, 0xa, 0x87, 0xffffffff, 0x4, 0x7, 0x101, 0xf45, 0x7, 0x0, 0x9, 0x9, 0xfffffffffffffffa, 0x0, 0x4, 0x2, 0xfffffffffffff801, 0xffffffff00000000, 0x1c000000000, 0x9, 0x3ff, 0x9, 0x0, 0x7a4fcfd4, 0x8000000000000000, 0x5, 0x9, 0xe, 0xfd7, 0x6, 0xfc, 0x2, 0x2, 0x2, 0x8, 0x0, 0x56, 0x76f4, 0x0, 0x4, 0xb, 0x2, 0xffff, 0x5, 0xd4ba, 0x805, 0x40, 0x7, 0x0, 0x3a, 0x6, 0x5, 0xffffffffffffffff, 0x0, 0xffff, 0x9, 0x3, 0x9, 0x6, 0x0, 0x6, 0x7, 0x3, 0xfffffffffffffe18, 0x4, 0x9c14, 0x2, 0xe061, 0x8, 0x6, 0x9, 0xe, 0x1, 0xffffffffffffc359, 0x5, 0x32e4f4a3, 0x5, 0x7, 0x12b, 0x101, 0x3, 0x0, 0x9, 0xcdc7, 0x3, 0x8000000000000000, 0xcf, 0x41]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1.1097215s ago: executing program 2 (id=1194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0xa}, 0x18) unshare(0x22020600) unshare(0x4000000) syz_open_dev$usbmon(&(0x7f0000000b40), 0x1ff, 0x200) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@ipv4_newnexthop={0x1c, 0x68, 0x5, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 1.028085539s ago: executing program 2 (id=1196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 965.622975ms ago: executing program 2 (id=1198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8010) 934.859977ms ago: executing program 3 (id=1200): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000600000013000300686173683a6e65742c6966616365000005000500b7aee7ca0c0007800500150007000000090002"], 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0xf}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x41, 0x0, 0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x8, 0x800, 0x1}) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu==0!|!') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r9 = fcntl$dupfd(r4, 0x0, r0) write$UHID_SET_REPORT_REPLY(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000020000000806c0004329e4d6213474f86ce9036421bf25e8dce73330b1f9a05ae4f39d0caa21d718a648823a32379573fcbd4f9cb09395573cdcb6c113084db1779e827aaa6f5c0e03c40a9f052d4dfdf0f79df26365b5fe638785940fd307058d3758522896af1b0c69f5b25e4cad1da7986ef6ab8674d89b8087ff41cb985509eb34cd98a91da589b0e209aa941ba71f57d1e63663078c721f88ad554bb13a75bd8e2240682e7258d89be38a9f4a3f581c48c369788dddb915b582bee948b605c0a3cc048a0000"], 0xcc) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket(0xa, 0x3, 0x3d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 892.207131ms ago: executing program 2 (id=1201): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000325000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b70200000020000085"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4030582a, &(0x7f0000000140)={0xd, "7954bbc8aae250bd23544617d5"}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"}) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0xfffffffd, 0x8, 0x1b, "53af0f0b4ecf6c29bf81c173f4a8f5f73eb62f"}) 891.801242ms ago: executing program 1 (id=1202): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{}, &(0x7f0000000bc0), &(0x7f0000000c00)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) 844.167227ms ago: executing program 1 (id=1203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40) 813.239449ms ago: executing program 1 (id=1205): set_mempolicy(0x6005, 0x0, 0x4) socket$unix(0x1, 0x2, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000005c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x550b6c) read(r0, 0x0, 0x0) 812.55932ms ago: executing program 3 (id=1206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0xa}, 0x18) unshare(0x22020600) unshare(0x4000000) syz_open_dev$usbmon(&(0x7f0000000b40), 0x1ff, 0x200) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@ipv4_newnexthop={0x1c, 0x68, 0x5, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 581.794492ms ago: executing program 3 (id=1208): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) listen(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 554.628185ms ago: executing program 3 (id=1210): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000000), 0x3, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3], 0x44}}, 0x20008000) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 542.814596ms ago: executing program 4 (id=1211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=""/237, 0xed}], 0x1}, 0x0) close(r2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) msgget(0x0, 0x21) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0}, &(0x7f0000000a40)=0xc) ioctl$TUNSETOWNER(r5, 0x400454cc, r7) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000000440)=0xc) syz_clone3(&(0x7f00000007c0)={0x40000, &(0x7f0000000480), &(0x7f00000004c0), &(0x7f0000000500), {0x16}, &(0x7f00000006c0)=""/210, 0xd2, &(0x7f0000000540)=""/62, &(0x7f0000000580)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x58) r8 = getpid() mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) unshare(0x400) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000014000000040000000a0000000000ad4d", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0xc) process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000200)='kfree\x00', r4}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000300)='.\x02\x00', 0x2000800, &(0x7f0000000040)=ANY=[], 0x1, 0x2e0, &(0x7f0000000640)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\'], 0x5c}, 0x1, 0x0, 0x0, 0x24008400}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3) 510.21094ms ago: executing program 3 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000600)='kmem_cache_free\x00', r1, 0x0, 0x8}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x300}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 509.71841ms ago: executing program 0 (id=1214): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0x1684, &(0x7f0000000ac0)={0x0, 0xdd95, 0x400, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000480)={[], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@uid_gt}, {@euid_lt}, {@euid_lt}, {@fsmagic={'fsmagic', 0x3d, 0xd3}}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, 0x0, 0x181242, 0x148) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x403, 0x70b528, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x414e1, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x75b}]}, 0x4c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r4}, 0x38) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x1e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}], 0x1, 0x20080058) 485.719002ms ago: executing program 0 (id=1215): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000340)={0x0, 0xc189, 0x2, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={r1, 0xb, 0x1, [0x3, 0x800, 0x1, 0x80000000, 0x116a], [0x3ff, 0x1, 0x0, 0x8c9, 0x96, 0xffffffffffffffff, 0x1, 0x7fffffff, 0x2, 0x5, 0x3, 0x0, 0x4, 0xfa03, 0x7, 0x2, 0x3732, 0xd3be, 0x10710664, 0x3, 0xfffffffffffffc00, 0x9, 0x2, 0x400, 0x9, 0x8, 0x6, 0x848, 0x5, 0xffff, 0xea, 0xfffffffffffff4cc, 0x100, 0x0, 0xa, 0x87, 0xffffffff, 0x4, 0x7, 0x101, 0xf45, 0x7, 0x0, 0x9, 0x9, 0xfffffffffffffffa, 0x0, 0x4, 0x2, 0xfffffffffffff801, 0xffffffff00000000, 0x1c000000000, 0x9, 0x3ff, 0x9, 0x0, 0x7a4fcfd4, 0x8000000000000000, 0x5, 0x9, 0xe, 0xfd7, 0x6, 0xfc, 0x2, 0x2, 0x2, 0x8, 0x0, 0x56, 0x76f4, 0x0, 0x4, 0xb, 0x2, 0xffff, 0x5, 0xd4ba, 0x805, 0x40, 0x7, 0x0, 0x3a, 0x6, 0x5, 0xffffffffffffffff, 0x0, 0xffff, 0x9, 0x3, 0x9, 0x6, 0x0, 0x6, 0x7, 0x3, 0xfffffffffffffe18, 0x4, 0x9c14, 0x2, 0xe061, 0x8, 0x6, 0x9, 0xe, 0x1, 0xffffffffffffc359, 0x5, 0x32e4f4a3, 0x5, 0x7, 0x12b, 0x101, 0x3, 0x0, 0x9, 0xcdc7, 0x3, 0x8000000000000000, 0xcf, 0x41]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r6 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a77e", 0x2}], 0x1, &(0x7f0000001040)=ANY=[@ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r7 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b0, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) io_uring_enter(r7, 0x627, 0xc1040000, 0x43, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{}, &(0x7f00000001c0), &(0x7f0000000200)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 181.717062ms ago: executing program 0 (id=1216): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020601040000000000000000000000000600000013000300686173683a6e65742c6966616365000005000500b7aee7ca0c0007800500150007000000090002"], 0x58}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x10, 0x4, 0xf}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x41, 0x0, 0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x8, 0x800, 0x1}) r8 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r8, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000180)='cpu==0!|!') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r9 = fcntl$dupfd(r4, 0x0, r0) write$UHID_SET_REPORT_REPLY(r9, &(0x7f0000000580)=ANY=[@ANYBLOB="0e000000020000000806c0004329e4d6213474f86ce9036421bf25e8dce73330b1f9a05ae4f39d0caa21d718a648823a32379573fcbd4f9cb09395573cdcb6c113084db1779e827aaa6f5c0e03c40a9f052d4dfdf0f79df26365b5fe638785940fd307058d3758522896af1b0c69f5b25e4cad1da7986ef6ab8674d89b8087ff41cb985509eb34cd98a91da589b0e209aa941ba71f57d1e63663078c721f88ad554bb13a75bd8e2240682e7258d89be38a9f4a3f581c48c369788dddb915b582bee948b605c0a3cc048a0000"], 0xcc) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket(0xa, 0x3, 0x3d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000005304010000000000000000000500000a14"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 156.016924ms ago: executing program 4 (id=1217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a00000000000000001812", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='btrfs_sync_fs\x00', r1, 0x0, 0xa}, 0x18) unshare(0x22020600) unshare(0x4000000) syz_open_dev$usbmon(&(0x7f0000000b40), 0x1ff, 0x200) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@ipv4_newnexthop={0x1c, 0x68, 0x5, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 111.278968ms ago: executing program 0 (id=1218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYRES16=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getnexthop={0x28, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbfe, {}, [@NHA_OIF={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1, 0x0, 0xa}, 0x18) unshare(0x22020600) unshare(0x4000000) syz_open_dev$usbmon(&(0x7f0000000b40), 0x1ff, 0x200) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=@ipv4_newnexthop={0x1c, 0x68, 0x5, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) 80.394171ms ago: executing program 4 (id=1219): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) listen(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r1 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 57.099494ms ago: executing program 2 (id=1220): r0 = socket(0x2, 0x2, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-', 0x1}], 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000f1ffffff210000001400018008000100", @ANYRES32=r7, @ANYBLOB="080003"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000380)={@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xf, 0x2, 0xf97, 0x100, 0x7ff, 0x30000, r7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000004000000000000000100feff9500000000000000acba85780682e56dd777c1f3893e24bce61bd2b7274269546e0afb2470ae5ecfd77b576f09b84ab759897d3dd405e9fc29ec"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r9, 0x0, 0x6}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x820005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) 42.403435ms ago: executing program 4 (id=1221): r0 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='#', 0x1}], 0x1}, 0x800) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x102) socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000300)={0x1000000c}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000180), 0x43) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x0, 0x8000800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000001d80), &(0x7f0000001d40)}, 0x20) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000fc85e3469ceb81db00"/28], 0x48) getpid() process_madvise(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)='e', 0x1}], 0x2, 0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x4, 0x8, &(0x7f0000000080)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x2, 0x6, 0x0, 0x7ffc0001}]}) 38.064786ms ago: executing program 0 (id=1222): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) listen(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$tipc(0x1e, 0x4, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 0s ago: executing program 0 (id=1223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r0, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x5400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) accept4(r0, &(0x7f0000000240)=@x25, 0x0, 0x80800) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740), 0x4) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) close(r4) sendto$inet6(r3, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='f', 0xffffffffffffff1a, 0x8884, 0x0, 0x31) kernel console output (not intermixed with test programs): t: couldn't find an available UDC or it's busy [ 33.000591][ T3518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.027905][ T3508] loop4: detected capacity change from 0 to 512 [ 33.038268][ T3508] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.051406][ T3508] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.086976][ T3508] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.114329][ T3508] EXT4-fs (loop4): 1 truncate cleaned up [ 33.121095][ T3508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.134599][ T3528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.144018][ T3528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.178639][ T3530] netlink: 60 bytes leftover after parsing attributes in process `syz.3.14'. [ 33.189680][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.208605][ T3530] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3530 comm=syz.3.14 [ 33.242484][ T3532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15'. [ 33.303674][ T3539] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.310939][ T3539] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.374339][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.394236][ T3539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.491580][ T3555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 33.557784][ T52] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.577912][ T52] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.606014][ T52] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.631441][ T52] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.657678][ T3562] xt_hashlimit: max too large, truncated to 1048576 [ 33.658805][ T3561] loop4: detected capacity change from 0 to 1024 [ 33.671339][ T3561] ======================================================= [ 33.671339][ T3561] WARNING: The mand mount option has been deprecated and [ 33.671339][ T3561] and is ignored by this kernel. Remove the mand [ 33.671339][ T3561] option from the mount to silence this warning. [ 33.671339][ T3561] ======================================================= [ 33.707192][ T3562] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 33.770984][ T3561] EXT4-fs: inline encryption not supported [ 33.801079][ T3576] netlink: 'syz.1.26': attribute type 11 has an invalid length. [ 33.801583][ T3561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.825662][ T3580] netlink: 60 bytes leftover after parsing attributes in process `syz.0.27'. [ 33.834979][ T3580] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3580 comm=syz.0.27 [ 33.913351][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.959848][ T3586] loop1: detected capacity change from 0 to 512 [ 33.966542][ T3586] ext4: Unknown parameter 'func' [ 34.014359][ T3577] loop2: detected capacity change from 0 to 128 [ 34.040723][ T3577] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 34.079798][ T3577] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.383343][ T3598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 34.405902][ T3597] mmap: syz.1.32 (3597) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.420191][ T52] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 34.528763][ T3602] loop4: detected capacity change from 0 to 512 [ 34.609707][ T3602] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec118, mo2=0002] [ 34.639421][ T3602] System zones: 0-2, 18-18, 34-35 [ 34.655427][ T3602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.674507][ T3602] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.688257][ T3602] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.797625][ T3620] xt_hashlimit: max too large, truncated to 1048576 [ 34.821270][ T3620] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 34.836231][ T3625] netlink: 'syz.4.41': attribute type 11 has an invalid length. [ 34.968339][ T3632] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.987932][ T3632] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.048735][ T3638] random: crng reseeded on system resumption [ 35.084434][ T3640] loop3: detected capacity change from 0 to 512 [ 35.208624][ T3640] EXT4-fs error (device loop3): ext4_quota_enable:7136: inode #3: comm syz.3.46: unexpected EA_INODE flag [ 35.241185][ T3640] EXT4-fs (loop3): Remounting filesystem read-only [ 35.258922][ T3640] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 35.308985][ T3640] EXT4-fs (loop3): mount failed [ 35.352296][ T3657] loop2: detected capacity change from 0 to 128 [ 35.375180][ T3657] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.375450][ T3657] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.501660][ T3640] loop3: detected capacity change from 0 to 764 [ 35.504177][ T3640] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 35.539781][ T3659] xt_hashlimit: max too large, truncated to 1048576 [ 35.547440][ T3659] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 35.614055][ T3661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.54'. [ 35.656661][ T3663] loop3: detected capacity change from 0 to 128 [ 35.657128][ T3663] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 35.664927][ T3663] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.724515][ T60] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 35.765437][ T3678] loop3: detected capacity change from 0 to 512 [ 35.767987][ T3678] ext4: Unknown parameter 'func' [ 35.809444][ T3677] gretap0: refused to change device tx_queue_len [ 35.810183][ T3677] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 35.879072][ T3683] netlink: 'syz.0.63': attribute type 11 has an invalid length. [ 35.891342][ T3685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.913209][ T3685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.996320][ T3692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 36.076505][ T3697] serio: Serial port ptm0 [ 36.169214][ T3700] netlink: 56 bytes leftover after parsing attributes in process `syz.1.68'. [ 36.170218][ T3700] vhci_hcd: invalid port number 96 [ 36.170231][ T3700] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 36.183271][ T3702] xt_hashlimit: max too large, truncated to 1048576 [ 36.200299][ T3702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 36.213055][ T60] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.248531][ T3706] loop4: detected capacity change from 0 to 512 [ 36.257353][ T3706] ext4: Unknown parameter 'func' [ 36.271772][ T3708] loop2: detected capacity change from 0 to 128 [ 36.278749][ T3708] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 36.296091][ T3708] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.335054][ T52] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 36.499008][ T3719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.511520][ T3719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.742532][ T3745] loop3: detected capacity change from 0 to 512 [ 36.753752][ T3745] ext4: Unknown parameter 'func' [ 36.759209][ T3748] netlink: 'syz.4.86': attribute type 11 has an invalid length. [ 36.912997][ T3755] netlink: 56 bytes leftover after parsing attributes in process `syz.3.89'. [ 36.935646][ T3755] vhci_hcd: invalid port number 96 [ 36.940862][ T3755] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 37.026596][ T3768] xt_hashlimit: max too large, truncated to 1048576 [ 37.034016][ T3768] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 37.101462][ T3770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.132815][ T3770] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.143263][ T3775] netlink: 'syz.2.98': attribute type 11 has an invalid length. [ 37.145973][ T3776] loop4: detected capacity change from 0 to 512 [ 37.160709][ T3770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 37.168396][ T3776] ext4: Unknown parameter 'func' [ 37.264018][ T3770] syz.3.94 (3770) used greatest stack depth: 10696 bytes left [ 37.335807][ T3784] loop4: detected capacity change from 0 to 512 [ 37.355885][ T3784] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 37.359473][ T3785] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 37.409690][ T3785] bond1: entered promiscuous mode [ 37.434476][ T3785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.443108][ T3784] EXT4-fs (loop4): 1 truncate cleaned up [ 37.453281][ T3784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.462842][ T3785] serio: Serial port ptm0 [ 37.473258][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 37.473272][ T29] audit: type=1326 audit(1761101672.055:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.523286][ T29] audit: type=1326 audit(1761101672.085:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.546938][ T29] audit: type=1326 audit(1761101672.085:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.570459][ T29] audit: type=1326 audit(1761101672.085:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.593897][ T29] audit: type=1326 audit(1761101672.085:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.617511][ T29] audit: type=1326 audit(1761101672.085:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.641042][ T29] audit: type=1326 audit(1761101672.085:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.664421][ T29] audit: type=1326 audit(1761101672.085:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.687699][ T29] audit: type=1326 audit(1761101672.085:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.711240][ T29] audit: type=1326 audit(1761101672.085:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3789 comm="syz.0.103" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 37.827832][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.896598][ T3804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.910225][ T3804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.953037][ T3808] xt_hashlimit: max too large, truncated to 1048576 [ 37.960687][ T3808] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 38.122168][ T3822] FAULT_INJECTION: forcing a failure. [ 38.122168][ T3822] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.135448][ T3822] CPU: 1 UID: 0 PID: 3822 Comm: syz.4.114 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.135481][ T3822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 38.135497][ T3822] Call Trace: [ 38.135504][ T3822] [ 38.135582][ T3822] __dump_stack+0x1d/0x30 [ 38.135672][ T3822] dump_stack_lvl+0xe8/0x140 [ 38.135703][ T3822] dump_stack+0x15/0x1b [ 38.135793][ T3822] should_fail_ex+0x265/0x280 [ 38.135885][ T3822] should_fail+0xb/0x20 [ 38.135992][ T3822] should_fail_usercopy+0x1a/0x20 [ 38.136033][ T3822] _copy_from_iter+0xd2/0xe80 [ 38.136054][ T3822] ? __alloc_skb+0x1b2/0x320 [ 38.136117][ T3822] ? __build_skb_around+0x1ab/0x200 [ 38.136149][ T3822] ? __alloc_skb+0x24c/0x320 [ 38.136182][ T3822] tipc_msg_build+0x2e1/0x840 [ 38.136212][ T3822] ? __rcu_read_unlock+0x4f/0x70 [ 38.136337][ T3822] __tipc_sendstream+0x663/0xb20 [ 38.136441][ T3822] ? __pfx_woken_wake_function+0x10/0x10 [ 38.136503][ T3822] tipc_sendstream+0x3e/0x60 [ 38.136561][ T3822] ? __pfx_tipc_sendstream+0x10/0x10 [ 38.136604][ T3822] __sock_sendmsg+0x145/0x180 [ 38.136625][ T3822] ____sys_sendmsg+0x31e/0x4e0 [ 38.136730][ T3822] ___sys_sendmsg+0x17b/0x1d0 [ 38.136787][ T3822] __x64_sys_sendmsg+0xd4/0x160 [ 38.136830][ T3822] x64_sys_call+0x191e/0x3000 [ 38.136899][ T3822] do_syscall_64+0xd2/0x200 [ 38.136980][ T3822] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 38.137033][ T3822] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 38.137068][ T3822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.137103][ T3822] RIP: 0033:0x7fd50f32efc9 [ 38.137123][ T3822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.137145][ T3822] RSP: 002b:00007fd50dd6e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.137222][ T3822] RAX: ffffffffffffffda RBX: 00007fd50f586090 RCX: 00007fd50f32efc9 [ 38.137291][ T3822] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007 [ 38.137307][ T3822] RBP: 00007fd50dd6e090 R08: 0000000000000000 R09: 0000000000000000 [ 38.137322][ T3822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.137389][ T3822] R13: 00007fd50f586128 R14: 00007fd50f586090 R15: 00007ffd22f7ca78 [ 38.137431][ T3822] [ 38.394922][ T3826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.117'. [ 38.404471][ T3826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.117'. [ 38.415185][ T3826] loop3: detected capacity change from 0 to 164 [ 38.430451][ T3826] Unable to read rock-ridge attributes [ 38.436521][ T3826] Unable to read rock-ridge attributes [ 38.494980][ T3835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.121'. [ 38.510471][ T3835] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3835 comm=syz.2.121 [ 38.661008][ T3849] netlink: 'syz.0.127': attribute type 1 has an invalid length. [ 38.679374][ T3850] netlink: 56 bytes leftover after parsing attributes in process `syz.2.124'. [ 38.711297][ T3849] bond1: entered promiscuous mode [ 38.716611][ T3849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.761369][ T3849] serio: Serial port ptm0 [ 38.774909][ T3862] xt_hashlimit: max too large, truncated to 1048576 [ 38.797426][ T3862] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 38.812715][ T3866] netlink: 60 bytes leftover after parsing attributes in process `syz.2.134'. [ 38.844006][ T3873] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 38.852594][ T3873] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 38.866625][ T3866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3866 comm=syz.2.134 [ 38.931330][ T3881] vlan2: entered promiscuous mode [ 38.936437][ T3881] macvlan1: entered promiscuous mode [ 38.948420][ T3882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.957275][ T3882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.057610][ T3881] syz.4.140 (3881) used greatest stack depth: 10528 bytes left [ 39.136593][ T3893] FAULT_INJECTION: forcing a failure. [ 39.136593][ T3893] name failslab, interval 1, probability 0, space 0, times 0 [ 39.149586][ T3893] CPU: 1 UID: 0 PID: 3893 Comm: syz.1.144 Not tainted syzkaller #0 PREEMPT(voluntary) [ 39.149643][ T3893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 39.149655][ T3893] Call Trace: [ 39.149690][ T3893] [ 39.149699][ T3893] __dump_stack+0x1d/0x30 [ 39.149737][ T3893] dump_stack_lvl+0xe8/0x140 [ 39.149812][ T3893] dump_stack+0x15/0x1b [ 39.149841][ T3893] should_fail_ex+0x265/0x280 [ 39.149878][ T3893] should_failslab+0x8c/0xb0 [ 39.149924][ T3893] __kmalloc_noprof+0xa5/0x570 [ 39.149949][ T3893] ? sock_kmalloc+0x85/0xc0 [ 39.150002][ T3893] sock_kmalloc+0x85/0xc0 [ 39.150119][ T3893] ____sys_sendmsg+0xf8/0x4e0 [ 39.150159][ T3893] __sys_sendmsg_sock+0x28/0x40 [ 39.150191][ T3893] io_sendmsg+0x163/0x490 [ 39.150307][ T3893] __io_issue_sqe+0xfe/0x2e0 [ 39.150336][ T3893] ? io_assign_file+0xd9/0x200 [ 39.150408][ T3893] io_issue_sqe+0x56/0xa80 [ 39.150434][ T3893] ? io_sendmsg_prep+0x380/0x3c0 [ 39.150468][ T3893] io_submit_sqes+0x675/0x1060 [ 39.150566][ T3893] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 39.150635][ T3893] ? 0xffffffff81000000 [ 39.150652][ T3893] ? __rcu_read_unlock+0x4f/0x70 [ 39.150696][ T3893] ? get_pid_task+0x96/0xd0 [ 39.150744][ T3893] ? proc_fail_nth_write+0x13b/0x160 [ 39.150829][ T3893] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 39.150853][ T3893] ? vfs_write+0x7e8/0x960 [ 39.150890][ T3893] ? __rcu_read_unlock+0x4f/0x70 [ 39.150928][ T3893] ? __fget_files+0x184/0x1c0 [ 39.150956][ T3893] ? fput+0x8f/0xc0 [ 39.151003][ T3893] __x64_sys_io_uring_enter+0x78/0x90 [ 39.151031][ T3893] x64_sys_call+0x2df0/0x3000 [ 39.151061][ T3893] do_syscall_64+0xd2/0x200 [ 39.151097][ T3893] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 39.151153][ T3893] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 39.151188][ T3893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.151208][ T3893] RIP: 0033:0x7fe2a4d3efc9 [ 39.151289][ T3893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.151311][ T3893] RSP: 002b:00007fe2a379f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 39.151335][ T3893] RAX: ffffffffffffffda RBX: 00007fe2a4f95fa0 RCX: 00007fe2a4d3efc9 [ 39.151394][ T3893] RDX: 0000000000000000 RSI: 0000000000003514 RDI: 0000000000000008 [ 39.151410][ T3893] RBP: 00007fe2a379f090 R08: 0000000000000000 R09: 0000000000000000 [ 39.151425][ T3893] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 39.151439][ T3893] R13: 00007fe2a4f96038 R14: 00007fe2a4f95fa0 R15: 00007ffc0c6dbe08 [ 39.151459][ T3893] [ 39.610978][ T3911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.151'. [ 39.661967][ T3911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3911 comm=syz.0.151 [ 39.778360][ T3924] xt_hashlimit: max too large, truncated to 1048576 [ 39.792729][ T3924] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 39.900451][ T3934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.910042][ T3934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.094314][ T3959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.118758][ T3959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.759898][ T3990] xt_hashlimit: max too large, truncated to 1048576 [ 40.771881][ T3990] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 40.910476][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.969972][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.549624][ T4014] SELinux: failed to load policy [ 41.571152][ T4013] SELinux: failed to load policy [ 41.831434][ T4024] netlink: 'syz.1.196': attribute type 1 has an invalid length. [ 41.839418][ T4024] netlink: 'syz.1.196': attribute type 4 has an invalid length. [ 41.847062][ T4024] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.196'. [ 41.956068][ T4045] netlink: 60 bytes leftover after parsing attributes in process `syz.2.204'. [ 41.986823][ T4045] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4045 comm=syz.2.204 [ 42.029865][ T4051] gretap0: refused to change device tx_queue_len [ 42.036673][ T4051] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.130388][ T4058] lo speed is unknown, defaulting to 1000 [ 42.136335][ T4058] lo speed is unknown, defaulting to 1000 [ 42.148480][ T4058] lo speed is unknown, defaulting to 1000 [ 42.155325][ T4058] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.165487][ T4058] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 42.183379][ T4058] lo speed is unknown, defaulting to 1000 [ 42.210962][ T4058] lo speed is unknown, defaulting to 1000 [ 42.238945][ T4058] lo speed is unknown, defaulting to 1000 [ 42.263053][ T4058] lo speed is unknown, defaulting to 1000 [ 42.281041][ T4058] lo speed is unknown, defaulting to 1000 [ 42.318338][ T4070] 9pnet_fd: Insufficient options for proto=fd [ 42.346229][ T4076] netlink: 'syz.0.214': attribute type 11 has an invalid length. [ 42.478062][ T4088] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4088 comm=syz.3.217 [ 42.499599][ T29] kauditd_printk_skb: 474 callbacks suppressed [ 42.499616][ T29] audit: type=1107 audit(1761101677.075:976): pid=4086 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 42.519316][ T29] audit: type=1326 audit(1761101677.075:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.542735][ T29] audit: type=1326 audit(1761101677.075:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.566046][ T29] audit: type=1326 audit(1761101677.075:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.589441][ T29] audit: type=1326 audit(1761101677.075:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.612765][ T29] audit: type=1326 audit(1761101677.075:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.636020][ T29] audit: type=1326 audit(1761101677.075:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.658421][ T4094] xt_hashlimit: max too large, truncated to 1048576 [ 42.659777][ T29] audit: type=1326 audit(1761101677.075:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.675827][ T4094] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 42.689190][ T29] audit: type=1326 audit(1761101677.075:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.720854][ T29] audit: type=1326 audit(1761101677.075:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4090 comm="syz.2.219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 42.793357][ T4097] gretap0: refused to change device tx_queue_len [ 42.805673][ T4097] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 42.856569][ T4103] 9pnet_fd: Insufficient options for proto=fd [ 42.903123][ T4114] FAULT_INJECTION: forcing a failure. [ 42.903123][ T4114] name failslab, interval 1, probability 0, space 0, times 0 [ 42.916063][ T4114] CPU: 0 UID: 0 PID: 4114 Comm: syz.2.227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 42.916122][ T4114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 42.916138][ T4114] Call Trace: [ 42.916146][ T4114] [ 42.916154][ T4114] __dump_stack+0x1d/0x30 [ 42.916193][ T4114] dump_stack_lvl+0xe8/0x140 [ 42.916313][ T4114] dump_stack+0x15/0x1b [ 42.916346][ T4114] should_fail_ex+0x265/0x280 [ 42.916384][ T4114] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 42.916465][ T4114] should_failslab+0x8c/0xb0 [ 42.916492][ T4114] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 42.916521][ T4114] ? shmem_alloc_inode+0x34/0x50 [ 42.916560][ T4114] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 42.916597][ T4114] shmem_alloc_inode+0x34/0x50 [ 42.916634][ T4114] alloc_inode+0x40/0x170 [ 42.916737][ T4114] new_inode+0x1d/0xe0 [ 42.916823][ T4114] shmem_get_inode+0x244/0x750 [ 42.916859][ T4114] ? __se_sys_memfd_create+0x1cc/0x590 [ 42.916903][ T4114] __shmem_file_setup+0x113/0x210 [ 42.917005][ T4114] shmem_file_setup+0x3b/0x50 [ 42.917037][ T4114] __se_sys_memfd_create+0x2c3/0x590 [ 42.917080][ T4114] __x64_sys_memfd_create+0x31/0x40 [ 42.917194][ T4114] x64_sys_call+0x2ac2/0x3000 [ 42.917296][ T4114] do_syscall_64+0xd2/0x200 [ 42.917353][ T4114] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 42.917434][ T4114] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 42.917463][ T4114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.917484][ T4114] RIP: 0033:0x7fde18a6efc9 [ 42.917500][ T4114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 42.917535][ T4114] RSP: 002b:00007fde174cee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 42.917554][ T4114] RAX: ffffffffffffffda RBX: 000000000000042f RCX: 00007fde18a6efc9 [ 42.917572][ T4114] RDX: 00007fde174ceef0 RSI: 0000000000000000 RDI: 00007fde18af2960 [ 42.917660][ T4114] RBP: 0000200000000940 R08: 00007fde174cebb7 R09: 00007fde174cee40 [ 42.917672][ T4114] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 42.917762][ T4114] R13: 00007fde174ceef0 R14: 00007fde174ceeb0 R15: 0000200000000740 [ 42.917782][ T4114] [ 42.924079][ T4117] netlink: 'syz.3.229': attribute type 11 has an invalid length. [ 42.999131][ T4122] xt_hashlimit: max too large, truncated to 1048576 [ 43.156343][ T4122] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.284871][ T4139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 43.310326][ T4141] tipc: Started in network mode [ 43.315307][ T4141] tipc: Node identity da1dc96f76ff, cluster identity 4711 [ 43.322556][ T4141] tipc: Enabled bearer , priority 0 [ 43.334936][ T4145] loop4: detected capacity change from 0 to 512 [ 43.363305][ T4151] tipc: Disabling bearer [ 43.372142][ T4150] xt_hashlimit: max too large, truncated to 1048576 [ 43.379622][ T4145] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec118, mo2=0002] [ 43.387783][ T4145] System zones: 0-2, 18-18, 34-35 [ 43.394068][ T4150] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.404909][ T4145] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.420784][ T4145] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.440891][ T4145] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.487155][ T4157] gretap0: refused to change device tx_queue_len [ 43.498551][ T4157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 43.517325][ T3488] lo speed is unknown, defaulting to 1000 [ 43.546448][ T4161] __nla_validate_parse: 5 callbacks suppressed [ 43.546463][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 43.570906][ T4161] bridge0: entered promiscuous mode [ 43.576474][ T4161] macvtap1: entered promiscuous mode [ 43.582141][ T4161] macvtap1: entered allmulticast mode [ 43.587562][ T4161] bridge0: entered allmulticast mode [ 43.597925][ T4161] bridge0: left allmulticast mode [ 43.603226][ T4161] bridge0: left promiscuous mode [ 43.669836][ T4174] netlink: 'syz.3.249': attribute type 11 has an invalid length. [ 43.893680][ T4190] xt_hashlimit: max too large, truncated to 1048576 [ 43.901046][ T4190] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 43.930156][ T4186] netlink: 56 bytes leftover after parsing attributes in process `syz.2.256'. [ 44.224233][ T4202] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.390241][ T4213] netlink: 60 bytes leftover after parsing attributes in process `syz.4.267'. [ 44.405325][ T4213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4213 comm=syz.4.267 [ 44.661699][ T4230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.280241][ T4259] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 45.472548][ T4267] netem: incorrect ge model size [ 45.477735][ T4267] netem: change failed [ 45.568157][ T4267] loop4: detected capacity change from 0 to 512 [ 45.569557][ T4267] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 45.586435][ T4267] EXT4-fs (loop4): group descriptors corrupted! [ 45.646818][ T4267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.287'. [ 45.700013][ T4267] loop4: detected capacity change from 0 to 1024 [ 45.707076][ T4267] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.707202][ T4267] EXT4-fs: Ignoring removed bh option [ 45.708600][ T4267] ext3: Unknown parameter 'subj_type' [ 46.179954][ T4289] Zero length message leads to an empty skb [ 46.258789][ T4295] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 46.267465][ T4295] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 46.336198][ T4302] xt_hashlimit: max too large, truncated to 1048576 [ 46.343939][ T4302] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 46.444804][ T4307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 46.591399][ T4316] gretap0: refused to change device tx_queue_len [ 46.647919][ T4316] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 46.750556][ T4329] netlink: 60 bytes leftover after parsing attributes in process `syz.4.313'. [ 46.788848][ T4329] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4329 comm=syz.4.313 [ 46.948707][ T4341] FAULT_INJECTION: forcing a failure. [ 46.948707][ T4341] name failslab, interval 1, probability 0, space 0, times 0 [ 46.948740][ T4341] CPU: 1 UID: 0 PID: 4341 Comm: syz.3.318 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.948769][ T4341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.948790][ T4341] Call Trace: [ 46.948796][ T4341] [ 46.948802][ T4341] __dump_stack+0x1d/0x30 [ 46.948898][ T4341] dump_stack_lvl+0xe8/0x140 [ 46.948927][ T4341] dump_stack+0x15/0x1b [ 46.948952][ T4341] should_fail_ex+0x265/0x280 [ 46.949056][ T4341] should_failslab+0x8c/0xb0 [ 46.949124][ T4341] __kmalloc_noprof+0xa5/0x570 [ 46.949156][ T4341] ? sock_kmalloc+0x85/0xc0 [ 46.949279][ T4341] sock_kmalloc+0x85/0xc0 [ 46.949316][ T4341] __ip_mc_join_group+0x1be/0x2b0 [ 46.949408][ T4341] ip_mc_join_group+0x1f/0x30 [ 46.949497][ T4341] do_ip_setsockopt+0x1e81/0x2240 [ 46.949555][ T4341] ip_setsockopt+0x58/0x110 [ 46.949586][ T4341] raw_setsockopt+0xbd/0x150 [ 46.949620][ T4341] sock_common_setsockopt+0x69/0x80 [ 46.949646][ T4341] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 46.949734][ T4341] __sys_setsockopt+0x184/0x200 [ 46.949768][ T4341] __x64_sys_setsockopt+0x64/0x80 [ 46.949795][ T4341] x64_sys_call+0x20ec/0x3000 [ 46.949825][ T4341] do_syscall_64+0xd2/0x200 [ 46.949891][ T4341] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.949913][ T4341] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.950020][ T4341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.950043][ T4341] RIP: 0033:0x7fce72f5efc9 [ 46.950057][ T4341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.950075][ T4341] RSP: 002b:00007fce719bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 46.950111][ T4341] RAX: ffffffffffffffda RBX: 00007fce731b5fa0 RCX: 00007fce72f5efc9 [ 46.950253][ T4341] RDX: 0000000000000023 RSI: 0000000000000000 RDI: 0000000000000003 [ 46.950266][ T4341] RBP: 00007fce719bf090 R08: 0000000000000008 R09: 0000000000000000 [ 46.950278][ T4341] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.950289][ T4341] R13: 00007fce731b6038 R14: 00007fce731b5fa0 R15: 00007ffdee892f68 [ 46.950310][ T4341] [ 47.109819][ T4349] netlink: 7 bytes leftover after parsing attributes in process `syz.1.321'. [ 47.109863][ T4349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.321'. [ 47.109892][ T4349] netlink: 68 bytes leftover after parsing attributes in process `syz.1.321'. [ 47.248181][ T4354] 9pnet_fd: Insufficient options for proto=fd [ 47.291384][ T4360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4360 comm=syz.1.326 [ 47.454712][ T4368] capability: warning: `syz.3.329' uses deprecated v2 capabilities in a way that may be insecure [ 47.464856][ T4367] netlink: 'syz.2.330': attribute type 11 has an invalid length. [ 47.549491][ T4378] netem: incorrect ge model size [ 47.554571][ T4378] netem: change failed [ 47.673063][ T4385] 9pnet_fd: Insufficient options for proto=fd [ 47.717958][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 47.717976][ T29] audit: type=1326 audit(1761101682.295:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.747740][ T29] audit: type=1326 audit(1761101682.295:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.787362][ T29] audit: type=1326 audit(1761101682.365:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.836912][ T29] audit: type=1326 audit(1761101682.365:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.860733][ T29] audit: type=1326 audit(1761101682.365:1431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.884274][ T29] audit: type=1326 audit(1761101682.395:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.907676][ T29] audit: type=1326 audit(1761101682.395:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.931129][ T29] audit: type=1326 audit(1761101682.395:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.931162][ T29] audit: type=1326 audit(1761101682.395:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 47.931200][ T29] audit: type=1326 audit(1761101682.395:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4362 comm="syz.0.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 48.036029][ T4400] loop4: detected capacity change from 0 to 128 [ 48.041305][ T4400] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.041949][ T4400] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.155397][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.362733][ T4418] 9pnet_fd: Insufficient options for proto=fd [ 48.384985][ T4420] netlink: 'syz.1.349': attribute type 11 has an invalid length. [ 48.427027][ T4425] xt_hashlimit: max too large, truncated to 1048576 [ 48.434757][ T4425] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 48.940029][ T4437] __nla_validate_parse: 9 callbacks suppressed [ 48.940045][ T4437] netlink: 7 bytes leftover after parsing attributes in process `syz.1.355'. [ 48.940196][ T4437] netlink: 32 bytes leftover after parsing attributes in process `syz.1.355'. [ 49.032809][ T4445] siw: device registration error -23 [ 49.119851][ T4448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.358'. [ 49.280004][ T4458] gretap0: refused to change device tx_queue_len [ 49.288380][ T4458] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 49.408989][ T4466] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 49.428173][ T4466] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 49.464569][ T4472] siw: device registration error -23 [ 49.484789][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 49.505808][ T4475] netem: incorrect ge model size [ 49.510852][ T4475] netem: change failed [ 49.537472][ T4475] netlink: 28 bytes leftover after parsing attributes in process `syz.1.371'. [ 50.023863][ T4491] gretap0: refused to change device tx_queue_len [ 50.024509][ T4491] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 50.139031][ T4497] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 50.149021][ T4497] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 50.285267][ T4499] siw: device registration error -23 [ 50.341329][ T4503] xt_hashlimit: max too large, truncated to 1048576 [ 50.342182][ T4503] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.346431][ T4507] netlink: 'syz.2.385': attribute type 11 has an invalid length. [ 50.612826][ T4520] netlink: 60 bytes leftover after parsing attributes in process `syz.1.391'. [ 50.646611][ T4520] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4520 comm=syz.1.391 [ 50.760729][ T4531] siw: device registration error -23 [ 50.792434][ T4534] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4534 comm=syz.4.397 [ 50.857829][ T4543] gretap0: refused to change device tx_queue_len [ 50.872387][ T4543] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 50.939997][ T4552] ucma_write: process 202 (syz.1.404) changed security contexts after opening file descriptor, this is not allowed. [ 51.088061][ T4562] siw: device registration error -23 [ 51.243159][ T4572] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4572 comm=syz.1.412 [ 51.705764][ T4584] gretap0: refused to change device tx_queue_len [ 51.706467][ T4584] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 51.973879][ T4592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.168921][ T4596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.169805][ T4596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.228514][ T4602] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4602 comm=syz.4.423 [ 52.472787][ T4612] xt_hashlimit: max too large, truncated to 1048576 [ 52.480826][ T4612] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.533416][ T4618] xt_hashlimit: max too large, truncated to 1048576 [ 52.541643][ T4618] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.560778][ T4614] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.579355][ T4616] gretap0: refused to change device tx_queue_len [ 52.588833][ T4616] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.680765][ T4626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4626 comm=syz.4.434 [ 52.707207][ T4629] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.777029][ T4634] gretap0: refused to change device tx_queue_len [ 52.784313][ T4634] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 52.790031][ T4640] xt_hashlimit: max too large, truncated to 1048576 [ 52.808047][ T4640] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 52.898032][ T4647] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.932051][ T4649] netlink: 'syz.1.444': attribute type 11 has an invalid length. [ 52.999150][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 52.999215][ T29] audit: type=1326 audit(1761101687.585:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.067367][ T29] audit: type=1326 audit(1761101687.615:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.090975][ T29] audit: type=1326 audit(1761101687.615:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.114540][ T29] audit: type=1326 audit(1761101687.615:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.138216][ T29] audit: type=1326 audit(1761101687.615:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.161738][ T29] audit: type=1326 audit(1761101687.615:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.185291][ T29] audit: type=1326 audit(1761101687.615:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.208652][ T29] audit: type=1326 audit(1761101687.615:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.231956][ T29] audit: type=1326 audit(1761101687.615:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.255337][ T29] audit: type=1326 audit(1761101687.615:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4652 comm="syz.4.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 53.281304][ T4658] 9pnet_fd: Insufficient options for proto=fd [ 53.574896][ T4694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.589127][ T4694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.196674][ T4728] netlink: 'syz.0.475': attribute type 11 has an invalid length. [ 54.629611][ T4755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.648316][ T4755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.098929][ T4773] netlink: 'syz.0.493': attribute type 11 has an invalid length. [ 55.177122][ T4778] __nla_validate_parse: 16 callbacks suppressed [ 55.177141][ T4778] netlink: 7 bytes leftover after parsing attributes in process `syz.0.495'. [ 55.237435][ T4781] siw: device registration error -23 [ 55.245533][ T4784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.296498][ T4783] netlink: 20 bytes leftover after parsing attributes in process `syz.0.497'. [ 55.300861][ T4790] FAULT_INJECTION: forcing a failure. [ 55.300861][ T4790] name failslab, interval 1, probability 0, space 0, times 0 [ 55.318160][ T4790] CPU: 1 UID: 0 PID: 4790 Comm: syz.4.498 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.318190][ T4790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.318206][ T4790] Call Trace: [ 55.318215][ T4790] [ 55.318224][ T4790] __dump_stack+0x1d/0x30 [ 55.318260][ T4790] dump_stack_lvl+0xe8/0x140 [ 55.318320][ T4790] dump_stack+0x15/0x1b [ 55.318345][ T4790] should_fail_ex+0x265/0x280 [ 55.318385][ T4790] should_failslab+0x8c/0xb0 [ 55.318440][ T4790] kmem_cache_alloc_noprof+0x50/0x480 [ 55.318461][ T4790] ? alloc_empty_file+0x76/0x200 [ 55.318518][ T4790] alloc_empty_file+0x76/0x200 [ 55.318557][ T4790] alloc_file_pseudo+0xc6/0x160 [ 55.318690][ T4790] sock_alloc_file+0x9c/0x1e0 [ 55.318711][ T4790] do_accept+0x1e4/0x3a0 [ 55.318818][ T4790] __sys_accept4+0xbf/0x140 [ 55.318842][ T4790] __x64_sys_accept4+0x51/0x60 [ 55.318866][ T4790] x64_sys_call+0x2ee2/0x3000 [ 55.318922][ T4790] do_syscall_64+0xd2/0x200 [ 55.318959][ T4790] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.318982][ T4790] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.319062][ T4790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.319134][ T4790] RIP: 0033:0x7fd50f32efc9 [ 55.319150][ T4790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.319167][ T4790] RSP: 002b:00007fd50dd8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 55.319187][ T4790] RAX: ffffffffffffffda RBX: 00007fd50f585fa0 RCX: 00007fd50f32efc9 [ 55.319199][ T4790] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 55.319210][ T4790] RBP: 00007fd50dd8f090 R08: 0000000000000000 R09: 0000000000000000 [ 55.319221][ T4790] R10: 0000000000080800 R11: 0000000000000246 R12: 0000000000000001 [ 55.319232][ T4790] R13: 00007fd50f586038 R14: 00007fd50f585fa0 R15: 00007ffd22f7ca78 [ 55.319285][ T4790] [ 55.320389][ T4787] FAULT_INJECTION: forcing a failure. [ 55.320389][ T4787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.358091][ T4788] netlink: 272 bytes leftover after parsing attributes in process `syz.0.497'. [ 55.359662][ T4787] CPU: 1 UID: 0 PID: 4787 Comm: syz.2.499 Not tainted syzkaller #0 PREEMPT(voluntary) [ 55.359693][ T4787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 55.359730][ T4787] Call Trace: [ 55.359739][ T4787] [ 55.359748][ T4787] __dump_stack+0x1d/0x30 [ 55.359791][ T4787] dump_stack_lvl+0xe8/0x140 [ 55.359831][ T4787] dump_stack+0x15/0x1b [ 55.359890][ T4787] should_fail_ex+0x265/0x280 [ 55.359933][ T4787] should_fail+0xb/0x20 [ 55.359970][ T4787] should_fail_usercopy+0x1a/0x20 [ 55.360059][ T4787] _copy_to_user+0x20/0xa0 [ 55.360091][ T4787] simple_read_from_buffer+0xb5/0x130 [ 55.360156][ T4787] proc_fail_nth_read+0x10e/0x150 [ 55.360192][ T4787] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 55.360298][ T4787] vfs_read+0x1a8/0x770 [ 55.360355][ T4787] ? __rcu_read_unlock+0x4f/0x70 [ 55.360404][ T4787] ? __fget_files+0x184/0x1c0 [ 55.360435][ T4787] ksys_read+0xda/0x1a0 [ 55.360533][ T4787] __x64_sys_read+0x40/0x50 [ 55.360566][ T4787] x64_sys_call+0x27c0/0x3000 [ 55.360609][ T4787] do_syscall_64+0xd2/0x200 [ 55.360678][ T4787] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 55.360706][ T4787] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 55.360746][ T4787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.360775][ T4787] RIP: 0033:0x7fde18a6d9dc [ 55.360795][ T4787] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 55.360818][ T4787] RSP: 002b:00007fde174cf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 55.360844][ T4787] RAX: ffffffffffffffda RBX: 00007fde18cc5fa0 RCX: 00007fde18a6d9dc [ 55.360861][ T4787] RDX: 000000000000000f RSI: 00007fde174cf0a0 RDI: 0000000000000007 [ 55.360886][ T4787] RBP: 00007fde174cf090 R08: 0000000000000000 R09: 0000000000000000 [ 55.360902][ T4787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.360917][ T4787] R13: 00007fde18cc6038 R14: 00007fde18cc5fa0 R15: 00007ffc1374f1f8 [ 55.360991][ T4787] [ 55.734637][ T4784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.828198][ T4784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.912747][ T4784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.956816][ T4807] gretap0: refused to change device tx_queue_len [ 55.968489][ T4807] net_ratelimit: 3 callbacks suppressed [ 55.968502][ T4807] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 56.017733][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.027941][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.036172][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.054711][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.096410][ T4810] netlink: 'syz.2.505': attribute type 11 has an invalid length. [ 56.225587][ T4819] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 56.239709][ T4819] bond1: entered promiscuous mode [ 56.239889][ T4819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.289903][ T4819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.290416][ T4819] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 56.290433][ T4819] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 56.299742][ T4819] bond1: (slave wireguard0): making interface the new active one [ 56.325517][ T4819] wireguard0: entered promiscuous mode [ 56.330095][ T4829] serio: Serial port ptm0 [ 56.334384][ T4819] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 56.355081][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.355300][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.357089][ T4822] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.545210][ T4843] netlink: 132 bytes leftover after parsing attributes in process `syz.4.516'. [ 57.024413][ T4847] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 57.219616][ T4855] siw: device registration error -23 [ 57.383326][ T4864] xt_hashlimit: max too large, truncated to 1048576 [ 57.424328][ T4864] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 57.502486][ T4872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.528915][ T4872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.562498][ T4876] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 57.608297][ T4876] bond1: entered promiscuous mode [ 57.630379][ T4876] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.659558][ T4881] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.666933][ T4881] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 57.677538][ T4881] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 57.690838][ T4881] bond1: (slave wireguard0): making interface the new active one [ 57.698862][ T4881] wireguard0: entered promiscuous mode [ 57.710341][ T4876] serio: Serial port ptm0 [ 57.716828][ T4881] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 57.741893][ T4884] gretap0: refused to change device tx_queue_len [ 57.758539][ T4884] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 57.870816][ T4888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.039538][ T4895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 58.084271][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 58.084289][ T29] audit: type=1326 audit(1761101692.665:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.150106][ T29] audit: type=1326 audit(1761101692.695:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.173737][ T29] audit: type=1326 audit(1761101692.695:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.197200][ T29] audit: type=1326 audit(1761101692.695:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.220861][ T29] audit: type=1326 audit(1761101692.695:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.244471][ T29] audit: type=1326 audit(1761101692.695:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.244512][ T29] audit: type=1326 audit(1761101692.695:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.244545][ T29] audit: type=1326 audit(1761101692.695:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.2.538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 58.326472][ T29] audit: type=1400 audit(1761101692.905:2146): avc: denied { getopt } for pid=4903 comm="syz.1.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 58.346114][ T4914] gretap0: refused to change device tx_queue_len [ 58.346528][ T4914] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 58.403377][ T4924] xt_hashlimit: max too large, truncated to 1048576 [ 58.412132][ T29] audit: type=1326 audit(1761101692.995:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4911 comm="syz.0.543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 58.439944][ T4924] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 58.507750][ T4936] FAULT_INJECTION: forcing a failure. [ 58.507750][ T4936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.521011][ T4936] CPU: 1 UID: 0 PID: 4936 Comm: syz.3.552 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.521121][ T4936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.521137][ T4936] Call Trace: [ 58.521145][ T4936] [ 58.521153][ T4936] __dump_stack+0x1d/0x30 [ 58.521187][ T4936] dump_stack_lvl+0xe8/0x140 [ 58.521259][ T4936] dump_stack+0x15/0x1b [ 58.521291][ T4936] should_fail_ex+0x265/0x280 [ 58.521343][ T4936] should_fail+0xb/0x20 [ 58.521371][ T4936] should_fail_usercopy+0x1a/0x20 [ 58.521401][ T4936] _copy_from_user+0x1c/0xb0 [ 58.521423][ T4936] core_sys_select+0x1d3/0x6e0 [ 58.521532][ T4936] ? set_user_sigmask+0x84/0x190 [ 58.521574][ T4936] __se_sys_pselect6+0x216/0x280 [ 58.521623][ T4936] __x64_sys_pselect6+0x78/0x90 [ 58.521735][ T4936] x64_sys_call+0x28bd/0x3000 [ 58.521773][ T4936] do_syscall_64+0xd2/0x200 [ 58.521810][ T4936] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.521831][ T4936] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.521909][ T4936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.521936][ T4936] RIP: 0033:0x7fce72f5efc9 [ 58.521973][ T4936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.521994][ T4936] RSP: 002b:00007fce719bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 58.522040][ T4936] RAX: ffffffffffffffda RBX: 00007fce731b5fa0 RCX: 00007fce72f5efc9 [ 58.522052][ T4936] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000040 [ 58.522113][ T4936] RBP: 00007fce719bf090 R08: 0000000000000000 R09: 0000000000000000 [ 58.522128][ T4936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.522142][ T4936] R13: 00007fce731b6038 R14: 00007fce731b5fa0 R15: 00007ffdee892f68 [ 58.522166][ T4936] [ 58.529671][ T4938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.719022][ T4938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.774383][ T4946] FAULT_INJECTION: forcing a failure. [ 58.774383][ T4946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 58.787647][ T4946] CPU: 1 UID: 0 PID: 4946 Comm: syz.3.555 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.787678][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 58.787693][ T4946] Call Trace: [ 58.787699][ T4946] [ 58.787707][ T4946] __dump_stack+0x1d/0x30 [ 58.787815][ T4946] dump_stack_lvl+0xe8/0x140 [ 58.787843][ T4946] dump_stack+0x15/0x1b [ 58.787935][ T4946] should_fail_ex+0x265/0x280 [ 58.787995][ T4946] should_fail+0xb/0x20 [ 58.788137][ T4946] should_fail_usercopy+0x1a/0x20 [ 58.788197][ T4946] _copy_from_user+0x1c/0xb0 [ 58.788221][ T4946] load_msg+0x173/0x2f0 [ 58.788248][ T4946] do_mq_timedsend+0x23e/0x6b0 [ 58.788343][ T4946] __x64_sys_mq_timedsend+0xd1/0x160 [ 58.788378][ T4946] x64_sys_call+0x1d10/0x3000 [ 58.788417][ T4946] do_syscall_64+0xd2/0x200 [ 58.788450][ T4946] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.788476][ T4946] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 58.788505][ T4946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.788607][ T4946] RIP: 0033:0x7fce72f5efc9 [ 58.788623][ T4946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.788640][ T4946] RSP: 002b:00007fce719bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 58.788659][ T4946] RAX: ffffffffffffffda RBX: 00007fce731b5fa0 RCX: 00007fce72f5efc9 [ 58.788671][ T4946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 58.788683][ T4946] RBP: 00007fce719bf090 R08: 0000000000000000 R09: 0000000000000000 [ 58.788694][ T4946] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 58.788705][ T4946] R13: 00007fce731b6038 R14: 00007fce731b5fa0 R15: 00007ffdee892f68 [ 58.788763][ T4946] [ 58.999948][ T4950] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.058589][ T4961] FAULT_INJECTION: forcing a failure. [ 59.058589][ T4961] name failslab, interval 1, probability 0, space 0, times 0 [ 59.071345][ T4961] CPU: 1 UID: 0 PID: 4961 Comm: syz.2.560 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.071372][ T4961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 59.071387][ T4961] Call Trace: [ 59.071395][ T4961] [ 59.071405][ T4961] __dump_stack+0x1d/0x30 [ 59.071442][ T4961] dump_stack_lvl+0xe8/0x140 [ 59.071538][ T4961] dump_stack+0x15/0x1b [ 59.071637][ T4961] should_fail_ex+0x265/0x280 [ 59.071679][ T4961] should_failslab+0x8c/0xb0 [ 59.071769][ T4961] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 59.071827][ T4961] ? __alloc_skb+0x101/0x320 [ 59.071904][ T4961] __alloc_skb+0x101/0x320 [ 59.071938][ T4961] pfkey_sendmsg+0xd7/0x900 [ 59.071967][ T4961] ? avc_has_perm+0xf7/0x180 [ 59.072075][ T4961] ? selinux_socket_sendmsg+0x175/0x1b0 [ 59.072118][ T4961] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 59.072147][ T4961] __sock_sendmsg+0x145/0x180 [ 59.072174][ T4961] ____sys_sendmsg+0x31e/0x4e0 [ 59.072255][ T4961] ___sys_sendmsg+0x17b/0x1d0 [ 59.072339][ T4961] __x64_sys_sendmsg+0xd4/0x160 [ 59.072384][ T4961] x64_sys_call+0x191e/0x3000 [ 59.072419][ T4961] do_syscall_64+0xd2/0x200 [ 59.072452][ T4961] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 59.072527][ T4961] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 59.072563][ T4961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.072639][ T4961] RIP: 0033:0x7fde18a6efc9 [ 59.072658][ T4961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.072710][ T4961] RSP: 002b:00007fde174cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.072728][ T4961] RAX: ffffffffffffffda RBX: 00007fde18cc5fa0 RCX: 00007fde18a6efc9 [ 59.072740][ T4961] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 59.072752][ T4961] RBP: 00007fde174cf090 R08: 0000000000000000 R09: 0000000000000000 [ 59.072794][ T4961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.072806][ T4961] R13: 00007fde18cc6038 R14: 00007fde18cc5fa0 R15: 00007ffc1374f1f8 [ 59.072827][ T4961] [ 59.306593][ T4967] xt_hashlimit: max too large, truncated to 1048576 [ 59.316117][ T4967] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.401121][ T4977] program syz.4.566 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.411468][ T4977] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.511976][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.572'. [ 59.640315][ T4999] netlink: 68 bytes leftover after parsing attributes in process `ÿ'. [ 59.746182][ T5008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.577'. [ 59.755708][ T5008] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 59.766642][ T5007] siw: device registration error -23 [ 59.842365][ T5016] xt_hashlimit: max too large, truncated to 1048576 [ 59.852372][ T5016] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 59.899815][ T5025] netlink: 68 bytes leftover after parsing attributes in process `ÿ'. [ 59.941366][ T5029] netlink: 'syz.3.589': attribute type 1 has an invalid length. [ 59.947170][ T5030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.958248][ T5029] bond3: entered promiscuous mode [ 59.963563][ T5029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 59.965025][ T5030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.982359][ T5029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 59.990087][ T5029] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 60.000727][ T5029] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 60.013124][ T5029] bond3: (slave wireguard1): making interface the new active one [ 60.020984][ T5029] wireguard1: entered promiscuous mode [ 60.029051][ T5029] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 60.030076][ T5034] serio: Serial port ptm0 [ 60.264037][ T5041] siw: device registration error -23 [ 60.543992][ T5054] xt_hashlimit: max too large, truncated to 1048576 [ 60.551747][ T5054] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.586681][ T5056] netlink: 68 bytes leftover after parsing attributes in process `ÿ'. [ 60.642601][ T5063] netlink: 7 bytes leftover after parsing attributes in process `syz.1.602'. [ 60.651830][ T5063] netlink: 88 bytes leftover after parsing attributes in process `syz.1.602'. [ 60.705276][ T5068] siw: device registration error -23 [ 60.803610][ T5081] xt_hashlimit: max too large, truncated to 1048576 [ 60.836541][ T5089] netlink: 12 bytes leftover after parsing attributes in process `ÿ'. [ 60.848440][ T5081] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 60.885419][ T5093] netlink: 7 bytes leftover after parsing attributes in process `syz.2.615'. [ 60.894430][ T5093] netlink: 88 bytes leftover after parsing attributes in process `syz.2.615'. [ 60.993058][ T5111] random: crng reseeded on system resumption [ 61.025131][ T5118] netlink: 12 bytes leftover after parsing attributes in process `ÿ'. [ 61.029434][ T5120] xt_hashlimit: max too large, truncated to 1048576 [ 61.040881][ T5120] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 61.165207][ T5128] syzkaller0: entered promiscuous mode [ 61.170830][ T5128] syzkaller0: entered allmulticast mode [ 61.177943][ T5127] tipc: Enabled bearer , priority 0 [ 61.200566][ T5128] tipc: Resetting bearer [ 61.209407][ T5128] tipc: Disabling bearer [ 61.322136][ T5137] netlink: 7 bytes leftover after parsing attributes in process `syz.1.632'. [ 61.331153][ T5137] netlink: 88 bytes leftover after parsing attributes in process `syz.1.632'. [ 61.439396][ T5147] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.671522][ T5163] ipvlan2: entered promiscuous mode [ 61.696675][ T5165] netlink: 7 bytes leftover after parsing attributes in process `syz.4.644'. [ 61.766456][ T5179] xt_hashlimit: max too large, truncated to 1048576 [ 61.775460][ T5179] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 62.037631][ T5208] gretap0: refused to change device tx_queue_len [ 62.044588][ T5208] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.119795][ T5211] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 62.133446][ T5211] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 62.328874][ T5237] gretap0: refused to change device tx_queue_len [ 62.335520][ T5237] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 62.736002][ T5257] binfmt_misc: register: failed to install interpreter file ./file2 [ 62.881024][ T5268] netlink: 'syz.3.685': attribute type 1 has an invalid length. [ 62.884182][ T5272] siw: device registration error -23 [ 62.900951][ T5268] bond4: entered promiscuous mode [ 62.906256][ T5268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 62.934715][ T5268] 8021q: adding VLAN 0 to HW filter on device bond4 [ 62.942081][ T5268] bond4: (slave wireguard2): The slave device specified does not support setting the MAC address [ 62.952768][ T5268] bond4: (slave wireguard2): Setting fail_over_mac to active for active-backup mode [ 62.973137][ T5268] bond4: (slave wireguard2): making interface the new active one [ 62.981162][ T5268] wireguard2: entered promiscuous mode [ 62.990171][ T5268] bond4: (slave wireguard2): Enslaving as an active interface with an up link [ 63.016521][ T5268] serio: Serial port ptm0 [ 63.166758][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 63.166840][ T29] audit: type=1326 audit(1761101697.745:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.197823][ T29] audit: type=1326 audit(1761101697.745:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.221325][ T29] audit: type=1326 audit(1761101697.745:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.244922][ T29] audit: type=1326 audit(1761101697.745:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.250740][ T5292] xt_hashlimit: max too large, truncated to 1048576 [ 63.268570][ T29] audit: type=1326 audit(1761101697.745:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.276344][ T5292] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.298654][ T29] audit: type=1326 audit(1761101697.745:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.330337][ T29] audit: type=1326 audit(1761101697.745:2779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.353805][ T29] audit: type=1326 audit(1761101697.745:2780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.377419][ T29] audit: type=1326 audit(1761101697.745:2781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.401054][ T29] audit: type=1326 audit(1761101697.745:2782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5263 comm="syz.0.683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce96fcefc9 code=0x7ffc0000 [ 63.424805][ T5290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.575093][ T5310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.584253][ T5310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.940369][ T5325] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 64.015537][ T5330] FAULT_INJECTION: forcing a failure. [ 64.015537][ T5330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 64.028730][ T5330] CPU: 1 UID: 0 PID: 5330 Comm: syz.2.710 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.028765][ T5330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 64.028777][ T5330] Call Trace: [ 64.028785][ T5330] [ 64.028793][ T5330] __dump_stack+0x1d/0x30 [ 64.028891][ T5330] dump_stack_lvl+0xe8/0x140 [ 64.028928][ T5330] dump_stack+0x15/0x1b [ 64.029000][ T5330] should_fail_ex+0x265/0x280 [ 64.029086][ T5330] should_fail+0xb/0x20 [ 64.029115][ T5330] should_fail_usercopy+0x1a/0x20 [ 64.029207][ T5330] _copy_from_user+0x1c/0xb0 [ 64.029235][ T5330] core_sys_select+0x34f/0x6e0 [ 64.029325][ T5330] ? set_user_sigmask+0x84/0x190 [ 64.029363][ T5330] __se_sys_pselect6+0x216/0x280 [ 64.029411][ T5330] __x64_sys_pselect6+0x78/0x90 [ 64.029453][ T5330] x64_sys_call+0x28bd/0x3000 [ 64.029576][ T5330] do_syscall_64+0xd2/0x200 [ 64.029686][ T5330] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 64.029800][ T5330] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 64.029831][ T5330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.029857][ T5330] RIP: 0033:0x7fde18a6efc9 [ 64.029876][ T5330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.029896][ T5330] RSP: 002b:00007fde174cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 64.029920][ T5330] RAX: ffffffffffffffda RBX: 00007fde18cc5fa0 RCX: 00007fde18a6efc9 [ 64.029946][ T5330] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 64.029958][ T5330] RBP: 00007fde174cf090 R08: 0000000000000000 R09: 0000000000000000 [ 64.029969][ T5330] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 64.029980][ T5330] R13: 00007fde18cc6038 R14: 00007fde18cc5fa0 R15: 00007ffc1374f1f8 [ 64.030002][ T5330] [ 64.275564][ T5340] netlink: 'syz.3.714': attribute type 1 has an invalid length. [ 64.291345][ T5340] bond5: entered promiscuous mode [ 64.296864][ T5340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 64.309797][ T5340] 8021q: adding VLAN 0 to HW filter on device bond5 [ 64.317162][ T5340] bond5: (slave wireguard3): The slave device specified does not support setting the MAC address [ 64.327798][ T5340] bond5: (slave wireguard3): Setting fail_over_mac to active for active-backup mode [ 64.341011][ T5340] bond5: (slave wireguard3): making interface the new active one [ 64.348929][ T5340] wireguard3: entered promiscuous mode [ 64.353320][ T5344] xt_hashlimit: max too large, truncated to 1048576 [ 64.362306][ T5344] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 64.373439][ T5340] bond5: (slave wireguard3): Enslaving as an active interface with an up link [ 64.383274][ T5347] serio: Serial port ptm0 [ 64.426669][ T5353] gretap0: refused to change device tx_queue_len [ 64.434267][ T5353] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 64.825728][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.834611][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.144756][ T5394] FAULT_INJECTION: forcing a failure. [ 65.144756][ T5394] name failslab, interval 1, probability 0, space 0, times 0 [ 65.157451][ T5394] CPU: 0 UID: 0 PID: 5394 Comm: syz.3.733 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.157508][ T5394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.157520][ T5394] Call Trace: [ 65.157526][ T5394] [ 65.157533][ T5394] __dump_stack+0x1d/0x30 [ 65.157569][ T5394] dump_stack_lvl+0xe8/0x140 [ 65.157602][ T5394] dump_stack+0x15/0x1b [ 65.157644][ T5394] should_fail_ex+0x265/0x280 [ 65.157702][ T5394] should_failslab+0x8c/0xb0 [ 65.157722][ T5394] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 65.157820][ T5394] ? security_netlbl_sid_to_secattr+0xab/0x140 [ 65.157897][ T5394] kstrdup+0x3e/0xd0 [ 65.157919][ T5394] security_netlbl_sid_to_secattr+0xab/0x140 [ 65.157970][ T5394] selinux_netlbl_inet_conn_request+0x76/0x220 [ 65.158012][ T5394] selinux_inet_conn_request+0x1f4/0x240 [ 65.158058][ T5394] security_inet_conn_request+0x4a/0x90 [ 65.158218][ T5394] tcp_v4_route_req+0x1cb/0x220 [ 65.158245][ T5394] tcp_conn_request+0x76c/0x1960 [ 65.158323][ T5394] tcp_v4_conn_request+0xaa/0x100 [ 65.158394][ T5394] ? tcp_rcv_state_process+0x147/0x20a0 [ 65.158417][ T5394] tcp_v6_conn_request+0x4e/0x1e0 [ 65.158509][ T5394] ? tcp_rcv_state_process+0x147/0x20a0 [ 65.158530][ T5394] tcp_rcv_state_process+0x180/0x20a0 [ 65.158611][ T5394] ? __rcu_read_unlock+0x34/0x70 [ 65.158698][ T5394] ? sk_filter_trim_cap+0x4b8/0x5e0 [ 65.158726][ T5394] tcp_v4_do_rcv+0x5fe/0xa20 [ 65.158812][ T5394] ? tcp_v4_fill_cb+0x185/0x1a0 [ 65.158849][ T5394] tcp_v4_rcv+0x1839/0x1f60 [ 65.158890][ T5394] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 65.158972][ T5394] ip_protocol_deliver_rcu+0x397/0x780 [ 65.159003][ T5394] ip_local_deliver_finish+0x1fc/0x2f0 [ 65.159051][ T5394] ip_local_deliver+0xe8/0x1c0 [ 65.159144][ T5394] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 65.159176][ T5394] ip_rcv_finish+0x194/0x1c0 [ 65.159308][ T5394] ip_rcv+0x62/0x140 [ 65.159398][ T5394] ? __pfx_ip_rcv_finish+0x10/0x10 [ 65.159426][ T5394] ? __pfx_ip_rcv+0x10/0x10 [ 65.159451][ T5394] __netif_receive_skb+0xff/0x270 [ 65.159483][ T5394] ? tun_rx_batched+0xc7/0x430 [ 65.159538][ T5394] netif_receive_skb+0x4b/0x2e0 [ 65.159600][ T5394] ? tun_rx_batched+0xc7/0x430 [ 65.159622][ T5394] tun_rx_batched+0xfc/0x430 [ 65.159648][ T5394] tun_get_user+0x1f35/0x26e0 [ 65.159683][ T5394] ? ref_tracker_alloc+0x1f2/0x2f0 [ 65.159717][ T5394] tun_chr_write_iter+0x15e/0x210 [ 65.159741][ T5394] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 65.159773][ T5394] vfs_write+0x52a/0x960 [ 65.159813][ T5394] ksys_write+0xda/0x1a0 [ 65.159830][ T5394] __x64_sys_write+0x40/0x50 [ 65.159846][ T5394] x64_sys_call+0x2802/0x3000 [ 65.159871][ T5394] do_syscall_64+0xd2/0x200 [ 65.159937][ T5394] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 65.159956][ T5394] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.159980][ T5394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.159999][ T5394] RIP: 0033:0x7fce72f5da7f [ 65.160013][ T5394] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 65.160058][ T5394] RSP: 002b:00007fce719bf000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 65.160142][ T5394] RAX: ffffffffffffffda RBX: 00007fce731b5fa0 RCX: 00007fce72f5da7f [ 65.160153][ T5394] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 00000000000000c8 [ 65.160164][ T5394] RBP: 00007fce719bf090 R08: 0000000000000000 R09: 0000000000000000 [ 65.160175][ T5394] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 65.160186][ T5394] R13: 00007fce731b6038 R14: 00007fce731b5fa0 R15: 00007ffdee892f68 [ 65.160205][ T5394] [ 65.524514][ T5394] syz.3.733 (5394) used greatest stack depth: 10312 bytes left [ 65.551455][ T5399] FAULT_INJECTION: forcing a failure. [ 65.551455][ T5399] name failslab, interval 1, probability 0, space 0, times 0 [ 65.564262][ T5399] CPU: 1 UID: 0 PID: 5399 Comm: syz.4.734 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.564296][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 65.564382][ T5399] Call Trace: [ 65.564391][ T5399] [ 65.564401][ T5399] __dump_stack+0x1d/0x30 [ 65.564440][ T5399] dump_stack_lvl+0xe8/0x140 [ 65.564476][ T5399] dump_stack+0x15/0x1b [ 65.564556][ T5399] should_fail_ex+0x265/0x280 [ 65.564595][ T5399] should_failslab+0x8c/0xb0 [ 65.564622][ T5399] kmem_cache_alloc_noprof+0x50/0x480 [ 65.564649][ T5399] ? alloc_empty_file+0x76/0x200 [ 65.564683][ T5399] ? mntput+0x4b/0x80 [ 65.564717][ T5399] alloc_empty_file+0x76/0x200 [ 65.564763][ T5399] path_openat+0x68/0x2170 [ 65.564807][ T5399] ? _parse_integer_limit+0x170/0x190 [ 65.564912][ T5399] ? kstrtoull+0x111/0x140 [ 65.564948][ T5399] ? kstrtouint+0x76/0xc0 [ 65.564986][ T5399] do_filp_open+0x109/0x230 [ 65.565035][ T5399] do_sys_openat2+0xa6/0x110 [ 65.565144][ T5399] __x64_sys_openat+0xf2/0x120 [ 65.565200][ T5399] x64_sys_call+0x2eab/0x3000 [ 65.565236][ T5399] do_syscall_64+0xd2/0x200 [ 65.565265][ T5399] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 65.565339][ T5399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.565374][ T5399] RIP: 0033:0x7fd50f32efc9 [ 65.565446][ T5399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.565501][ T5399] RSP: 002b:00007fd50dd8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 65.565524][ T5399] RAX: ffffffffffffffda RBX: 00007fd50f585fa0 RCX: 00007fd50f32efc9 [ 65.565540][ T5399] RDX: 0000000000101842 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 65.565555][ T5399] RBP: 00007fd50dd8f090 R08: 0000000000000000 R09: 0000000000000000 [ 65.565570][ T5399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.565585][ T5399] R13: 00007fd50f586038 R14: 00007fd50f585fa0 R15: 00007ffd22f7ca78 [ 65.565661][ T5399] [ 65.822125][ T5402] __nla_validate_parse: 24 callbacks suppressed [ 65.822139][ T5402] netlink: 56 bytes leftover after parsing attributes in process `syz.0.736'. [ 65.933902][ T5413] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.211705][ T5434] netlink: 56 bytes leftover after parsing attributes in process `syz.3.749'. [ 66.760999][ T5465] FAULT_INJECTION: forcing a failure. [ 66.760999][ T5465] name failslab, interval 1, probability 0, space 0, times 0 [ 66.773706][ T5465] CPU: 0 UID: 0 PID: 5465 Comm: syz.0.761 Not tainted syzkaller #0 PREEMPT(voluntary) [ 66.773730][ T5465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 66.773743][ T5465] Call Trace: [ 66.773748][ T5465] [ 66.773755][ T5465] __dump_stack+0x1d/0x30 [ 66.773784][ T5465] dump_stack_lvl+0xe8/0x140 [ 66.773834][ T5465] dump_stack+0x15/0x1b [ 66.773856][ T5465] should_fail_ex+0x265/0x280 [ 66.773905][ T5465] should_failslab+0x8c/0xb0 [ 66.773930][ T5465] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 66.773979][ T5465] ? __alloc_skb+0x101/0x320 [ 66.774009][ T5465] __alloc_skb+0x101/0x320 [ 66.774072][ T5465] ? audit_log_start+0x342/0x720 [ 66.774172][ T5465] audit_log_start+0x3a0/0x720 [ 66.774198][ T5465] ? kstrtouint+0x76/0xc0 [ 66.774225][ T5465] audit_seccomp+0x48/0x100 [ 66.774261][ T5465] ? __seccomp_filter+0x82d/0x1250 [ 66.774279][ T5465] __seccomp_filter+0x83e/0x1250 [ 66.774298][ T5465] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 66.774320][ T5465] ? vfs_write+0x7e8/0x960 [ 66.774335][ T5465] ? __rcu_read_unlock+0x4f/0x70 [ 66.774377][ T5465] ? __fget_files+0x184/0x1c0 [ 66.774399][ T5465] __secure_computing+0x82/0x150 [ 66.774491][ T5465] syscall_trace_enter+0xcf/0x1e0 [ 66.774510][ T5465] do_syscall_64+0xac/0x200 [ 66.774536][ T5465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 66.774554][ T5465] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 66.774624][ T5465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.774642][ T5465] RIP: 0033:0x7fce96fcefc9 [ 66.774712][ T5465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.774732][ T5465] RSP: 002b:00007fce95a2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000007a [ 66.774752][ T5465] RAX: ffffffffffffffda RBX: 00007fce97225fa0 RCX: 00007fce96fcefc9 [ 66.774765][ T5465] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 66.774782][ T5465] RBP: 00007fce95a2f090 R08: 0000000000000000 R09: 0000000000000000 [ 66.774828][ T5465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.774838][ T5465] R13: 00007fce97226038 R14: 00007fce97225fa0 R15: 00007fffee0c3548 [ 66.774938][ T5465] [ 67.068897][ T5476] siw: device registration error -23 [ 67.073237][ T5472] netlink: 56 bytes leftover after parsing attributes in process `syz.0.762'. [ 67.160302][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 67.199033][ T5491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.209788][ T5486] syz.2.771 (5486) used greatest stack depth: 10160 bytes left [ 67.228248][ T5491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.251156][ T5495] netlink: 7 bytes leftover after parsing attributes in process `ÿ'. [ 67.260696][ T5493] process 'syz.0.773' launched '/dev/fd/6' with NULL argv: empty string added [ 67.382538][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 67.394049][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 67.403895][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 67.413255][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.779'. [ 67.523496][ T5521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.930977][ T5534] netlink: 56 bytes leftover after parsing attributes in process `syz.1.789'. [ 68.096055][ T5549] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.187788][ T5555] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.204590][ T29] kauditd_printk_skb: 775 callbacks suppressed [ 68.204608][ T29] audit: type=1326 audit(1761101702.775:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.234474][ T29] audit: type=1326 audit(1761101702.785:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.258841][ T29] audit: type=1326 audit(1761101702.785:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.282198][ T29] audit: type=1326 audit(1761101702.785:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.305863][ T29] audit: type=1326 audit(1761101702.785:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.329432][ T29] audit: type=1326 audit(1761101702.785:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.352870][ T29] audit: type=1326 audit(1761101702.785:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.376267][ T29] audit: type=1326 audit(1761101702.795:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.399595][ T29] audit: type=1326 audit(1761101702.795:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.422984][ T29] audit: type=1326 audit(1761101702.795:3565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5558 comm="syz.3.800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce72f5efc9 code=0x7ffc0000 [ 68.506265][ T5577] syz.1.808 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 68.506667][ T5570] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 68.946030][ T5605] gretap0: refused to change device tx_queue_len [ 68.954751][ T5605] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 69.102783][ T5618] siw: device registration error -23 [ 69.169609][ T5622] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 69.293081][ T5636] 9pnet_fd: Insufficient options for proto=fd [ 69.345876][ T5642] FAULT_INJECTION: forcing a failure. [ 69.345876][ T5642] name failslab, interval 1, probability 0, space 0, times 0 [ 69.345904][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: syz.3.834 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.345930][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.345942][ T5642] Call Trace: [ 69.345967][ T5642] [ 69.345976][ T5642] __dump_stack+0x1d/0x30 [ 69.346013][ T5642] dump_stack_lvl+0xe8/0x140 [ 69.346048][ T5642] dump_stack+0x15/0x1b [ 69.346073][ T5642] should_fail_ex+0x265/0x280 [ 69.346186][ T5642] ? kobject_uevent_env+0x1c0/0x570 [ 69.346258][ T5642] should_failslab+0x8c/0xb0 [ 69.346285][ T5642] __kmalloc_cache_noprof+0x4c/0x4a0 [ 69.346314][ T5642] kobject_uevent_env+0x1c0/0x570 [ 69.346339][ T5642] ? device_pm_check_callbacks+0x683/0x6a0 [ 69.346371][ T5642] kobject_uevent+0x1d/0x30 [ 69.346473][ T5642] device_del+0x710/0x790 [ 69.346513][ T5642] device_destroy+0x66/0xa0 [ 69.346553][ T5642] vcs_remove_sysfs+0x21/0x60 [ 69.346575][ T5642] vc_deallocate+0xfc/0x250 [ 69.346656][ T5642] vt_disallocate_all+0x175/0x200 [ 69.346718][ T5642] vt_ioctl+0x1592/0x18a0 [ 69.346756][ T5642] ? tty_jobctrl_ioctl+0x29e/0x810 [ 69.346828][ T5642] tty_ioctl+0x7d8/0xb80 [ 69.346851][ T5642] ? __pfx_tty_ioctl+0x10/0x10 [ 69.346873][ T5642] __se_sys_ioctl+0xce/0x140 [ 69.346995][ T5642] __x64_sys_ioctl+0x43/0x50 [ 69.347059][ T5642] x64_sys_call+0x1816/0x3000 [ 69.347162][ T5642] do_syscall_64+0xd2/0x200 [ 69.347195][ T5642] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.347216][ T5642] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.347242][ T5642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.347380][ T5642] RIP: 0033:0x7fce72f5efc9 [ 69.347399][ T5642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.347432][ T5642] RSP: 002b:00007fce719bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 69.347455][ T5642] RAX: ffffffffffffffda RBX: 00007fce731b5fa0 RCX: 00007fce72f5efc9 [ 69.347549][ T5642] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000003 [ 69.347568][ T5642] RBP: 00007fce719bf090 R08: 0000000000000000 R09: 0000000000000000 [ 69.347579][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.347615][ T5642] R13: 00007fce731b6038 R14: 00007fce731b5fa0 R15: 00007ffdee892f68 [ 69.347641][ T5642] [ 69.348732][ T5643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.349059][ T5643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.443309][ T5645] 9pnet_fd: Insufficient options for proto=fd [ 69.783312][ T5662] FAULT_INJECTION: forcing a failure. [ 69.783312][ T5662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.796524][ T5662] CPU: 0 UID: 0 PID: 5662 Comm: syz.4.844 Not tainted syzkaller #0 PREEMPT(voluntary) [ 69.796551][ T5662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 69.796573][ T5662] Call Trace: [ 69.796579][ T5662] [ 69.796588][ T5662] __dump_stack+0x1d/0x30 [ 69.796621][ T5662] dump_stack_lvl+0xe8/0x140 [ 69.796708][ T5662] dump_stack+0x15/0x1b [ 69.796732][ T5662] should_fail_ex+0x265/0x280 [ 69.796810][ T5662] should_fail+0xb/0x20 [ 69.796844][ T5662] should_fail_usercopy+0x1a/0x20 [ 69.796875][ T5662] strncpy_from_user+0x25/0x230 [ 69.796916][ T5662] ? kmem_cache_alloc_noprof+0x242/0x480 [ 69.796936][ T5662] ? getname_flags+0x80/0x3b0 [ 69.797082][ T5662] getname_flags+0xae/0x3b0 [ 69.797108][ T5662] do_sys_openat2+0x60/0x110 [ 69.797146][ T5662] __x64_sys_openat+0xf2/0x120 [ 69.797180][ T5662] x64_sys_call+0x2eab/0x3000 [ 69.797270][ T5662] do_syscall_64+0xd2/0x200 [ 69.797308][ T5662] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 69.797333][ T5662] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 69.797368][ T5662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.797405][ T5662] RIP: 0033:0x7fd50f32efc9 [ 69.797423][ T5662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.797454][ T5662] RSP: 002b:00007fd50dd8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 69.797478][ T5662] RAX: ffffffffffffffda RBX: 00007fd50f585fa0 RCX: 00007fd50f32efc9 [ 69.797493][ T5662] RDX: 0000000000105003 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 69.797515][ T5662] RBP: 00007fd50dd8f090 R08: 0000000000000000 R09: 0000000000000000 [ 69.797572][ T5662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.797587][ T5662] R13: 00007fd50f586038 R14: 00007fd50f585fa0 R15: 00007ffd22f7ca78 [ 69.797613][ T5662] [ 70.149030][ T5683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.433420][ T5707] !60ªX¹¦À: renamed from caif0 [ 70.440935][ T5707] !60ªX¹¦À: entered allmulticast mode [ 70.446340][ T5707] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.745164][ T5714] siw: device registration error -23 [ 70.781640][ T5716] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.863591][ T5722] random: crng reseeded on system resumption [ 70.932266][ T5728] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 71.047325][ T5742] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.169502][ T5759] __nla_validate_parse: 6 callbacks suppressed [ 71.169519][ T5759] netlink: 12 bytes leftover after parsing attributes in process `syz.0.882'. [ 72.024182][ T5796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.896'. [ 72.153602][ T5808] FAULT_INJECTION: forcing a failure. [ 72.153602][ T5808] name failslab, interval 1, probability 0, space 0, times 0 [ 72.166502][ T5808] CPU: 1 UID: 0 PID: 5808 Comm: syz.2.900 Not tainted syzkaller #0 PREEMPT(voluntary) [ 72.166529][ T5808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 72.166552][ T5808] Call Trace: [ 72.166566][ T5808] [ 72.166592][ T5808] __dump_stack+0x1d/0x30 [ 72.166648][ T5808] dump_stack_lvl+0xe8/0x140 [ 72.166713][ T5808] dump_stack+0x15/0x1b [ 72.166820][ T5808] should_fail_ex+0x265/0x280 [ 72.166858][ T5808] should_failslab+0x8c/0xb0 [ 72.166879][ T5808] kmem_cache_alloc_noprof+0x50/0x480 [ 72.166918][ T5808] ? audit_log_start+0x342/0x720 [ 72.167024][ T5808] audit_log_start+0x342/0x720 [ 72.167135][ T5808] ? kstrtouint+0x76/0xc0 [ 72.167168][ T5808] audit_seccomp+0x48/0x100 [ 72.167248][ T5808] ? __seccomp_filter+0x82d/0x1250 [ 72.167275][ T5808] __seccomp_filter+0x83e/0x1250 [ 72.167301][ T5808] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 72.167399][ T5808] ? vfs_write+0x7e8/0x960 [ 72.167509][ T5808] __secure_computing+0x82/0x150 [ 72.167533][ T5808] syscall_trace_enter+0xcf/0x1e0 [ 72.167573][ T5808] do_syscall_64+0xac/0x200 [ 72.167630][ T5808] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 72.167657][ T5808] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 72.167689][ T5808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.167752][ T5808] RIP: 0033:0x7fde18a6efc9 [ 72.167800][ T5808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.167821][ T5808] RSP: 002b:00007fde174cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 72.167844][ T5808] RAX: ffffffffffffffda RBX: 00007fde18cc5fa0 RCX: 00007fde18a6efc9 [ 72.167860][ T5808] RDX: 0000000000000008 RSI: 000000000000017c RDI: 000000000000017c [ 72.167875][ T5808] RBP: 00007fde174cf090 R08: 0000000000000000 R09: 0000000000000000 [ 72.167891][ T5808] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 72.167906][ T5808] R13: 00007fde18cc6038 R14: 00007fde18cc5fa0 R15: 00007ffc1374f1f8 [ 72.167970][ T5808] [ 72.959560][ T5836] net_ratelimit: 2 callbacks suppressed [ 72.959569][ T5836] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 73.059712][ T5842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.069065][ T5842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.260654][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.912'. [ 73.270439][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 73.270452][ T29] audit: type=1400 audit(1761101707.855:4076): avc: denied { ioctl } for pid=5847 comm="syz.4.912" path="socket:[12749]" dev="sockfs" ino=12749 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 73.641674][ T5864] 9pnet_fd: Insufficient options for proto=fd [ 73.666074][ T5865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.916'. [ 73.711356][ T29] audit: type=1326 audit(1761101708.295:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a4d3efc9 code=0x7ffc0000 [ 73.734828][ T29] audit: type=1326 audit(1761101708.295:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe2a4d3efc9 code=0x7ffc0000 [ 73.758440][ T29] audit: type=1326 audit(1761101708.295:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a4d3efc9 code=0x7ffc0000 [ 73.796964][ T29] audit: type=1326 audit(1761101708.295:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5869 comm="syz.1.919" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe2a4d3efc9 code=0x7ffc0000 [ 73.820597][ T29] audit: type=1326 audit(1761101708.345:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 73.843985][ T29] audit: type=1326 audit(1761101708.345:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 73.867828][ T29] audit: type=1326 audit(1761101708.345:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 73.891266][ T29] audit: type=1326 audit(1761101708.345:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 73.914724][ T29] audit: type=1326 audit(1761101708.345:4085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5872 comm="syz.2.920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 73.950750][ T5883] netlink: 'syz.2.922': attribute type 1 has an invalid length. [ 73.974894][ T5878] netlink: 56 bytes leftover after parsing attributes in process `syz.1.921'. [ 73.984171][ T5883] bond5: entered promiscuous mode [ 73.989881][ T5883] 8021q: adding VLAN 0 to HW filter on device bond5 [ 74.045317][ T5892] netlink: 56 bytes leftover after parsing attributes in process `syz.1.936'. [ 74.059992][ T5887] 8021q: adding VLAN 0 to HW filter on device bond5 [ 74.067530][ T5887] bond5: (slave wireguard1): The slave device specified does not support setting the MAC address [ 74.078211][ T5887] bond5: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 74.093396][ T5887] bond5: (slave wireguard1): making interface the new active one [ 74.101574][ T5887] wireguard1: entered promiscuous mode [ 74.111758][ T5883] serio: Serial port ptm0 [ 74.113036][ T5887] bond5: (slave wireguard1): Enslaving as an active interface with an up link [ 74.150193][ T5898] 9pnet_fd: Insufficient options for proto=fd [ 74.186538][ T5903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.930'. [ 74.213364][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.222134][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.857967][ T5927] gretap0: refused to change device tx_queue_len [ 74.865267][ T5927] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.000487][ T5933] netlink: 56 bytes leftover after parsing attributes in process `syz.0.941'. [ 75.118958][ T5945] siw: device registration error -23 [ 75.230748][ T5951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.242563][ T5951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.292292][ T5956] netlink: 'syz.4.950': attribute type 1 has an invalid length. [ 75.309637][ T5956] bond3: entered promiscuous mode [ 75.315088][ T5956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.336023][ T5956] 8021q: adding VLAN 0 to HW filter on device bond3 [ 75.345840][ T5956] bond3: (slave wireguard1): The slave device specified does not support setting the MAC address [ 75.356836][ T5956] bond3: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 75.370819][ T5956] bond3: (slave wireguard1): making interface the new active one [ 75.378728][ T5956] wireguard1: entered promiscuous mode [ 75.389112][ T5956] bond3: (slave wireguard1): Enslaving as an active interface with an up link [ 75.390911][ T5964] serio: Serial port ptm0 [ 75.405032][ T5963] gretap0: refused to change device tx_queue_len [ 75.412186][ T5963] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.430472][ T5961] gretap0: refused to change device tx_queue_len [ 75.437743][ T5961] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 75.510098][ T5968] netlink: 56 bytes leftover after parsing attributes in process `syz.0.954'. [ 75.912516][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.925929][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.078982][ T5995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.963'. [ 76.134517][ T5997] gretap0: refused to change device tx_queue_len [ 76.150166][ T5997] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 76.201316][ T5999] netlink: 56 bytes leftover after parsing attributes in process `syz.4.965'. [ 76.333813][ T6014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.973'. [ 76.389926][ T6018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 76.455218][ T6024] 9pnet_fd: Insufficient options for proto=fd [ 76.581959][ T6035] netlink: 56 bytes leftover after parsing attributes in process `syz.2.982'. [ 76.647920][ T6043] netlink: 3 bytes leftover after parsing attributes in process `syz.2.985'. [ 76.657154][ T6043] !60ªX¹¦À: renamed from caif0 [ 76.664457][ T6043] !60ªX¹¦À: entered allmulticast mode [ 76.669938][ T6043] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 76.710451][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.987'. [ 76.827228][ T6055] 9pnet_fd: Insufficient options for proto=fd [ 76.990472][ T6067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.994486][ T6065] netlink: 56 bytes leftover after parsing attributes in process `syz.0.995'. [ 76.999816][ T6067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.169215][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1000'. [ 77.362133][ T6092] siw: device registration error -23 [ 77.418495][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1007'. [ 77.584939][ T6109] random: crng reseeded on system resumption [ 78.122419][ T6131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.253679][ T6140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.273503][ T6140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.392140][ T6150] siw: device registration error -23 [ 78.405809][ T6148] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 78.423693][ T6151] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1024'. [ 78.491361][ T6161] 9pnet_fd: Insufficient options for proto=fd [ 78.525261][ T6165] bridge_slave_1: left allmulticast mode [ 78.531198][ T6165] bridge_slave_1: left promiscuous mode [ 78.537005][ T6165] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.545554][ T6165] bridge_slave_0: left allmulticast mode [ 78.551261][ T6165] bridge_slave_0: left promiscuous mode [ 78.556981][ T6165] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.591057][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 78.591076][ T29] audit: type=1326 audit(1761101713.175:4422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.621166][ T29] audit: type=1400 audit(1761101713.175:4423): avc: denied { ioctl } for pid=6164 comm="syz.3.1032" path="socket:[13198]" dev="sockfs" ino=13198 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 78.646097][ T29] audit: type=1326 audit(1761101713.175:4424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.669637][ T29] audit: type=1326 audit(1761101713.175:4425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.693256][ T29] audit: type=1326 audit(1761101713.175:4426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.716688][ T29] audit: type=1326 audit(1761101713.175:4427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.740268][ T29] audit: type=1326 audit(1761101713.175:4428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.763658][ T29] audit: type=1326 audit(1761101713.175:4429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.787390][ T29] audit: type=1326 audit(1761101713.175:4430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fde18a6efc9 code=0x7ffc0000 [ 78.815688][ T29] audit: type=1326 audit(1761101713.395:4431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.2.1033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fde18a65e67 code=0x7ffc0000 [ 78.843057][ T6170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.990547][ T6189] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6189 comm=syz.3.1041 [ 79.177680][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.186413][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.211914][ T6201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.318097][ T6216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.327352][ T6216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.594394][ T6225] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6225 comm=syz.2.1055 [ 79.684469][ T6229] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 79.814553][ T6231] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.984333][ T6252] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6252 comm=syz.2.1066 [ 80.167450][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.185104][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.325572][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.334856][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.365150][ T6273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.638712][ T6279] 9pnet_fd: Insufficient options for proto=fd [ 80.805313][ T6285] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6285 comm=syz.2.1080 [ 80.916533][ T6292] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.037517][ T6302] 9pnet_fd: Insufficient options for proto=fd [ 81.179498][ T6313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.198806][ T6313] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.268897][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.277923][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.452705][ T6328] __nla_validate_parse: 9 callbacks suppressed [ 81.452721][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1099'. [ 81.469059][ T6328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.483692][ T6328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.573085][ T6332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1100'. [ 81.664867][ T6338] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 81.792897][ T6349] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.913725][ T6360] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 82.312245][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.313023][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.636515][ T6381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.654414][ T6381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.755205][ T6390] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1123'. [ 82.785219][ T6394] 9pnet_fd: Insufficient options for proto=fd [ 83.777766][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.786616][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.888565][ T6439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.897383][ T6439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.905270][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 83.905288][ T29] audit: type=1326 audit(1761101718.475:4771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 83.922490][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1144'. [ 83.935183][ T29] audit: type=1326 audit(1761101718.475:4772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 83.944134][ T6441] bridge_slave_1: left allmulticast mode [ 83.967910][ T29] audit: type=1326 audit(1761101718.475:4773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 83.973257][ T6441] bridge_slave_1: left promiscuous mode [ 83.973478][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.998632][ T29] audit: type=1326 audit(1761101718.475:4774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 84.034847][ T29] audit: type=1326 audit(1761101718.475:4775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 84.058418][ T29] audit: type=1326 audit(1761101718.475:4776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 84.081789][ T29] audit: type=1326 audit(1761101718.475:4777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 84.105259][ T29] audit: type=1326 audit(1761101718.475:4778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 84.128885][ T29] audit: type=1326 audit(1761101718.475:4779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 84.152369][ T29] audit: type=1326 audit(1761101718.475:4780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6437 comm="syz.4.1142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd50f32efc9 code=0x7ffc0000 [ 84.179784][ T6441] bridge_slave_0: left allmulticast mode [ 84.185501][ T6441] bridge_slave_0: left promiscuous mode [ 84.191734][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.438809][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 84.463741][ T6460] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.544673][ T6465] A link change request failed with some changes committed already. Interface !60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 84.594199][ T6473] netlink: 'syz.0.1156': attribute type 1 has an invalid length. [ 84.625550][ T6473] bond7: entered promiscuous mode [ 84.631157][ T6473] 8021q: adding VLAN 0 to HW filter on device bond7 [ 84.664908][ T6473] serio: Serial port ptm0 [ 84.752152][ T6484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1159'. [ 84.901016][ T6503] random: crng reseeded on system resumption [ 85.457264][ T6513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.553355][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.562220][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.903229][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 85.933008][ T6537] bridge_slave_1: left allmulticast mode [ 85.939180][ T6537] bridge_slave_1: left promiscuous mode [ 85.944978][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.065040][ T6537] bridge_slave_0: left allmulticast mode [ 86.070764][ T6537] bridge_slave_0: left promiscuous mode [ 86.076479][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.152854][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 86.334866][ T6547] netlink: 'syz.1.1179': attribute type 1 has an invalid length. [ 86.366257][ T6547] bond4: entered promiscuous mode [ 86.392155][ T6547] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.435446][ T6547] serio: Serial port ptm0 [ 86.642442][ T6567] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 86.776852][ T6572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.786914][ T6572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.212485][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.221438][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.569976][ T6590] 9pnet: Could not find request transport: fd0x0000000000000003 [ 87.685873][ T6599] siw: device registration error -23 [ 87.770187][ T6609] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1200'. [ 87.792407][ T6609] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6609 comm=syz.3.1200 [ 88.062703][ T6623] 9pnet: Could not find request transport: fd0x0000000000000003 [ 88.493661][ T6646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1216'. [ 88.510546][ T6646] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6646 comm=syz.0.1216 [ 88.595764][ T6652] 9pnet_fd: Insufficient options for proto=fd [ 88.631437][ T6655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 88.641322][ T6655] bridge_slave_1: left allmulticast mode [ 88.647016][ T6655] bridge_slave_1: left promiscuous mode [ 88.652966][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.663011][ T6655] bridge_slave_0: left allmulticast mode [ 88.668949][ T6655] bridge_slave_0: left promiscuous mode [ 88.675144][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.751576][ T6662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 88.760996][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.772820][ C0] ================================================================== [ 88.780956][ C0] BUG: KCSAN: data-race in __inet6_lookup_established / inet_put_port [ 88.789159][ C0] [ 88.791597][ C0] write to 0xffff88810344a90e of 2 bytes by task 6663 on cpu 1: [ 88.799249][ C0] inet_put_port+0x197/0x640 [ 88.803930][ C0] __tcp_close+0x5d4/0x1130 [ 88.808458][ C0] tcp_close+0x28/0xd0 [ 88.812543][ C0] inet_release+0xce/0xf0 [ 88.816912][ C0] inet6_release+0x3e/0x60 [ 88.821359][ C0] sock_close+0x6b/0x150 [ 88.825627][ C0] __fput+0x29b/0x650 [ 88.829626][ C0] ____fput+0x1c/0x30 [ 88.833663][ C0] task_work_run+0x131/0x1a0 [ 88.838271][ C0] get_signal+0xe12/0xf70 [ 88.842630][ C0] arch_do_signal_or_restart+0x96/0x440 [ 88.848214][ C0] exit_to_user_mode_loop+0x77/0x110 [ 88.853535][ C0] do_syscall_64+0x1d6/0x200 [ 88.858510][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.864429][ C0] [ 88.866762][ C0] read to 0xffff88810344a90c of 4 bytes by interrupt on cpu 0: [ 88.874357][ C0] __inet6_lookup_established+0x463/0x670 [ 88.880137][ C0] tcp_v6_rcv+0x807/0x1d40 [ 88.884576][ C0] ip6_protocol_deliver_rcu+0xa17/0x10d0 [ 88.890239][ C0] ip6_input_finish+0xf0/0x1d0 [ 88.895041][ C0] ip6_input+0x5e/0x140 [ 88.899237][ C0] ip6_rcv_finish+0x1fa/0x340 [ 88.903952][ C0] ipv6_rcv+0x72/0x150 [ 88.908056][ C0] __netif_receive_skb+0x9e/0x270 [ 88.913109][ C0] process_backlog+0x229/0x420 [ 88.917894][ C0] __napi_poll+0x66/0x310 [ 88.922264][ C0] net_rx_action+0x423/0x8c0 [ 88.926874][ C0] handle_softirqs+0xba/0x290 [ 88.931581][ C0] do_softirq+0x5d/0x90 [ 88.935781][ C0] __local_bh_enable_ip+0x70/0x80 [ 88.940851][ C0] __dev_queue_xmit+0x1200/0x2000 [ 88.945904][ C0] ip6_finish_output2+0xa32/0xd10 [ 88.951058][ C0] ip6_finish_output+0x3a4/0x540 [ 88.956020][ C0] ip6_output+0x10a/0x250 [ 88.960390][ C0] ip6_xmit+0x8f3/0xc40 [ 88.964583][ C0] inet6_csk_xmit+0x217/0x260 [ 88.969324][ C0] __tcp_transmit_skb+0x14cd/0x1c10 [ 88.974554][ C0] tcp_write_xmit+0x129c/0x30f0 [ 88.979614][ C0] __tcp_push_pending_frames+0x6d/0x1b0 [ 88.985187][ C0] tcp_sendmsg_locked+0x1cb2/0x2c00 [ 88.990419][ C0] tcp_sendmsg+0x2f/0x50 [ 88.994702][ C0] inet6_sendmsg+0x76/0xd0 [ 88.999147][ C0] __sock_sendmsg+0x8b/0x180 [ 89.003926][ C0] __sys_sendto+0x268/0x330 [ 89.008458][ C0] __x64_sys_sendto+0x76/0x90 [ 89.013857][ C0] x64_sys_call+0x2d14/0x3000 [ 89.018738][ C0] do_syscall_64+0xd2/0x200 [ 89.023266][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.029789][ C0] [ 89.032131][ C0] value changed: 0x4e22daeb -> 0x0000daeb [ 89.037853][ C0] [ 89.040193][ C0] Reported by Kernel Concurrency Sanitizer on: [ 89.046359][ C0] CPU: 0 UID: 0 PID: 6660 Comm: wÞ£ÿ Not tainted syzkaller #0 PREEMPT(voluntary) [ 89.055751][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 89.066265][ C0] ================================================================== [ 89.079664][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.724240][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 89.724258][ T29] audit: type=1400 audit(1761101724.305:5124): avc: denied { search } for pid=3043 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.752309][ T29] audit: type=1400 audit(1761101724.305:5125): avc: denied { search } for pid=3043 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.774013][ T29] audit: type=1400 audit(1761101724.305:5126): avc: denied { search } for pid=3043 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.795839][ T29] audit: type=1400 audit(1761101724.305:5127): avc: denied { read } for pid=3043 comm="dhcpcd" name="n25" dev="tmpfs" ino=1601 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.817534][ T29] audit: type=1400 audit(1761101724.305:5128): avc: denied { open } for pid=3043 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1601 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.840650][ T29] audit: type=1400 audit(1761101724.305:5129): avc: denied { getattr } for pid=3043 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=1601 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.875037][ T29] audit: type=1400 audit(1761101724.355:5130): avc: denied { read open } for pid=6668 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.901048][ T29] audit: type=1400 audit(1761101724.355:5131): avc: denied { getattr } for pid=6668 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.926390][ T29] audit: type=1400 audit(1761101724.425:5132): avc: denied { add_name } for pid=6667 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.948835][ T29] audit: type=1400 audit(1761101724.425:5133): avc: denied { create } for pid=6667 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 89.971466][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.981080][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.990398][ T12] bond0 (unregistering): Released all slaves [ 89.998875][ T12] bond1 (unregistering): Released all slaves [ 90.006913][ T12] bond2 (unregistering): Released all slaves [ 90.015270][ T12] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 90.023909][ T12] wireguard1: left promiscuous mode [ 90.029870][ T12] bond3 (unregistering): Released all slaves [ 90.038538][ T12] bond4 (unregistering): (slave wireguard2): Releasing backup interface [ 90.046878][ T12] wireguard2: left promiscuous mode [ 90.053053][ T12] bond4 (unregistering): Released all slaves [ 90.062252][ T12] bond5 (unregistering): (slave wireguard3): Releasing backup interface [ 90.070713][ T12] wireguard3: left promiscuous mode [ 90.076764][ T12] bond5 (unregistering): Released all slaves [ 90.084799][ T12] bond6 (unregistering): Released all slaves [ 90.123803][ T12] hsr_slave_0: left promiscuous mode [ 90.129609][ T12] hsr_slave_1: left promiscuous mode [ 90.135357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.177711][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.188693][ T12] team0 (unregistering): Port device team_slave_0 removed [ 90.223927][ T9] lo speed is unknown, defaulting to 1000 [ 90.229739][ T9] infiniband syz0: ib_query_port failed (-19) [ 90.745656][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.820276][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.890684][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.950332][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.049735][ T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.099260][ T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.149459][ T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.199227][ T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.308621][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.360314][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.401596][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.450731][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.527902][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.592047][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.650657][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.701139][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.815146][ T12] bridge_slave_1: left allmulticast mode [ 91.820922][ T12] bridge_slave_1: left promiscuous mode [ 91.826592][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.834455][ T12] bridge_slave_0: left allmulticast mode [ 91.840176][ T12] bridge_slave_0: left promiscuous mode [ 91.845901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.982127][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.992121][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.001524][ T12] bond0 (unregistering): Released all slaves [ 92.010700][ T12] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 92.019119][ T12] wireguard0: left promiscuous mode [ 92.025417][ T12] bond1 (unregistering): Released all slaves [ 92.033541][ T12] bond2 (unregistering): Released all slaves [ 92.042296][ T12] bond3 (unregistering): (slave wireguard1): Releasing backup interface [ 92.050686][ T12] wireguard1: left promiscuous mode [ 92.056737][ T12] bond3 (unregistering): Released all slaves [ 92.120331][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.130186][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.139728][ T12] bond0 (unregistering): Released all slaves [ 92.148264][ T12] bond1 (unregistering): Released all slaves [ 92.156738][ T12] bond2 (unregistering): Released all slaves [ 92.165888][ T12] bond3 (unregistering): Released all slaves [ 92.174245][ T12] bond4 (unregistering): Released all slaves [ 92.182709][ T12] bond5 (unregistering): Released all slaves [ 92.191630][ T12] bond6 (unregistering): Released all slaves [ 92.200218][ T12] bond7 (unregistering): Released all slaves [ 92.224469][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.234354][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.244042][ T12] bond0 (unregistering): Released all slaves [ 92.252554][ T12] bond1 (unregistering): Released all slaves [ 92.260655][ T12] bond2 (unregistering): Released all slaves [ 92.269109][ T12] bond3 (unregistering): Released all slaves [ 92.277885][ T12] bond4 (unregistering): Released all slaves [ 92.303644][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.313379][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.322931][ T12] bond0 (unregistering): Released all slaves [ 92.332070][ T12] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 92.341217][ T12] wireguard0: left promiscuous mode [ 92.347350][ T12] bond1 (unregistering): Released all slaves [ 92.355716][ T12] bond2 (unregistering): Released all slaves [ 92.363951][ T12] bond3 (unregistering): Released all slaves [ 92.372433][ T12] bond4 (unregistering): Released all slaves [ 92.381296][ T12] bond5 (unregistering): (slave wireguard1): Releasing backup interface [ 92.390024][ T12] wireguard1: left promiscuous mode [ 92.396359][ T12] bond5 (unregistering): Released all slaves [ 92.405060][ T12] bond6 (unregistering): Released all slaves [ 92.458906][ T12] tipc: Left network mode [ 92.467898][ T12] hsr_slave_0: left promiscuous mode [ 92.473536][ T12] hsr_slave_1: left promiscuous mode [ 92.479343][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.486833][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.495045][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.502628][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.514193][ T12] hsr_slave_0: left promiscuous mode [ 92.519972][ T12] hsr_slave_1: left promiscuous mode [ 92.525688][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.533143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.540951][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.548435][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.557732][ T12] hsr_slave_0: left promiscuous mode [ 92.563343][ T12] hsr_slave_1: left promiscuous mode [ 92.569136][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.576514][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.585734][ T12] hsr_slave_0: left promiscuous mode [ 92.591430][ T12] hsr_slave_1: left promiscuous mode [ 92.597087][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.604496][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.621573][ T12] veth1_macvtap: left promiscuous mode [ 92.627128][ T12] veth0_macvtap: left promiscuous mode [ 92.632812][ T12] veth1_vlan: left promiscuous mode [ 92.638055][ T12] veth0_vlan: left promiscuous mode [ 92.643873][ T12] veth1_macvtap: left promiscuous mode [ 92.649408][ T12] veth0_macvtap: left promiscuous mode [ 92.655027][ T12] veth1_vlan: left promiscuous mode [ 92.660432][ T12] veth0_vlan: left promiscuous mode [ 92.666264][ T12] veth1_macvtap: left promiscuous mode [ 92.671861][ T12] veth0_macvtap: left promiscuous mode [ 92.677380][ T12] veth1_vlan: left promiscuous mode [ 92.682691][ T12] veth0_vlan: left promiscuous mode [ 92.688423][ T12] veth1_macvtap: left promiscuous mode [ 92.693907][ T12] veth0_macvtap: left promiscuous mode [ 92.699523][ T12] veth1_vlan: left promiscuous mode [ 92.704768][ T12] veth0_vlan: left promiscuous mode [ 92.865687][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.877713][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.930946][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.940669][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.993586][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.003004][ T12] team0 (unregistering): Port device team_slave_0 removed [ 93.055978][ T12] team0 (unregistering): Port device team_slave_1 removed [ 93.065820][ T12] team0 (unregistering): Port device team_slave_0 removed