last executing test programs: 4.686952316s ago: executing program 4 (id=3380): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000008c0)}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, 0x0, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x2}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8, 0x0, 0x2}, 0x18) bind$can_raw(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) close(r6) fchdir(0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0xfffffffffffffff5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r9, 0x0, 0x80001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) times(0xfffffffffffffffe) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0008000000000e00"], &(0x7f00000000c0)='GPL\x00', 0x8, 0xea, &(0x7f0000000380)=""/234, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0x7, 0xa, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[r3, r2, r0, r0, r0, r3, r0, r2, r2], 0x0, 0x10, 0x10}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000740)={@cgroup, 0x22, 0x0, 0x3c0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000240), &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000800)='net/sco\x00') bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000840)={0xda50, 0x0}, 0x8) r14 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000001300), 0x10000, 0x0) pidfd_send_signal(r14, 0x28, &(0x7f0000001340)={0xf, 0x80000001, 0x6}, 0x0) r15 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r15, 0x40045201, &(0x7f0000000040)=0x80000000) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r12, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x004\x00\x00\x00', @ANYRES32=r10, @ANYBLOB="a39af0dea16bf517ea720133c52a0c057ea9619b4152642d994acd59ed028e4602c54c9036190023e5488640bddd582185b0570145889ebe3fdcbe5ba0b5c4f4d471efc3e51e3bf2e45a28eeb0903b93c109fd174ec55df85d233af6683e567ac222a6e3165e0fdcffff", @ANYRES32=r13, @ANYRES64=r11], 0x20) syz_genetlink_get_family_id$nl80211(0x0, r3) 4.686372816s ago: executing program 4 (id=3381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x36}}, @in={0x2, 0x4e24, @private=0xa210102}], 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18) r4 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x2, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x24}, [@call={0x85, 0x0, 0x0, 0xae}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) connect$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.50300222s ago: executing program 4 (id=3382): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="98df034c1000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000408000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0x94, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000010}, 0x800) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r6, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 2.310865245s ago: executing program 0 (id=3406): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f00000012c0)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0, @ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0xc}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d3b4af6e8da1d0a"}}}}}}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x0, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) syz_emit_ethernet(0x104a, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={0x0, r3}, 0x18) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4401e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8000000000000000}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.160437077s ago: executing program 4 (id=3407): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) 1.988746059s ago: executing program 4 (id=3408): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xd, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00', 0x6, 0xffffffffffffffff) 1.952852052s ago: executing program 4 (id=3410): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[@ANYBLOB="98df034c1000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000408000540000000020900020073797a310000000008000a40fffffffc0c00098008000140000000010800084000000001140000001100010000000000000000000100000a"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_io_uring_setup(0x494, &(0x7f0000000400)={0x0, 0x2003f73, 0x100, 0x4, 0x1a}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r5, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r2, 0x3516, 0xf4f5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}]}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002140)={&(0x7f0000002080)={0x94, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000010}, 0x800) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x14, r6, 0x321, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0xa4) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.684465782s ago: executing program 0 (id=3414): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001600)=ANY=[@ANYBLOB="850000002f000000d7000000100000009500000000000000423d19f1e4e058f160906b507e5120a0425f48f9550dcf76fc596696e6f89a4a2b1d29eadfdabd5217ba2d02d98d17b488d5437e04555f3dc719afc000"], &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000001dc0)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES64=r1, @ANYBLOB="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", @ANYRES64=r1, @ANYRESHEX, @ANYBLOB="cf7fbbe01b9c248daa7a07ecceb56a84639afacfc093a8073257c57620c8130b85439823c1c524bf369f847a9d2ccd170f5c9a8fb7e3903b446af905dbab9a61668fd4eb29"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000081001c0086dd600a843500142f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000022", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x9, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200000000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r5, 0x0, 0x6}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x43, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYRES64=r3], 0x2c}, 0x1, 0x0, 0x0, 0x2004c880}, 0x2004c810) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800600080000810000"], 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r8, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x9, 0x214601) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0xfffffffffffffffe, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b000000080000000100010009000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r11, &(0x7f0000000140)={0x11, 0x0, r12, 0x1, 0x6, 0x6, @remote}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 1.496788107s ago: executing program 3 (id=3417): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xffffff89, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.090326217s ago: executing program 1 (id=3422): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) mount$tmpfs(0x0, &(0x7f0000000100)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000140), 0x10008, &(0x7f0000000800)={[{@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x38, 0x35, 0x38, 0x61, 0x66, 0x3d], 0x2d, [0x30, 0x66, 0x64, 0x32], 0x2d, [0x32, 0x62, 0x32, 0x66], 0x2d, [0x35, 0x65, 0x66, 0x66], 0x2d, [0x62, 0x38, 0x65, 0x62, 0x61, 0x65, 0x32, 0x64]}}}]}) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x68, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x32, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8, {0x0, 0x6, "b22820", 0x2, 0x2c, 0xe235d3c44191538b, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [], "3415"}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56bb, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1.076157269s ago: executing program 2 (id=3423): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 1.035602332s ago: executing program 2 (id=3424): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x27, '\x00', r1, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1a000}}], 0x48}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r6 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x0, 0x26d}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) io_uring_enter(r6, 0x749d, 0x4, 0x0, 0x0, 0x0) 926.51688ms ago: executing program 2 (id=3425): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000f140164c4bd7000fcdbdf25090045"], 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x8f, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d80)=@setlink={0x284, 0x13, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x1000, 0x2}, [@IFLA_MAP={0x24, 0xe, {0xe, 0x597f, 0x5, 0x4, 0x40, 0x2}}, @IFLA_VF_PORTS={0x1b8, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "def9147e4da7dfa6526c7ac24a5802ac"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f3e0eaa843086fb2a5648852cffb8529"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x3}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d8923bc73f16092072043d6842de96ad"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "eb9629c652827db8e88cbe15105335a5"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xffff6bb9}, @IFLA_PORT_VF={0x8, 0x1, 0xc71}, @IFLA_PORT_PROFILE={0x14, 0x2, 'kmem_cache_free\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "2ba84981a231dbd05c9ba78c6ac6284f"}, @IFLA_PORT_PROFILE={0x6, 0x2, '&\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e2031b3bc3c6fc98ba3e94134ca6848d"}]}, {0x2c, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0xb, 0x2, '-#{\\.%\x00'}, @IFLA_PORT_PROFILE={0x14, 0x2, 'kmem_cache_free\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4f3a6f6c474a97f89238d5f7edaf30ba"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_PROFILE={0x8, 0x2, 'GPL\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "f920a8b792fe53710a5a42f1e5b10d8a"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9633ec51bb79faecdbecb1171bb05433"}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "355066d63a611f5b94afe81bbb42ee8b"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3d88e7cabe9f0caac36579a60e096a39"}, @IFLA_PORT_VF={0x8, 0x1, 0x8}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "e9c85e8a45f17ca195af9a7bbba9dc30"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x5}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x7}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_VF_PORTS={0x38, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "c7801708adbd5ee185dc7cc8e3e019bf"}, @IFLA_PORT_VF={0x8, 0x1, 0x10001}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "92eed1c783fb891f080dea2b373d79a2"}]}]}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}]}}}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4a7b}]}, 0x284}, 0x1, 0xffffffea}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0x4, 0x6, 0xffff29fe}) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000240)="8000102e75243301", 0x8}, {&(0x7f0000000640)="77628bae70da00aa17769ece552fb4057b7b30d985e0e9151c7513b3ed41dcb70f3b2784d4253a1bb43434c56be896983d8906ff1c6b17603ff27c40978451a658064244da2537ceb2034c459c925e5196ee43ab7e54a79a10a895e92d9d702d8accc54a2a35ef62f20ef801ef9e6412db6c6074f47895c613dae3dd39a87a1faaabd901ed26c7ae26192c783549975e4cb1786afd4ce5873acc737e73f3a0b1988176709986e953410dddb970425d617996a78921c4", 0xb6}], 0x2, &(0x7f0000000180)=[@hopopts_2292={{0x18, 0x29, 0x36, {0x6c}}}], 0x18}}], 0x1, 0x40000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") 805.658949ms ago: executing program 0 (id=3426): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xee, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r2}) 758.328292ms ago: executing program 0 (id=3427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0, 0x0, 0x7fffffff}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01020000000000000000020000030900020073797a30000000000900010073675991280000002e0000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r2 = socket(0x1e, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 653.78512ms ago: executing program 0 (id=3428): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0, 0x0, 0x7fffffff}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) socket(0x1e, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0xbc, &(0x7f0000000280)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000002c0), &(0x7f00000003c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 566.796097ms ago: executing program 0 (id=3429): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a0000000000000000070000", @ANYRES32, @ANYBLOB="00000000000000001c001a8008000280080002000800"], 0x44}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x2040000}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 526.80411ms ago: executing program 3 (id=3430): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 490.566373ms ago: executing program 3 (id=3431): syz_emit_ethernet(0x82, &(0x7f0000001bc0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa0800450000740000000000019078ac1e00017f82bb"], 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x1c, 0x0, &(0x7f0000000000)) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r3, &(0x7f0000000180)="0101", 0x2) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r7 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000400)={0x0, r7, 0x400, 0x1000, 0x4, 0xfffffffffffffff3}) writev(r5, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) clock_gettime(0x0, &(0x7f00000010c0)) clock_gettime(0x0, &(0x7f0000001100)) 469.985284ms ago: executing program 1 (id=3432): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xffff}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f00000002c0), &(0x7f00000008c0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, 0x2}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6, 0x0, 0x2}, 0x18) bind$can_raw(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) close(r4) fchdir(0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x9}, 0xfffffffffffffff5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r7, 0x0, 0x80001}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) times(0xfffffffffffffffe) 459.741505ms ago: executing program 3 (id=3433): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r8) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r10, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000400), &(0x7f00000004c0), 0x8, 0x57, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="fe051d3cbab08e63280b7b9444a3cfc833cb9b87b577db8d9c7250cd1d20e2ba4e66127411047a00c1fc72c11eba739841d7cbce1a552c989d307011da29a2babe3e1fb1da477ee8f7d4a55dfc7e89b46ceba7721b567d35530fc7b77543833f1cb8621fc8e5ebb170421b284d1d868d871e57fd5f99ecbe67fcd66f2d04e3dd1c957b27d82ef57d5bd589868671cd4f0bbf4ecd047186f42d0d614897adeb18", @ANYRES64=r2, @ANYBLOB="1d6e92be833e44a738531734c6c20cf36fa9188b3c724c1006095e5b7c7dca49670194dd0c3f76b65e1139fa4185c4b00d3e3cb403a7767ca6b447679fb57d31bc76c679fa50903aabc122dba6", @ANYRES64=r11, @ANYRES16=0x0, @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x10) 321.962585ms ago: executing program 2 (id=3434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01020000000000000000020000030900020073797a30000000000900010073675991280000002e0000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r1 = socket(0x1e, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 320.328995ms ago: executing program 1 (id=3435): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001940)=@bpf_tracing={0x1a, 0x13, &(0x7f0000001740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, {}, {}, [@map_fd={0x18, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='syzkaller\x00', 0x4, 0x1d, &(0x7f00000001c0)=""/29, 0x41100, 0x5f, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x20bdb, 0xffffffffffffffff, 0x5, &(0x7f00000018c0)=[0xffffffffffffffff, 0x1], &(0x7f0000001840)=[{0x2, 0x2, 0x6, 0x4}, {0x4, 0x5, 0x10, 0x6}, {0x1, 0x4, 0x1f, 0xb}, {0x3, 0x5, 0xa, 0xa}, {0x5, 0x4, 0x10, 0xa}], 0x10, 0x10000000}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0xe, 0xffff}}}, 0x24}}, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x3d9f, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0x2bb}, &(0x7f00000003c0)=0x0, &(0x7f0000000540)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x1e, &(0x7f0000001a80)=ANY=[], 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000140)=0x7, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 255.8113ms ago: executing program 1 (id=3436): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000280)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x27, '\x00', r1, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1a000}}], 0x48}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r6 = syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0x0, 0x26d}, &(0x7f0000000300)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r6}) io_uring_enter(r6, 0x749d, 0x4, 0x0, 0x0, 0x0) 172.513547ms ago: executing program 2 (id=3437): times(0xfffffffffffffffe) 117.572461ms ago: executing program 1 (id=3438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, r0, 0x0, 0x7fffffff}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01020000000000000000020000030900020073797a30000000000900010073675991280000002e0000001100010000000000000000000300000a"], 0x54}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) r2 = socket(0x1e, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000850000000500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 62.958855ms ago: executing program 2 (id=3439): bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="050000000400000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r0, 0x0, 0x7fffffffffffffff}, 0x18) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) fchdir(r2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000001280)=ANY=[@ANYBLOB="180000002d0e666735aa566600000000000000005206c1c1c0d0f488a817a4eb811d4b9ec2a58a99ec551c03ec289f55db730fed1019ce3e294aaaa5d00f4f23f511ea0f542fa5d1618c434ed81cc9e349b639c5442595d4684b60c4b85435c500c4749118ef286cd70de979400bf04988a4147f90fb06bd7d5837fa1291f0b65f618939b3fb6fc0b7ef85005ee5fdd8d7a6c67d2865737e9585021b27b900e878f500c0b67c726e075e7c8407c8c322bb85b7dc02802f39fdcfee4da344a63ad3fe0e5ef3e40965f5d044cfe9c42ad11a0f68ebaba372ea0021000000000000631f4366", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x5f) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) lsm_set_self_attr(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="65000000000000000300002809"], 0x43, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x391cc40fecd11fba) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1818413, &(0x7f0000000080)={[{@data_journal}]}, 0xfd, 0x5bb, &(0x7f0000000740)="$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") fdatasync(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8540, 0x0) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000d00)={0x0, 0x0, 0x9}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000001400)={r6, "75fd406f7ccb2418e59a7504f9994f86"}) setsockopt$MRT_ADD_MFC(r4, 0x0, 0x5, &(0x7f0000000240)={@multicast2, @dev={0xac, 0x14, 0x14, 0x3b}, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) 47.077506ms ago: executing program 3 (id=3440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eaff"], 0xa8}}, 0x82) 2.136259ms ago: executing program 3 (id=3441): r0 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xffffff89, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=3442): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) pidfd_send_signal(r1, 0x2, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000a80)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYBLOB="fe051d3cbab08e63280b7b9444a3cfc833cb9b87b577db8d9c7250cd1d20e2ba4e66127411047a00c1fc72c11eba739841d7cbce1a552c989d307011da29a2babe3e1fb1da477ee8f7d4a55dfc7e89b46ceba7721b567d35530fc7b77543833f1cb8621fc8e5ebb170421b284d1d868d871e57fd5f99ecbe67fcd66f2d04e3dd1c957b27d82ef57d5bd589868671cd4f0bbf4ecd047186f42d0d614897adeb18", @ANYRES64=r2, @ANYBLOB="1d6e92be833e44a738531734c6c20cf36fa9188b3c724c1006095e5b7c7dca49670194dd0c3f76b65e1139fa4185c4b00d3e3cb403a7767ca6b447679fb57d31bc76c679fa50903aabc122dba6", @ANYRES64=r9, @ANYRES16=0x0, @ANYRESDEC=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) kernel console output (not intermixed with test programs): ysadm_r:sysadm_t pid=10523 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 195.551023][ T29] audit: type=1326 audit(1765616489.733:17922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 195.574769][ T29] audit: type=1326 audit(1765616489.733:17923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 195.598393][ T29] audit: type=1326 audit(1765616489.733:17924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 195.621908][ T29] audit: type=1326 audit(1765616489.733:17925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 195.645593][ T29] audit: type=1326 audit(1765616489.733:17926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.0.2513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 195.673062][T10527] netlink: 'syz.4.2514': attribute type 1 has an invalid length. [ 195.680905][T10527] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2514'. [ 195.709407][T10531] netlink: 'syz.4.2515': attribute type 3 has an invalid length. [ 195.777390][T10533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2516'. [ 195.812755][T10535] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2517'. [ 195.912349][T10551] netlink: 'syz.3.2525': attribute type 1 has an invalid length. [ 195.920233][T10551] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2525'. [ 196.019106][T10550] vlan2: entered allmulticast mode [ 196.271796][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 197.436357][T10583] SELinux: Context @ is not valid (left unmapped). [ 200.010267][T10734] __nla_validate_parse: 16 callbacks suppressed [ 200.010284][T10734] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2600'. [ 200.326643][T10752] netlink: 'syz.4.2606': attribute type 3 has an invalid length. [ 200.406206][T10759] lo speed is unknown, defaulting to 1000 [ 200.412037][T10759] lo speed is unknown, defaulting to 1000 [ 200.418270][T10759] lo speed is unknown, defaulting to 1000 [ 200.424309][T10759] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 200.431991][T10759] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.457041][T10759] lo speed is unknown, defaulting to 1000 [ 200.463397][T10759] lo speed is unknown, defaulting to 1000 [ 200.470336][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 200.470408][ T29] audit: type=1326 audit(1765616494.813:18115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.500335][ T29] audit: type=1326 audit(1765616494.813:18116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.523937][ T29] audit: type=1326 audit(1765616494.833:18117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.525603][T10759] lo speed is unknown, defaulting to 1000 [ 200.547660][ T29] audit: type=1326 audit(1765616494.833:18119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.547689][ T29] audit: type=1326 audit(1765616494.833:18118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.556095][T10762] netlink: 'syz.2.2610': attribute type 13 has an invalid length. [ 200.577036][ T29] audit: type=1326 audit(1765616494.833:18121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.631997][ T29] audit: type=1326 audit(1765616494.833:18120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.636428][T10759] lo speed is unknown, defaulting to 1000 [ 200.655584][ T29] audit: type=1326 audit(1765616494.833:18122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.684793][ T29] audit: type=1326 audit(1765616494.833:18123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.708552][ T29] audit: type=1326 audit(1765616494.833:18124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10761 comm="syz.2.2610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 200.733057][T10759] lo speed is unknown, defaulting to 1000 [ 200.925468][T10770] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2612'. [ 201.199486][T10791] netlink: 'syz.0.2620': attribute type 1 has an invalid length. [ 201.207387][T10791] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2620'. [ 201.456679][T10803] netlink: 'syz.4.2623': attribute type 13 has an invalid length. [ 201.500164][T10805] netlink: 'syz.4.2624': attribute type 13 has an invalid length. [ 201.598386][T10810] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2625'. [ 201.644615][T10818] netlink: 'syz.0.2629': attribute type 3 has an invalid length. [ 201.752946][T10823] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 201.760770][T10823] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2631'. [ 201.909440][T10833] netlink: 'syz.4.2634': attribute type 13 has an invalid length. [ 202.135928][T10845] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2639'. [ 202.179367][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2641'. [ 202.225120][T10857] netlink: 'syz.4.2643': attribute type 1 has an invalid length. [ 202.232929][T10857] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2643'. [ 202.322267][T10867] netlink: 'syz.1.2647': attribute type 13 has an invalid length. [ 202.829312][T10890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2655'. [ 202.840553][T10890] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 202.851002][T10890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2655'. [ 202.860832][T10890] net_ratelimit: 9 callbacks suppressed [ 202.860849][T10890] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 203.676769][T10889] delete_channel: no stack [ 204.673018][T10973] lo speed is unknown, defaulting to 1000 [ 205.133544][T10999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.187313][T10999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.210709][ T3375] lo speed is unknown, defaulting to 1000 [ 205.216549][ T3375] syz2: Port: 1 Link ACTIVE [ 205.526620][ T29] kauditd_printk_skb: 545 callbacks suppressed [ 205.526687][ T29] audit: type=1326 audit(1765616499.883:18670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 205.565280][ T29] audit: type=1326 audit(1765616499.913:18671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 205.589024][ T29] audit: type=1326 audit(1765616499.913:18672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 205.612638][ T29] audit: type=1326 audit(1765616499.913:18673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 205.636323][ T29] audit: type=1326 audit(1765616499.913:18674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 205.660056][ T29] audit: type=1326 audit(1765616499.913:18675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11004 comm="syz.4.2698" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 205.691707][ T29] audit: type=1326 audit(1765616500.043:18676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 205.715320][ T29] audit: type=1326 audit(1765616500.043:18677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 205.741644][ T29] audit: type=1326 audit(1765616500.093:18678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 205.765236][ T29] audit: type=1326 audit(1765616500.093:18679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11010 comm="syz.0.2701" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 206.006264][T11022] lo speed is unknown, defaulting to 1000 [ 206.129817][T11022] chnl_net:caif_netlink_parms(): no params data found [ 206.306068][T11022] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.313235][T11022] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.329291][T11022] bridge_slave_0: entered allmulticast mode [ 206.336855][T11022] bridge_slave_0: entered promiscuous mode [ 206.369789][T11022] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.376951][T11022] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.389425][T11022] bridge_slave_1: entered allmulticast mode [ 206.396069][T11022] bridge_slave_1: entered promiscuous mode [ 206.419302][T11022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.430246][T11022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.472565][T11070] __nla_validate_parse: 2 callbacks suppressed [ 206.472584][T11070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2720'. [ 206.548102][T11022] team0: Port device team_slave_0 added [ 206.560827][T11022] team0: Port device team_slave_1 added [ 206.603460][T11022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.610665][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.636624][T11022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.734303][T11022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.741375][T11022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.767421][T11022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.914845][T11022] hsr_slave_0: entered promiscuous mode [ 206.928958][T11022] hsr_slave_1: entered promiscuous mode [ 206.939834][T11022] debugfs: 'hsr0' already exists in 'hsr' [ 206.945624][T11022] Cannot create hsr debugfs directory [ 207.100470][T11093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2729'. [ 207.102971][T11080] vlan2: entered allmulticast mode [ 207.739210][ T4315] bridge_slave_1: left allmulticast mode [ 207.744976][ T4315] bridge_slave_1: left promiscuous mode [ 207.750692][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.769739][ T4315] bridge_slave_0: left allmulticast mode [ 207.775570][ T4315] bridge_slave_0: left promiscuous mode [ 207.781383][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.799944][T11129] xt_l2tp: invalid flags combination: c [ 207.967597][ T4315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.976554][ T4315] bond_slave_0: left promiscuous mode [ 207.982077][ T4315] bond_slave_0: left allmulticast mode [ 207.988750][ T4315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.997669][ T4315] bond_slave_1: left promiscuous mode [ 208.003207][ T4315] bond_slave_1: left allmulticast mode [ 208.009784][ T4315] bond0 (unregistering): Released all slaves [ 208.018466][T11129] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 208.040225][T11022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 208.143277][T11022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 208.155770][T11022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 208.166269][ T4315] hsr_slave_0: left promiscuous mode [ 208.172196][ T4315] hsr_slave_1: left promiscuous mode [ 208.177954][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.193200][ T4315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.255864][T11134] validate_nla: 5 callbacks suppressed [ 208.255885][T11134] netlink: 'syz.0.2744': attribute type 13 has an invalid length. [ 208.320307][ T4315] batman_adv: batadv0: Removing interface: dummy0 [ 208.683470][T11022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 208.711669][T11134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.720497][T11134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.811063][T11022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.835627][T11022] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.853589][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.860717][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.880349][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.887557][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.089726][T11022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.280158][T11022] veth0_vlan: entered promiscuous mode [ 209.297693][T11022] veth1_vlan: entered promiscuous mode [ 209.333831][T11022] veth0_macvtap: entered promiscuous mode [ 209.358258][T11022] veth1_macvtap: entered promiscuous mode [ 209.378469][T11022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.394911][T11022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.406826][ T4298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.453694][ T4335] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.466000][ T4335] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.475222][ T4335] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.549057][T11195] netlink: 'syz.1.2758': attribute type 13 has an invalid length. [ 209.979862][T11195] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 210.025618][T11204] set_capacity_and_notify: 5 callbacks suppressed [ 210.025636][T11204] loop3: detected capacity change from 0 to 128 [ 210.452439][T11228] lo speed is unknown, defaulting to 1000 [ 210.967205][T11250] netlink: 'syz.2.2780': attribute type 13 has an invalid length. [ 210.990721][T11250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.065232][T11250] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.380089][T11259] netlink: 'syz.0.2784': attribute type 1 has an invalid length. [ 211.430491][T11259] bond1: entered promiscuous mode [ 211.435643][T11259] bond1: entered allmulticast mode [ 211.458379][T11259] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.490047][T11264] erspan1: entered allmulticast mode [ 211.565336][T11259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2784'. [ 211.576437][T11264] bond1: (slave erspan1): making interface the new active one [ 211.583936][T11264] erspan1: entered promiscuous mode [ 211.598634][T11264] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 211.659230][T11259] bond1 (unregistering): (slave erspan1): Releasing active interface [ 211.679150][T11259] erspan1: left promiscuous mode [ 211.701634][T11259] bond1 (unregistering): Released all slaves [ 212.049765][T11286] netlink: 'syz.2.2792': attribute type 13 has an invalid length. [ 212.061800][T11286] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 212.623234][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2793'. [ 213.004584][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 213.004602][ T29] audit: type=1326 audit(1765616507.353:18795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 213.066553][ T29] audit: type=1326 audit(1765616507.373:18796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 213.090282][ T29] audit: type=1326 audit(1765616507.373:18797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 213.113880][ T29] audit: type=1326 audit(1765616507.393:18798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 213.137604][ T29] audit: type=1326 audit(1765616507.393:18799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 213.161380][ T29] audit: type=1326 audit(1765616507.393:18800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11306 comm="syz.0.2800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd80322f749 code=0x7ffc0000 [ 213.185116][ T29] audit: type=1326 audit(1765616507.393:18801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 213.208794][ T29] audit: type=1326 audit(1765616507.393:18802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 213.232338][ T29] audit: type=1326 audit(1765616507.393:18803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 213.256010][ T29] audit: type=1326 audit(1765616507.393:18804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11308 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 213.335782][T11315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2802'. [ 213.481881][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2807'. [ 214.235659][T11358] netlink: 'syz.2.2815': attribute type 3 has an invalid length. [ 214.656060][T11381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2825'. [ 214.681611][T11387] netlink: 'syz.1.2828': attribute type 3 has an invalid length. [ 214.979076][T11391] lo speed is unknown, defaulting to 1000 [ 215.058902][T11407] netlink: 'syz.4.2831': attribute type 13 has an invalid length. [ 215.084883][T11407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.205177][T11407] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.242045][T11391] chnl_net:caif_netlink_parms(): no params data found [ 215.386336][T11391] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.393492][T11391] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.409679][T11391] bridge_slave_0: entered allmulticast mode [ 215.416540][T11391] bridge_slave_0: entered promiscuous mode [ 215.427081][T11391] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.434266][T11391] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.441478][T11391] bridge_slave_1: entered allmulticast mode [ 215.448125][T11391] bridge_slave_1: entered promiscuous mode [ 215.454954][ T4293] batadv0: left allmulticast mode [ 215.460149][ T4293] batadv0: left promiscuous mode [ 215.465258][ T4293] bridge0: port 3(batadv0) entered disabled state [ 215.522401][ T4293] bond0 (unregistering): Released all slaves [ 215.544683][T11391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.558987][T11391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.582049][T11391] team0: Port device team_slave_0 added [ 215.589640][ T4293] hsr_slave_0: left promiscuous mode [ 215.598555][ T4293] hsr_slave_1: left promiscuous mode [ 215.668064][T11391] team0: Port device team_slave_1 added [ 215.738265][T11391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.741310][T11428] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2838'. [ 215.745397][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.780300][T11391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.812164][T11391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.819256][T11391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.845252][T11391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.882830][T11433] loop3: detected capacity change from 0 to 128 [ 215.913837][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2841'. [ 215.931572][T11391] hsr_slave_0: entered promiscuous mode [ 215.937919][T11391] hsr_slave_1: entered promiscuous mode [ 215.943919][T11391] debugfs: 'hsr0' already exists in 'hsr' [ 215.949710][T11391] Cannot create hsr debugfs directory [ 217.037309][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.046296][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.064761][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.104140][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.113132][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.139060][T11456] FAULT_INJECTION: forcing a failure. [ 217.139060][T11456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.152245][T11456] CPU: 0 UID: 0 PID: 11456 Comm: syz.3.2847 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 217.152280][T11456] Tainted: [W]=WARN [ 217.152287][T11456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 217.152337][T11456] Call Trace: [ 217.152342][T11456] [ 217.152350][T11456] __dump_stack+0x1d/0x30 [ 217.152375][T11456] dump_stack_lvl+0xe8/0x140 [ 217.152437][T11456] dump_stack+0x15/0x1b [ 217.152457][T11456] should_fail_ex+0x265/0x280 [ 217.152483][T11456] should_fail+0xb/0x20 [ 217.152519][T11456] should_fail_usercopy+0x1a/0x20 [ 217.152557][T11456] _copy_to_user+0x20/0xa0 [ 217.152588][T11456] simple_read_from_buffer+0xb5/0x130 [ 217.152633][T11456] proc_fail_nth_read+0x10e/0x150 [ 217.152659][T11456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.152688][T11456] vfs_read+0x1a8/0x770 [ 217.152707][T11456] ? __rcu_read_unlock+0x4f/0x70 [ 217.152769][T11456] ? __fget_files+0x184/0x1c0 [ 217.152794][T11456] ? mutex_lock+0x58/0x90 [ 217.152822][T11456] ksys_read+0xda/0x1a0 [ 217.152843][T11456] __x64_sys_read+0x40/0x50 [ 217.152862][T11456] x64_sys_call+0x2889/0x3000 [ 217.152934][T11456] do_syscall_64+0xd8/0x2a0 [ 217.152969][T11456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.152992][T11456] RIP: 0033:0x7f002f7ce15c [ 217.153007][T11456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.153045][T11456] RSP: 002b:00007f002e237030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.153066][T11456] RAX: ffffffffffffffda RBX: 00007f002fa25fa0 RCX: 00007f002f7ce15c [ 217.153079][T11456] RDX: 000000000000000f RSI: 00007f002e2370a0 RDI: 0000000000000004 [ 217.153093][T11456] RBP: 00007f002e237090 R08: 0000000000000000 R09: 0000000000000000 [ 217.153106][T11456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.153137][T11456] R13: 00007f002fa26038 R14: 00007f002fa25fa0 R15: 00007ffd94e201a8 [ 217.153156][T11456] [ 217.162347][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2848'. [ 217.180711][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.398936][T11467] lo speed is unknown, defaulting to 1000 [ 217.441138][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.450231][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 217.465917][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2845'. [ 218.217264][T11391] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.227555][T11391] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.236890][T11391] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.254763][T11391] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.310165][T11391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.322486][T11391] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.333486][ T4301] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.340581][ T4301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.458121][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.465254][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.526513][ T29] kauditd_printk_skb: 502 callbacks suppressed [ 218.526528][ T29] audit: type=1326 audit(1765616512.883:19307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.563099][ T29] audit: type=1326 audit(1765616512.913:19308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.586832][ T29] audit: type=1326 audit(1765616512.913:19309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.610550][ T29] audit: type=1326 audit(1765616512.913:19310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.634304][ T29] audit: type=1326 audit(1765616512.913:19311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.658039][ T29] audit: type=1326 audit(1765616512.913:19312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.681674][ T29] audit: type=1326 audit(1765616512.913:19313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.705283][ T29] audit: type=1326 audit(1765616512.913:19314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.729042][ T29] audit: type=1326 audit(1765616512.913:19315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.752586][ T29] audit: type=1326 audit(1765616512.913:19316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11510 comm="syz.1.2865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 218.892818][T11391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.458924][T11391] veth0_vlan: entered promiscuous mode [ 219.484306][T11391] veth1_vlan: entered promiscuous mode [ 219.596608][T11553] hub 9-0:1.0: USB hub found [ 219.601539][T11553] hub 9-0:1.0: 8 ports detected [ 219.638487][T11391] veth0_macvtap: entered promiscuous mode [ 219.652162][T11391] veth1_macvtap: entered promiscuous mode [ 219.669676][T11391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.682475][T11391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.733766][ T156] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.749876][ T156] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.758899][ T156] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.766853][T11555] netlink: 'syz.1.2876': attribute type 3 has an invalid length. [ 219.767871][ T156] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.074820][T11570] netlink: 'syz.0.2880': attribute type 3 has an invalid length. [ 221.692385][T11623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11623 comm=syz.4.2901 [ 222.165662][T11635] netlink: 'syz.0.2905': attribute type 13 has an invalid length. [ 222.447403][T11662] netlink: 'syz.0.2918': attribute type 13 has an invalid length. [ 222.505229][T11665] sit0: entered promiscuous mode [ 222.522202][T11665] netlink: 'syz.0.2919': attribute type 1 has an invalid length. [ 222.530182][T11665] __nla_validate_parse: 5 callbacks suppressed [ 222.530198][T11665] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2919'. [ 222.541498][T11594] loop3: detected capacity change from 0 to 4096 [ 222.739869][T11594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.949646][T11691] netlink: 'syz.3.2891': attribute type 5 has an invalid length. [ 223.054931][T11594] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2891'. [ 223.472976][T11706] lo speed is unknown, defaulting to 1000 [ 223.532227][T11022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.547618][T11712] netlink: 'syz.2.2937': attribute type 3 has an invalid length. [ 223.749566][T11720] vlan2: entered allmulticast mode [ 223.997912][T11730] sit0: entered promiscuous mode [ 224.014700][T11730] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 224.022493][T11730] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2945'. [ 224.117258][T11735] netlink: 'syz.1.2947': attribute type 1 has an invalid length. [ 224.125110][T11735] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2947'. [ 224.209563][ T29] kauditd_printk_skb: 402 callbacks suppressed [ 224.209583][ T29] audit: type=1326 audit(1765616518.563:19719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05702265e7 code=0x7ffc0000 [ 224.307080][ T29] audit: type=1326 audit(1765616518.563:19720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05701cb829 code=0x7ffc0000 [ 224.330713][ T29] audit: type=1326 audit(1765616518.563:19721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05702265e7 code=0x7ffc0000 [ 224.354604][ T29] audit: type=1326 audit(1765616518.563:19722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05701cb829 code=0x7ffc0000 [ 224.378177][ T29] audit: type=1326 audit(1765616518.563:19723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 224.401764][ T29] audit: type=1326 audit(1765616518.563:19724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 224.425361][ T29] audit: type=1326 audit(1765616518.563:19725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f057022f749 code=0x7ffc0000 [ 224.448974][ T29] audit: type=1326 audit(1765616518.563:19726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05702265e7 code=0x7ffc0000 [ 224.472992][ T29] audit: type=1326 audit(1765616518.563:19727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f05701cb829 code=0x7ffc0000 [ 224.496522][ T29] audit: type=1326 audit(1765616518.563:19728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11736 comm="syz.1.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f05702265e7 code=0x7ffc0000 [ 224.747921][T11761] netlink: 'syz.0.2956': attribute type 13 has an invalid length. [ 224.822051][T11767] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2960'. [ 225.130451][T11779] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.385916][T11779] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.468991][T11779] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.547762][T11779] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.650667][ T4327] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.666567][ T4327] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.690345][ T4329] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.702877][ T4329] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.778318][T11803] validate_nla: 1 callbacks suppressed [ 225.778336][T11803] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 225.791621][T11803] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2971'. [ 225.886468][T11807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2973'. [ 226.050220][T11805] vlan2: entered allmulticast mode [ 226.057090][T11805] geneve1: entered allmulticast mode [ 226.065974][T11811] FAULT_INJECTION: forcing a failure. [ 226.065974][T11811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.079112][T11811] CPU: 0 UID: 0 PID: 11811 Comm: syz.0.2975 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 226.079142][T11811] Tainted: [W]=WARN [ 226.079191][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 226.079202][T11811] Call Trace: [ 226.079208][T11811] [ 226.079285][T11811] __dump_stack+0x1d/0x30 [ 226.079308][T11811] dump_stack_lvl+0xe8/0x140 [ 226.079327][T11811] dump_stack+0x15/0x1b [ 226.079345][T11811] should_fail_ex+0x265/0x280 [ 226.079368][T11811] should_fail+0xb/0x20 [ 226.079464][T11811] should_fail_usercopy+0x1a/0x20 [ 226.079489][T11811] _copy_from_user+0x1c/0xb0 [ 226.079515][T11811] ___sys_sendmsg+0xc1/0x1d0 [ 226.079547][T11811] __x64_sys_sendmsg+0xd4/0x160 [ 226.079627][T11811] x64_sys_call+0x17ba/0x3000 [ 226.079726][T11811] do_syscall_64+0xd8/0x2a0 [ 226.079757][T11811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.079824][T11811] RIP: 0033:0x7ff47c0df749 [ 226.079842][T11811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.079867][T11811] RSP: 002b:00007ff47ab3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.079892][T11811] RAX: ffffffffffffffda RBX: 00007ff47c335fa0 RCX: 00007ff47c0df749 [ 226.079908][T11811] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000004 [ 226.079920][T11811] RBP: 00007ff47ab3f090 R08: 0000000000000000 R09: 0000000000000000 [ 226.079933][T11811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.079944][T11811] R13: 00007ff47c336038 R14: 00007ff47c335fa0 R15: 00007ffc39b07518 [ 226.079960][T11811] [ 226.287789][T11816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2976'. [ 226.321017][T11814] netlink: 'syz.0.2977': attribute type 1 has an invalid length. [ 226.328843][T11814] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2977'. [ 226.372790][T11820] syz.0.2977 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 226.477423][T11820] vlan2: entered allmulticast mode [ 226.628549][T11836] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.696951][T11836] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.741240][T11838] loop3: detected capacity change from 0 to 1764 [ 226.780391][T11836] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.827370][T11836] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.872216][T11854] netlink: 'syz.3.2985': attribute type 12 has an invalid length. [ 227.760180][T11888] netlink: 'syz.2.3002': attribute type 13 has an invalid length. [ 227.844744][T11889] netlink: 'syz.3.3001': attribute type 13 has an invalid length. [ 228.142036][T11891] netlink: 'syz.1.2984': attribute type 5 has an invalid length. [ 228.214260][T11891] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2984'. [ 228.330830][T11889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.383801][T11897] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3004'. [ 228.394130][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3004'. [ 228.443892][T11905] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3008'. [ 228.823955][T11925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3017'. [ 228.885417][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3017'. [ 229.179525][T11948] netlink: 'syz.2.3021': attribute type 13 has an invalid length. [ 229.234074][T11948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.243567][T11948] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 229.311576][T11947] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.537926][T11951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3026'. [ 229.547535][T11951] IPVS: Error connecting to the multicast addr [ 229.569859][T11953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3027'. [ 229.877901][T11963] netlink: 'syz.2.3032': attribute type 13 has an invalid length. [ 229.909021][T11963] gretap0: refused to change device tx_queue_len [ 229.915450][T11963] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 230.413758][T11947] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.464937][T11947] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.522118][T11947] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.544065][T11978] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11978 comm=syz.1.3038 [ 230.557325][T11978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 230.583758][ T4307] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.592049][ T4307] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.603793][ T4307] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.614748][ T4307] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.672682][T11983] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.740868][T11983] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.793274][T11983] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.820217][T11989] lo speed is unknown, defaulting to 1000 [ 230.886708][T11983] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.900945][T11989] chnl_net:caif_netlink_parms(): no params data found [ 230.986339][T11989] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.993501][T11989] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.000918][T11989] bridge_slave_0: entered allmulticast mode [ 231.007805][T11989] bridge_slave_0: entered promiscuous mode [ 231.021377][ T4327] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.033565][T11989] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.040685][T11989] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.047913][T11989] bridge_slave_1: entered allmulticast mode [ 231.054435][T11989] bridge_slave_1: entered promiscuous mode [ 231.073660][ T4327] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.087172][ T4327] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.096842][T11989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.112554][T11989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.127642][ T4327] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.153890][ T29] kauditd_printk_skb: 986 callbacks suppressed [ 231.153907][ T29] audit: type=1326 audit(1765616525.503:20715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.170083][T11989] team0: Port device team_slave_0 added [ 231.206730][ T29] audit: type=1326 audit(1765616525.503:20716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.216324][T11989] team0: Port device team_slave_1 added [ 231.230550][ T29] audit: type=1326 audit(1765616525.503:20717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.259617][ T29] audit: type=1326 audit(1765616525.503:20718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.277647][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3051'. [ 231.283362][ T29] audit: type=1326 audit(1765616525.503:20719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.315759][ T29] audit: type=1326 audit(1765616525.503:20720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.339342][ T29] audit: type=1326 audit(1765616525.503:20721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.362916][ T29] audit: type=1326 audit(1765616525.503:20722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.386547][ T29] audit: type=1400 audit(1765616525.523:20723): avc: denied { mount } for pid=12014 comm="syz.2.3048" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 231.408324][ T29] audit: type=1326 audit(1765616525.523:20724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12014 comm="syz.2.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedec0cf749 code=0x7ffc0000 [ 231.433366][T12019] netlink: 'syz.0.3049': attribute type 13 has an invalid length. [ 231.434847][T12023] bridge_slave_0 (unregistering): left allmulticast mode [ 231.448298][T12023] bridge_slave_0 (unregistering): left promiscuous mode [ 231.455306][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.466422][ T4316] bridge_slave_1: left allmulticast mode [ 231.472081][ T4316] bridge_slave_1: left promiscuous mode [ 231.477971][ T4316] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.486248][ T4316] bridge_slave_0: left allmulticast mode [ 231.491914][ T4316] bridge_slave_0: left promiscuous mode [ 231.498055][ T4316] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.696907][ T4316] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.706324][ T4316] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.715381][ T4316] bond0 (unregistering): Released all slaves [ 231.751302][T12019] gretap0: refused to change device tx_queue_len [ 231.757755][T12019] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 231.777556][T11989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.784541][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.810502][T11989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.823613][T12028] loop0: detected capacity change from 0 to 128 [ 231.855190][ T4316] hsr_slave_0: left promiscuous mode [ 231.861058][ T4316] hsr_slave_1: left promiscuous mode [ 231.912237][T11989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.919294][T11989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.945312][T11989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.956115][ T36] lo speed is unknown, defaulting to 1000 [ 231.961845][ T36] infiniband syz2: ib_query_port failed (-19) [ 231.992642][T11989] hsr_slave_0: entered promiscuous mode [ 231.998835][T11989] hsr_slave_1: entered promiscuous mode [ 232.004732][T11989] debugfs: 'hsr0' already exists in 'hsr' [ 232.010619][T11989] Cannot create hsr debugfs directory [ 232.289511][T11989] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 232.298261][T11989] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 232.306982][T11989] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 232.315849][T11989] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 232.347258][T11989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.359528][T11989] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.369344][ T4327] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.376420][ T4327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.387368][ T4327] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.394403][ T4327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.452447][T11989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.510203][T11989] veth0_vlan: entered promiscuous mode [ 232.517820][T11989] veth1_vlan: entered promiscuous mode [ 232.531996][T11989] veth0_macvtap: entered promiscuous mode [ 232.539461][T11989] veth1_macvtap: entered promiscuous mode [ 232.549949][T11989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.560478][T11989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.571066][ T4316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.580195][ T4316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.590723][ T4316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.600433][ T4316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.716326][T12057] sit0: entered promiscuous mode [ 232.725887][T12057] netlink: 'syz.1.3057': attribute type 1 has an invalid length. [ 232.773641][T12062] netlink: 'syz.0.3058': attribute type 13 has an invalid length. [ 232.840688][T12062] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.848013][T12062] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.977671][T12062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.988415][T12062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.061755][ T4316] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.098870][ T4316] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.117517][ T4316] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.140749][ T4316] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.259783][T12058] chnl_net:caif_netlink_parms(): no params data found [ 233.324546][T12058] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.331791][T12058] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.340626][T12058] bridge_slave_0: entered allmulticast mode [ 233.349267][T12058] bridge_slave_0: entered promiscuous mode [ 233.385731][T12058] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.392841][T12058] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.400111][T12058] bridge_slave_1: entered allmulticast mode [ 233.406870][T12058] bridge_slave_1: entered promiscuous mode [ 233.482546][T12058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.502362][T12058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.522252][ T4299] bridge_slave_1: left allmulticast mode [ 233.528062][ T4299] bridge_slave_1: left promiscuous mode [ 233.533720][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.597809][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.607429][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.617634][ T4299] bond0 (unregistering): Released all slaves [ 233.636487][T12058] team0: Port device team_slave_0 added [ 233.642910][T12058] team0: Port device team_slave_1 added [ 233.674937][T12058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.682078][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.708025][T12058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.720334][T12058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.727409][T12058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.734052][T12097] loop1: detected capacity change from 0 to 1024 [ 233.753438][T12058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.771738][T12096] loop0: detected capacity change from 0 to 128 [ 233.777990][T12097] ======================================================= [ 233.777990][T12097] WARNING: The mand mount option has been deprecated and [ 233.777990][T12097] and is ignored by this kernel. Remove the mand [ 233.777990][T12097] option from the mount to silence this warning. [ 233.777990][T12097] ======================================================= [ 233.778600][T12097] EXT4-fs: Ignoring removed nobh option [ 233.818734][T12097] EXT4-fs: Ignoring removed bh option [ 233.838512][ T4299] hsr_slave_0: left promiscuous mode [ 233.844336][T12097] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.856835][ T4299] hsr_slave_1: left promiscuous mode [ 233.862477][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.870531][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.910071][T12097] EXT4-fs (loop1): pa ffff88810766a230: logic 1, phys. 129, len 4 [ 233.918002][T12097] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 2, pa_free 3 [ 233.965677][T11989] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.990853][T12058] hsr_slave_0: entered promiscuous mode [ 233.997593][T12058] hsr_slave_1: entered promiscuous mode [ 234.004297][T12102] loop0: detected capacity change from 0 to 512 [ 234.019495][T12102] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 234.051191][T12102] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 234.096020][T12102] EXT4-fs (loop0): 1 truncate cleaned up [ 234.113488][T12102] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.235319][T12110] FAULT_INJECTION: forcing a failure. [ 234.235319][T12110] name failslab, interval 1, probability 0, space 0, times 0 [ 234.248137][T12110] CPU: 0 UID: 0 PID: 12110 Comm: syz.0.3065 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 234.248170][T12110] Tainted: [W]=WARN [ 234.248186][T12110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.248200][T12110] Call Trace: [ 234.248256][T12110] [ 234.248266][T12110] __dump_stack+0x1d/0x30 [ 234.248293][T12110] dump_stack_lvl+0xe8/0x140 [ 234.248313][T12110] dump_stack+0x15/0x1b [ 234.248334][T12110] should_fail_ex+0x265/0x280 [ 234.248403][T12110] should_failslab+0x8c/0xb0 [ 234.248429][T12110] kmem_cache_alloc_noprof+0x69/0x4b0 [ 234.248450][T12110] ? security_file_alloc+0x32/0x100 [ 234.248474][T12110] security_file_alloc+0x32/0x100 [ 234.248562][T12110] init_file+0x5c/0x1c0 [ 234.248586][T12110] alloc_empty_file+0x8b/0x200 [ 234.248632][T12110] path_openat+0x63/0x23b0 [ 234.248687][T12110] ? try_charge_memcg+0x215/0xa10 [ 234.248710][T12110] ? css_rstat_updated+0xb7/0x240 [ 234.248733][T12110] ? css_rstat_updated+0xb7/0x240 [ 234.248816][T12110] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 234.248839][T12110] ? css_rstat_updated+0xb7/0x240 [ 234.248927][T12110] do_filp_open+0x109/0x230 [ 234.248988][T12110] do_sys_openat2+0xa6/0x150 [ 234.249062][T12110] __x64_sys_openat+0xf2/0x120 [ 234.249167][T12110] x64_sys_call+0x2b07/0x3000 [ 234.249193][T12110] do_syscall_64+0xd8/0x2a0 [ 234.249285][T12110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.249305][T12110] RIP: 0033:0x7ff47c0ddf90 [ 234.249320][T12110] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 234.249399][T12110] RSP: 002b:00007ff47ab1bef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 234.249418][T12110] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007ff47c0ddf90 [ 234.249431][T12110] RDX: 0000000000000002 RSI: 00007ff47c163c6c RDI: 00000000ffffff9c [ 234.249443][T12110] RBP: 00007ff47c163c6c R08: 0000000000000000 R09: 0000000000000000 [ 234.249471][T12110] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 234.249486][T12110] R13: 0000000000000036 R14: 0000200000000f40 R15: 00007ffc39b07518 [ 234.249507][T12110] [ 234.679191][T12058] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.687638][T12058] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.696111][T12058] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.704582][T12058] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 234.738419][T12058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.750417][T12058] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.759551][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.766623][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.778735][ T4307] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.785876][ T4307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.841073][T12058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.898644][T12058] veth0_vlan: entered promiscuous mode [ 234.906094][T12058] veth1_vlan: entered promiscuous mode [ 234.920091][T12058] veth0_macvtap: entered promiscuous mode [ 234.927375][T12058] veth1_macvtap: entered promiscuous mode [ 234.937367][T12058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.948549][T12058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.959004][ T4317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.968295][ T4317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.978496][ T4317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.989268][ T4317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.057699][T11391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.159452][T12143] vlan2: entered allmulticast mode [ 235.164764][T12143] geneve1: entered allmulticast mode [ 235.207058][T12147] loop0: detected capacity change from 0 to 128 [ 235.334322][T12160] __nla_validate_parse: 1 callbacks suppressed [ 235.334335][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 235.354754][T12160] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 236.304125][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 236.304145][ T29] audit: type=1326 audit(1765616530.653:20930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 236.355123][ T29] audit: type=1326 audit(1765616530.653:20931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12169 comm="syz.4.3084" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 236.467591][ T29] audit: type=1326 audit(1765616530.823:20932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 236.515170][ T29] audit: type=1326 audit(1765616530.823:20933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 236.538808][ T29] audit: type=1326 audit(1765616530.823:20934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 236.562608][ T29] audit: type=1326 audit(1765616530.823:20935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 236.586258][ T29] audit: type=1326 audit(1765616530.823:20936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12182 comm="syz.4.3088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed7b13f749 code=0x7ffc0000 [ 236.655163][T12185] vlan2: entered allmulticast mode [ 236.660805][T12185] geneve1: entered allmulticast mode [ 236.696139][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 236.795968][ T4316] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.817338][ T4316] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.840711][ T4316] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.849201][T12192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3092'. [ 236.927949][ T4316] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.993085][T12206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 237.003068][T12206] IPVS: Error connecting to the multicast addr [ 237.037243][T12212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3100'. [ 237.129672][T12224] infiniband sy: set down [ 237.134401][T12224] infiniband sy: added bond_slave_0 [ 237.149168][T12224] RDS/IB: sy: added [ 237.154715][T12224] smc: adding ib device sy with port count 1 [ 237.161132][T12224] smc: ib device sy port 1 has no pnetid [ 237.168393][T12225] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.270319][T12225] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.420084][T12225] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.508529][T12225] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.690545][ T4394] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.705235][T12235] netlink: 'syz.4.3106': attribute type 33 has an invalid length. [ 237.713156][T12235] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3106'. [ 237.725267][ T4320] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.736652][ T4320] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.744915][ T4320] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.088357][T12250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 238.210498][T12257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3112'. [ 238.219778][T12257] IPVS: Error connecting to the multicast addr [ 238.289080][T12265] netlink: 'syz.1.3116': attribute type 3 has an invalid length. [ 238.324699][ T29] audit: type=1400 audit(1765616532.673:20937): avc: denied { create } for pid=12267 comm="syz.4.3118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 238.346513][T12268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3118'. [ 238.356046][ T29] audit: type=1400 audit(1765616532.673:20938): avc: denied { allowed } for pid=12232 comm="syz.2.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 238.375753][ T29] audit: type=1400 audit(1765616532.683:20939): avc: denied { sqpoll } for pid=12232 comm="syz.2.3105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 238.498413][T12276] FAULT_INJECTION: forcing a failure. [ 238.498413][T12276] name failslab, interval 1, probability 0, space 0, times 0 [ 238.511188][T12276] CPU: 1 UID: 0 PID: 12276 Comm: syz.2.3121 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 238.511226][T12276] Tainted: [W]=WARN [ 238.511234][T12276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.511267][T12276] Call Trace: [ 238.511273][T12276] [ 238.511280][T12276] __dump_stack+0x1d/0x30 [ 238.511308][T12276] dump_stack_lvl+0xe8/0x140 [ 238.511334][T12276] dump_stack+0x15/0x1b [ 238.511373][T12276] should_fail_ex+0x265/0x280 [ 238.511461][T12276] should_failslab+0x8c/0xb0 [ 238.511487][T12276] kmem_cache_alloc_noprof+0x69/0x4b0 [ 238.511576][T12276] ? dst_alloc+0xbd/0x100 [ 238.511652][T12276] dst_alloc+0xbd/0x100 [ 238.511691][T12276] ? ip_vs_lblcr_done_svc+0x52/0x250 [ 238.511713][T12276] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 238.511755][T12276] ip_route_output_key_hash+0x63/0xa0 [ 238.511781][T12276] tcp_v4_connect+0x3e4/0xaf0 [ 238.511879][T12276] __inet_stream_connect+0x169/0x7d0 [ 238.511898][T12276] ? _raw_spin_lock_bh+0x56/0xb0 [ 238.511955][T12276] ? _raw_spin_unlock_bh+0x36/0x40 [ 238.511973][T12276] ? lock_sock_nested+0x112/0x140 [ 238.511990][T12276] ? selinux_netlbl_socket_connect+0x114/0x130 [ 238.512069][T12276] inet_stream_connect+0x44/0x70 [ 238.512087][T12276] ? __pfx_inet_stream_connect+0x10/0x10 [ 238.512106][T12276] __sys_connect+0x1f2/0x2b0 [ 238.512129][T12276] __x64_sys_connect+0x3f/0x50 [ 238.512151][T12276] x64_sys_call+0x2e09/0x3000 [ 238.512172][T12276] do_syscall_64+0xd8/0x2a0 [ 238.512232][T12276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.512251][T12276] RIP: 0033:0x7ff51c5cf749 [ 238.512265][T12276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.512281][T12276] RSP: 002b:00007ff51b037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 238.512300][T12276] RAX: ffffffffffffffda RBX: 00007ff51c825fa0 RCX: 00007ff51c5cf749 [ 238.512358][T12276] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 238.512370][T12276] RBP: 00007ff51b037090 R08: 0000000000000000 R09: 0000000000000000 [ 238.512381][T12276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.512392][T12276] R13: 00007ff51c826038 R14: 00007ff51c825fa0 R15: 00007ffdc6d798b8 [ 238.512407][T12276] [ 238.781824][T12282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.842145][T12290] IPVS: Error connecting to the multicast addr [ 238.893566][T12292] 9p: Bad value for 'rfdno' [ 239.004369][T12310] loop3: detected capacity change from 0 to 2048 [ 239.019087][T12310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.046480][T11022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.086669][T12315] netlink: 'syz.3.3138': attribute type 13 has an invalid length. [ 239.262251][T12320] netlink: 'syz.1.3140': attribute type 3 has an invalid length. [ 239.542214][T12315] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.549583][T12315] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.020660][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.037196][T12329] netlink: 'syz.4.3135': attribute type 5 has an invalid length. [ 240.063907][T12315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.310005][T12331] loop3: detected capacity change from 0 to 1024 [ 240.318755][T12331] EXT4-fs: Ignoring removed bh option [ 240.336489][T12331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.351628][T12282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.363271][ T4337] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.367867][T12331] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 240.386283][ T4337] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.386327][ T4337] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.386436][ T4337] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.425403][T12331] EXT4-fs (loop3): Remounting filesystem read-only [ 240.440801][T12338] netlink: 'syz.4.3145': attribute type 13 has an invalid length. [ 240.441140][T12282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.476184][T11022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.503397][T12340] __nla_validate_parse: 7 callbacks suppressed [ 240.503413][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 240.552230][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3146'. [ 240.681025][T12347] bridge1: entered promiscuous mode [ 240.734033][T12282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.838313][T12363] hub 9-0:1.0: USB hub found [ 240.846603][T12356] vlan2: entered allmulticast mode [ 240.882447][T12363] hub 9-0:1.0: 8 ports detected [ 241.061038][ T4317] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.081600][ T4317] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.091093][ T4317] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.111687][ T4317] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.170891][T12384] netlink: 'syz.0.3162': attribute type 13 has an invalid length. [ 241.189023][T12390] netlink: 'syz.3.3164': attribute type 3 has an invalid length. [ 241.211373][T12387] vlan2: entered allmulticast mode [ 241.305427][ T29] kauditd_printk_skb: 925 callbacks suppressed [ 241.305445][ T29] audit: type=1326 audit(1765616535.663:21865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12383 comm="syz.0.3162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.381969][ T29] audit: type=1326 audit(1765616535.733:21866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.409403][ T29] audit: type=1326 audit(1765616535.763:21867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.433031][ T29] audit: type=1326 audit(1765616535.763:21868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.456613][ T29] audit: type=1326 audit(1765616535.763:21869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.480344][ T29] audit: type=1326 audit(1765616535.763:21870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.503915][ T29] audit: type=1326 audit(1765616535.763:21871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.527579][ T29] audit: type=1326 audit(1765616535.763:21872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.551197][ T29] audit: type=1326 audit(1765616535.763:21873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.574703][ T29] audit: type=1326 audit(1765616535.763:21874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12395 comm="syz.0.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff47c0df749 code=0x7ffc0000 [ 241.618608][T12403] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 241.626439][T12403] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3169'. [ 241.659932][T12407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3170'. [ 241.669001][T12407] IPVS: Error connecting to the multicast addr [ 241.704577][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'. [ 241.755874][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'. [ 242.144747][T12425] loop2: detected capacity change from 0 to 128 [ 242.193181][T12426] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12426 comm=syz.1.3179 [ 242.773882][T12437] loop0: detected capacity change from 0 to 164 [ 242.840452][T12436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3181'. [ 242.889075][T12425] Set syz1 is full, maxelem 65536 reached [ 242.926244][T12436] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3181'. [ 243.512754][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3190'. [ 243.629264][T12474] netlink: 'syz.3.3196': attribute type 3 has an invalid length. [ 243.923102][T12480] chnl_net:caif_netlink_parms(): no params data found [ 243.969862][T12480] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.976983][T12480] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.984247][T12480] bridge_slave_0: entered allmulticast mode [ 243.990963][T12480] bridge_slave_0: entered promiscuous mode [ 243.997941][T12480] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.005130][T12480] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.013159][T12480] bridge_slave_1: entered allmulticast mode [ 244.019767][T12480] bridge_slave_1: entered promiscuous mode [ 244.061033][T12480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.070630][ T4313] bridge_slave_1: left allmulticast mode [ 244.076340][ T4313] bridge_slave_1: left promiscuous mode [ 244.082202][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.091969][ T4313] bridge_slave_0: left allmulticast mode [ 244.097658][ T4313] bridge_slave_0: left promiscuous mode [ 244.103370][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.279573][ T4313] bond2 (unregistering): (slave geneve2): Releasing active interface [ 244.354036][T12497] netlink: 'syz.0.3201': attribute type 1 has an invalid length. [ 244.383121][T12499] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3202'. [ 244.402605][T12497] netlink: 'syz.0.3201': attribute type 10 has an invalid length. [ 244.429905][ T4313] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.463259][ T4313] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.499148][ T4313] bond0 (unregistering): Released all slaves [ 244.521389][ T4313] bond1 (unregistering): Released all slaves [ 244.549136][ T4313] bond2 (unregistering): Released all slaves [ 244.598285][ T4313] bond3 (unregistering): (slave veth3): Releasing backup interface [ 244.623407][ T4313] bond3 (unregistering): Released all slaves [ 244.644831][ T4313] bond4 (unregistering): Released all slaves [ 244.664989][T12480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.674346][T12497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.686563][T12497] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 244.741018][T12480] team0: Port device team_slave_0 added [ 244.778450][T12480] team0: Port device team_slave_1 added [ 244.810853][ T4313] hsr_slave_0: left promiscuous mode [ 244.830671][ T4313] hsr_slave_1: left promiscuous mode [ 244.844859][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.864834][T12508] loop0: detected capacity change from 0 to 1024 [ 244.871554][ T4313] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.914768][T12508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 244.954023][T12508] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.012703][ T4292] smc: removing ib device sy [ 245.112844][T12480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.119849][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.145820][T12480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.237568][T12480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.244537][T12480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.270566][T12480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.491895][T12480] hsr_slave_0: entered promiscuous mode [ 245.502877][T12480] hsr_slave_1: entered promiscuous mode [ 245.512150][T12480] debugfs: 'hsr0' already exists in 'hsr' [ 245.517975][T12480] Cannot create hsr debugfs directory [ 245.524099][T12511] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 245.900971][T12480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 245.928802][T12480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 245.951748][T12480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 245.972521][T12480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 246.095315][T12535] lo speed is unknown, defaulting to 1000 [ 246.158946][T12535] lo speed is unknown, defaulting to 1000 [ 246.164963][T12535] lo speed is unknown, defaulting to 1000 [ 246.171636][T12535] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.181066][T12480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.204159][T12480] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.250990][T12535] lo speed is unknown, defaulting to 1000 [ 246.265832][T12480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 246.276244][T12480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 246.323138][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.330252][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.353744][ T4308] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: comm kworker/u8:28: lblock 0 mapped to illegal pblock 0 (length 1) [ 246.368483][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.375591][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.383733][ T4308] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 246.396074][ T4308] EXT4-fs (loop0): This should not happen!! Data will be lost [ 246.396074][ T4308] [ 246.405862][T12535] lo speed is unknown, defaulting to 1000 [ 246.412069][T12535] lo speed is unknown, defaulting to 1000 [ 246.440956][T12535] lo speed is unknown, defaulting to 1000 [ 246.456807][T11391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.465327][T12480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.473788][T12535] lo speed is unknown, defaulting to 1000 [ 246.482686][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 246.482702][ T29] audit: type=1326 audit(1765616540.833:21923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.530010][ T29] audit: type=1326 audit(1765616540.863:21924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.553665][ T29] audit: type=1326 audit(1765616540.863:21925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.577291][ T29] audit: type=1326 audit(1765616540.863:21926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.600877][ T29] audit: type=1326 audit(1765616540.863:21927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.624528][ T29] audit: type=1326 audit(1765616540.873:21928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.648612][ T29] audit: type=1326 audit(1765616540.873:21929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.669553][T12536] infiniband syz1: set active [ 246.672196][ T29] audit: type=1326 audit(1765616540.873:21930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.676887][T12536] infiniband syz1: added veth0_to_bond [ 246.700324][ T29] audit: type=1326 audit(1765616540.873:21931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.729486][ T29] audit: type=1326 audit(1765616540.873:21932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.2.3212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 246.729906][T12550] __nla_validate_parse: 1 callbacks suppressed [ 246.729918][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3213'. [ 246.777006][T12536] RDS/IB: syz1: added [ 246.786204][T12536] smc: adding ib device syz1 with port count 1 [ 246.814392][T12536] smc: ib device syz1 port 1 has no pnetid [ 246.871759][T12559] FAULT_INJECTION: forcing a failure. [ 246.871759][T12559] name failslab, interval 1, probability 0, space 0, times 0 [ 246.884507][T12559] CPU: 0 UID: 0 PID: 12559 Comm: syz.2.3215 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 246.884541][T12559] Tainted: [W]=WARN [ 246.884606][T12559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.884619][T12559] Call Trace: [ 246.884627][T12559] [ 246.884634][T12559] __dump_stack+0x1d/0x30 [ 246.884660][T12559] dump_stack_lvl+0xe8/0x140 [ 246.884683][T12559] dump_stack+0x15/0x1b [ 246.884704][T12559] should_fail_ex+0x265/0x280 [ 246.884777][T12559] should_failslab+0x8c/0xb0 [ 246.884800][T12559] __kmalloc_cache_noprof+0x65/0x4c0 [ 246.884827][T12559] ? audit_log_d_path+0x8d/0x150 [ 246.884851][T12559] audit_log_d_path+0x8d/0x150 [ 246.884874][T12559] audit_log_d_path_exe+0x42/0x70 [ 246.884966][T12559] audit_log_task+0x1e9/0x250 [ 246.885058][T12559] ? kstrtouint+0x76/0xc0 [ 246.885080][T12559] audit_seccomp+0x61/0x100 [ 246.885111][T12559] ? __seccomp_filter+0x832/0x1260 [ 246.885262][T12559] __seccomp_filter+0x843/0x1260 [ 246.885291][T12559] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 246.885321][T12559] ? vfs_write+0x7e8/0x960 [ 246.885387][T12559] ? __rcu_read_unlock+0x4f/0x70 [ 246.885410][T12559] ? __fget_files+0x184/0x1c0 [ 246.885438][T12559] __secure_computing+0x82/0x150 [ 246.885485][T12559] syscall_trace_enter+0xcf/0x1e0 [ 246.885509][T12559] do_syscall_64+0xb2/0x2a0 [ 246.885541][T12559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.885564][T12559] RIP: 0033:0x7ff51c5cf749 [ 246.885580][T12559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.885641][T12559] RSP: 002b:00007ff51b037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000020 [ 246.885664][T12559] RAX: ffffffffffffffda RBX: 00007ff51c825fa0 RCX: 00007ff51c5cf749 [ 246.885679][T12559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 246.885692][T12559] RBP: 00007ff51b037090 R08: 0000000000000000 R09: 0000000000000000 [ 246.885706][T12559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.885773][T12559] R13: 00007ff51c826038 R14: 00007ff51c825fa0 R15: 00007ffdc6d798b8 [ 246.885792][T12559] [ 247.162957][T12480] veth0_vlan: entered promiscuous mode [ 247.172762][T12506] loop3: detected capacity change from 0 to 4096 [ 247.183532][T12565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12565 comm=syz.2.3216 [ 247.199554][T12480] veth1_vlan: entered promiscuous mode [ 247.230383][T12480] veth0_macvtap: entered promiscuous mode [ 247.247793][T12480] veth1_macvtap: entered promiscuous mode [ 247.269461][T12480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.280720][T12480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.291802][ T4322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.342527][ T4322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.383573][ T4322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.392738][ T4322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.404938][T12506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.533501][T12506] netlink: 'syz.3.3205': attribute type 5 has an invalid length. [ 247.565564][T12575] loop7: detected capacity change from 0 to 7 [ 247.585917][T11415] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.596522][T12506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3205'. [ 247.604177][T11415] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.613767][T11415] loop7: unable to read partition table [ 247.635437][T12575] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.644744][T12575] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.652672][T12575] loop7: unable to read partition table [ 247.715082][T12575] loop_reread_partitions: partition scan of loop7 (7x~Sj̖P) failed (rc=-5) [ 247.739014][T11415] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.755927][T11415] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.775179][T11415] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.785240][T11415] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.801167][T12575] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.809490][T11415] Buffer I/O error on dev loop7, logical block 0, async page read [ 247.818268][T11022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.860606][T12575] netlink: 'syz.4.3217': attribute type 10 has an invalid length. [ 247.887523][T12575] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.894796][T12575] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.905651][T12575] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.912779][T12575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.920109][T12575] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.927195][T12575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.957170][T12575] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 248.069821][T12594] tmpfs: Unknown parameter 'fsuuid' [ 248.139399][T12595] netlink: 'syz.3.3220': attribute type 13 has an invalid length. [ 248.165717][T12595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.173922][T12595] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.184155][T12595] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 248.847370][T12612] netlink: 'syz.0.3227': attribute type 13 has an invalid length. [ 249.071899][T12620] vhci_hcd vhci_hcd.2: default hub control req: 0317 v0000 i0000 l173 [ 249.282188][T12622] vlan2: entered allmulticast mode [ 249.340274][T12640] siw: device registration error -23 [ 249.360386][T12640] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 249.447271][T12641] vlan3: entered allmulticast mode [ 249.452434][T12641] geneve1: entered allmulticast mode [ 249.567436][T12650] netlink: 'syz.0.3242': attribute type 3 has an invalid length. [ 249.603896][T12656] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3245'. [ 249.606064][T12654] netlink: 'syz.4.3243': attribute type 3 has an invalid length. [ 249.630833][T12656] 0X: renamed from caif0 [ 249.642018][T12656] 0X: entered allmulticast mode [ 249.647392][T12656] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 249.706471][T12661] FAULT_INJECTION: forcing a failure. [ 249.706471][T12661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.719601][T12661] CPU: 0 UID: 0 PID: 12661 Comm: syz.2.3247 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 249.719636][T12661] Tainted: [W]=WARN [ 249.719644][T12661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.719719][T12661] Call Trace: [ 249.719726][T12661] [ 249.719733][T12661] __dump_stack+0x1d/0x30 [ 249.719757][T12661] dump_stack_lvl+0xe8/0x140 [ 249.719814][T12661] dump_stack+0x15/0x1b [ 249.719832][T12661] should_fail_ex+0x265/0x280 [ 249.719857][T12661] should_fail+0xb/0x20 [ 249.719889][T12661] should_fail_usercopy+0x1a/0x20 [ 249.719912][T12661] _copy_from_user+0x1c/0xb0 [ 249.719986][T12661] ___sys_sendmsg+0xc1/0x1d0 [ 249.720021][T12661] __x64_sys_sendmsg+0xd4/0x160 [ 249.720056][T12661] x64_sys_call+0x17ba/0x3000 [ 249.720107][T12661] do_syscall_64+0xd8/0x2a0 [ 249.720136][T12661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.720268][T12661] RIP: 0033:0x7ff51c5cf749 [ 249.720287][T12661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.720308][T12661] RSP: 002b:00007ff51b037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.720330][T12661] RAX: ffffffffffffffda RBX: 00007ff51c825fa0 RCX: 00007ff51c5cf749 [ 249.720342][T12661] RDX: 0000000004048043 RSI: 0000200000000800 RDI: 0000000000000006 [ 249.720354][T12661] RBP: 00007ff51b037090 R08: 0000000000000000 R09: 0000000000000000 [ 249.720399][T12661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.720413][T12661] R13: 00007ff51c826038 R14: 00007ff51c825fa0 R15: 00007ffdc6d798b8 [ 249.720434][T12661] [ 249.892933][T12656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.902250][T12656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.929068][T12665] sit0: entered promiscuous mode [ 249.936756][T12665] netlink: 'syz.2.3249': attribute type 1 has an invalid length. [ 249.944511][T12665] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3249'. [ 249.996615][T12670] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 250.200701][T12686] vlan2: entered allmulticast mode [ 250.606739][T12711] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.664344][T12711] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.711898][T12714] lo speed is unknown, defaulting to 1000 [ 250.726007][T12711] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.847499][T12711] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.942584][ T4340] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.954827][ T4340] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.986900][ T4340] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.008081][ T4340] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.136217][T12724] FAULT_INJECTION: forcing a failure. [ 251.136217][T12724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.149360][T12724] CPU: 1 UID: 0 PID: 12724 Comm: syz.2.3267 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 251.149451][T12724] Tainted: [W]=WARN [ 251.149459][T12724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 251.149472][T12724] Call Trace: [ 251.149479][T12724] [ 251.149488][T12724] __dump_stack+0x1d/0x30 [ 251.149516][T12724] dump_stack_lvl+0xe8/0x140 [ 251.149539][T12724] dump_stack+0x15/0x1b [ 251.149598][T12724] should_fail_ex+0x265/0x280 [ 251.149624][T12724] should_fail+0xb/0x20 [ 251.149646][T12724] should_fail_usercopy+0x1a/0x20 [ 251.149672][T12724] _copy_from_user+0x1c/0xb0 [ 251.149780][T12724] blk_trace_setup+0x5f/0x300 [ 251.149802][T12724] ? format_decode+0x37d/0x540 [ 251.149831][T12724] ? __pfx_blkdev_ioctl+0x10/0x10 [ 251.149912][T12724] ? snprintf+0x86/0xb0 [ 251.149935][T12724] ? __pfx_blkdev_ioctl+0x10/0x10 [ 251.150030][T12724] blk_trace_ioctl+0x20e/0x520 [ 251.150110][T12724] ? ioctl_has_perm+0x255/0x2a0 [ 251.150206][T12724] ? do_vfs_ioctl+0x866/0xe10 [ 251.150234][T12724] ? selinux_file_ioctl+0x308/0x3a0 [ 251.150266][T12724] ? __pfx_blkdev_ioctl+0x10/0x10 [ 251.150286][T12724] blkdev_ioctl+0x2a2/0x460 [ 251.150365][T12724] ? __pfx_blkdev_ioctl+0x10/0x10 [ 251.150388][T12724] __se_sys_ioctl+0xce/0x140 [ 251.150436][T12724] __x64_sys_ioctl+0x43/0x50 [ 251.150466][T12724] x64_sys_call+0x14b0/0x3000 [ 251.150487][T12724] do_syscall_64+0xd8/0x2a0 [ 251.150590][T12724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.150614][T12724] RIP: 0033:0x7ff51c5cf749 [ 251.150630][T12724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.150647][T12724] RSP: 002b:00007ff51b037038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.150714][T12724] RAX: ffffffffffffffda RBX: 00007ff51c825fa0 RCX: 00007ff51c5cf749 [ 251.150730][T12724] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000007 [ 251.150744][T12724] RBP: 00007ff51b037090 R08: 0000000000000000 R09: 0000000000000000 [ 251.150757][T12724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.150770][T12724] R13: 00007ff51c826038 R14: 00007ff51c825fa0 R15: 00007ffdc6d798b8 [ 251.150789][T12724] [ 251.439242][T12731] loop1: detected capacity change from 0 to 512 [ 251.482421][T12733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3270'. [ 251.536495][T12739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.555332][T12739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.618278][T12749] lo speed is unknown, defaulting to 1000 [ 251.802033][T12760] loop4: detected capacity change from 0 to 8192 [ 251.888533][T12762] loop0: detected capacity change from 0 to 512 [ 252.152358][T12765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12765 comm=syz.2.3282 [ 252.201860][T12762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.214603][T12762] ext4 filesystem being mounted at /80/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.240395][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 252.240415][ T29] audit: type=1400 audit(1765616546.593:22172): avc: denied { setattr } for pid=12754 comm="syz.0.3280" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 252.309160][T12760] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 252.316362][T12760] FAT-fs (loop4): Filesystem has been set read-only [ 252.937249][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3290'. [ 253.006754][T12789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3283'. [ 253.307302][T12804] siw: device registration error -23 [ 253.368857][T12804] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 253.461761][T11391] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.669784][T12818] loop0: detected capacity change from 0 to 512 [ 253.692688][T12818] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 253.776148][T12820] netlink: 'syz.4.3298': attribute type 3 has an invalid length. [ 254.091548][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 254.425253][T12836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12836 comm=syz.1.3304 [ 254.571030][T12842] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.600560][T12844] netlink: 'syz.3.3307': attribute type 1 has an invalid length. [ 254.608399][T12844] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3307'. [ 254.622789][T12846] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12846 comm=syz.1.3305 [ 254.639598][T12842] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.707072][T12842] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.755984][T12852] siw: device registration error -23 [ 254.766018][T12852] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 254.798051][T12842] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.891676][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3313'. [ 254.910457][T12862] loop4: detected capacity change from 0 to 128 [ 254.924052][ T4340] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.962174][T12862] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 254.964719][ T4340] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.010078][T12862] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.165056][ T4340] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.173282][ T4340] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.194815][T12862] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.4.3314: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 255.269095][T12873] netlink: 'syz.1.3315': attribute type 13 has an invalid length. [ 255.345361][T12862] EXT4-fs (loop4): Remounting filesystem read-only [ 255.426858][T12873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 255.462411][ T3499] lo speed is unknown, defaulting to 1000 [ 255.510267][T12480] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.694433][ T29] audit: type=1326 audit(1765616550.043:22173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.696352][T12879] netlink: 'syz.0.3318': attribute type 3 has an invalid length. [ 255.739755][T12876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3317'. [ 255.741785][ T29] audit: type=1326 audit(1765616550.073:22174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.772386][ T29] audit: type=1326 audit(1765616550.093:22175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.796025][ T29] audit: type=1326 audit(1765616550.093:22176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.819686][ T29] audit: type=1326 audit(1765616550.093:22177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.843286][ T29] audit: type=1326 audit(1765616550.093:22178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.866885][ T29] audit: type=1326 audit(1765616550.093:22179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.890401][ T29] audit: type=1326 audit(1765616550.093:22180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 255.914161][ T29] audit: type=1326 audit(1765616550.093:22181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12875 comm="syz.4.3317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f50f0f749 code=0x7ffc0000 [ 256.038241][T12888] netlink: 'syz.4.3321': attribute type 3 has an invalid length. [ 256.050981][T12885] netlink: 'syz.1.3320': attribute type 13 has an invalid length. [ 256.178691][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.186121][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.358974][T12885] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.388262][T12885] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.527528][ T7003] lo speed is unknown, defaulting to 1000 [ 256.533289][ T7003] syz0: Port: 1 Link DOWN [ 256.540444][ T4529] syz1: Port: 1 Link DOWN [ 256.544823][ T4340] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.580664][ T4340] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.595139][ T4340] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.615698][ T4340] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.788434][T12904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3327'. [ 256.797590][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3327'. [ 256.832757][T12907] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12907 comm=syz.1.3326 [ 257.140128][T12917] loop4: detected capacity change from 0 to 512 [ 257.197065][T12917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3331'. [ 257.296551][T12922] netlink: 'syz.0.3330': attribute type 13 has an invalid length. [ 257.319741][T12922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.327878][T12922] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.337307][T12922] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 257.688454][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3334'. [ 257.805932][T12936] tmpfs: Unknown parameter 'fsuuid' [ 257.823531][T12929] vlan2: entered allmulticast mode [ 258.162531][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 258.162549][ T29] audit: type=1400 audit(1765616552.513:22529): avc: denied { bind } for pid=12947 comm=FF scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 258.241818][T12941] infiniband syz!: set down [ 258.246512][T12941] infiniband syz!: added team_slave_0 [ 258.310440][T12941] RDS/IB: syz!: added [ 258.316173][T12941] smc: adding ib device syz! with port count 1 [ 258.322425][T12941] smc: ib device syz! port 1 has no pnetid [ 258.507716][T12957] netlink: 'syz.2.3345': attribute type 13 has an invalid length. [ 258.516257][ T29] audit: type=1326 audit(1765616552.853:22530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.539944][ T29] audit: type=1326 audit(1765616552.853:22531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.563543][ T29] audit: type=1326 audit(1765616552.853:22532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.587176][ T29] audit: type=1326 audit(1765616552.853:22533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.610758][ T29] audit: type=1326 audit(1765616552.853:22534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.634392][ T29] audit: type=1326 audit(1765616552.853:22535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.657992][ T29] audit: type=1326 audit(1765616552.853:22536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.681601][ T29] audit: type=1326 audit(1765616552.853:22537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.705214][ T29] audit: type=1326 audit(1765616552.853:22538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12956 comm="syz.2.3345" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff51c5cf749 code=0x7ffc0000 [ 258.755996][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3346'. [ 258.779985][T12963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3346'. [ 258.837869][ T3509] IPVS: starting estimator thread 0... [ 258.860529][T12957] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.867822][T12957] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.877865][T12972] tmpfs: Unknown parameter 'fsuuid' [ 258.901453][T12973] siw: device registration error -23 [ 258.927749][T12973] rdma_rxe: rxe_newlink: failed to add veth0_to_bond [ 258.935294][T12970] IPVS: using max 2352 ests per chain, 117600 per kthread [ 259.041635][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.061560][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.147628][T12986] loop3: detected capacity change from 0 to 1024 [ 259.174337][T12986] EXT4-fs: Ignoring removed orlov option [ 259.224928][T12987] syz!: rxe_newlink: already configured on team_slave_0 [ 259.234622][T12987] C: renamed from team_slave_0 [ 259.241345][T12987] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3356'. [ 259.251254][T12725] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.260661][T12725] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.275577][ T4303] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.276300][T12986] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.283997][ T4303] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.315950][T12993] netlink: 'syz.0.3356': attribute type 13 has an invalid length. [ 259.372746][T12986] FAULT_INJECTION: forcing a failure. [ 259.372746][T12986] name failslab, interval 1, probability 0, space 0, times 0 [ 259.385699][T12986] CPU: 1 UID: 0 PID: 12986 Comm: syz.3.3355 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 259.385759][T12986] Tainted: [W]=WARN [ 259.385766][T12986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 259.385846][T12986] Call Trace: [ 259.385852][T12986] [ 259.385877][T12986] __dump_stack+0x1d/0x30 [ 259.385900][T12986] dump_stack_lvl+0xe8/0x140 [ 259.385920][T12986] dump_stack+0x15/0x1b [ 259.385938][T12986] should_fail_ex+0x265/0x280 [ 259.386007][T12986] should_failslab+0x8c/0xb0 [ 259.386032][T12986] kmem_cache_alloc_lru_noprof+0x6d/0x4c0 [ 259.386054][T12986] ? __d_alloc+0x37/0x340 [ 259.386093][T12986] __d_alloc+0x37/0x340 [ 259.386181][T12986] d_alloc+0x2e/0x100 [ 259.386281][T12986] lookup_one_qstr_excl+0x99/0x250 [ 259.386312][T12986] filename_create+0x141/0x210 [ 259.386357][T12986] do_mkdirat+0x82/0x3b0 [ 259.386380][T12986] __x64_sys_mkdirat+0x4c/0x60 [ 259.386398][T12986] x64_sys_call+0x30c/0x3000 [ 259.386494][T12986] do_syscall_64+0xd8/0x2a0 [ 259.386566][T12986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.386590][T12986] RIP: 0033:0x7f002f7cde97 [ 259.386625][T12986] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.386649][T12986] RSP: 002b:00007f002e236e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 259.386668][T12986] RAX: ffffffffffffffda RBX: 00007f002e236ef0 RCX: 00007f002f7cde97 [ 259.386683][T12986] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c [ 259.386697][T12986] RBP: 0000200000000300 R08: 00002000000000c0 R09: 0000000000000000 [ 259.386744][T12986] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280 [ 259.386757][T12986] R13: 00007f002e236eb0 R14: 0000000000000000 R15: 0000000000000000 [ 259.386774][T12986] [ 259.613339][T11022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.743812][T13002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 259.761079][T13002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3359'. [ 260.066744][T13019] tmpfs: Unknown parameter 'fsuuid' [ 260.231264][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3369'. [ 260.268343][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3371'. [ 260.281382][T13036] FAULT_INJECTION: forcing a failure. [ 260.281382][T13036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.294508][T13036] CPU: 0 UID: 0 PID: 13036 Comm: syz.0.3373 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 260.294597][T13036] Tainted: [W]=WARN [ 260.294605][T13036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 260.294616][T13036] Call Trace: [ 260.294624][T13036] [ 260.294632][T13036] __dump_stack+0x1d/0x30 [ 260.294660][T13036] dump_stack_lvl+0xe8/0x140 [ 260.294683][T13036] dump_stack+0x15/0x1b [ 260.294722][T13036] should_fail_ex+0x265/0x280 [ 260.294744][T13036] should_fail+0xb/0x20 [ 260.294763][T13036] should_fail_usercopy+0x1a/0x20 [ 260.294838][T13036] _copy_from_user+0x1c/0xb0 [ 260.294953][T13036] ___sys_sendmsg+0xc1/0x1d0 [ 260.294994][T13036] __x64_sys_sendmsg+0xd4/0x160 [ 260.295094][T13036] x64_sys_call+0x17ba/0x3000 [ 260.295123][T13036] do_syscall_64+0xd8/0x2a0 [ 260.295202][T13036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.295227][T13036] RIP: 0033:0x7ff47c0df749 [ 260.295245][T13036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.295264][T13036] RSP: 002b:00007ff47ab3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.295343][T13036] RAX: ffffffffffffffda RBX: 00007ff47c335fa0 RCX: 00007ff47c0df749 [ 260.295358][T13036] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000006 [ 260.295372][T13036] RBP: 00007ff47ab3f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.295386][T13036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.295399][T13036] R13: 00007ff47c336038 R14: 00007ff47c335fa0 R15: 00007ffc39b07518 [ 260.295441][T13036] [ 260.461008][T13034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3371'. [ 260.527255][T13046] netlink: 'syz.0.3376': attribute type 3 has an invalid length. [ 260.650673][T13049] loop4: detected capacity change from 0 to 1024 [ 260.677939][T13049] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.754913][T12480] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.810841][T13056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3379'. [ 260.954306][T13061] lo speed is unknown, defaulting to 1000 [ 261.316564][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3383'. [ 261.352502][T13069] netlink: 'syz.0.3384': attribute type 3 has an invalid length. [ 261.777162][T13073] netlink: 'syz.2.3386': attribute type 13 has an invalid length. [ 261.850535][T13042] loop3: detected capacity change from 0 to 4096 [ 261.914770][T13075] netlink: 'syz.2.3387': attribute type 1 has an invalid length. [ 261.984650][T13042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.043292][T13082] netlink: 'syz.2.3389': attribute type 13 has an invalid length. [ 262.196187][T13093] netlink: 'syz.3.3375': attribute type 5 has an invalid length. [ 262.416770][T13090] vlan2: entered allmulticast mode [ 262.500098][T11022] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.580385][T13101] tmpfs: Unknown parameter 'fsuuid' [ 262.858891][T13110] FAULT_INJECTION: forcing a failure. [ 262.858891][T13110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.872026][T13110] CPU: 0 UID: 0 PID: 13110 Comm: syz.0.3400 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.872080][T13110] Tainted: [W]=WARN [ 262.872089][T13110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 262.872160][T13110] Call Trace: [ 262.872168][T13110] [ 262.872178][T13110] __dump_stack+0x1d/0x30 [ 262.872204][T13110] dump_stack_lvl+0xe8/0x140 [ 262.872223][T13110] dump_stack+0x15/0x1b [ 262.872241][T13110] should_fail_ex+0x265/0x280 [ 262.872326][T13110] should_fail+0xb/0x20 [ 262.872349][T13110] should_fail_usercopy+0x1a/0x20 [ 262.872397][T13110] _copy_from_user+0x1c/0xb0 [ 262.872504][T13110] ___sys_sendmsg+0xc1/0x1d0 [ 262.872547][T13110] __x64_sys_sendmsg+0xd4/0x160 [ 262.872581][T13110] x64_sys_call+0x17ba/0x3000 [ 262.872609][T13110] do_syscall_64+0xd8/0x2a0 [ 262.872688][T13110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.872713][T13110] RIP: 0033:0x7ff47c0df749 [ 262.872732][T13110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.872823][T13110] RSP: 002b:00007ff47ab3f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.872847][T13110] RAX: ffffffffffffffda RBX: 00007ff47c335fa0 RCX: 00007ff47c0df749 [ 262.872863][T13110] RDX: 0000000000008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.872877][T13110] RBP: 00007ff47ab3f090 R08: 0000000000000000 R09: 0000000000000000 [ 262.872891][T13110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.872951][T13110] R13: 00007ff47c336038 R14: 00007ff47c335fa0 R15: 00007ffc39b07518 [ 262.872972][T13110] [ 263.100495][T13113] netlink: 'syz.3.3402': attribute type 13 has an invalid length. [ 263.171474][ T29] kauditd_printk_skb: 596 callbacks suppressed [ 263.171525][ T29] audit: type=1326 audit(1765616557.523:23135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.225308][ T29] audit: type=1326 audit(1765616557.563:23136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.248999][ T29] audit: type=1326 audit(1765616557.563:23137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.272686][ T29] audit: type=1326 audit(1765616557.563:23138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.296312][ T29] audit: type=1326 audit(1765616557.563:23139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.319983][ T29] audit: type=1326 audit(1765616557.563:23140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.343588][ T29] audit: type=1326 audit(1765616557.563:23141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.367155][ T29] audit: type=1326 audit(1765616557.563:23142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.390816][ T29] audit: type=1326 audit(1765616557.563:23143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.414479][ T29] audit: type=1326 audit(1765616557.563:23144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13112 comm="syz.3.3402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002f7cf749 code=0x7ffc0000 [ 263.484568][T13121] vlan2: entered allmulticast mode [ 263.910818][T13146] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13146 comm=syz.0.3414 [ 264.124689][T13156] devpts: Unknown parameter 'si' [ 264.356018][T13166] vlan2: entered allmulticast mode [ 264.516507][T13170] tmpfs: Unknown parameter 'fsuuid' [ 265.059751][T13187] loop2: detected capacity change from 0 to 2048 [ 265.110922][T11415] Alternate GPT is invalid, using primary GPT. [ 265.117342][T11415] loop2: p2 p3 p7 [ 265.140088][T13187] Alternate GPT is invalid, using primary GPT. [ 265.146547][T13187] loop2: p2 p3 p7 [ 265.164782][ T3003] udevd[3003]: worker [11415] terminated by signal 33 (Unknown signal 33) [ 265.215091][ T3003] udevd[3003]: worker [11415] failed while handling '/devices/virtual/block/loop2' [ 265.254683][T11471] udevd[11471]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 265.264816][T11469] udevd[11469]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 265.276273][T12017] udevd[12017]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 265.322132][T11469] udevd[11469]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 265.322223][T11471] udevd[11471]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 265.333106][T12017] udevd[12017]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 265.507852][T13212] loop2: detected capacity change from 0 to 1024 [ 265.532464][T13212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.579605][T13212] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 265.590588][T13212] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 265.636948][T13212] JBD2: no valid journal superblock found [ 265.642709][T13212] EXT4-fs (loop2): Could not load journal inode [ 265.702943][ T3003] ================================================================== [ 265.711068][ T3003] BUG: KCSAN: data-race in dont_mount / step_into_slowpath [ 265.718294][ T3003] [ 265.720638][ T3003] read-write to 0xffff8881076c6840 of 4 bytes by task 11469 on cpu 1: [ 265.728812][ T3003] dont_mount+0x2a/0x40 [ 265.732995][ T3003] vfs_unlink+0x2ae/0x440 [ 265.737351][ T3003] do_unlinkat+0x1cd/0x4b0 [ 265.741786][ T3003] __x64_sys_unlink+0x2e/0x40 [ 265.746490][ T3003] x64_sys_call+0x2f48/0x3000 [ 265.751272][ T3003] do_syscall_64+0xd8/0x2a0 [ 265.755794][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.761705][ T3003] [ 265.764036][ T3003] read to 0xffff8881076c6840 of 4 bytes by task 3003 on cpu 0: [ 265.771592][ T3003] step_into_slowpath+0x120/0x480 [ 265.776629][ T3003] path_lookupat+0x330/0x500 [ 265.781236][ T3003] filename_lookup+0x147/0x340 [ 265.786024][ T3003] do_readlinkat+0x7d/0x320 [ 265.790545][ T3003] __x64_sys_readlink+0x47/0x60 [ 265.795419][ T3003] x64_sys_call+0x2af1/0x3000 [ 265.800121][ T3003] do_syscall_64+0xd8/0x2a0 [ 265.804642][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.810565][ T3003] [ 265.812910][ T3003] value changed: 0x00300080 -> 0x00004080 [ 265.818637][ T3003] [ 265.820970][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 265.827129][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 265.838001][ T3003] Tainted: [W]=WARN [ 265.841815][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.851883][ T3003] ==================================================================