last executing test programs: 3m13.132970944s ago: executing program 0 (id=436): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffeca50000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x33f555fdfdd407b9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x0, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x3, 0x800000000001}, 0x11120, 0x5dd8, 0x0, 0x6, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 3m12.856394906s ago: executing program 0 (id=438): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unlink(0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b0511"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, 0xffffffffffffffff, 0x26, 0x0, @void}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f00000001c0)='./bus\x00', 0x240445, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpquota}, {@noquota}, {@quota}, {@noload}, {@noload}]}, 0x0, 0x50c, &(0x7f0000001440)="$eJzs3c9rHG0dAPDvbHZr06Zv8qoHfcH6o5W0aHeTxrbBQ60geiqo9V5jsgkhm2zIbtomFE3xDxBEVPCkFy+Cf4AgBS8eRSjoWVFRRFs9eNCO7O4kTdPdZNtus2n284HJPM8zM/t9ng0zO8/Mw0wAA+tjEXEjIp6maXoxIkaz8lw2xVZraqz35PH92caURJre+kcSSVa2/VlJNj+dbXYyIr76pYhvJC/GrW1sLs1UKuW1LF+qL6+WahublxaXZxbKC+WVqanJq9PXpq9MT/SknWci4voX/vL97/z0i9d/+em7f7z9twvfbFRrJFu+ux0vKb/fwlbTC83vYvcGa68Y7CjKN1uYGW63xtALJQ/ecJ0AAGivcY7//oj4RERcjNEY2v90FgAAAHgLpZ8bif8mEWl7JzqUAwAAAG+RXHMMbJIrZmMBRiKXKxZbY3g/GKdylWqt/qn56vrKXGus7FgUcvOLlfJENlZ4LApJIz/ZTD/LX96Tn4qIdyPie6PDzXxxtlqZ6/fFDwAAABgQp/f0//892ur/AwAAAMfMWL8rAAAAALxx+v8AAABw/On/AwAAwLH25Zs3G1O6/f7ruTsb60vVO5fmyrWl4vL6bHG2urZaXKhWF5rP7Fs+6PMq1erqZ2Jl/V6pXq7VS7WNzdvL1fWV+u3F516BDQAAAByidz/68PdJRGx9drg5NZzobtMuVwOOqvxOKsnmbXbrP7zTmv/5kCoFHIqhflcA6Jt8vysA9E2h3xUA+i45YHnHwTu/yeYf7219AACA3hv/cOf7/7l9t9zafzFw5NmJYXC5/w+Dq3n/v9uRvE4W4FgpOAOAgffa9/8PlKYvVSEAAKDnRppTkitml/dGIpcrFiPONF8LUEjmFyvliYh4JyJ+N1p4XyM/2dwyObDPAAAAAAAAAAAAAAAAAAAAAAAAAAC0pGkSKQAAAHCsReT+mvyq9Sz/8dHzI3uvD5xI/jMa2StC7/7o1g/uzdTra5ON8n/ulNd/mJVf7scVDAAAABgIL/UC/+1++nY/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66cnj+7Pb02HG/fvnI2KsXfx8nGzOT0YhIk79K4n8ru2SiBjqQfzhxp8PtYufNKq1E7Jd/OEexN96sG/8GMu+hXbxT/cgPgyyh43jz409+1+6e432+18+4rn8q+p8/Iud499Qh/3/TJcx3nv081LH+A8i3su3P/5sx086xD/XZfyvf21zs9Oy9McR421/f5LnYpXqy6ul2sbmpcXlmYXyQnllamry6vS16SvTE6X5xUo5+9s2xnc/8oun+7X/VIf4Ywe0/3yX7f/fo3uPP9BKFtrFv3CuTfxf/yRb48X4uey375NZurF8fDu91UrvdvZnvz27X/vnOrT/oP//hS7bf/Er3/5Tl6sCAIegtrG5NFOplNeObaLRSz8C1RjMxI2jUY1OiW/19APTNG32HF/jc5I4Cl9LM9HvIxMAANBrz076+10TAAAAAAAAAAAAAAAAAAAAGFyH8TixvTG3dlJJLx6hDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQE/8PAAD//xaa2hE=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)="5ba58a09", 0x4}, {0x0}], 0x2) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x64, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xd, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) getpriority(0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r10, &(0x7f0000000d00)="ae37a1ffd090a872a6bf96c14917b7e13a82051925e3c3f3291dcf2e8fbc594d24fd0be66b1787f865a1d6d19f6d67e807894fa30c6d825fe3c25e8672b962c69616f7788b53e1c93797def7979f98016be66bff22b7366ddfb038a7d5cc4368e82dfe47da7083a356745fc251a51692a8ae1522c96b946d2d", 0x79) recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) 3m11.980891711s ago: executing program 0 (id=447): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181010100000003040000000000000e000a000f00000002800600121f", 0x2e}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101000, 0x0) getdents64(r4, 0x0, 0x0) lseek(r4, 0x3, 0x1) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="2b72646d61202b626c6b696f202d72646d612098fe98b8c3968acd934012701b95456b25251cee54b899247dfe1407a34633f73a50a50b250f767bd56a2db853bfd46e5ae23a28a6ca7d306d2e409476a8db3fa7f57a02deeb700bc72d4c4fc5fe0b5bf8704597ce234d641c2c8c4349d20066542cb2de8faa5216345552303d979ba282bb01e7d76e66dca07e8716d0ab002ac600e0ffed8d94059559"], 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000780)='cq_schedule\x00', r3}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r5) 3m11.924509372s ago: executing program 0 (id=449): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x3000046, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@oldalloc}, {@errors_remount}, {@orlov}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x622}}]}, 0x1, 0x56c, &(0x7f0000001a00)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000080)=""/30) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="d327e8ffc4571764cc9161ed37fa86a5c33797c6234e64c193b0a80ace", @ANYBLOB="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"], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r3, r4, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) symlink(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') open$dir(&(0x7f0000000280)='./file0\x00', 0x10000, 0xb1) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000580)={'team_slave_1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r7, 0x301, 0x70bd2c, 0x25dfdbf7, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20044014) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r10}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r11 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r11, 0x2284, &(0x7f0000000080)) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 3m11.705168553s ago: executing program 0 (id=451): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000001cc0)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc000b2c00db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa2c200007"], 0xfdef) 3m9.479045887s ago: executing program 0 (id=479): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 3m9.463737857s ago: executing program 32 (id=479): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.692386609s ago: executing program 2 (id=4007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) set_robust_list(&(0x7f0000000640)={&(0x7f0000000300)={&(0x7f00000002c0)}}, 0x18) 1.535217851s ago: executing program 2 (id=4012): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 1.53419023s ago: executing program 2 (id=4013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x8) 1.517690121s ago: executing program 4 (id=4014): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000a26900001b5e5ccbee42f4afd3db079e808639487df563000f32f3038144eb11d95b5300898bc3b5689659fa47842454b28db5fe55394730bd4f1bea143d5ee49ab11d5711d979090fa27399a2a5aec6ad474c1b4f993828e8e6228970746f42ed8d2381a91f6422a8d8115b6810e22e734d3f98b18ec3725a0a7ef3474900a3c8dd7fbca81f250cc3a41115dd03c30482fdf8a85d862d4edbd0229dd51f53554af5948e62a1e83da6fca418d762ec47c5ac228cc592a6c9f956de4d775e85965c57f7114c986c49061f", @ANYRES32=0x0, @ANYBLOB="ad452bd54b5981a00ae1071c8e0000000000000000000000007fd993b8eaa377663bbc758037049de563702fde9953eef9bb5eea0a6caf0032666762e1177ddb98667ea14e47a12c9dc48af7", @ANYRES32=r0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e5cea00403c0020010000000000000002000000000000ff0200000000000000000000000000010004000000000000c910ff"], 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000680)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4f33}, 0x18) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0xfffe, @multicast, 'bond0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) 1.257419672s ago: executing program 2 (id=4018): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x100000, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000180012800e000100776972656775617264"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 1.195977922s ago: executing program 2 (id=4020): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="9feb0100180d000000000000380000003800000009000000060000000000000c03000000070000810000000e0300000000000000000000000200000d00000000ffffffff000000000d0000000000000000000000002e5f6100"], 0x0, 0x59, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000005e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/66, 0x42}, 0xd58}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r3}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r3, @ANYBLOB="00000100dea60100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000050000000400"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x200000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x48840) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x100) pwrite64(r7, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) 1.195482122s ago: executing program 4 (id=4021): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d700006cff0000000000000000050000000000000100000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 1.152515573s ago: executing program 1 (id=4022): r0 = socket(0x2, 0x80805, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0}, 0x100190, 0xc8, 0x9, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x4, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) (async) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000001080)='dctcp-reno\x00', 0x4d) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001140)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000180)=0x10) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000000, 0x1010, r4, 0x95d72000) (async) syz_pidfd_open(0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', &(0x7f0000000180)=@ethtool_sset_info={0x37, 0xf, 0xa}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r9], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1.152203762s ago: executing program 5 (id=4023): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x2]}, 0x8) (fail_nth: 3) 1.150821093s ago: executing program 3 (id=4024): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r0, 0x0, 0x8}, 0x18) getrlimit(0xf, &(0x7f0000000200)) 1.080656883s ago: executing program 1 (id=4025): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x24, 0x10001, 0xfffffffc, 0x3, 0xb8, 0x40, 0x2, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x20, 0x71430, 0x0, 0x4, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x3}) close(r1) 1.080088833s ago: executing program 5 (id=4026): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) getpgrp(0xffffffffffffffff) 1.079811143s ago: executing program 3 (id=4027): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0}, 0x4) 1.018620603s ago: executing program 1 (id=4028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x8) 1.018023074s ago: executing program 5 (id=4029): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYRES16=r2, @ANYRES8=r0, @ANYRES32=r2], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r5, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r10 = dup(r9) ioctl$PTP_PEROUT_REQUEST2(r10, 0x40383d0c, &(0x7f0000000dc0)={{0xeb4, 0x90}, {0x800000, 0x673ec232}, 0xb, 0x7}) io_submit(r7, 0x5, &(0x7f0000001a40)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x8, 0x0, r6, &(0x7f0000000040)="0300ffff1f29", 0x6}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x1ff, r5, &(0x7f0000000480)="fd10777f521414672b47846537aed29ff31f670aa6e6d5798b5afdd66fefa4369f65e18246ff70777a89a64bb78e84f75711a85ddc3db09e8929f545dbf858914051c48f5d6f272686106a8e54346469654ae155a11a0a6ef7df04923836a782d3a4ef660f2c9775a66e96fe32f888103f25b41d36249a4ede3967743cc167a7fb62a0f63a1edd80b906d66f50b80071d22ecdb13c1e899a100c42268d2fdd6721f68ca3", 0xa4, 0x8000000000000000, 0x0, 0x1}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x4, 0xffffffffffffffff, &(0x7f0000000640)="dc70ea52e0126548555751a14f9b968792a84022d36067baad2743", 0x1b, 0x1, 0x0, 0x2}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x6, 0x3ff, r8, &(0x7f0000000900)="8c4d81e388caad07c56178f64aae6c5b8c4b59c195c09fea78f5cdc24f7f1785fe6a8d354788fb17808e9222a6bc425ad5449cf4ef5b6e1a70a9e0db467bba29acd37e06711f38aef6f66b36a04992d41acce1f1cf3802e04801e32432ac46c9b3103fa646a087af15dac4de37b8ce1c6a5e250577224c921e5a1f61574eda6eeb6e2a3c4c8545e4d9d55ec8be38514cf3aac31663147752", 0x98, 0x9, 0x0, 0x1}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x5, 0x13, r4, &(0x7f0000000a00)="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", 0x1000, 0x100000000, 0x0, 0x0, r10}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2, 0x0, 0x2}, 0x18) 1.017646134s ago: executing program 3 (id=4030): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'bridge_slave_0\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x1d}}) 1.017245744s ago: executing program 3 (id=4031): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000a26900001b5e5ccbee42f4afd3db079e808639487df563000f32f3038144eb11d95b5300898bc3b5689659fa47842454b28db5fe55394730bd4f1bea143d5ee49ab11d5711d979090fa27399a2a5aec6ad474c1b4f993828e8e6228970746f42ed8d2381a91f6422a8d8115b6810e22e734d3f98b18ec3725a0a7ef3474900a3c8dd7fbca81f250cc3a41115dd03c30482fdf8a85d862d4edbd0229dd51f53554af5948e62a1e83da6fca418d762ec47c5ac228cc592a6c9f956de4d775e85965c57f7114c986c49061f", @ANYRES32=0x0, @ANYBLOB="ad452bd54b5981a00ae1071c8e0000000000000000000000007fd993b8eaa377663bbc758037049de563702fde9953eef9bb5eea0a6caf0032666762e1177ddb98667ea14e47a12c9dc48af7", @ANYRES32=r0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd602e5cea00403c0020010000000000000002000000000000ff0200000000000000000000000000010004000000000000c910ff"], 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000680)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4f33}, 0x18) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000140)={0x18, 0x0, {0xfffe, @multicast, 'bond0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) 972.276734ms ago: executing program 1 (id=4032): fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="42ad4b2d36cf3c33a818cc0072399b4437189fc26328b0a5efd4ec14fdc285ddb34b1d0e773c9bd5cdb3309bfbbab7e9757b8b44f5c6cdfbc62e13425f6371373b20443585e2870ad881a5ff43c3a07437735554c84430a13fc4cbd1d537272de45be0ee4478c8895f57d457f75f16a451e8d4028145cc8c0df5a33ca31aaaf5f80327a795f987c5d1203bc30000"], 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 963.201534ms ago: executing program 4 (id=4033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 957.045094ms ago: executing program 5 (id=4034): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0x0, 0x0}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000019c0)={0x6, 0x10, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffa}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x8, 0x9, 0x2, 0x1, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1000, &(0x7f0000000640)=""/4096, 0x41000, 0x60, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000000540)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001900)={0x4, 0xef20, 0x11b8, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001940)=[r1, r1], &(0x7f0000001980)=[{0x3, 0x5, 0x2, 0xc}], 0x10, 0x6, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r1}, 0x38) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) getpid() open(&(0x7f00000002c0)='./file2\x00', 0x189242, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x401, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$TIOCGPTPEER(r0, 0x5441, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@delneigh={0x44, 0x1a, 0x1, 0x400000, 0x0, {0xa, 0x0, 0x0, 0x0, 0x4, 0x12, 0x8}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x5, 0x0, 0xfffffffd}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x44}}, 0x4800) 937.634994ms ago: executing program 1 (id=4035): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e2f303132333435363738393a3b3c3d3e3f4000"/72], 0x48, 0xfffffffffffffffe) getresuid(&(0x7f0000000380), &(0x7f0000000300)=0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='rpcgss_bad_seqno\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d300000000000000000000000ca861b9927af746d76b40ca0e825048a74610aae45909b7f200ae9d247cbcfd93822418060160693b641720bb81d55da10e94ee11cad8a7ceb697a19a5921723cf4924f6d40b186a2a1202113721222795f4bf4fe889e53b145c0955acd83ba211"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@rand_addr=0x64010105, @in6=@remote, 0x4e23, 0x7079, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x2e, 0x0, r3}, {0x5, 0xffff, 0x2ac, 0x1, 0x7ff, 0x3, 0x6, 0x5}, {0x9, 0x3ff, 0x3, 0x31920c25}, 0x40, 0xd1, 0x0, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x3, 0x3, 0x5, 0x4, 0x100, 0x7f}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000007400f88595ae010400400000000000000100000008000b40000000004c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000140001800a000100696e6e6572000000040002800900010073797a3000000000140000001100010000000000000000000700000a3a2cd9e2847e029b8c7cd94a7f88635dfff2e28ff4ac0dc7f6191e374eb4b68ba1fb82098ed8011e29801a2e0ec5fc8ae7d96d40ca915e2c2cc54cb1d49c7bf131b3644b74f3bf42a63db65b77a9ecee1fadfff441887431238f3577b91abaf3fce272055fcfb41f0501fe9f51ac7451d424c7bb6d748e3ca2bde7ac8abad0b7c1d7c014130853d77cb183fe49c85728ed1ac37a91d2c9fc1f8d73d91c3e81bb814aa09058bbbc6b17b8fd80026a40b7c6e0a6cf9b66996f3754b6197a5c732b450c78"], 0xe8}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203ff030c00000000000000fddbdf25010009000000000003000600000000000200000000000000000000000000010002000100000000000000050b00000000030005000000000002000000ac141daa0000000000000000010014"], 0x60}, 0x1, 0x7}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 917.836924ms ago: executing program 3 (id=4036): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000a26900001b5e5ccbee42f4afd3db079e808639487df563000f32f3038144eb11d95b5300898bc3b5689659fa47842454b28db5fe55394730bd4f1bea143d5ee49ab11d5711d979090fa27399a2a5aec6ad474c1b4f993828e8e6228970746f42ed8d2381a91f6422a8d8115b6810e22e734d3f98b18ec3725a0a7ef3474900a3c8dd7fbca81f250cc3a41115dd03c30482fdf8a85d862d4edbd0229dd51f53554af5948e62a1e83da6fca418d762ec47c5ac228cc592a6c9f956de4d775e85965c57f7114c986c49061f", @ANYRES32=0x0, @ANYBLOB="ad452bd54b5981a00ae1071c8e0000000000000000000000007fd993b8eaa377663bbc758037049de563702fde9953eef9bb5eea0a6caf0032666762e1177ddb98667ea14e47a12c9dc48af7", @ANYRES32=r0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) socket$unix(0x1, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000e60000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x4f33}, 0x18) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000040)="89", 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) 688.960636ms ago: executing program 3 (id=4037): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) add_key$fscrypt_provisioning(0x0, &(0x7f0000000740)={'syz', 0x2}, &(0x7f0000000880)=ANY=[@ANYBLOB="00000000000000000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e2f303132333435363738393a3b3c3d3e3f4000"/72], 0x48, 0xfffffffffffffffe) getresuid(&(0x7f0000000380), &(0x7f0000000300)=0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='rpcgss_bad_seqno\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d300000000000000000000000ca861b9927af746d76b40ca0e825048a74610aae45909b7f200ae9d247cbcfd93822418060160693b641720bb81d55da10e94ee11cad8a7ceb697a19a5921723cf4924f6d40b186a2a1202113721222795f4bf4fe889e53b145c0955acd83ba211"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000780)={{{@in=@rand_addr=0x64010105, @in6=@remote, 0x4e23, 0x7079, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x2e, 0x0, r3}, {0x5, 0xffff, 0x2ac, 0x1, 0x7ff, 0x3, 0x6, 0x5}, {0x9, 0x3ff, 0x3, 0x31920c25}, 0x40, 0xd1, 0x0, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3501, 0x3, 0x3, 0x5, 0x4, 0x100, 0x7f}}, 0xe8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x40011}, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203ff030c00000000000000fddbdf25010009000000000003000600000000000200000000000000000000000000010002000100000000000000050b00000000030005000000000002000000ac141daa0000000000000000010014"], 0x60}, 0x1, 0x7}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r8, &(0x7f0000004200)='t', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) 573.943646ms ago: executing program 4 (id=4038): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d700006cff0000000000000000050000000000000100000000000000000000000000000001"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 346.203888ms ago: executing program 2 (id=4039): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) ioperm(0x0, 0xd, 0x4000000000000020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x4, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a000000000000000000290000b4d9157c0000001811004fabcf3154d7f4d8520913b5bc0b73b07a6237274000"/60, @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0x7000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 199.191069ms ago: executing program 4 (id=4040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) getpgrp(0xffffffffffffffff) 150.763479ms ago: executing program 5 (id=4041): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) unshare(0x20000400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 80.104209ms ago: executing program 4 (id=4042): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$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") r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000900)={0x234, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe771}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff6e56}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x200}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x91ab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x44}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5892}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xeac5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a57}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0xc0}, 0xdb87904ec54560e5) (async, rerun: 64) mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x45) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x400000000000}, 0x18) (async) r3 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='\x88\xea\x81\x80]O\xdd\xa01\x86\xa0q\xc8M\x86!g\xe7\x14\x05\n\xca\x8ef\x8e`\xc8', &(0x7f0000000180)='\xfa.-\x00', 0x0) (async, rerun: 64) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) (rerun: 64) close(r3) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1, 0x1) (async) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) mknod$loop(&(0x7f0000001940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000001580)={0xfc, {"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", 0x1000}}, 0x1006) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{}, [@func]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) (async) lseek(r4, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) 79.557769ms ago: executing program 5 (id=4043): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0xfffffffc, {0x1c, 0x14, 0x0, 0x2, 0x0, 0x0, 0xc8, 0x1}}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000014ac1414aa0000000092fce3183d3fe066ff274177e51e000000001400020002000000e000000200000004000004000d0001007564703a73"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0xf8, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x8045}, 0x40800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xe, &(0x7f0000000500)=@raw=[@btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x1, 0x7, 0xb, 0xc, 0x8}, @map_val={0x18, 0xe, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x47fe}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0x4, 0x1, 0xc, 0x1, 0x2, 0x10, 0x4}], &(0x7f0000000680)='GPL\x00', 0x3, 0xe3, &(0x7f00000006c0)=""/227, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x4, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000800)=[{0x3, 0x4, 0x3, 0x4}, {0x0, 0x3, 0x3, 0x3}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000004c0)='fsi_master_aspeed_opb_write\x00', r7, 0x0, 0x3}, 0x18) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, &(0x7f0000000400)="010000000037a788a11d18000000000000006923c63a4541062101a59ea9cba39a989ca8", 0x24, r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r4}, 0x10) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r9}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x14000021}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000000000000000000000000014"], 0xa8}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r8, 0xc0605345, &(0x7f0000000440)={0xf1cd, 0x2, {0x3, 0x1, 0x7, 0x3, 0x10}}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000c40)={{0x80, 0x2}, 'port1\x00', 0x0, 0x0, 0xfffffffe, 0x3, 0xb8, 0x40, 0x2, 0x0, 0x0, 0x9}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r8, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0xa9, 0x71430, 0x0, 0x2, 0x3e5, 0xf8ad, 0x0, 0x0, 0x0, 0x3}) close(r8) 0s ago: executing program 1 (id=4044): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) munlock(&(0x7f0000f5c000/0x3000)=nil, 0x3000) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) (fail_nth: 2) kernel console output (not intermixed with test programs): 0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.834094][T13776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.860439][T13776] team0: Port device team_slave_0 added [ 203.870655][T13776] team0: Port device team_slave_1 added [ 203.941256][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.954447][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.964414][ T12] bond0 (unregistering): Released all slaves [ 203.991209][T13776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.998248][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.024236][T13776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.060841][T13776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.067833][T13776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.093862][T13776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.194936][ T12] hsr_slave_0: left promiscuous mode [ 204.200621][ T12] hsr_slave_1: left promiscuous mode [ 204.227420][ T12] veth1_macvtap: left promiscuous mode [ 204.247441][ T12] veth0_macvtap: left promiscuous mode [ 204.429497][ T12] team0 (unregistering): Port device team_slave_1 removed [ 204.440649][ T12] team0 (unregistering): Port device team_slave_0 removed [ 204.450059][ T6697] smc: removing ib device syz1 [ 204.475568][T13776] hsr_slave_0: entered promiscuous mode [ 204.482500][T13776] hsr_slave_1: entered promiscuous mode [ 204.488418][T13776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.496185][T13776] Cannot create hsr debugfs directory [ 204.501802][ T3503] syz1: Port: 1 Link DOWN [ 204.831046][T13833] nfs4: Bad value for 'source' [ 204.845142][T13776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.857134][T13776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.870831][T13776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 204.883426][T13776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 204.928913][T13776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.944889][T13776] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.977443][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.984553][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.998072][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.005190][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.089010][T13845] hub 4-0:1.0: USB hub found [ 205.093840][T13845] hub 4-0:1.0: 8 ports detected [ 205.113667][T13776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.121731][T13845] netlink: 992 bytes leftover after parsing attributes in process `syz.5.3079'. [ 205.189656][T13776] veth0_vlan: entered promiscuous mode [ 205.197670][T13776] veth1_vlan: entered promiscuous mode [ 205.217514][T13776] veth0_macvtap: entered promiscuous mode [ 205.226839][T13776] veth1_macvtap: entered promiscuous mode [ 205.238736][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.249335][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.259210][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.269730][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.282297][T13776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.290610][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.301156][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.311052][T13776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.321615][T13776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.333093][T13776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.344896][T13776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.348566][T13863] x_tables: duplicate underflow at hook 1 [ 205.353924][T13776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.368279][T13776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.377030][T13776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.496872][T13867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3058'. [ 205.791749][T13874] FAULT_INJECTION: forcing a failure. [ 205.791749][T13874] name failslab, interval 1, probability 0, space 0, times 0 [ 205.804498][T13874] CPU: 0 UID: 0 PID: 13874 Comm: syz.5.3084 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 205.804530][T13874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 205.804542][T13874] Call Trace: [ 205.804549][T13874] [ 205.804557][T13874] __dump_stack+0x1d/0x30 [ 205.804579][T13874] dump_stack_lvl+0xe8/0x140 [ 205.804596][T13874] dump_stack+0x15/0x1b [ 205.804610][T13874] should_fail_ex+0x265/0x280 [ 205.804638][T13874] should_failslab+0x8c/0xb0 [ 205.804666][T13874] kmem_cache_alloc_noprof+0x50/0x310 [ 205.804694][T13874] ? vm_area_dup+0x32/0x260 [ 205.804719][T13874] vm_area_dup+0x32/0x260 [ 205.804741][T13874] __split_vma+0xe9/0x610 [ 205.804776][T13874] vma_modify+0x1a4/0x210 [ 205.804807][T13874] vma_modify_flags+0x101/0x130 [ 205.804836][T13874] mprotect_fixup+0x2cc/0x570 [ 205.804871][T13874] do_mprotect_pkey+0x6d6/0x980 [ 205.804901][T13874] __x64_sys_mprotect+0x48/0x60 [ 205.804931][T13874] x64_sys_call+0x2794/0x2fb0 [ 205.804954][T13874] do_syscall_64+0xd0/0x1a0 [ 205.804977][T13874] ? clear_bhb_loop+0x25/0x80 [ 205.805000][T13874] ? clear_bhb_loop+0x25/0x80 [ 205.805029][T13874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.805049][T13874] RIP: 0033:0x7f16afdee969 [ 205.805066][T13874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.805084][T13874] RSP: 002b:00007f16ae415038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 205.805102][T13874] RAX: ffffffffffffffda RBX: 00007f16b0016160 RCX: 00007f16afdee969 [ 205.805116][T13874] RDX: 0000000000000001 RSI: 0000000000004000 RDI: 0000200000000000 [ 205.805130][T13874] RBP: 00007f16ae415090 R08: 0000000000000000 R09: 0000000000000000 [ 205.805143][T13874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.805157][T13874] R13: 0000000000000000 R14: 00007f16b0016160 R15: 00007ffcc8181bf8 [ 205.805176][T13874] [ 206.185485][T13888] nfs4: Bad value for 'source' [ 206.190792][T13886] 9pnet_fd: Insufficient options for proto=fd [ 206.282088][T13893] SET target dimension over the limit! [ 206.553254][T13916] random: crng reseeded on system resumption [ 206.766419][T13956] nfs4: Bad value for 'source' [ 207.126602][ T9] Process accounting resumed [ 207.427161][T14009] random: crng reseeded on system resumption [ 207.436252][T14017] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3115'. [ 207.795407][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.802926][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.810484][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.817988][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.825471][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.832922][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x2 [ 207.840461][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.847886][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.855368][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.862784][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.870197][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.877780][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x2 [ 207.885232][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.892661][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.900185][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.907579][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.915056][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.922654][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.930078][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.937505][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.944937][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.952436][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.959917][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.967336][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.974756][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.982776][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.990197][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 207.997632][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 208.005172][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 208.012575][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 208.020026][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 208.027469][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 208.034891][ T36] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 208.100711][T14038] vhci_hcd: invalid port number 96 [ 208.105867][T14038] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 208.182705][ T36] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz0] on syz1 [ 208.379690][T14039] chnl_net:caif_netlink_parms(): no params data found [ 208.391017][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 208.391035][ T29] audit: type=1400 audit(1746876267.698:7741): avc: denied { create } for pid=14074 comm="syz.1.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 208.441424][ T29] audit: type=1400 audit(1746876267.698:7742): avc: denied { getopt } for pid=14074 comm="syz.1.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 208.471208][ T29] audit: type=1400 audit(1746876267.792:7743): avc: denied { kexec_image_load } for pid=14079 comm="syz.1.3136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 208.522445][ T29] audit: type=1400 audit(1746876267.845:7744): avc: denied { listen } for pid=14079 comm="syz.1.3136" lport=59833 faddr=172.30.0.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 208.546770][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3136'. [ 208.554054][T14087] netlink: 'syz.3.3138': attribute type 10 has an invalid length. [ 208.574738][T14087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.586945][T14087] team0: Port device bond0 added [ 208.598611][T14039] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.605802][T14039] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.615136][T14039] bridge_slave_0: entered allmulticast mode [ 208.621679][T14039] bridge_slave_0: entered promiscuous mode [ 208.627798][ T29] audit: type=1400 audit(1746876267.939:7745): avc: denied { create } for pid=14085 comm="syz.3.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.639976][T14039] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.647926][ T29] audit: type=1400 audit(1746876267.939:7746): avc: denied { bind } for pid=14085 comm="syz.3.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.654322][T14039] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.655991][T14039] bridge_slave_1: entered allmulticast mode [ 208.673743][ T29] audit: type=1400 audit(1746876267.939:7747): avc: denied { write } for pid=14085 comm="syz.3.3138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 208.683119][T14039] bridge_slave_1: entered promiscuous mode [ 208.735010][T14039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.744893][ T29] audit: type=1326 audit(1746876268.065:7748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 208.747802][T14039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.769639][ T29] audit: type=1326 audit(1746876268.065:7749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 208.801495][ T29] audit: type=1326 audit(1746876268.065:7750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14089 comm="syz.1.3139" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 208.834556][T14039] team0: Port device team_slave_0 added [ 208.841410][T14039] team0: Port device team_slave_1 added [ 208.858812][T14039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.865791][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.891875][T14039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.903189][T14039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.910300][T14039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.936263][T14039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.968580][T14039] hsr_slave_0: entered promiscuous mode [ 208.974853][T14039] hsr_slave_1: entered promiscuous mode [ 208.980805][T14039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.989600][T14039] Cannot create hsr debugfs directory [ 209.088812][T14100] random: crng reseeded on system resumption [ 209.248397][T14105] netlink: 'syz.3.3143': attribute type 3 has an invalid length. [ 209.316247][T14106] netlink: 'syz.5.3142': attribute type 3 has an invalid length. [ 209.368575][ T2281] bond0 (unregistering): Released all slaves [ 209.380403][ T2281] bond1 (unregistering): Released all slaves [ 209.398661][T14107] netlink: 'syz.4.3144': attribute type 3 has an invalid length. [ 209.466826][ T2281] hsr_slave_0: left promiscuous mode [ 209.475794][ T2281] hsr_slave_1: left promiscuous mode [ 210.046891][T14039] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 210.065297][T14039] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 210.095493][T14039] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 210.111234][T14039] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.140494][T14146] random: crng reseeded on system resumption [ 210.186044][T14039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.209576][T14039] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.224604][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.231772][ T6699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.280528][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.287663][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.378730][T14157] FAULT_INJECTION: forcing a failure. [ 210.378730][T14157] name failslab, interval 1, probability 0, space 0, times 0 [ 210.391559][T14157] CPU: 1 UID: 0 PID: 14157 Comm: syz.4.3162 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 210.391592][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 210.391605][T14157] Call Trace: [ 210.391612][T14157] [ 210.391619][T14157] __dump_stack+0x1d/0x30 [ 210.391693][T14157] dump_stack_lvl+0xe8/0x140 [ 210.391713][T14157] dump_stack+0x15/0x1b [ 210.391761][T14157] should_fail_ex+0x265/0x280 [ 210.391794][T14157] should_failslab+0x8c/0xb0 [ 210.391824][T14157] __kmalloc_cache_node_noprof+0x54/0x320 [ 210.391846][T14157] ? __get_vm_area_node+0x106/0x1c0 [ 210.391973][T14157] __get_vm_area_node+0x106/0x1c0 [ 210.392023][T14157] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 210.392049][T14157] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 210.392081][T14157] ? add_timer_global+0x51/0x70 [ 210.392123][T14157] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 210.392151][T14157] __vmalloc_noprof+0x5f/0x70 [ 210.392175][T14157] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 210.392273][T14157] bpf_prog_alloc_no_stats+0x47/0x390 [ 210.392299][T14157] ? bpf_prog_alloc+0x2a/0x150 [ 210.392325][T14157] bpf_prog_alloc+0x3c/0x150 [ 210.392352][T14157] bpf_prog_create+0x73/0x130 [ 210.392388][T14157] bpf_mt_check+0x8d/0x110 [ 210.392412][T14157] xt_check_match+0x2aa/0x4f0 [ 210.392455][T14157] ? strnlen+0x28/0x50 [ 210.392560][T14157] ? xt_find_match+0x1d1/0x210 [ 210.392582][T14157] ? xt_find_match+0x1b5/0x210 [ 210.392606][T14157] translate_table+0xa9c/0xf90 [ 210.392637][T14157] ? _copy_from_user+0x89/0xb0 [ 210.392707][T14157] do_ipt_set_ctl+0x66f/0x820 [ 210.392732][T14157] ? _raw_spin_unlock_bh+0x36/0x40 [ 210.392822][T14157] ? tcp_release_cb+0xf1/0x370 [ 210.392855][T14157] nf_setsockopt+0x196/0x1b0 [ 210.392890][T14157] ip_setsockopt+0x102/0x110 [ 210.392965][T14157] tcp_setsockopt+0x95/0xb0 [ 210.393052][T14157] sock_common_setsockopt+0x66/0x80 [ 210.393119][T14157] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 210.393182][T14157] __sys_setsockopt+0x181/0x200 [ 210.393215][T14157] __x64_sys_setsockopt+0x64/0x80 [ 210.393246][T14157] x64_sys_call+0x2bd5/0x2fb0 [ 210.393267][T14157] do_syscall_64+0xd0/0x1a0 [ 210.393354][T14157] ? clear_bhb_loop+0x25/0x80 [ 210.393439][T14157] ? clear_bhb_loop+0x25/0x80 [ 210.393474][T14157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.393496][T14157] RIP: 0033:0x7f32d663e969 [ 210.393514][T14157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.393532][T14157] RSP: 002b:00007f32d4ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.393553][T14157] RAX: ffffffffffffffda RBX: 00007f32d6865fa0 RCX: 00007f32d663e969 [ 210.393567][T14157] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 210.393647][T14157] RBP: 00007f32d4ca7090 R08: 00000000000004f0 R09: 0000000000000000 [ 210.393661][T14157] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 210.393672][T14157] R13: 0000000000000000 R14: 00007f32d6865fa0 R15: 00007ffe3bbeda18 [ 210.393693][T14157] [ 210.393702][T14157] syz.4.3162: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 210.423208][T14146] netlink: 'syz.3.3159': attribute type 3 has an invalid length. [ 210.535600][T14039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.536079][T14157] ,cpuset=/,mems_allowed=0 [ 210.728179][T14157] CPU: 1 UID: 0 PID: 14157 Comm: syz.4.3162 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 210.728260][T14157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 210.728274][T14157] Call Trace: [ 210.728281][T14157] [ 210.728290][T14157] __dump_stack+0x1d/0x30 [ 210.728314][T14157] dump_stack_lvl+0xe8/0x140 [ 210.728433][T14157] dump_stack+0x15/0x1b [ 210.728449][T14157] warn_alloc+0x12b/0x1a0 [ 210.728473][T14157] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 210.728503][T14157] ? add_timer_global+0x51/0x70 [ 210.728537][T14157] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 210.728621][T14157] __vmalloc_noprof+0x5f/0x70 [ 210.728645][T14157] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 210.728755][T14157] bpf_prog_alloc_no_stats+0x47/0x390 [ 210.728807][T14157] ? bpf_prog_alloc+0x2a/0x150 [ 210.728837][T14157] bpf_prog_alloc+0x3c/0x150 [ 210.728867][T14157] bpf_prog_create+0x73/0x130 [ 210.728943][T14157] bpf_mt_check+0x8d/0x110 [ 210.729009][T14157] xt_check_match+0x2aa/0x4f0 [ 210.729099][T14157] ? strnlen+0x28/0x50 [ 210.729126][T14157] ? xt_find_match+0x1d1/0x210 [ 210.729150][T14157] ? xt_find_match+0x1b5/0x210 [ 210.729215][T14157] translate_table+0xa9c/0xf90 [ 210.729371][T14157] ? _copy_from_user+0x89/0xb0 [ 210.729419][T14157] do_ipt_set_ctl+0x66f/0x820 [ 210.729484][T14157] ? _raw_spin_unlock_bh+0x36/0x40 [ 210.729509][T14157] ? tcp_release_cb+0xf1/0x370 [ 210.729543][T14157] nf_setsockopt+0x196/0x1b0 [ 210.729579][T14157] ip_setsockopt+0x102/0x110 [ 210.729680][T14157] tcp_setsockopt+0x95/0xb0 [ 210.729711][T14157] sock_common_setsockopt+0x66/0x80 [ 210.729786][T14157] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 210.729815][T14157] __sys_setsockopt+0x181/0x200 [ 210.729855][T14157] __x64_sys_setsockopt+0x64/0x80 [ 210.729886][T14157] x64_sys_call+0x2bd5/0x2fb0 [ 210.729905][T14157] do_syscall_64+0xd0/0x1a0 [ 210.730000][T14157] ? clear_bhb_loop+0x25/0x80 [ 210.730022][T14157] ? clear_bhb_loop+0x25/0x80 [ 210.730108][T14157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.730127][T14157] RIP: 0033:0x7f32d663e969 [ 210.730143][T14157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.730162][T14157] RSP: 002b:00007f32d4ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 210.730183][T14157] RAX: ffffffffffffffda RBX: 00007f32d6865fa0 RCX: 00007f32d663e969 [ 210.730205][T14157] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 210.730219][T14157] RBP: 00007f32d4ca7090 R08: 00000000000004f0 R09: 0000000000000000 [ 210.730254][T14157] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 210.730269][T14157] R13: 0000000000000000 R14: 00007f32d6865fa0 R15: 00007ffe3bbeda18 [ 210.730287][T14157] [ 210.730304][T14157] Mem-Info: [ 210.755601][T14039] veth0_vlan: entered promiscuous mode [ 210.756349][T14157] active_anon:27439 inactive_anon:7 isolated_anon:0 [ 210.756349][T14157] active_file:17069 inactive_file:13115 isolated_file:0 [ 210.756349][T14157] unevictable:0 dirty:635 writeback:13 [ 210.756349][T14157] slab_reclaimable:3096 slab_unreclaimable:14358 [ 210.756349][T14157] mapped:30612 shmem:23603 pagetables:1027 [ 210.756349][T14157] sec_pagetables:0 bounce:0 [ 210.756349][T14157] kernel_misc_reclaimable:0 [ 210.756349][T14157] free:1860278 free_pcp:5406 free_cma:0 [ 210.768289][T14039] veth1_vlan: entered promiscuous mode [ 210.772420][T14157] Node 0 active_anon:109756kB inactive_anon:28kB active_file:68276kB inactive_file:52460kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:122448kB dirty:2540kB writeback:52kB shmem:94528kB writeback_tmp:0kB kernel_stack:2992kB pagetables:4108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.817376][T14039] veth0_macvtap: entered promiscuous mode [ 210.818357][T14157] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.844112][T14039] veth1_macvtap: entered promiscuous mode [ 210.845854][T14157] lowmem_reserve[]: [ 210.867559][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.870017][T14157] 0 2884 7863 7863 [ 210.870051][T14157] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 210.874645][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.879209][T14157] lowmem_reserve[]: 0 [ 210.883727][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.888905][T14157] 0 4978 [ 210.894802][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.894816][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.899681][T14157] 4978 [ 210.904686][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.909451][T14157] Node 0 [ 210.923764][T14039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.929221][T14157] Normal free:4475716kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:111728kB inactive_anon:28kB active_file:68276kB inactive_file:52460kB unevictable:0kB writepending:2592kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:16488kB local_pcp:3020kB free_cma:0kB [ 210.939848][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.953329][T14157] lowmem_reserve[]: 0 0 0 0 [ 210.953364][T14157] Node 0 DMA: 0*4kB 0*8kB [ 210.961793][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.969767][T14157] 0*16kB [ 210.977785][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.985769][T14157] 0*32kB [ 210.993725][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.001699][T14157] 0*64kB 0*128kB [ 211.004744][T14039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.007833][T14157] 0*256kB [ 211.013299][T14039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.058422][T14157] 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.068721][T14039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.093283][T14157] Node 0 [ 211.102643][T14039] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.126025][T14157] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB [ 211.131822][T14039] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.135648][T14157] (M) 2*128kB [ 211.146071][T14039] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.149875][T14157] (M) 3*256kB (M) 3*512kB [ 211.178147][T14039] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.187930][T14157] (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 211.437960][T14157] Node 0 Normal: 1720*4kB (UME) 1477*8kB (ME) 1048*16kB (ME) 735*32kB (UME) 532*64kB (UME) 232*128kB (UME) 89*256kB (UM) 49*512kB (UME) 25*1024kB (UME) 21*2048kB (UME) 1034*4096kB (UM) = 4474472kB [ 211.457555][T14157] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 211.466888][T14157] 51212 total pagecache pages [ 211.471592][T14157] 36 pages in swap cache [ 211.475853][T14157] Free swap = 124968kB [ 211.480031][T14157] Total swap = 124996kB [ 211.484273][T14157] 2097051 pages RAM [ 211.488171][T14157] 0 pages HighMem/MovableOnly [ 211.492873][T14157] 80258 pages reserved [ 211.496963][T14157] xt_bpf: check failed: parse error [ 211.698583][T14200] lo speed is unknown, defaulting to 1000 [ 211.704585][T14200] lo speed is unknown, defaulting to 1000 [ 211.710805][T14200] lo speed is unknown, defaulting to 1000 [ 211.716988][T14200] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 211.741638][T14200] infiniband sy: RDMA CMA: cma_listen_on_dev, error -98 [ 211.799905][T14200] lo speed is unknown, defaulting to 1000 [ 211.815342][T14200] lo speed is unknown, defaulting to 1000 [ 211.842085][T14200] lo speed is unknown, defaulting to 1000 [ 211.848378][T14200] lo speed is unknown, defaulting to 1000 [ 211.871066][T14219] random: crng reseeded on system resumption [ 211.871514][T14200] lo speed is unknown, defaulting to 1000 [ 212.143563][T14239] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 212.202203][T14239] SELinux: failed to load policy [ 212.694167][T14284] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.778764][T14284] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.827009][T14284] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.873135][T14300] vhci_hcd: invalid port number 96 [ 212.878319][T14300] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 212.891463][T14284] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.934368][T14284] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.945963][T14284] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.957471][T14284] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.970267][T14284] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.660523][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 213.660539][ T29] audit: type=1326 audit(1746876273.220:7825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14313 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 213.690518][ T29] audit: type=1326 audit(1746876273.220:7826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14313 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 213.713957][ T29] audit: type=1326 audit(1746876273.220:7827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14313 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 213.737709][ T29] audit: type=1326 audit(1746876273.220:7828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14313 comm="syz.1.3204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 213.741614][T14324] nfs4: Bad value for 'source' [ 213.763288][ T29] audit: type=1326 audit(1746876273.294:7829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.5.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16afdee969 code=0x7ffc0000 [ 213.789567][ T29] audit: type=1326 audit(1746876273.294:7830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14302 comm="syz.5.3198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16afdee969 code=0x7ffc0000 [ 213.790728][T14326] IPv6: addrconf: prefix option has invalid lifetime [ 213.851264][T14326] vlan2: entered allmulticast mode [ 213.862863][T14329] vhci_hcd: invalid port number 96 [ 213.868059][T14329] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 214.055230][T14350] random: crng reseeded on system resumption [ 214.729676][T14366] vhci_hcd: invalid port number 96 [ 214.734842][T14366] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 214.746005][T14370] x_tables: duplicate underflow at hook 1 [ 214.911954][ T29] audit: type=1400 audit(1746876274.554:7831): avc: denied { write } for pid=14395 comm="syz.2.3227" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.990863][ T29] audit: type=1400 audit(1746876274.596:7832): avc: denied { execute } for pid=14395 comm="syz.2.3227" path="/15/cpu.stat" dev="tmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 215.013951][ T29] audit: type=1400 audit(1746876274.617:7833): avc: denied { setopt } for pid=14403 comm="syz.1.3230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 215.108230][T14399] random: crng reseeded on system resumption [ 215.115178][ T29] audit: type=1326 audit(1746876274.763:7834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14381 comm="syz.3.3225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x0 [ 215.115309][T14420] xt_hashlimit: max too large, truncated to 1048576 [ 215.269408][T14399] netlink: 'syz.3.3225': attribute type 3 has an invalid length. [ 215.746116][T14467] random: crng reseeded on system resumption [ 216.063290][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3243'. [ 216.074589][T14471] ip6gre1: entered allmulticast mode [ 216.124537][T14473] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=14473 comm=syz.1.3244 [ 216.194480][T14475] vhci_hcd: invalid port number 96 [ 216.199801][T14475] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 216.207831][T14477] vhci_hcd: invalid port number 96 [ 216.213064][T14477] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 216.220981][T14467] netlink: 'syz.4.3241': attribute type 3 has an invalid length. [ 216.588527][T14505] random: crng reseeded on system resumption [ 216.724604][T14513] Invalid ELF header magic: != ELF [ 216.751365][T14505] netlink: 'syz.5.3252': attribute type 3 has an invalid length. [ 216.770929][T14460] syz.2.3239 (14460) used greatest stack depth: 7208 bytes left [ 216.812492][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.821485][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.857676][T14526] block device autoloading is deprecated and will be removed. [ 216.995813][T14535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3259'. [ 217.084169][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.093078][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.173864][T14540] nfs4: Bad value for 'source' [ 217.342116][T14554] Invalid ELF header magic: != ELF [ 217.749090][T14584] Invalid ELF header magic: != ELF [ 218.544678][T14608] tipc: Started in network mode [ 218.549677][T14608] tipc: Node identity 8280f7357137, cluster identity 4711 [ 218.557068][T14608] tipc: Enabled bearer , priority 0 [ 218.582482][T14608] tipc: Resetting bearer [ 218.588454][T14621] Invalid ELF header magic: != ELF [ 218.605082][T14608] tipc: Disabling bearer [ 218.641895][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 218.641912][ T29] audit: type=1326 audit(1746876278.459:8019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.3.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 218.684484][ T29] audit: type=1326 audit(1746876278.501:8020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.3.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 218.708182][ T29] audit: type=1326 audit(1746876278.501:8021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14627 comm="syz.3.3297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 218.800204][T14639] nfs4: Bad value for 'source' [ 218.886197][T14649] nfs4: Bad value for 'source' [ 218.937865][T14658] x_tables: duplicate underflow at hook 1 [ 219.346516][ T29] audit: type=1400 audit(1746876279.205:8022): avc: denied { create } for pid=14683 comm="syz.5.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.375990][ T10] IPVS: starting estimator thread 0... [ 219.404767][ T29] audit: type=1400 audit(1746876279.205:8023): avc: denied { ioctl } for pid=14683 comm="syz.5.3306" path="socket:[37152]" dev="sockfs" ino=37152 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.429737][ T29] audit: type=1400 audit(1746876279.205:8024): avc: denied { write } for pid=14683 comm="syz.5.3306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 219.465305][ T29] audit: type=1400 audit(1746876279.331:8025): avc: denied { name_bind } for pid=14687 comm="syz.2.3308" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 219.489787][T14685] IPVS: using max 2640 ests per chain, 132000 per kthread [ 219.518741][T14690] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3308'. [ 219.688835][T14698] nfs4: Bad value for 'source' [ 219.719529][T14694] random: crng reseeded on system resumption [ 220.178151][T14718] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3318'. [ 220.194399][T14718] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 220.498101][ T29] audit: type=1326 audit(1746876280.412:8026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 220.521794][ T29] audit: type=1326 audit(1746876280.412:8027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 220.545390][ T29] audit: type=1326 audit(1746876280.412:8028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.3.3326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 220.605638][T14744] random: crng reseeded on system resumption [ 220.865223][T14744] netlink: 'syz.2.3327': attribute type 3 has an invalid length. [ 220.943337][T14760] x_tables: duplicate underflow at hook 1 [ 221.257129][T14786] only policy match revision 0 supported [ 221.257144][T14786] unable to load match [ 221.526645][T14811] x_tables: duplicate underflow at hook 1 [ 221.592254][T14823] Invalid ELF header magic: != ELF [ 222.025856][T14880] nfs4: Bad value for 'source' [ 223.031369][T14903] FAULT_INJECTION: forcing a failure. [ 223.031369][T14903] name failslab, interval 1, probability 0, space 0, times 0 [ 223.045239][T14903] CPU: 1 UID: 0 PID: 14903 Comm: syz.1.3366 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 223.045294][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 223.045306][T14903] Call Trace: [ 223.045313][T14903] [ 223.045320][T14903] __dump_stack+0x1d/0x30 [ 223.045344][T14903] dump_stack_lvl+0xe8/0x140 [ 223.045418][T14903] dump_stack+0x15/0x1b [ 223.045437][T14903] should_fail_ex+0x265/0x280 [ 223.045535][T14903] should_failslab+0x8c/0xb0 [ 223.045565][T14903] __kmalloc_cache_node_noprof+0x54/0x320 [ 223.045588][T14903] ? __get_vm_area_node+0x106/0x1c0 [ 223.045645][T14903] __get_vm_area_node+0x106/0x1c0 [ 223.045716][T14903] __vmalloc_node_range_noprof+0x26a/0xdf0 [ 223.045741][T14903] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 223.045772][T14903] ? __tsan_memcpy+0x18d/0x3c0 [ 223.045795][T14903] ? avc_has_perm_noaudit+0x1b1/0x200 [ 223.045860][T14903] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 223.045894][T14903] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 223.045955][T14903] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 223.045984][T14903] __vmalloc_noprof+0x5f/0x70 [ 223.046008][T14903] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 223.046078][T14903] bpf_prog_alloc_no_stats+0x47/0x390 [ 223.046107][T14903] ? bpf_prog_alloc+0x2a/0x150 [ 223.046205][T14903] bpf_prog_alloc+0x3c/0x150 [ 223.046234][T14903] bpf_prog_load+0x514/0x1070 [ 223.046293][T14903] __sys_bpf+0x51d/0x790 [ 223.046327][T14903] __x64_sys_bpf+0x41/0x50 [ 223.046351][T14903] x64_sys_call+0x2478/0x2fb0 [ 223.046439][T14903] do_syscall_64+0xd0/0x1a0 [ 223.046462][T14903] ? clear_bhb_loop+0x25/0x80 [ 223.046484][T14903] ? clear_bhb_loop+0x25/0x80 [ 223.046540][T14903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.046562][T14903] RIP: 0033:0x7fdd987de969 [ 223.046642][T14903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.046662][T14903] RSP: 002b:00007fdd96e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.046728][T14903] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987de969 [ 223.046741][T14903] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 223.046756][T14903] RBP: 00007fdd96e47090 R08: 0000000000000000 R09: 0000000000000000 [ 223.046769][T14903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.046782][T14903] R13: 0000000000000000 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 223.046801][T14903] [ 223.046990][T14903] syz.1.3366: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 223.357456][T14903] CPU: 1 UID: 0 PID: 14903 Comm: syz.1.3366 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 223.357495][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 223.357509][T14903] Call Trace: [ 223.357516][T14903] [ 223.357524][T14903] __dump_stack+0x1d/0x30 [ 223.357554][T14903] dump_stack_lvl+0xe8/0x140 [ 223.357575][T14903] dump_stack+0x15/0x1b [ 223.357658][T14903] warn_alloc+0x12b/0x1a0 [ 223.357681][T14903] ? __get_vm_area_node+0x106/0x1c0 [ 223.357710][T14903] __vmalloc_node_range_noprof+0x28e/0xdf0 [ 223.357738][T14903] ? __tsan_memcpy+0x18d/0x3c0 [ 223.357858][T14903] ? avc_has_perm_noaudit+0x1b1/0x200 [ 223.357893][T14903] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 223.357927][T14903] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 223.357975][T14903] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 223.358004][T14903] __vmalloc_noprof+0x5f/0x70 [ 223.358039][T14903] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 223.358076][T14903] bpf_prog_alloc_no_stats+0x47/0x390 [ 223.358197][T14903] ? bpf_prog_alloc+0x2a/0x150 [ 223.358224][T14903] bpf_prog_alloc+0x3c/0x150 [ 223.358252][T14903] bpf_prog_load+0x514/0x1070 [ 223.358370][T14903] __sys_bpf+0x51d/0x790 [ 223.358400][T14903] __x64_sys_bpf+0x41/0x50 [ 223.358426][T14903] x64_sys_call+0x2478/0x2fb0 [ 223.358511][T14903] do_syscall_64+0xd0/0x1a0 [ 223.358594][T14903] ? clear_bhb_loop+0x25/0x80 [ 223.358618][T14903] ? clear_bhb_loop+0x25/0x80 [ 223.358641][T14903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.358689][T14903] RIP: 0033:0x7fdd987de969 [ 223.358705][T14903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.358726][T14903] RSP: 002b:00007fdd96e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 223.358748][T14903] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987de969 [ 223.358762][T14903] RDX: 0000000000000090 RSI: 00002000000000c0 RDI: 0000000000000005 [ 223.358777][T14903] RBP: 00007fdd96e47090 R08: 0000000000000000 R09: 0000000000000000 [ 223.358804][T14903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.358818][T14903] R13: 0000000000000000 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 223.358835][T14903] [ 223.358871][T14903] Mem-Info: [ 223.621931][T14903] active_anon:23357 inactive_anon:6 isolated_anon:0 [ 223.621931][T14903] active_file:12317 inactive_file:15677 isolated_file:0 [ 223.621931][T14903] unevictable:0 dirty:425 writeback:0 [ 223.621931][T14903] slab_reclaimable:3102 slab_unreclaimable:14379 [ 223.621931][T14903] mapped:29354 shmem:20030 pagetables:1005 [ 223.621931][T14903] sec_pagetables:0 bounce:0 [ 223.621931][T14903] kernel_misc_reclaimable:0 [ 223.621931][T14903] free:1864136 free_pcp:6000 free_cma:0 [ 223.668867][T14903] Node 0 active_anon:93428kB inactive_anon:24kB active_file:49268kB inactive_file:62708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117416kB dirty:1700kB writeback:0kB shmem:80120kB writeback_tmp:0kB kernel_stack:3024kB pagetables:4020kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 223.699975][T14903] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.728920][T14903] lowmem_reserve[]: 0 2884 7863 7863 [ 223.736784][T14903] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 223.766817][T14903] lowmem_reserve[]: 0 0 4978 4978 [ 223.773597][T14903] Node 0 Normal free:4491148kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:93428kB inactive_anon:24kB active_file:49268kB inactive_file:62708kB unevictable:0kB writepending:1700kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:20388kB local_pcp:8080kB free_cma:0kB [ 223.814339][T14903] lowmem_reserve[]: 0 0 0 0 [ 223.820549][T14903] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 223.837639][T14903] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 223.869406][T14903] Node 0 Normal: 2223*4kB (UME) 1352*8kB (UME) 701*16kB (UME) 778*32kB (ME) 562*64kB (ME) 244*128kB (UME) 133*256kB (UM) 71*512kB (UME) 35*1024kB (UME) 23*2048kB (UME) 1028*4096kB (UM) = 4487052kB [ 223.895274][T14903] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 223.906317][T14903] 47977 total pagecache pages [ 223.911501][T14903] 7 pages in swap cache [ 223.916010][T14903] Free swap = 124968kB [ 223.920415][T14903] Total swap = 124996kB [ 223.924835][T14903] 2097051 pages RAM [ 223.928952][T14903] 0 pages HighMem/MovableOnly [ 223.933800][T14903] 80258 pages reserved [ 224.071869][T14928] nfs4: Bad value for 'source' [ 224.093254][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 224.093273][ T29] audit: type=1400 audit(1746876284.192:8056): avc: denied { name_bind } for pid=14930 comm="syz.4.3373" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 224.250246][ T29] audit: type=1400 audit(1746876284.234:8057): avc: denied { ioctl } for pid=14895 comm="syz.2.3363" path="socket:[37322]" dev="sockfs" ino=37322 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 224.330407][ T29] audit: type=1400 audit(1746876284.444:8058): avc: denied { read write } for pid=14944 comm="syz.4.3378" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_aliases_t:s0" [ 224.357957][ T29] audit: type=1400 audit(1746876284.444:8059): avc: denied { open } for pid=14944 comm="syz.4.3378" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:etc_aliases_t:s0" [ 224.428126][T14956] Invalid ELF header magic: != ELF [ 224.434168][T14926] random: crng reseeded on system resumption [ 224.623525][T14963] Invalid ELF header magic: != ELF [ 224.978735][T14987] Invalid ELF header magic: != ELF [ 225.057921][T14978] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3386'. [ 225.078523][T14978] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3386'. [ 225.270113][ T29] audit: type=1400 audit(1746876285.420:8060): avc: denied { create } for pid=15009 comm="syz.5.3399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 225.314516][ T29] audit: type=1400 audit(1746876285.452:8061): avc: denied { ioctl } for pid=15009 comm="syz.5.3399" path="socket:[36784]" dev="sockfs" ino=36784 ioctlcmd=0x891d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 225.444842][T15020] Invalid ELF header magic: != ELF [ 225.485438][T15021] random: crng reseeded on system resumption [ 225.631085][ T29] audit: type=1326 audit(1746876285.798:8062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d663e969 code=0x7ffc0000 [ 225.654801][ T29] audit: type=1326 audit(1746876285.798:8063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d663e969 code=0x7ffc0000 [ 225.678284][ T29] audit: type=1326 audit(1746876285.798:8064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f32d663e969 code=0x7ffc0000 [ 225.701716][ T29] audit: type=1326 audit(1746876285.798:8065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15022 comm="syz.4.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d663e969 code=0x7ffc0000 [ 226.412352][T15056] vlan2: entered allmulticast mode [ 226.527212][T15067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3421'. [ 226.583917][T15068] random: crng reseeded on system resumption [ 226.732448][T15081] Invalid ELF header magic: != ELF [ 226.836885][T15099] 9pnet_fd: Insufficient options for proto=fd [ 226.993493][T15115] Invalid ELF header magic: != ELF [ 227.036689][T15128] FAULT_INJECTION: forcing a failure. [ 227.036689][T15128] name failslab, interval 1, probability 0, space 0, times 0 [ 227.049479][T15128] CPU: 0 UID: 0 PID: 15128 Comm: syz.3.3449 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 227.049527][T15128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 227.049539][T15128] Call Trace: [ 227.049545][T15128] [ 227.049552][T15128] __dump_stack+0x1d/0x30 [ 227.049576][T15128] dump_stack_lvl+0xe8/0x140 [ 227.049598][T15128] dump_stack+0x15/0x1b [ 227.049615][T15128] should_fail_ex+0x265/0x280 [ 227.049741][T15128] should_failslab+0x8c/0xb0 [ 227.049771][T15128] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 227.049840][T15128] ? __d_alloc+0x3d/0x350 [ 227.049875][T15128] __d_alloc+0x3d/0x350 [ 227.049936][T15128] d_alloc_pseudo+0x1e/0x80 [ 227.049969][T15128] alloc_file_pseudo+0x71/0x160 [ 227.050018][T15128] anon_inode_getfd+0xc1/0x150 [ 227.050065][T15128] do_inotify_init+0x220/0x270 [ 227.050089][T15128] __x64_sys_inotify_init1+0x1e/0x30 [ 227.050114][T15128] x64_sys_call+0x2ce8/0x2fb0 [ 227.050174][T15128] do_syscall_64+0xd0/0x1a0 [ 227.050197][T15128] ? clear_bhb_loop+0x25/0x80 [ 227.050219][T15128] ? clear_bhb_loop+0x25/0x80 [ 227.050238][T15128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.050268][T15128] RIP: 0033:0x7f2126c9e969 [ 227.050318][T15128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.050336][T15128] RSP: 002b:00007f2125307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 227.050356][T15128] RAX: ffffffffffffffda RBX: 00007f2126ec5fa0 RCX: 00007f2126c9e969 [ 227.050369][T15128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 227.050381][T15128] RBP: 00007f2125307090 R08: 0000000000000000 R09: 0000000000000000 [ 227.050393][T15128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.050429][T15128] R13: 0000000000000000 R14: 00007f2126ec5fa0 R15: 00007ffc0941e9f8 [ 227.050446][T15128] [ 227.242250][T15125] lo speed is unknown, defaulting to 1000 [ 227.476448][T15152] Invalid ELF header magic: != ELF [ 227.675206][T15159] random: crng reseeded on system resumption [ 228.283959][T15175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3465'. [ 228.297418][T15175] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3465'. [ 228.339725][T15179] vlan2: entered allmulticast mode [ 228.346677][T15181] Invalid ELF header magic: != ELF [ 228.520266][T15202] nfs4: Bad value for 'source' [ 228.595473][T15212] Invalid ELF header magic: != ELF [ 228.621605][T15215] x_tables: duplicate underflow at hook 1 [ 228.746373][T15223] netlink: 'syz.3.3477': attribute type 3 has an invalid length. [ 228.771848][T15224] netlink: 'syz.1.3479': attribute type 3 has an invalid length. [ 228.986426][T15235] vlan2: entered allmulticast mode [ 229.011017][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 229.011034][ T29] audit: type=1400 audit(1746876289.347:8269): avc: denied { unmount } for pid=5416 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 229.266323][T15246] nfs4: Bad value for 'source' [ 229.342578][T15252] Invalid ELF header magic: != ELF [ 229.497658][ T29] audit: type=1326 audit(1746876289.861:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.521300][ T29] audit: type=1326 audit(1746876289.861:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.544865][ T29] audit: type=1326 audit(1746876289.861:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.568380][ T29] audit: type=1326 audit(1746876289.861:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.591878][ T29] audit: type=1326 audit(1746876289.861:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.615449][ T29] audit: type=1326 audit(1746876289.861:8275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.647533][T15278] random: crng reseeded on system resumption [ 229.708157][T15274] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 229.754978][ T29] audit: type=1326 audit(1746876289.861:8276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.778556][ T29] audit: type=1326 audit(1746876289.924:8277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15272 comm="syz.2.3502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.917477][ T29] audit: type=1326 audit(1746876290.218:8278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15288 comm="syz.2.3503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 229.946915][T15280] lo speed is unknown, defaulting to 1000 [ 230.133686][T15280] chnl_net:caif_netlink_parms(): no params data found [ 230.179718][T15301] netlink: 'syz.2.3506': attribute type 3 has an invalid length. [ 230.300898][T15280] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.308045][T15280] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.357806][T15280] bridge_slave_0: entered allmulticast mode [ 230.374740][T15280] bridge_slave_0: entered promiscuous mode [ 230.398483][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.405684][T15280] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.433968][T15280] bridge_slave_1: entered allmulticast mode [ 230.458242][T15280] bridge_slave_1: entered promiscuous mode [ 230.489565][T15310] netlink: 'syz.1.3509': attribute type 3 has an invalid length. [ 230.512083][T15280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.541725][T15280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.611268][T15320] x_tables: duplicate underflow at hook 1 [ 230.619442][T15311] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3508'. [ 230.630019][T15311] netlink: 172 bytes leftover after parsing attributes in process `syz.4.3508'. [ 230.649115][T15280] team0: Port device team_slave_0 added [ 230.666906][T15280] team0: Port device team_slave_1 added [ 230.725422][T15280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.732523][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.758552][T15280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.790658][T15330] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6_vti0, syncid = 1, id = 0 [ 230.818414][T15280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.825425][T15280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.851543][T15280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.910590][T15280] hsr_slave_0: entered promiscuous mode [ 230.916847][T15280] hsr_slave_1: entered promiscuous mode [ 230.924337][T15280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.931959][T15280] Cannot create hsr debugfs directory [ 230.958381][T15343] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 231.009076][T15280] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.054484][T15280] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.092184][T15280] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.130525][T15280] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.195492][T15280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.204851][T15280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 231.220516][T15280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 231.235362][T15280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 231.250839][T15280] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.257952][T15280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.269457][ T2281] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.407302][ T6697] bridge_slave_1: left allmulticast mode [ 231.413079][ T6697] bridge_slave_1: left promiscuous mode [ 231.418751][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.435024][ T6697] bridge_slave_0: left allmulticast mode [ 231.440890][ T6697] bridge_slave_0: left promiscuous mode [ 231.446650][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.693057][ T6697] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.712435][ T6697] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.739217][ T6697] bond0 (unregistering): Released all slaves [ 231.753366][T15280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.774997][T15280] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.795025][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.802211][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.831482][T15362] FAULT_INJECTION: forcing a failure. [ 231.831482][T15362] name failslab, interval 1, probability 0, space 0, times 0 [ 231.832656][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.844122][T15362] CPU: 0 UID: 0 PID: 15362 Comm: syz.1.3528 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 231.844151][T15362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 231.844163][T15362] Call Trace: [ 231.844169][T15362] [ 231.844177][T15362] __dump_stack+0x1d/0x30 [ 231.844236][T15362] dump_stack_lvl+0xe8/0x140 [ 231.844267][T15362] dump_stack+0x15/0x1b [ 231.844285][T15362] should_fail_ex+0x265/0x280 [ 231.844315][T15362] should_failslab+0x8c/0xb0 [ 231.844343][T15362] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 231.844491][T15362] ? __d_alloc+0x3d/0x350 [ 231.844518][T15362] ? selinux_file_open+0x31c/0x370 [ 231.844591][T15362] __d_alloc+0x3d/0x350 [ 231.844618][T15362] ? __rcu_read_unlock+0x34/0x70 [ 231.844639][T15362] d_alloc_parallel+0x53/0xc40 [ 231.844706][T15362] ? selinux_inode_permission+0x32a/0x400 [ 231.844732][T15362] ? lockref_get_not_dead+0x120/0x1c0 [ 231.844754][T15362] ? __rcu_read_unlock+0x4f/0x70 [ 231.844775][T15362] __lookup_slow+0x8c/0x250 [ 231.844864][T15362] lookup_slow+0x3c/0x60 [ 231.844882][T15362] walk_component+0x1ec/0x220 [ 231.844938][T15362] path_lookupat+0xfe/0x2a0 [ 231.844969][T15362] filename_lookup+0x147/0x340 [ 231.845012][T15362] user_path_at+0x3e/0x130 [ 231.845032][T15362] __x64_sys_umount+0x85/0xe0 [ 231.845154][T15362] x64_sys_call+0x2915/0x2fb0 [ 231.845174][T15362] do_syscall_64+0xd0/0x1a0 [ 231.845231][T15362] ? clear_bhb_loop+0x25/0x80 [ 231.845251][T15362] ? clear_bhb_loop+0x25/0x80 [ 231.845272][T15362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.845335][T15362] RIP: 0033:0x7fdd987de969 [ 231.845350][T15362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.845431][T15362] RSP: 002b:00007fdd96e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 231.845452][T15362] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987de969 [ 231.845465][T15362] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 231.845483][T15362] RBP: 00007fdd96e47090 R08: 0000000000000000 R09: 0000000000000000 [ 231.845496][T15362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.845508][T15362] R13: 0000000000000000 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 231.845526][T15362] [ 231.987657][T15365] random: crng reseeded on system resumption [ 231.988848][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.111247][T15363] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3525'. [ 232.139878][T15363] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3525'. [ 232.203214][T15280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.213649][T15280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.251253][ T6697] hsr_slave_0: left promiscuous mode [ 232.257417][ T6697] hsr_slave_1: left promiscuous mode [ 232.296201][T15365] netlink: 'syz.4.3527': attribute type 3 has an invalid length. [ 232.342317][ T6697] team_slave_1 (unregistering): left allmulticast mode [ 232.349804][ T6697] team0 (unregistering): Port device team_slave_1 removed [ 232.359146][ T6697] team_slave_0 (unregistering): left allmulticast mode [ 232.366399][ T6697] team0 (unregistering): Port device team_slave_0 removed [ 232.388151][ T6697] team0 (unregistering): left allmulticast mode [ 232.402649][ T36] lo speed is unknown, defaulting to 1000 [ 232.408567][ T36] infiniband sy: ib_query_port failed (-19) [ 232.446222][T15280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.562802][ T6697] IPVS: stop unused estimator thread 0... [ 232.611073][T15280] veth0_vlan: entered promiscuous mode [ 232.631451][T15280] veth1_vlan: entered promiscuous mode [ 232.651984][T15280] veth0_macvtap: entered promiscuous mode [ 232.659742][T15280] veth1_macvtap: entered promiscuous mode [ 232.676149][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.686702][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.696570][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.707042][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.716981][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.727486][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.737383][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.747969][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.761538][T15280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.772909][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.783480][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.793365][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.803837][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.813705][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.824160][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.834006][T15280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.844449][T15280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.857371][T15280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.868477][T15280] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.877375][T15280] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.886174][T15280] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.894965][T15280] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.224398][T15423] tipc: Started in network mode [ 233.229387][T15423] tipc: Node identity 3a4a2ce64d92, cluster identity 4711 [ 233.236698][T15423] tipc: Enabled bearer , priority 0 [ 233.265882][T15435] random: crng reseeded on system resumption [ 233.285177][T15421] tipc: Resetting bearer [ 233.328932][T15421] tipc: Disabling bearer [ 233.394464][T15446] batadv_slave_0: entered promiscuous mode [ 233.409066][T15446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3550'. [ 233.428250][T15438] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3542'. [ 233.458764][T15438] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3542'. [ 233.473884][T15435] netlink: 'syz.3.3544': attribute type 3 has an invalid length. [ 233.489890][T15446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.500466][T15451] FAULT_INJECTION: forcing a failure. [ 233.500466][T15451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.513622][T15451] CPU: 0 UID: 0 PID: 15451 Comm: syz.4.3552 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 233.513657][T15451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 233.513670][T15451] Call Trace: [ 233.513676][T15451] [ 233.513684][T15451] __dump_stack+0x1d/0x30 [ 233.513743][T15451] dump_stack_lvl+0xe8/0x140 [ 233.513763][T15451] dump_stack+0x15/0x1b [ 233.513779][T15451] should_fail_ex+0x265/0x280 [ 233.513867][T15451] should_fail+0xb/0x20 [ 233.513898][T15451] should_fail_usercopy+0x1a/0x20 [ 233.513920][T15451] _copy_to_iter+0xcf/0xdd0 [ 233.513954][T15451] ? __rcu_read_unlock+0x4f/0x70 [ 233.513981][T15451] ? avc_has_perm_noaudit+0x1b1/0x200 [ 233.514072][T15451] __skb_datagram_iter+0xc3/0x680 [ 233.514144][T15451] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 233.514169][T15451] skb_copy_datagram_iter+0x3d/0x110 [ 233.514190][T15451] tipc_recvmsg+0x4cc/0x9d0 [ 233.514238][T15451] ? __pfx_tipc_recvmsg+0x10/0x10 [ 233.514322][T15451] sock_recvmsg+0x136/0x170 [ 233.514343][T15451] ____sys_recvmsg+0xf5/0x280 [ 233.514365][T15451] ___sys_recvmsg+0x11f/0x370 [ 233.514395][T15451] __x64_sys_recvmsg+0xd1/0x160 [ 233.514421][T15451] x64_sys_call+0xf19/0x2fb0 [ 233.514496][T15451] do_syscall_64+0xd0/0x1a0 [ 233.514518][T15451] ? clear_bhb_loop+0x25/0x80 [ 233.514541][T15451] ? clear_bhb_loop+0x25/0x80 [ 233.514565][T15451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.514586][T15451] RIP: 0033:0x7f32d663e969 [ 233.514656][T15451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.514677][T15451] RSP: 002b:00007f32d4ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 233.514699][T15451] RAX: ffffffffffffffda RBX: 00007f32d6865fa0 RCX: 00007f32d663e969 [ 233.514714][T15451] RDX: 0000000000000000 RSI: 0000200000000900 RDI: 0000000000000004 [ 233.514737][T15451] RBP: 00007f32d4ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 233.514752][T15451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.514766][T15451] R13: 0000000000000000 R14: 00007f32d6865fa0 R15: 00007ffe3bbeda18 [ 233.514784][T15451] [ 233.515768][T15446] batadv_slave_0 (unregistering): left promiscuous mode [ 233.751062][T15446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.833838][T15476] FAULT_INJECTION: forcing a failure. [ 233.833838][T15476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.847087][T15476] CPU: 0 UID: 0 PID: 15476 Comm: syz.3.3563 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 233.847119][T15476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 233.847182][T15476] Call Trace: [ 233.847189][T15476] [ 233.847199][T15476] __dump_stack+0x1d/0x30 [ 233.847265][T15476] dump_stack_lvl+0xe8/0x140 [ 233.847333][T15476] dump_stack+0x15/0x1b [ 233.847349][T15476] should_fail_ex+0x265/0x280 [ 233.847382][T15476] should_fail+0xb/0x20 [ 233.847446][T15476] should_fail_usercopy+0x1a/0x20 [ 233.847462][T15476] _copy_to_user+0x20/0xa0 [ 233.847484][T15476] simple_read_from_buffer+0xb5/0x130 [ 233.847538][T15476] proc_fail_nth_read+0x100/0x140 [ 233.847561][T15476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.847632][T15476] vfs_read+0x19d/0x6f0 [ 233.847654][T15476] ? __rcu_read_unlock+0x4f/0x70 [ 233.847678][T15476] ? __fget_files+0x184/0x1c0 [ 233.847709][T15476] ksys_read+0xda/0x1a0 [ 233.847735][T15476] __x64_sys_read+0x40/0x50 [ 233.847797][T15476] x64_sys_call+0x2d77/0x2fb0 [ 233.847822][T15476] do_syscall_64+0xd0/0x1a0 [ 233.847847][T15476] ? clear_bhb_loop+0x25/0x80 [ 233.847867][T15476] ? clear_bhb_loop+0x25/0x80 [ 233.847919][T15476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.847944][T15476] RIP: 0033:0x7f2126c9d37c [ 233.847965][T15476] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.847982][T15476] RSP: 002b:00007f2125307030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.848000][T15476] RAX: ffffffffffffffda RBX: 00007f2126ec5fa0 RCX: 00007f2126c9d37c [ 233.848015][T15476] RDX: 000000000000000f RSI: 00007f21253070a0 RDI: 0000000000000006 [ 233.848032][T15476] RBP: 00007f2125307090 R08: 0000000000000000 R09: 0000000000000000 [ 233.848046][T15476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.848060][T15476] R13: 0000000000000000 R14: 00007f2126ec5fa0 R15: 00007ffc0941e9f8 [ 233.848080][T15476] [ 234.102931][T15478] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 234.362440][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 234.362462][ T29] audit: type=1400 audit(1746876294.974:8539): avc: denied { read write } for pid=15500 comm="syz.5.3570" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 234.395520][T15502] random: crng reseeded on system resumption [ 234.424920][ T29] audit: type=1400 audit(1746876294.974:8540): avc: denied { open } for pid=15500 comm="syz.5.3570" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 234.448533][ T29] audit: type=1400 audit(1746876294.974:8541): avc: denied { mount } for pid=15500 comm="syz.5.3570" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 234.546886][T15513] netlink: 'syz.2.3568': attribute type 3 has an invalid length. [ 234.559367][T15515] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 234.565579][ T29] audit: type=1326 audit(1746876295.090:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15455 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 234.590595][ T29] audit: type=1326 audit(1746876295.090:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15455 comm="syz.1.3554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 234.666174][ T29] audit: type=1326 audit(1746876295.205:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81edae969 code=0x7ffc0000 [ 234.689260][ T29] audit: type=1326 audit(1746876295.205:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81edae969 code=0x7ffc0000 [ 234.712337][ T29] audit: type=1326 audit(1746876295.205:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81edae969 code=0x7ffc0000 [ 234.735348][ T29] audit: type=1326 audit(1746876295.205:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa81edae969 code=0x7ffc0000 [ 234.758353][ T29] audit: type=1326 audit(1746876295.205:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15514 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa81edae969 code=0x7ffc0000 [ 235.040920][T15534] vlan2: entered allmulticast mode [ 235.424951][T15554] netlink: 'syz.2.3586': attribute type 3 has an invalid length. [ 235.523373][T15560] vhci_hcd: invalid port number 65 [ 235.528542][T15560] vhci_hcd: invalid port number 65 [ 235.718438][T15567] vlan2: entered allmulticast mode [ 236.083793][T15589] FAULT_INJECTION: forcing a failure. [ 236.083793][T15589] name failslab, interval 1, probability 0, space 0, times 0 [ 236.096699][T15589] CPU: 1 UID: 0 PID: 15589 Comm: syz.3.3603 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 236.096736][T15589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 236.096819][T15589] Call Trace: [ 236.096826][T15589] [ 236.096835][T15589] __dump_stack+0x1d/0x30 [ 236.096857][T15589] dump_stack_lvl+0xe8/0x140 [ 236.096909][T15589] dump_stack+0x15/0x1b [ 236.096933][T15589] should_fail_ex+0x265/0x280 [ 236.096976][T15589] should_failslab+0x8c/0xb0 [ 236.097007][T15589] kmem_cache_alloc_noprof+0x50/0x310 [ 236.097099][T15589] ? getname_kernel+0x3c/0x1f0 [ 236.097206][T15589] getname_kernel+0x3c/0x1f0 [ 236.097238][T15589] open_exec+0x17/0x60 [ 236.097258][T15589] bm_register_write+0x8ef/0xbd0 [ 236.097308][T15589] ? __pfx_bm_register_write+0x10/0x10 [ 236.097334][T15589] vfs_write+0x266/0x8d0 [ 236.097356][T15589] ? __rcu_read_unlock+0x4f/0x70 [ 236.097378][T15589] ? __fget_files+0x184/0x1c0 [ 236.097428][T15589] ksys_write+0xda/0x1a0 [ 236.097453][T15589] __x64_sys_write+0x40/0x50 [ 236.097532][T15589] x64_sys_call+0x2cdd/0x2fb0 [ 236.097558][T15589] do_syscall_64+0xd0/0x1a0 [ 236.097581][T15589] ? clear_bhb_loop+0x25/0x80 [ 236.097698][T15589] ? clear_bhb_loop+0x25/0x80 [ 236.097718][T15589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.097797][T15589] RIP: 0033:0x7f2126c9e969 [ 236.097811][T15589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.097827][T15589] RSP: 002b:00007f2125307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 236.097844][T15589] RAX: ffffffffffffffda RBX: 00007f2126ec5fa0 RCX: 00007f2126c9e969 [ 236.097866][T15589] RDX: 000000000000002d RSI: 0000200000000140 RDI: 0000000000000003 [ 236.097877][T15589] RBP: 00007f2125307090 R08: 0000000000000000 R09: 0000000000000000 [ 236.097888][T15589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.097898][T15589] R13: 0000000000000000 R14: 00007f2126ec5fa0 R15: 00007ffc0941e9f8 [ 236.097921][T15589] [ 236.098005][T15589] binfmt_misc: register: failed to install interpreter file ./file0 [ 236.362357][T15610] x_tables: duplicate underflow at hook 1 [ 236.405343][T15614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3606'. [ 236.424867][T15614] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 236.609853][T15683] netlink: 664 bytes leftover after parsing attributes in process `syz.5.3614'. [ 236.642954][T15674] random: crng reseeded on system resumption [ 236.914858][T15674] netlink: 'syz.4.3611': attribute type 3 has an invalid length. [ 236.999897][T15715] x_tables: duplicate underflow at hook 1 [ 237.451580][T15734] FAULT_INJECTION: forcing a failure. [ 237.451580][T15734] name failslab, interval 1, probability 0, space 0, times 0 [ 237.464333][T15734] CPU: 0 UID: 0 PID: 15734 Comm: syz.1.3631 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 237.464436][T15734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.464448][T15734] Call Trace: [ 237.464455][T15734] [ 237.464463][T15734] __dump_stack+0x1d/0x30 [ 237.464546][T15734] dump_stack_lvl+0xe8/0x140 [ 237.464568][T15734] dump_stack+0x15/0x1b [ 237.464586][T15734] should_fail_ex+0x265/0x280 [ 237.464638][T15734] should_failslab+0x8c/0xb0 [ 237.464668][T15734] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 237.464709][T15734] ? __d_alloc+0x3d/0x350 [ 237.464768][T15734] __d_alloc+0x3d/0x350 [ 237.464860][T15734] ? __rcu_read_unlock+0x34/0x70 [ 237.464882][T15734] d_alloc_parallel+0x53/0xc40 [ 237.464907][T15734] ? selinux_inode_permission+0x32a/0x400 [ 237.464964][T15734] ? lockref_get_not_dead+0x120/0x1c0 [ 237.464988][T15734] ? __rcu_read_unlock+0x4f/0x70 [ 237.465007][T15734] __lookup_slow+0x8c/0x250 [ 237.465029][T15734] lookup_slow+0x3c/0x60 [ 237.465066][T15734] walk_component+0x1ec/0x220 [ 237.465098][T15734] path_lookupat+0xfe/0x2a0 [ 237.465129][T15734] filename_lookup+0x147/0x340 [ 237.465192][T15734] user_path_at+0x3e/0x130 [ 237.465209][T15734] vfs_open_tree+0x198/0x540 [ 237.465236][T15734] __x64_sys_open_tree+0x45/0xc0 [ 237.465260][T15734] x64_sys_call+0x28d3/0x2fb0 [ 237.465297][T15734] do_syscall_64+0xd0/0x1a0 [ 237.465321][T15734] ? clear_bhb_loop+0x25/0x80 [ 237.465344][T15734] ? clear_bhb_loop+0x25/0x80 [ 237.465366][T15734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.465407][T15734] RIP: 0033:0x7fdd987de969 [ 237.465424][T15734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.465485][T15734] RSP: 002b:00007fdd96e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 237.465506][T15734] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987de969 [ 237.465520][T15734] RDX: 0000000000081001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 237.465533][T15734] RBP: 00007fdd96e47090 R08: 0000000000000000 R09: 0000000000000000 [ 237.465547][T15734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.465560][T15734] R13: 0000000000000001 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 237.465579][T15734] [ 237.734304][T15738] FAULT_INJECTION: forcing a failure. [ 237.734304][T15738] name failslab, interval 1, probability 0, space 0, times 0 [ 237.746982][T15738] CPU: 1 UID: 0 PID: 15738 Comm: syz.2.3633 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 237.747024][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 237.747035][T15738] Call Trace: [ 237.747041][T15738] [ 237.747058][T15738] __dump_stack+0x1d/0x30 [ 237.747079][T15738] dump_stack_lvl+0xe8/0x140 [ 237.747105][T15738] dump_stack+0x15/0x1b [ 237.747126][T15738] should_fail_ex+0x265/0x280 [ 237.747208][T15738] ? sel_netport_sid+0x1bf/0x420 [ 237.747233][T15738] should_failslab+0x8c/0xb0 [ 237.747264][T15738] __kmalloc_cache_noprof+0x4c/0x320 [ 237.747287][T15738] sel_netport_sid+0x1bf/0x420 [ 237.747379][T15738] selinux_socket_connect_helper+0x37f/0x4b0 [ 237.747465][T15738] selinux_socket_connect+0x31/0x70 [ 237.747489][T15738] security_socket_connect+0x48/0x80 [ 237.747620][T15738] __sys_connect+0x181/0x2b0 [ 237.747655][T15738] __x64_sys_connect+0x3f/0x50 [ 237.747685][T15738] x64_sys_call+0x1daa/0x2fb0 [ 237.747773][T15738] do_syscall_64+0xd0/0x1a0 [ 237.747797][T15738] ? clear_bhb_loop+0x25/0x80 [ 237.747825][T15738] ? clear_bhb_loop+0x25/0x80 [ 237.747914][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.747951][T15738] RIP: 0033:0x7f2f099de969 [ 237.747967][T15738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.747987][T15738] RSP: 002b:00007f2f08047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 237.748008][T15738] RAX: ffffffffffffffda RBX: 00007f2f09c05fa0 RCX: 00007f2f099de969 [ 237.748022][T15738] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 237.748102][T15738] RBP: 00007f2f08047090 R08: 0000000000000000 R09: 0000000000000000 [ 237.748115][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.748193][T15738] R13: 0000000000000000 R14: 00007f2f09c05fa0 R15: 00007fff72c49908 [ 237.748212][T15738] [ 237.995503][T15742] Invalid ELF header magic: != ELF [ 238.001538][T15742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3634'. [ 238.025404][T15742] veth1_macvtap: left promiscuous mode [ 238.170352][T15771] FAULT_INJECTION: forcing a failure. [ 238.170352][T15771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.183539][T15771] CPU: 0 UID: 0 PID: 15771 Comm: syz.4.3645 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 238.183578][T15771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 238.183589][T15771] Call Trace: [ 238.183595][T15771] [ 238.183604][T15771] __dump_stack+0x1d/0x30 [ 238.183644][T15771] dump_stack_lvl+0xe8/0x140 [ 238.183735][T15771] dump_stack+0x15/0x1b [ 238.183750][T15771] should_fail_ex+0x265/0x280 [ 238.183783][T15771] should_fail+0xb/0x20 [ 238.183813][T15771] should_fail_usercopy+0x1a/0x20 [ 238.183866][T15771] strncpy_from_user+0x25/0x230 [ 238.183988][T15771] ? kmem_cache_alloc_noprof+0x186/0x310 [ 238.184015][T15771] ? getname_flags+0x80/0x3b0 [ 238.184037][T15771] getname_flags+0xae/0x3b0 [ 238.184088][T15771] do_sys_openat2+0x60/0x110 [ 238.184104][T15771] __x64_sys_openat+0xf2/0x120 [ 238.184120][T15771] x64_sys_call+0x1af/0x2fb0 [ 238.184165][T15771] do_syscall_64+0xd0/0x1a0 [ 238.184181][T15771] ? clear_bhb_loop+0x25/0x80 [ 238.184195][T15771] ? clear_bhb_loop+0x25/0x80 [ 238.184214][T15771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.184305][T15771] RIP: 0033:0x7f32d663e969 [ 238.184317][T15771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.184329][T15771] RSP: 002b:00007f32d4ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 238.184404][T15771] RAX: ffffffffffffffda RBX: 00007f32d6865fa0 RCX: 00007f32d663e969 [ 238.184416][T15771] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 238.184428][T15771] RBP: 00007f32d4ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 238.184442][T15771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.184496][T15771] R13: 0000000000000000 R14: 00007f32d6865fa0 R15: 00007ffe3bbeda18 [ 238.184516][T15771] [ 238.379929][T15769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 238.421444][T15769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 238.459404][T15769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 238.468584][T15769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 238.478468][T15785] random: crng reseeded on system resumption [ 238.496519][T15769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 238.546608][T15769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 238.703765][T15769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3644'. [ 238.778719][T15799] x_tables: duplicate underflow at hook 1 [ 239.175313][T15819] FAULT_INJECTION: forcing a failure. [ 239.175313][T15819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.188617][T15819] CPU: 1 UID: 0 PID: 15819 Comm: syz.5.3664 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 239.188697][T15819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 239.188719][T15819] Call Trace: [ 239.188725][T15819] [ 239.188733][T15819] __dump_stack+0x1d/0x30 [ 239.188756][T15819] dump_stack_lvl+0xe8/0x140 [ 239.188790][T15819] dump_stack+0x15/0x1b [ 239.188810][T15819] should_fail_ex+0x265/0x280 [ 239.188843][T15819] should_fail+0xb/0x20 [ 239.188931][T15819] should_fail_usercopy+0x1a/0x20 [ 239.188948][T15819] _copy_from_user+0x1c/0xb0 [ 239.188968][T15819] ip6_tnl_siocdevprivate+0x382/0x920 [ 239.189025][T15819] dev_ifsioc+0x8f5/0xaa0 [ 239.189046][T15819] dev_ioctl+0x78d/0x960 [ 239.189063][T15819] sock_ioctl+0x593/0x610 [ 239.189084][T15819] ? __pfx_sock_ioctl+0x10/0x10 [ 239.189224][T15819] __se_sys_ioctl+0xcb/0x140 [ 239.189243][T15819] __x64_sys_ioctl+0x43/0x50 [ 239.189295][T15819] x64_sys_call+0x19a8/0x2fb0 [ 239.189340][T15819] do_syscall_64+0xd0/0x1a0 [ 239.189359][T15819] ? clear_bhb_loop+0x25/0x80 [ 239.189378][T15819] ? clear_bhb_loop+0x25/0x80 [ 239.189428][T15819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.189450][T15819] RIP: 0033:0x7fa81edae969 [ 239.189467][T15819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.189554][T15819] RSP: 002b:00007fa81d417038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 239.189575][T15819] RAX: ffffffffffffffda RBX: 00007fa81efd5fa0 RCX: 00007fa81edae969 [ 239.189598][T15819] RDX: 0000200000000080 RSI: 00000000000089f2 RDI: 0000000000000007 [ 239.189611][T15819] RBP: 00007fa81d417090 R08: 0000000000000000 R09: 0000000000000000 [ 239.189641][T15819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.189654][T15819] R13: 0000000000000000 R14: 00007fa81efd5fa0 R15: 00007fff063cd238 [ 239.189671][T15819] [ 239.425074][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 239.425132][ T29] audit: type=1326 audit(1746876300.287:8707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d663e969 code=0x7ffc0000 [ 239.454910][ T29] audit: type=1326 audit(1746876300.287:8708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15791 comm="syz.4.3653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32d663e969 code=0x7ffc0000 [ 239.524055][T15828] FAULT_INJECTION: forcing a failure. [ 239.524055][T15828] name failslab, interval 1, probability 0, space 0, times 0 [ 239.536933][T15828] CPU: 0 UID: 0 PID: 15828 Comm: syz.2.3669 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 239.536963][T15828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 239.536974][T15828] Call Trace: [ 239.536979][T15828] [ 239.536986][T15828] __dump_stack+0x1d/0x30 [ 239.537006][T15828] dump_stack_lvl+0xe8/0x140 [ 239.537132][T15828] dump_stack+0x15/0x1b [ 239.537158][T15828] should_fail_ex+0x265/0x280 [ 239.537185][T15828] should_failslab+0x8c/0xb0 [ 239.537274][T15828] kmem_cache_alloc_node_noprof+0x57/0x320 [ 239.537303][T15828] ? __alloc_skb+0x101/0x320 [ 239.537329][T15828] __alloc_skb+0x101/0x320 [ 239.537430][T15828] netlink_alloc_large_skb+0xba/0xf0 [ 239.537457][T15828] netlink_sendmsg+0x3cf/0x6b0 [ 239.537485][T15828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.537548][T15828] __sock_sendmsg+0x142/0x180 [ 239.537577][T15828] ____sys_sendmsg+0x31e/0x4e0 [ 239.537679][T15828] ___sys_sendmsg+0x17b/0x1d0 [ 239.537704][T15828] __x64_sys_sendmsg+0xd4/0x160 [ 239.537724][T15828] x64_sys_call+0x2999/0x2fb0 [ 239.537795][T15828] do_syscall_64+0xd0/0x1a0 [ 239.537846][T15828] ? clear_bhb_loop+0x25/0x80 [ 239.537870][T15828] ? clear_bhb_loop+0x25/0x80 [ 239.537891][T15828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.537911][T15828] RIP: 0033:0x7f2f099de969 [ 239.537925][T15828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.537971][T15828] RSP: 002b:00007f2f08047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.538065][T15828] RAX: ffffffffffffffda RBX: 00007f2f09c05fa0 RCX: 00007f2f099de969 [ 239.538079][T15828] RDX: 0000000000001004 RSI: 0000200000000380 RDI: 0000000000000003 [ 239.538093][T15828] RBP: 00007f2f08047090 R08: 0000000000000000 R09: 0000000000000000 [ 239.538107][T15828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.538121][T15828] R13: 0000000000000000 R14: 00007f2f09c05fa0 R15: 00007fff72c49908 [ 239.538140][T15828] [ 239.755705][ T29] audit: type=1326 audit(1746876300.361:8709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.2.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 239.779276][ T29] audit: type=1326 audit(1746876300.361:8710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15795 comm="syz.2.3655" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f099de969 code=0x7ffc0000 [ 239.937684][T15849] random: crng reseeded on system resumption [ 240.269470][ T29] audit: type=1326 audit(1746876301.169:8711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 240.322796][ T29] audit: type=1326 audit(1746876301.200:8712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 240.346414][ T29] audit: type=1326 audit(1746876301.200:8713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 240.369984][ T29] audit: type=1326 audit(1746876301.200:8714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 240.393589][ T29] audit: type=1326 audit(1746876301.200:8715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 240.417350][ T29] audit: type=1326 audit(1746876301.200:8716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15873 comm="syz.1.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 240.422106][T15883] FAULT_INJECTION: forcing a failure. [ 240.422106][T15883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.453837][T15883] CPU: 1 UID: 0 PID: 15883 Comm: syz.3.3689 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 240.453867][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 240.453895][T15883] Call Trace: [ 240.453902][T15883] [ 240.453910][T15883] __dump_stack+0x1d/0x30 [ 240.453980][T15883] dump_stack_lvl+0xe8/0x140 [ 240.454001][T15883] dump_stack+0x15/0x1b [ 240.454018][T15883] should_fail_ex+0x265/0x280 [ 240.454046][T15883] should_fail+0xb/0x20 [ 240.454100][T15883] should_fail_usercopy+0x1a/0x20 [ 240.454131][T15883] _copy_to_user+0x20/0xa0 [ 240.454151][T15883] simple_read_from_buffer+0xb5/0x130 [ 240.454229][T15883] proc_fail_nth_read+0x100/0x140 [ 240.454308][T15883] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.454329][T15883] vfs_read+0x19d/0x6f0 [ 240.454349][T15883] ? __rcu_read_unlock+0x4f/0x70 [ 240.454368][T15883] ? __fget_files+0x184/0x1c0 [ 240.454449][T15883] ksys_read+0xda/0x1a0 [ 240.454522][T15883] __x64_sys_read+0x40/0x50 [ 240.454544][T15883] x64_sys_call+0x2d77/0x2fb0 [ 240.454612][T15883] do_syscall_64+0xd0/0x1a0 [ 240.454633][T15883] ? clear_bhb_loop+0x25/0x80 [ 240.454733][T15883] ? clear_bhb_loop+0x25/0x80 [ 240.454752][T15883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.454772][T15883] RIP: 0033:0x7f2126c9d37c [ 240.454787][T15883] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.454820][T15883] RSP: 002b:00007f2125307030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.454842][T15883] RAX: ffffffffffffffda RBX: 00007f2126ec5fa0 RCX: 00007f2126c9d37c [ 240.454856][T15883] RDX: 000000000000000f RSI: 00007f21253070a0 RDI: 0000000000000004 [ 240.454869][T15883] RBP: 00007f2125307090 R08: 0000000000000000 R09: 0000000000000000 [ 240.454881][T15883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.454895][T15883] R13: 0000000000000000 R14: 00007f2126ec5fa0 R15: 00007ffc0941e9f8 [ 240.454911][T15883] [ 241.012954][T15904] random: crng reseeded on system resumption [ 241.268533][T15941] nfs4: Bad value for 'source' [ 241.293536][T15945] netlink: 'syz.1.3693': attribute type 3 has an invalid length. [ 242.006389][T15992] x_tables: duplicate underflow at hook 1 [ 242.052976][T15994] FAULT_INJECTION: forcing a failure. [ 242.052976][T15994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.066188][T15994] CPU: 0 UID: 0 PID: 15994 Comm: syz.1.3735 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 242.066219][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 242.066232][T15994] Call Trace: [ 242.066259][T15994] [ 242.066268][T15994] __dump_stack+0x1d/0x30 [ 242.066291][T15994] dump_stack_lvl+0xe8/0x140 [ 242.066310][T15994] dump_stack+0x15/0x1b [ 242.066326][T15994] should_fail_ex+0x265/0x280 [ 242.066359][T15994] should_fail+0xb/0x20 [ 242.066464][T15994] should_fail_usercopy+0x1a/0x20 [ 242.066484][T15994] _copy_from_user+0x1c/0xb0 [ 242.066507][T15994] __sys_bpf+0x178/0x790 [ 242.066585][T15994] __x64_sys_bpf+0x41/0x50 [ 242.066615][T15994] x64_sys_call+0x2478/0x2fb0 [ 242.066701][T15994] do_syscall_64+0xd0/0x1a0 [ 242.066726][T15994] ? clear_bhb_loop+0x25/0x80 [ 242.066752][T15994] ? clear_bhb_loop+0x25/0x80 [ 242.066774][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.066812][T15994] RIP: 0033:0x7fdd987de969 [ 242.066827][T15994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.066937][T15994] RSP: 002b:00007fdd96e47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.066954][T15994] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987de969 [ 242.066995][T15994] RDX: 0000000000000050 RSI: 0000200000000840 RDI: 0000000000000000 [ 242.067011][T15994] RBP: 00007fdd96e47090 R08: 0000000000000000 R09: 0000000000000000 [ 242.067025][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.067039][T15994] R13: 0000000000000001 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 242.067061][T15994] [ 242.299623][T16006] nfs4: Bad value for 'source' [ 242.322215][T15998] vlan2: entered allmulticast mode [ 242.383230][T16016] netlink: 'syz.3.3746': attribute type 3 has an invalid length. [ 242.434977][T16016] tipc: Started in network mode [ 242.439879][T16016] tipc: Node identity ac14140f, cluster identity 4711 [ 242.450486][T16014] vhci_hcd: invalid port number 65 [ 242.455688][T16014] vhci_hcd: invalid port number 65 [ 242.472942][T16016] tipc: New replicast peer: 255.255.255.255 [ 242.479065][T16016] tipc: Enabled bearer , priority 10 [ 242.564079][T16029] x_tables: duplicate underflow at hook 1 [ 242.886379][T16074] vlan2: entered allmulticast mode [ 242.894480][T16077] nfs4: Bad value for 'source' [ 242.978919][T16088] x_tables: duplicate underflow at hook 1 [ 243.343087][T16133] nfs4: Bad value for 'source' [ 243.357588][T16135] x_tables: duplicate underflow at hook 1 [ 243.392482][T16143] x_tables: duplicate underflow at hook 1 [ 243.433355][T16148] __nla_validate_parse: 31 callbacks suppressed [ 243.433371][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3783'. [ 243.539241][ T1039] tipc: Node number set to 2886997007 [ 243.606897][T16170] random: crng reseeded on system resumption [ 243.749382][T16170] netlink: 'syz.3.3784': attribute type 3 has an invalid length. [ 244.236344][T16223] x_tables: duplicate underflow at hook 1 [ 244.256668][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 244.256685][ T29] audit: type=1326 audit(1746876305.358:8851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.289026][ T29] audit: type=1326 audit(1746876305.390:8852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.292811][T16226] netlink: 'syz.1.3797': attribute type 3 has an invalid length. [ 244.312668][ T29] audit: type=1326 audit(1746876305.390:8853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.344073][ T29] audit: type=1326 audit(1746876305.390:8854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.367654][ T29] audit: type=1326 audit(1746876305.390:8855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.391210][ T29] audit: type=1326 audit(1746876305.390:8856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.414857][ T29] audit: type=1326 audit(1746876305.390:8857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.417327][T16226] tipc: Started in network mode [ 244.438677][ T29] audit: type=1326 audit(1746876305.390:8858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.443354][T16226] tipc: Node identity ac14140f, cluster identity 4711 [ 244.466915][ T29] audit: type=1326 audit(1746876305.390:8859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.497214][ T29] audit: type=1326 audit(1746876305.390:8860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16224 comm="syz.1.3797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd987de969 code=0x7ffc0000 [ 244.550188][T16226] tipc: New replicast peer: 255.255.255.255 [ 244.556333][T16226] tipc: Enabled bearer , priority 10 [ 244.580957][T16238] 9pnet_fd: Insufficient options for proto=fd [ 244.713341][T16258] random: crng reseeded on system resumption [ 244.885581][T16269] x_tables: duplicate underflow at hook 1 [ 244.909153][T16258] netlink: 'syz.2.3806': attribute type 3 has an invalid length. [ 245.266301][T16300] FAULT_INJECTION: forcing a failure. [ 245.266301][T16300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.279656][T16300] CPU: 0 UID: 0 PID: 16300 Comm: syz.1.3824 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 245.279746][T16300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 245.279759][T16300] Call Trace: [ 245.279766][T16300] [ 245.279774][T16300] __dump_stack+0x1d/0x30 [ 245.279799][T16300] dump_stack_lvl+0xe8/0x140 [ 245.279823][T16300] dump_stack+0x15/0x1b [ 245.279842][T16300] should_fail_ex+0x265/0x280 [ 245.279875][T16300] should_fail+0xb/0x20 [ 245.279945][T16300] should_fail_usercopy+0x1a/0x20 [ 245.280044][T16300] _copy_from_user+0x1c/0xb0 [ 245.280066][T16300] ___sys_sendmsg+0xc1/0x1d0 [ 245.280100][T16300] __x64_sys_sendmsg+0xd4/0x160 [ 245.280178][T16300] x64_sys_call+0x2999/0x2fb0 [ 245.280199][T16300] do_syscall_64+0xd0/0x1a0 [ 245.280261][T16300] ? clear_bhb_loop+0x25/0x80 [ 245.280284][T16300] ? clear_bhb_loop+0x25/0x80 [ 245.280309][T16300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.280362][T16300] RIP: 0033:0x7fdd987de969 [ 245.280377][T16300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.280402][T16300] RSP: 002b:00007fdd96e47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.280423][T16300] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987de969 [ 245.280500][T16300] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 245.280514][T16300] RBP: 00007fdd96e47090 R08: 0000000000000000 R09: 0000000000000000 [ 245.280529][T16300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.280553][T16300] R13: 0000000000000000 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 245.280583][T16300] [ 245.478486][T16306] x_tables: duplicate underflow at hook 1 [ 245.590352][T16319] random: crng reseeded on system resumption [ 245.658740][ T1039] tipc: Node number set to 2886997007 [ 245.838419][T16333] random: crng reseeded on system resumption [ 245.969358][T16344] x_tables: duplicate underflow at hook 1 [ 245.970044][T16333] netlink: 'syz.4.3837': attribute type 3 has an invalid length. [ 246.021878][T16346] syzkaller0: entered promiscuous mode [ 246.027521][T16346] syzkaller0: entered allmulticast mode [ 246.051098][T16346] FAULT_INJECTION: forcing a failure. [ 246.051098][T16346] name failslab, interval 1, probability 0, space 0, times 0 [ 246.063861][T16346] CPU: 0 UID: 0 PID: 16346 Comm: syz.3.3841 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 246.063893][T16346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 246.063906][T16346] Call Trace: [ 246.063913][T16346] [ 246.063985][T16346] __dump_stack+0x1d/0x30 [ 246.064007][T16346] dump_stack_lvl+0xe8/0x140 [ 246.064027][T16346] dump_stack+0x15/0x1b [ 246.064045][T16346] should_fail_ex+0x265/0x280 [ 246.064097][T16346] should_failslab+0x8c/0xb0 [ 246.064169][T16346] __kmalloc_noprof+0xa5/0x3e0 [ 246.064222][T16346] ? tun_device_event+0x3f1/0x980 [ 246.064246][T16346] tun_device_event+0x3f1/0x980 [ 246.064269][T16346] ? bond_netdev_event+0x5c/0x750 [ 246.064289][T16346] ? inetdev_event+0x566/0xc10 [ 246.064324][T16346] ? macvtap_device_event+0x58/0x300 [ 246.064360][T16346] ? __pfx_tun_device_event+0x10/0x10 [ 246.064383][T16346] raw_notifier_call_chain+0x6c/0x1b0 [ 246.064404][T16346] ? call_netdevice_notifiers_info+0x9c/0x100 [ 246.064468][T16346] call_netdevice_notifiers_info+0xae/0x100 [ 246.064494][T16346] netif_change_tx_queue_len+0xba/0x170 [ 246.064567][T16346] dev_change_tx_queue_len+0xc0/0x170 [ 246.064596][T16346] dev_ifsioc+0x1a1/0xaa0 [ 246.064615][T16346] ? __rcu_read_unlock+0x4f/0x70 [ 246.064637][T16346] dev_ioctl+0x70a/0x960 [ 246.064673][T16346] sock_do_ioctl+0x197/0x220 [ 246.064699][T16346] sock_ioctl+0x41b/0x610 [ 246.064722][T16346] ? __pfx_sock_ioctl+0x10/0x10 [ 246.064751][T16346] __se_sys_ioctl+0xcb/0x140 [ 246.064773][T16346] __x64_sys_ioctl+0x43/0x50 [ 246.064794][T16346] x64_sys_call+0x19a8/0x2fb0 [ 246.064823][T16346] do_syscall_64+0xd0/0x1a0 [ 246.064846][T16346] ? clear_bhb_loop+0x25/0x80 [ 246.064927][T16346] ? clear_bhb_loop+0x25/0x80 [ 246.064949][T16346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.064971][T16346] RIP: 0033:0x7f2126c9e969 [ 246.064987][T16346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.065006][T16346] RSP: 002b:00007f2125307038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.065028][T16346] RAX: ffffffffffffffda RBX: 00007f2126ec5fa0 RCX: 00007f2126c9e969 [ 246.065091][T16346] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000004 [ 246.065105][T16346] RBP: 00007f2125307090 R08: 0000000000000000 R09: 0000000000000000 [ 246.065142][T16346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.065168][T16346] R13: 0000000000000000 R14: 00007f2126ec5fa0 R15: 00007ffc0941e9f8 [ 246.065238][T16346] [ 246.065324][T16346] syzkaller0: refused to change device tx_queue_len [ 246.455762][T16371] nfs4: Bad value for 'source' [ 246.564043][T16374] random: crng reseeded on system resumption [ 246.640927][T16377] x_tables: duplicate underflow at hook 1 [ 246.739750][T16379] lo speed is unknown, defaulting to 1000 [ 246.745585][T16379] lo speed is unknown, defaulting to 1000 [ 246.827845][T16379] lo speed is unknown, defaulting to 1000 [ 246.855649][T16379] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 246.885147][T16379] lo speed is unknown, defaulting to 1000 [ 246.892291][T16379] lo speed is unknown, defaulting to 1000 [ 246.912389][T16379] lo speed is unknown, defaulting to 1000 [ 246.930307][T16379] lo speed is unknown, defaulting to 1000 [ 246.950120][T16379] lo speed is unknown, defaulting to 1000 [ 247.125419][T16394] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3861'. [ 247.169096][T16397] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.176374][T16397] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.184859][T16397] bridge0: entered allmulticast mode [ 247.312324][T16402] nfs4: Bad value for 'source' [ 247.423613][T16407] x_tables: duplicate underflow at hook 1 [ 247.773784][T16449] FAULT_INJECTION: forcing a failure. [ 247.773784][T16449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.786952][T16449] CPU: 1 UID: 0 PID: 16449 Comm: syz.4.3887 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 247.786985][T16449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 247.787001][T16449] Call Trace: [ 247.787019][T16449] [ 247.787028][T16449] __dump_stack+0x1d/0x30 [ 247.787052][T16449] dump_stack_lvl+0xe8/0x140 [ 247.787069][T16449] dump_stack+0x15/0x1b [ 247.787153][T16449] should_fail_ex+0x265/0x280 [ 247.787186][T16449] should_fail+0xb/0x20 [ 247.787288][T16449] should_fail_usercopy+0x1a/0x20 [ 247.787308][T16449] _copy_from_user+0x1c/0xb0 [ 247.787379][T16449] memdup_user+0x5e/0xd0 [ 247.787398][T16449] strndup_user+0x68/0xb0 [ 247.787414][T16449] perf_uprobe_init+0x48/0x150 [ 247.787464][T16449] perf_uprobe_event_init+0xea/0x150 [ 247.787566][T16449] perf_try_init_event+0xd0/0x540 [ 247.787589][T16449] ? perf_event_alloc+0xab1/0x15c0 [ 247.787693][T16449] perf_event_alloc+0xabc/0x15c0 [ 247.787725][T16449] __se_sys_perf_event_open+0x5a8/0x1170 [ 247.787753][T16449] ? __rcu_read_unlock+0x4f/0x70 [ 247.787783][T16449] __x64_sys_perf_event_open+0x67/0x80 [ 247.787853][T16449] x64_sys_call+0x27ec/0x2fb0 [ 247.787877][T16449] do_syscall_64+0xd0/0x1a0 [ 247.787903][T16449] ? clear_bhb_loop+0x25/0x80 [ 247.787927][T16449] ? clear_bhb_loop+0x25/0x80 [ 247.787985][T16449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.788007][T16449] RIP: 0033:0x7f32d663e969 [ 247.788022][T16449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.788042][T16449] RSP: 002b:00007f32d4ca7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 247.788133][T16449] RAX: ffffffffffffffda RBX: 00007f32d6865fa0 RCX: 00007f32d663e969 [ 247.788146][T16449] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 247.788157][T16449] RBP: 00007f32d4ca7090 R08: 0000000000000000 R09: 0000000000000000 [ 247.788231][T16449] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 247.788245][T16449] R13: 0000000000000000 R14: 00007f32d6865fa0 R15: 00007ffe3bbeda18 [ 247.788265][T16449] [ 248.165972][T16480] FAULT_INJECTION: forcing a failure. [ 248.165972][T16480] name failslab, interval 1, probability 0, space 0, times 0 [ 248.178685][T16480] CPU: 1 UID: 0 PID: 16480 Comm: syz.4.3896 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 248.178735][T16480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 248.178748][T16480] Call Trace: [ 248.178756][T16480] [ 248.178764][T16480] __dump_stack+0x1d/0x30 [ 248.178786][T16480] dump_stack_lvl+0xe8/0x140 [ 248.178806][T16480] dump_stack+0x15/0x1b [ 248.178841][T16480] should_fail_ex+0x265/0x280 [ 248.178881][T16480] should_failslab+0x8c/0xb0 [ 248.178913][T16480] kmem_cache_alloc_noprof+0x50/0x310 [ 248.178995][T16480] ? alloc_empty_file+0x76/0x200 [ 248.179023][T16480] alloc_empty_file+0x76/0x200 [ 248.179051][T16480] path_openat+0x68/0x2170 [ 248.179153][T16480] ? mntput+0x4b/0x80 [ 248.179172][T16480] ? terminate_walk+0x27f/0x2a0 [ 248.179203][T16480] ? path_openat+0x1bf8/0x2170 [ 248.179226][T16480] ? _parse_integer_limit+0x170/0x190 [ 248.179332][T16480] do_filp_open+0x109/0x230 [ 248.179387][T16480] do_open_execat+0xd8/0x260 [ 248.179409][T16480] alloc_bprm+0x28/0x660 [ 248.179489][T16480] ? should_fail+0xb/0x20 [ 248.179658][T16480] do_execveat_common+0x12e/0x750 [ 248.179684][T16480] ? getname_flags+0x154/0x3b0 [ 248.179731][T16480] __x64_sys_execveat+0x73/0x90 [ 248.179757][T16480] x64_sys_call+0x2dae/0x2fb0 [ 248.179779][T16480] do_syscall_64+0xd0/0x1a0 [ 248.179801][T16480] ? clear_bhb_loop+0x25/0x80 [ 248.179888][T16480] ? clear_bhb_loop+0x25/0x80 [ 248.179911][T16480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.179995][T16480] RIP: 0033:0x7f32d663e969 [ 248.180013][T16480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.180032][T16480] RSP: 002b:00007f32d4ca7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 248.180098][T16480] RAX: ffffffffffffffda RBX: 00007f32d6865fa0 RCX: 00007f32d663e969 [ 248.180113][T16480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 248.180127][T16480] RBP: 00007f32d4ca7090 R08: 0000000000001000 R09: 0000000000000000 [ 248.180141][T16480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.180162][T16480] R13: 0000000000000000 R14: 00007f32d6865fa0 R15: 00007ffe3bbeda18 [ 248.180181][T16480] [ 248.410448][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 248.439512][T16488] x_tables: duplicate underflow at hook 1 [ 248.448926][T16466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3890'. [ 248.483835][T16490] block device autoloading is deprecated and will be removed. [ 248.512764][T16490] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 248.519324][T16490] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.526944][T16490] vhci_hcd vhci_hcd.0: Device attached [ 248.559704][T16495] vhci_hcd: connection closed [ 248.559913][ T31] vhci_hcd: stop threads [ 248.568928][ T31] vhci_hcd: release socket [ 248.573363][ T31] vhci_hcd: disconnect device [ 248.852349][T16525] x_tables: duplicate underflow at hook 1 [ 249.070622][T16544] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3919'. [ 249.116703][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3919'. [ 249.158884][T16544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=16544 comm=syz.4.3919 [ 249.206936][ T29] kauditd_printk_skb: 263 callbacks suppressed [ 249.206954][ T29] audit: type=1326 audit(1746876310.555:9124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.236757][ T29] audit: type=1326 audit(1746876310.555:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.270458][T16549] netlink: 'syz.3.3921': attribute type 3 has an invalid length. [ 249.303073][T16553] x_tables: duplicate underflow at hook 1 [ 249.312468][ T29] audit: type=1326 audit(1746876310.608:9126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.336357][ T29] audit: type=1326 audit(1746876310.608:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.359928][ T29] audit: type=1326 audit(1746876310.608:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.383653][ T29] audit: type=1326 audit(1746876310.608:9129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.407395][ T29] audit: type=1326 audit(1746876310.608:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.431250][ T29] audit: type=1326 audit(1746876310.608:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.454838][ T29] audit: type=1326 audit(1746876310.618:9132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.478350][ T29] audit: type=1326 audit(1746876310.650:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.3.3921" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2126c9e969 code=0x7ffc0000 [ 249.510185][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 249.519217][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 249.528208][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 249.584638][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 249.593786][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 249.602787][T16557] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 249.748780][T16566] random: crng reseeded on system resumption [ 249.978409][T16596] x_tables: duplicate underflow at hook 1 [ 250.441960][T16660] random: crng reseeded on system resumption [ 250.677537][T16704] netlink: 'syz.5.3962': attribute type 3 has an invalid length. [ 250.682792][T16703] nfs4: Bad value for 'source' [ 250.837535][T16728] x_tables: duplicate underflow at hook 1 [ 251.149742][T16765] netlink: 'syz.5.3975': attribute type 3 has an invalid length. [ 251.539619][T16781] x_tables: duplicate underflow at hook 1 [ 251.631442][T16790] lo speed is unknown, defaulting to 1000 [ 251.642318][T16794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.649650][T16794] IPv6: NLM_F_CREATE should be set when creating new route [ 251.656904][T16794] IPv6: NLM_F_CREATE should be set when creating new route [ 251.679329][T16800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16800 comm=syz.2.3988 [ 251.701005][T16798] nfs4: Bad value for 'source' [ 251.831739][T16814] FAULT_INJECTION: forcing a failure. [ 251.831739][T16814] name failslab, interval 1, probability 0, space 0, times 0 [ 251.844544][T16814] CPU: 0 UID: 0 PID: 16814 Comm: syz.5.3992 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 251.844576][T16814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 251.844645][T16814] Call Trace: [ 251.844652][T16814] [ 251.844660][T16814] __dump_stack+0x1d/0x30 [ 251.844681][T16814] dump_stack_lvl+0xe8/0x140 [ 251.844702][T16814] dump_stack+0x15/0x1b [ 251.844790][T16814] should_fail_ex+0x265/0x280 [ 251.844817][T16814] should_failslab+0x8c/0xb0 [ 251.844856][T16814] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 251.844894][T16814] ? __d_alloc+0x3d/0x350 [ 251.844921][T16814] __d_alloc+0x3d/0x350 [ 251.844951][T16814] ? mpol_shared_policy_init+0xbd/0x4c0 [ 251.844979][T16814] d_alloc_pseudo+0x1e/0x80 [ 251.845013][T16814] alloc_file_pseudo+0x71/0x160 [ 251.845095][T16814] __shmem_file_setup+0x1b9/0x1f0 [ 251.845122][T16814] shmem_file_setup+0x3b/0x50 [ 251.845143][T16814] __se_sys_memfd_create+0x2c3/0x590 [ 251.845211][T16814] __x64_sys_memfd_create+0x31/0x40 [ 251.845231][T16814] x64_sys_call+0x122f/0x2fb0 [ 251.845251][T16814] do_syscall_64+0xd0/0x1a0 [ 251.845319][T16814] ? clear_bhb_loop+0x25/0x80 [ 251.845342][T16814] ? clear_bhb_loop+0x25/0x80 [ 251.845364][T16814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.845427][T16814] RIP: 0033:0x7fa81edae969 [ 251.845442][T16814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.845461][T16814] RSP: 002b:00007fa81d416e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 251.845483][T16814] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007fa81edae969 [ 251.845498][T16814] RDX: 00007fa81d416ef0 RSI: 0000000000000000 RDI: 00007fa81ee31444 [ 251.845512][T16814] RBP: 0000200000000600 R08: 00007fa81d416bb7 R09: 00007fa81d416e40 [ 251.845534][T16814] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 251.845545][T16814] R13: 00007fa81d416ef0 R14: 00007fa81d416eb0 R15: 00002000000002c0 [ 251.845586][T16814] [ 252.137792][T16825] x_tables: duplicate underflow at hook 1 [ 252.449958][T16848] random: crng reseeded on system resumption [ 252.705853][T16855] netlink: 'syz.5.4004': attribute type 3 has an invalid length. [ 252.848580][T16863] lo speed is unknown, defaulting to 1000 [ 252.893234][T16868] FAULT_INJECTION: forcing a failure. [ 252.893234][T16868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.906353][T16868] CPU: 0 UID: 0 PID: 16868 Comm: +}[@ Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 252.906439][T16868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 252.906453][T16868] Call Trace: [ 252.906461][T16868] [ 252.906469][T16868] __dump_stack+0x1d/0x30 [ 252.906503][T16868] dump_stack_lvl+0xe8/0x140 [ 252.906524][T16868] dump_stack+0x15/0x1b [ 252.906544][T16868] should_fail_ex+0x265/0x280 [ 252.906597][T16868] should_fail+0xb/0x20 [ 252.906625][T16868] should_fail_usercopy+0x1a/0x20 [ 252.906645][T16868] _copy_to_user+0x20/0xa0 [ 252.906735][T16868] simple_read_from_buffer+0xb5/0x130 [ 252.906759][T16868] proc_fail_nth_read+0x100/0x140 [ 252.906784][T16868] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.906806][T16868] vfs_read+0x19d/0x6f0 [ 252.906909][T16868] ? __rcu_read_unlock+0x4f/0x70 [ 252.906931][T16868] ? __fget_files+0x184/0x1c0 [ 252.907022][T16868] ksys_read+0xda/0x1a0 [ 252.907046][T16868] __x64_sys_read+0x40/0x50 [ 252.907070][T16868] x64_sys_call+0x2d77/0x2fb0 [ 252.907138][T16868] do_syscall_64+0xd0/0x1a0 [ 252.907162][T16868] ? clear_bhb_loop+0x25/0x80 [ 252.907183][T16868] ? clear_bhb_loop+0x25/0x80 [ 252.907266][T16868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.907314][T16868] RIP: 0033:0x7fdd987dd37c [ 252.907330][T16868] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.907388][T16868] RSP: 002b:00007fdd96e47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.907411][T16868] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987dd37c [ 252.907429][T16868] RDX: 000000000000000f RSI: 00007fdd96e470a0 RDI: 0000000000000004 [ 252.907443][T16868] RBP: 00007fdd96e47090 R08: 0000000000000000 R09: 0000000000000000 [ 252.907454][T16868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.907465][T16868] R13: 0000000000000000 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 252.907482][T16868] [ 253.177843][T16880] wireguard0: entered promiscuous mode [ 253.703672][T16929] random: crng reseeded on system resumption [ 253.893974][T16929] netlink: 'syz.5.4034': attribute type 3 has an invalid length. [ 254.350232][T16945] __nla_validate_parse: 11 callbacks suppressed [ 254.350253][T16945] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4043'. [ 254.425939][T16931] ================================================================== [ 254.434072][T16931] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 254.442429][T16931] [ 254.444768][T16931] write to 0xffff88811a2b0f7c of 4 bytes by task 16936 on cpu 1: [ 254.452506][T16931] inode_update_timestamps+0x147/0x270 [ 254.457989][T16931] file_update_time+0x20e/0x2b0 [ 254.462869][T16931] shmem_file_write_iter+0x9c/0xf0 [ 254.468007][T16931] iter_file_splice_write+0x5ef/0x970 [ 254.473397][T16931] direct_splice_actor+0x153/0x2a0 [ 254.478564][T16931] splice_direct_to_actor+0x30f/0x680 [ 254.483956][T16931] do_splice_direct+0xda/0x150 [ 254.488733][T16931] do_sendfile+0x380/0x640 [ 254.493176][T16931] __x64_sys_sendfile64+0x105/0x150 [ 254.498400][T16931] x64_sys_call+0xb39/0x2fb0 [ 254.503011][T16931] do_syscall_64+0xd0/0x1a0 [ 254.507536][T16931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.513440][T16931] [ 254.515781][T16931] read to 0xffff88811a2b0f7c of 4 bytes by task 16931 on cpu 0: [ 254.523429][T16931] atime_needs_update+0x2a8/0x3e0 [ 254.528490][T16931] touch_atime+0x4a/0x330 [ 254.532847][T16931] shmem_file_splice_read+0x582/0x5d0 [ 254.538251][T16931] splice_direct_to_actor+0x26c/0x680 [ 254.543755][T16931] do_splice_direct+0xda/0x150 [ 254.548545][T16931] do_sendfile+0x380/0x640 [ 254.552986][T16931] __x64_sys_sendfile64+0x105/0x150 [ 254.558228][T16931] x64_sys_call+0xb39/0x2fb0 [ 254.562854][T16931] do_syscall_64+0xd0/0x1a0 [ 254.567379][T16931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.573301][T16931] [ 254.575623][T16931] value changed: 0x018a420c -> 0x022a7683 [ 254.581341][T16931] [ 254.583665][T16931] Reported by Kernel Concurrency Sanitizer on: [ 254.589816][T16931] CPU: 0 UID: 0 PID: 16931 Comm: syz.3.4037 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 254.602321][T16931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 254.612380][T16931] ================================================================== [ 254.638979][T16949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 254.647957][ T29] kauditd_printk_skb: 301 callbacks suppressed [ 254.648037][ T29] audit: type=1400 audit(1746876316.256:9433): avc: denied { ioctl } for pid=16948 comm="syz.2.4039" path="socket:[44143]" dev="sockfs" ino=44143 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 254.679599][T16949] bridge_slave_1: left allmulticast mode [ 254.685417][T16949] bridge_slave_1: left promiscuous mode [ 254.687124][T16951] FAULT_INJECTION: forcing a failure. [ 254.687124][T16951] name failslab, interval 1, probability 0, space 0, times 0 [ 254.691077][T16949] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.703632][T16951] CPU: 1 UID: 0 PID: 16951 Comm: syz.1.4044 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(voluntary) [ 254.703663][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 254.703675][T16951] Call Trace: [ 254.703682][T16951] [ 254.703770][T16951] __dump_stack+0x1d/0x30 [ 254.703793][T16951] dump_stack_lvl+0xe8/0x140 [ 254.703882][T16951] dump_stack+0x15/0x1b [ 254.703899][T16951] should_fail_ex+0x265/0x280 [ 254.703929][T16951] should_failslab+0x8c/0xb0 [ 254.703956][T16951] __kmalloc_noprof+0xa5/0x3e0 [ 254.703974][T16951] ? __se_sys_futex_waitv+0x10d/0x360 [ 254.704044][T16951] __se_sys_futex_waitv+0x10d/0x360 [ 254.704067][T16951] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 254.704091][T16951] ? ksys_write+0x16e/0x1a0 [ 254.704115][T16951] __x64_sys_futex_waitv+0x67/0x80 [ 254.704194][T16951] x64_sys_call+0x2b1a/0x2fb0 [ 254.704214][T16951] do_syscall_64+0xd0/0x1a0 [ 254.704313][T16951] ? clear_bhb_loop+0x25/0x80 [ 254.704334][T16951] ? clear_bhb_loop+0x25/0x80 [ 254.704354][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.704395][T16951] RIP: 0033:0x7fdd987de969 [ 254.704411][T16951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.704429][T16951] RSP: 002b:00007fdd96e47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 254.704449][T16951] RAX: ffffffffffffffda RBX: 00007fdd98a05fa0 RCX: 00007fdd987de969 [ 254.704536][T16951] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 254.704549][T16951] RBP: 00007fdd96e47090 R08: 0000000000000001 R09: 0000000000000000 [ 254.704561][T16951] R10: 0000200000001100 R11: 0000000000000246 R12: 0000000000000001 [ 254.704621][T16951] R13: 0000000000000000 R14: 00007fdd98a05fa0 R15: 00007fff531b81e8 [ 254.704638][T16951] [ 254.895090][T16949] bridge_slave_0: left promiscuous mode [ 254.900798][T16949] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.909729][ T29] audit: type=1400 audit(1746876316.540:9434): avc: denied { mac_admin } for pid=16948 comm="syz.2.4039" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1